Agent skill · product strategy · borghei
azure-cloud-architect
Design, review, and validate Azure cloud architectures. Use when choosing Azure compute, storage, networking, or identity services, or applying the Azure Well-Architected Framework to a workload.
Why this skill is useful
Adds 3 executable scripts for validating Azure architectures, estimating costs, and scoring workloads against the Well-Architected Framework that aren't in public docs.
What it needs
Requires python installed locally. About 3k tokens when loaded. Last updated 2026-07-21. 462 stars on the source repository.
What this skill does
Azure Cloud Architect End-to-end Azure-specific architecture: service selection, Well-Architected Framework assessment, identity and networking patterns, cost optimization, and operational defaults. Provider-specific complement to our generic senior-cloud-architect skill — that one covers cross-cloud patterns; this one knows AKS pricing tiers, when to pick Cosmos over SQL DB, and how Front Door differs from Application Gateway. Core Capabilities Compute selection — decision tree across AKS, App Service, Container Apps, Functions, VMs/VMSS, Batch, Static Web Apps, and API gateways. Data store selection — relational, NoSQL/document, cache, blob, time-series, search, vector, and warehouse decision trees. Networking design — VNets, Private/Service Endpoints, gateways (App Gateway, Front Door, Firewall, NAT, VPN/ER), hub-and-spoke and Private Link patterns. Identity design — Entra ID, Managed Identity (system/user-assigned), Workload Identity, Service Principals, and least-privilege RBAC scoping. WAF assessment — score workloads across Reliability, Security, Cost, Operational Excellence, and Performance Efficiency pillars. Cost optimization — right-sizing, reservations, autoscaling, spot, storage tiering, and egress-reduction levers with anti-pattern detection. When to Use Situation Skill applies ----------- --------------- Designing an Azure architecture from scratch Yes — start with the compute decision tree Reviewing an existing Azure architecture Yes — run WAF assessment via scripts/azurewafscorer.py Validating an ARM/Bicep/Terraform plan Yes — scripts/azurearchitecturevalidator.py Estimating Azure cost for a workload Yes — scripts/azurecostestimator.py Picking compute, data store, networking, or identity Yes — see the decision-trees reference Going to production without WAF review Don't — run the WAF scorer first Clarify First Before designing or assessing, confirm these inputs. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills borghei/azure-cloud-architect