All skills
microsoft avatar

/azure-prepare

@b8a1c66
by microsoftmicrosoft/skills3.1k stars
351

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.

Use this Skill: https://skilld.dev/gh/microsoft/skills/azure-prepare

This session only. Nothing lands on disk.

referencesservicessql-databaseREADME.md

≈495 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Azure SQL Database

Managed relational database with ACID compliance and full SQL Server compatibility.

When to Use

  • Relational data with ACID requirements
  • Complex queries and joins
  • Existing SQL Server workloads
  • Reporting and analytics
  • Strong schema enforcement

Authentication

Default: Entra-only authentication (recommended)

  • Required for subscriptions with Entra-only policies
  • More secure than SQL authentication
  • Eliminates password management

Required Supporting Resources

Resource Purpose
Key Vault Store connection strings
Private Endpoint Secure access (optional)

SKU Selection

Tier Use Case Features
Basic Dev/test, light workloads 5 DTUs, 2GB
Standard Production workloads 10-3000 DTUs
Premium High-performance In-memory OLTP
Serverless Variable workloads Auto-pause, auto-scale
Hyperscale Large databases 100TB+, instant backup

Environment Variables

Variable Value When to Set
AZURE_PRINCIPAL_ID Current user's object ID After azd init, before azd provision
AZURE_PRINCIPAL_NAME Current user's display name After azd init, before azd provision
SQL_SERVER {server}.database.windows.net Runtime (from Bicep outputs)
SQL_DATABASE Database name Runtime (from Bicep outputs)
SQL_CONNECTION_STRING Full connection string (Key Vault) Runtime (from Bicep outputs)

Set principal variables:

PRINCIPAL_INFO=$(az ad signed-in-user show --query "{id:id, name:displayName}" -o json)
azd env set AZURE_PRINCIPAL_ID $(echo $PRINCIPAL_INFO | jq -r '.id')
azd env set AZURE_PRINCIPAL_NAME $(echo $PRINCIPAL_INFO | jq -r '.name')

References

Source: SKILL.md on GitHub

2 warnings3d4 checks · Risk SAFE
  • Gen Agent Trust Hub3d

    This skill includes security considerations related to the processing of untrusted project files and the retrieval of external development templates. While these operations are essential for modernizing and preparing Azure applications, they represent a surface area for indirect prompt injection and depend on the integrity of external template repositories.

  • Socket3d

    5 alerts: gptAnomaly, gptSecurity

  • Snyk3d

    Risk: LOW · No issues

  • Runlayer7mo

    86/87 files flagged

Signed by skilld at b8a1c66. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated last week
metadata
{
  "author": "Microsoft",
  "version": "1.3.4"
}

README badge

README badge for microsoft/skills/azure-prepare