Agent skill · data analytics · github
azure-well-architected-review
Perform an Azure Well-Architected Framework review of the current workload IaC and architecture, generating findings and GitHub issues for improvements.
Why this skill is useful
Generates specific GitHub issues for Azure WAF compliance that the AI wouldn't reliably create on its own.
What it needs
Requires azure-cli installed locally. Requires github account access. About 6k tokens when loaded. Last updated 2026-08-07. 37,534 stars on the source repository.
What this skill does
Azure Well-Architected Review This workflow performs a structured Azure Well-Architected Framework (WAF) review against your workload's IaC files and deployed infrastructure. It identifies risks across all 5 WAF pillars and creates GitHub issues to track remediation. Prerequisites Azure CLI (az) configured and authenticated IaC files present in the repository (Bicep, Terraform, or ARM templates) GitHub MCP server configured and authenticated Workflow Steps Step 1: Load Well-Architected Framework Reference Fetch current Azure WAF best practices: https://learn.microsoft.com/en-us/azure/well-architected/ Service guides for the Azure services in use (https://learn.microsoft.com/en-us/azure/well-architected/service-guides/) Workload-specific guidance relevant to the workload type (SaaS, mission-critical, AI, etc.) If the microsoft.docs.mcp MCP server is available, use it to query the latest pillar checklists and service-specific recommendations. Step 2: Discover IaC & Architecture Establish the review scope, then inventory both the code and the live environment: 1. Confirm the Azure scope: Ask the user which subscription(s)/resource group(s) are in scope, or infer them from IaC parameters and confirm. 2. Scan the repository for IaC files: Bicep: /.bicep, bicepconfig.json Terraform: /.tf (azurerm/azapi providers) ARM templates: /azuredeploy.json, /.template.json, files with $schema containing deploymentTemplate 3. Inventory live resources (always, even when IaC exists): az resource list --resource-group <rg> --output json (or subscription-wide), plus targeted az <service> show calls for configuration details the pillar checks need. 4. Compare IaC with live inventory: Flag drift — resources present in Azure but absent from IaC (portal-created), resources defined in IaC but not deployed, and configuration mismatches. Record drift findings for Step 3 (they typically map to the Operational Excellence pillar). …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills github/azure-well-architected-review