Azure Enterprise Infra Planner

microsoft/azure-azure-enterprise-infra-planner

Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure Backup for VM workloads'. PREFER azure-prepare FOR app-centric workflows.

This is a copy. The original lives at microsoft/azure-enterprise-infra-planner.

31k tokens

context cost

the whole folder, loaded on every use

files

instructions only

copies elsewhere

how many repositories repackaged it

1352

stars on the repo

on the repository, not the skill itself

Install

one command, takes just this skill from the repository

npx skills add https://github.com/microsoft/azure-skills --skill azure-enterprise-infra-planner

What comes with it

122 259 bytes besides the instruction

references/bicep-generation.md

references/constraints/README.md

references/constraints/ai-ml.md

references/constraints/compute-apps.md

references/constraints/compute-infra.md

references/constraints/data-analytics.md

references/constraints/data-relational.md

references/constraints/messaging.md

references/constraints/monitoring.md

references/constraints/networking-connectivity.md

references/constraints/networking-core.md

references/constraints/networking-traffic.md

references/constraints/security.md

references/deployment.md

references/pairing-checks.md

references/phases/1-extract-insights.md

references/phases/2-research-best-practices.md

references/phases/3-research-resources.md

references/phases/4-generate-plan.md

references/phases/5-verify.md

references/phases/6-generate-iac.md

references/phases/7-deploy.md

references/resources/README.md

references/resources/ai-ml.md

references/resources/compute-apps.md

references/resources/compute-infra.md

references/resources/data-analytics.md

references/resources/data-relational.md

references/resources/messaging.md

references/resources/monitoring.md

references/resources/networking-connectivity.md

references/resources/networking-core.md

references/resources/networking-traffic.md

references/resources/security.md

references/schema.md

references/terraform-generation.md

references/verification.md

references/waf-checklist.md

references/workflow.md

The instruction itself

6 sections, as written by the author

Azure Enterprise Infra Planner

When to Use This Skill

Activate this skill when user wants to:

Plan enterprise Azure infrastructure from a workload or architecture description
Architect a landing zone, hub-spoke network, or multi-region topology
Design networking infrastructure: VNets, subnets, firewalls, private endpoints, VPN gateways
Plan identity, RBAC, and compliance-driven infrastructure
Generate Bicep or Terraform for subscription-scope or multi-resource-group deployments
Plan disaster recovery, failover, or cross-region high-availability topologies

Quick Reference

| Property | Details |

|---|---|

| MCP tools | insights_get, get_azure_bestpractices_get, wellarchitectedframework_serviceguide_get, microsoft_docs_fetch, microsoft_docs_search, bicepschema_get |

| CLI commands | az deployment group create, az bicep build, az resource list, terraform init, terraform plan, terraform validate, terraform apply |

| Output schema | schema.md |

| Key references | workflow.md, waf-checklist.md, resources/, constraints/ |

Workflow (Start Here)

Follow the step-by-step instructions in workflow.md to execute the 7 phases of infrastructure planning and provisioning.

MCP Tools

| Tool | Purpose |

|------|---------|

| insights_get | Retrieve insights about the user's existing Azure environment to guide planning decisions |

| get_azure_bestpractices_get | Azure best practices for code generation, operations, and deployment |

| wellarchitectedframework_serviceguide_get | WAF service guide for a specific Azure service |

| microsoft_docs_search | Search Microsoft Learn for relevant documentation chunks |

| microsoft_docs_fetch | Fetch full content of a Microsoft Learn page by URL |

| bicepschema_get | Bicep schema definition for any Azure resource type (latest API version) |

Error Handling

| Error | Cause | Fix |

|---|---|---|

| MCP tool error or not available | Tool call timeout, connection error, or tool doesn't exist | Retry once; fall back to reference files and notify user if unresolved |

| Plan approval missing | meta.status is not approved | Stop and prompt user for approval before IaC generation or deployment |

| IaC validation failure | az bicep build or terraform validate returns errors | Fix the generated code and re-validate; notify user if unresolved |

| Pairing constraint violation | Incompatible SKU or resource combination | Fix in plan before proceeding to IaC generation |

| Infra plan or IaC files not found | Files written to wrong location or not created | Verify files exist at <project-root>/.azure/ and <project-root>/infra/; if missing, re-create the files by following workflow.md exactly |

How to use it

Copy the folder

Take microsoft/azure-azure-enterprise-infra-planner from the repository into ~/.claude/skills for personal use, or into .claude/skills inside a project.

Check the name does not clash

The agent identifies a skill by the name field in its header. Two skills with the same name cannot sit side by side — one of them will be ignored.