Agent skill · software engineering · microsoft
azure-enterprise-infra-planner
Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure Backup for VM workloads'. PREFER azure-prepare FOR app-centric workflows.
Why this skill is useful
Generates executable Bicep or Terraform scripts for Azure infrastructure provisioning that are not commonly found in public documentation.
What it needs
Requires terraform installed locally. Requires azure account access. About 3k tokens when loaded. Last updated 2026-08-06. 1,356 stars on the source repository.
What this skill does
Azure Enterprise Infra Planner When to Use This Skill Activate this skill when user wants to: Plan enterprise Azure infrastructure from a workload or architecture description Architect a landing zone, hub-spoke network, or multi-region topology Design networking infrastructure: VNets, subnets, firewalls, private endpoints, VPN gateways Plan identity, RBAC, and compliance-driven infrastructure Generate Bicep or Terraform for subscription-scope or multi-resource-group deployments Plan disaster recovery, failover, or cross-region high-availability topologies Quick Reference Property Details --- --- MCP tools insightsget, getazurebestpracticesget, wellarchitectedframeworkserviceguideget, microsoftdocsfetch, microsoftdocssearch, bicepschemaget CLI commands az deployment group create, az bicep build, az resource list, terraform init, terraform plan, terraform validate, terraform apply, checkov Output schema schema.md Key references workflow.md, waf-checklist.md, resources/, constraints/ Workflow (Start Here) Follow the step-by-step instructions in workflow.md to execute the 7 phases of infrastructure planning and provisioning. Architecture The skill runs a 7-phase, gated pipeline. Input is triaged into one of two flows: Greenfield — only new requirements; run the phases straight through. Referenced (brownfield) — the user supplies something that already exists (a live resource / resource group / subscription, IaC or an infra plan, or a requirements doc). The same phases run, plus referenced-workload.md: existing resources are inventoried and referenced (never recreated), the new workload is wired into them, and Phase 7 deploys additively (incremental only — never modifying or destroying the referenced resources). Every phase advances only after its gate passes. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills microsoft/azure-enterprise-infra-planner