azure-enterprise-infra-planner
Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure Backup for VM workloads'. PREFER azure-prepare FOR app-centric workflows.
- License 许可
- MIT
- 最近更新
- 2026-05-11
- Stars
- ★ 3
- Forks
- 1
01 前言 Front Matter
- name
- azure-enterprise-infra-planner
- license
- MIT
- metadata
- { "author": "Microsoft", "version": "1.1.1" }
- description
- Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure Backup for VM workloads'. PREFER azure-prepare FOR app-centric workflows.
02 资源文件 34
- 参考文档references/bicep-generation.md3.6 KB
- 参考文档references/constraints/ai-ml.md3.3 KB
- 参考文档references/constraints/compute-apps.md7.9 KB
- 参考文档references/constraints/compute-infra.md4.5 KB
- 参考文档references/constraints/data-analytics.md6.4 KB
- 参考文档references/constraints/data-relational.md5.0 KB
- 参考文档references/constraints/messaging.md2.5 KB
- 参考文档references/constraints/monitoring.md1.8 KB
- 参考文档references/constraints/networking-connectivity.md6.1 KB
- 参考文档references/constraints/networking-core.md7.1 KB
- 参考文档references/constraints/networking-traffic.md4.6 KB
- 参考文档references/constraints/README.md1.3 KB
- 参考文档references/constraints/security.md2.4 KB
- 参考文档references/deployment.md3.7 KB
- 参考文档references/pairing-checks.md3.7 KB
- 参考文档references/plan-schema.md3.1 KB
- 参考文档references/research.md4.2 KB
- 参考文档references/resources/ai-ml.md2.1 KB
- 参考文档references/resources/compute-apps.md4.0 KB
- 参考文档references/resources/compute-infra.md2.8 KB
- 参考文档references/resources/data-analytics.md3.0 KB
- 参考文档references/resources/data-relational.md2.6 KB
- 参考文档references/resources/messaging.md2.0 KB
- 参考文档references/resources/monitoring.md1.5 KB
- 参考文档references/resources/networking-connectivity.md3.6 KB
- 参考文档references/resources/networking-core.md4.3 KB
- 参考文档references/resources/networking-traffic.md2.6 KB
- 参考文档references/resources/README.md1.7 KB
- 参考文档references/resources/security.md1.5 KB
- 参考文档references/sample_infrastructure_plan.json22.5 KB
- 参考文档references/terraform-generation.md2.7 KB
- 参考文档references/verification.md1.6 KB
- 参考文档references/waf-checklist.md1.9 KB
- 参考文档references/workflow.md4.5 KB
03 SKILL.md 正文
Azure Enterprise Infra Planner
When to Use This Skill
Activate this skill when user wants to:
- Plan enterprise Azure infrastructure from a workload or architecture description
- Architect a landing zone, hub-spoke network, or multi-region topology
- Design networking infrastructure: VNets, subnets, firewalls, private endpoints, VPN gateways
- Plan identity, RBAC, and compliance-driven infrastructure
- Generate Bicep or Terraform for subscription-scope or multi-resource-group deployments
- Plan disaster recovery, failover, or cross-region high-availability topologies
Quick Reference
| Property | Details |
|---|---|
| MCP tools | get_azure_bestpractices_get, wellarchitectedframework_serviceguide_get, microsoft_docs_fetch, microsoft_docs_search, bicepschema_get |
| CLI commands | az deployment group create, az bicep build, az resource list, terraform init, terraform plan, terraform validate, terraform apply |
| Output schema | plan-schema.md |
| Key references | research.md, resources/, waf-checklist.md, constraints/ |
Workflow
Read workflow.md for detailed step-by-step instructions, including MCP tool usage, CLI commands, and decision points. Follow the phases in order, ensuring all key gates are passed before proceeding to the next phase.
| Phase | Action | Key Gate |
|---|---|---|
| 1 | Research — WAF Tools | All MCP tool calls complete |
| 2 | Research — Refine & Lookup | Resource list approved by user |
| 3 | Plan Generation | Plan JSON written to disk |
| 4 | Verification | All checks pass, user approves |
| 5 | IaC Generation | meta.status = approved |
| 6 | Deployment | User confirms destructive actions |
MCP Tools
| Tool | Purpose |
|---|---|
get_azure_bestpractices_get |
Azure best practices for code generation, operations, and deployment |
wellarchitectedframework_serviceguide_get |
WAF service guide for a specific Azure service |
microsoft_docs_search |
Search Microsoft Learn for relevant documentation chunks |
microsoft_docs_fetch |
Fetch full content of a Microsoft Learn page by URL |
bicepschema_get |
Bicep schema definition for any Azure resource type (latest API version) |
Error Handling
| Error | Cause | Fix |
|---|---|---|
| MCP tool error or not available | Tool call timeout, connection error, or tool doesn't exist | Retry once; fall back to reference files and notify user if unresolved |
| Plan approval missing | meta.status is not approved |
Stop and prompt user for approval before IaC generation or deployment |
| IaC validation failure | az bicep build or terraform validate returns errors |
Fix the generated code and re-validate; notify user if unresolved |
| Pairing constraint violation | Incompatible SKU or resource combination | Fix in plan before proceeding to IaC generation |
| Infra plan or IaC files not found | Files written to wrong location or not created | Verify files exist at <project-root>/.azure/ and <project-root>/infra/; if missing, re-create the files by following workflow.md exactly |
04 同仓库更多 Skills
transformer-lens-interpretability
Provides guidance for mechanistic interpretability research using TransformerLens to inspect and manipulate transformer internals via HookPoints and activation caching. Use when reverse-engineering model algorithms, studying attention patterns, or performing activation patching experiments.
wiki-vitepress
Packages generated wiki Markdown into a VitePress static site with dark theme, dark-mode Mermaid diagrams with click-to-zoom, and production build output. Use when the user wants to create a browsable website from generated wiki pages.
phoenix-observability
Open-source AI observability platform for LLM tracing, evaluation, and monitoring. Use when debugging LLM applications with detailed traces, running evaluations on datasets, or monitoring production AI systems with real-time insights.
frontend-ui-dark-ts
Build dark-themed React applications using Tailwind CSS with custom theming, glassmorphism effects, and Framer Motion animations. Use when creating dashboards, admin panels, or data-rich interfaces with a refined dark aesthetic.
tensorboard
Visualize training metrics, debug models with histograms, compare experiments, visualize model graphs, and profile performance with TensorBoard - Google's ML visualization toolkit
markdown-mermaid-writing
Comprehensive markdown and Mermaid diagram writing skill. Use when creating any scientific document, report, analysis, or visualization. Establishes text-based diagrams as the default documentation standard with full style guides (markdown + mermaid), 24 diagram type references, and 9 document templates.