Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure
Detected risks:
The Azure Enterprise Infra Planner skill is designed to assist cloud architects and platform engineers in architecting and provisioning enterprise-grade Azure infrastructure based on specific workload descriptions. By facilitating the planning process for networking, identity, security, compliance, and multi-resource topologies, this skill addresses the complexities associated with deploying robust cloud solutions. The skill generates infrastructure-as-code (IaC) artifacts in Bicep or Terraform formats, streamlining the deployment process and ensuring that best practices are adhered to throughout the planning and implementation phases.
Key features of the Azure Enterprise Infra Planner include the ability to design various networking infrastructures such as Virtual Networks (VNets), subnets, firewalls, and private endpoints, as well as planning for identity management and compliance-driven architectures. It also supports the creation of disaster recovery and high-availability topologies across multiple regions. The skill leverages a set of MCP tools to gather best practices, fetch documentation, and validate the generated infrastructure plans, providing users with comprehensive guidance and resources throughout their planning journey.
Target users for this skill include cloud architects and platform engineers who are responsible for setting up and managing enterprise-level Azure environments. Use cases for the Azure Enterprise Infra Planner range from planning Azure landing zones and hub-spoke network architectures to designing subscription-scope deployments and configuring Azure Backup for virtual machines. By using this skill, professionals can ensure that their Azure infrastructure is well-architected, compliant, and optimized for performance and security.
The primary purpose is to architect and provision enterprise Azure infrastructure based on workload descriptions.
The skill supports generating Bicep and Terraform formats for infrastructure deployment.
Users should ensure they have access to the necessary MCP tools and Azure CLI commands for successful execution.
In case of validation failure, the generated code must be fixed and re-validated before proceeding.
Yes, the skill includes features for planning disaster recovery and high-availability topologies.
Quick Setup:
.claude/skills/Repository
microsoft/azure-skills