azure-enterprise-infra-planner

by microsoft

Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment',... npx skills add https://github.com/microsoft/azure-skills --skill azure-enterprise-infra-planner Download ZIPGitHub1.3k

Azure Enterprise Infra Planner

When to Use This Skill

Activate this skill when user wants to:

• Plan enterprise Azure infrastructure from a workload or architecture description

• Architect a landing zone, hub-spoke network, or multi-region topology

• Design networking infrastructure: VNets, subnets, firewalls, private endpoints, VPN gateways

• Plan identity, RBAC, and compliance-driven infrastructure

• Generate Bicep or Terraform for subscription-scope or multi-resource-group deployments

• Plan disaster recovery, failover, or cross-region high-availability topologies

Quick Reference

Property Details MCP tools insights_get, get_azure_bestpractices_get, wellarchitectedframework_serviceguide_get, microsoft_docs_fetch, microsoft_docs_search, bicepschema_get CLI commands az deployment group create, az bicep build, az resource list, terraform init, terraform plan, terraform validate, terraform apply Output schema schema.md Key references workflow.md, waf-checklist.md, resources/, constraints/

Workflow (Start Here)

Follow the step-by-step instructions in workflow.md to execute the 7 phases of infrastructure planning and provisioning.

MCP Tools

Tool Purpose insights_get Retrieve insights about the user's existing Azure environment to guide planning decisions get_azure_bestpractices_get Azure best practices for code generation, operations, and deployment wellarchitectedframework_serviceguide_get WAF service guide for a specific Azure service microsoft_docs_search Search Microsoft Learn for relevant documentation chunks microsoft_docs_fetch Fetch full content of a Microsoft Learn page by URL bicepschema_get Bicep schema definition for any Azure resource type (latest API version)

Error Handling

Error Cause Fix MCP tool error or not available Tool call timeout, connection error, or tool doesn't exist Retry once; fall back to reference files and notify user if unresolved Plan approval missing meta.status is not approved Stop and prompt user for approval before IaC generation or deployment IaC validation failure az bicep build or terraform validate returns errors Fix the generated code and re-validate; notify user if unresolved Pairing constraint violation Incompatible SKU or resource combination Fix in plan before proceeding to IaC generation Infra plan or IaC files not found Files written to wrong location or not created Verify files exist at <project-root>/.azure/ and <project-root>/infra/; if missing, re-create the files by following workflow.md exactly