Azure Enterprise Infra Planner

microsoft/azure-enterprise-infra-planner

Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure Backup for VM workloads'. PREFER azure-prepare FOR app-centric workflows.

31k tokens

context cost

the whole folder, loaded on every use

files

instructions only

copies elsewhere

how many repositories repackaged it

6 d ago

last touched

this folder, not the whole repository

Install

one command, takes just this skill from the repository

npx skills add https://github.com/microsoft/skills --skill azure-enterprise-infra-planner

What comes with it

122 259 bytes besides the instruction

references/bicep-generation.md

references/constraints/README.md

references/constraints/ai-ml.md

references/constraints/compute-apps.md

references/constraints/compute-infra.md

references/constraints/data-analytics.md

references/constraints/data-relational.md

references/constraints/messaging.md

references/constraints/monitoring.md

references/constraints/networking-connectivity.md

references/constraints/networking-core.md

references/constraints/networking-traffic.md

references/constraints/security.md

references/deployment.md

references/pairing-checks.md

references/phases/1-extract-insights.md

references/phases/2-research-best-practices.md

references/phases/3-research-resources.md

references/phases/4-generate-plan.md

references/phases/5-verify.md

references/phases/6-generate-iac.md

references/phases/7-deploy.md

references/resources/README.md

references/resources/ai-ml.md

references/resources/compute-apps.md

references/resources/compute-infra.md

references/resources/data-analytics.md

references/resources/data-relational.md

references/resources/messaging.md

references/resources/monitoring.md

references/resources/networking-connectivity.md

references/resources/networking-core.md

references/resources/networking-traffic.md

references/resources/security.md

references/schema.md

references/terraform-generation.md

references/verification.md

references/waf-checklist.md

references/workflow.md

The instruction itself

6 sections, as written by the author

Azure Enterprise Infra Planner

When to Use This Skill

Activate this skill when user wants to:

Plan enterprise Azure infrastructure from a workload or architecture description
Architect a landing zone, hub-spoke network, or multi-region topology
Design networking infrastructure: VNets, subnets, firewalls, private endpoints, VPN gateways
Plan identity, RBAC, and compliance-driven infrastructure
Generate Bicep or Terraform for subscription-scope or multi-resource-group deployments
Plan disaster recovery, failover, or cross-region high-availability topologies

Quick Reference

| Property | Details |

|---|---|

| MCP tools | insights_get, get_azure_bestpractices_get, wellarchitectedframework_serviceguide_get, microsoft_docs_fetch, microsoft_docs_search, bicepschema_get |

| CLI commands | az deployment group create, az bicep build, az resource list, terraform init, terraform plan, terraform validate, terraform apply |

| Output schema | schema.md |

| Key references | workflow.md, waf-checklist.md, resources/, constraints/ |

Workflow (Start Here)

Follow the step-by-step instructions in workflow.md to execute the 7 phases of infrastructure planning and provisioning.

MCP Tools

| Tool | Purpose |

|------|---------|

| insights_get | Retrieve insights about the user's existing Azure environment to guide planning decisions |

| get_azure_bestpractices_get | Azure best practices for code generation, operations, and deployment |

| wellarchitectedframework_serviceguide_get | WAF service guide for a specific Azure service |

| microsoft_docs_search | Search Microsoft Learn for relevant documentation chunks |

| microsoft_docs_fetch | Fetch full content of a Microsoft Learn page by URL |

| bicepschema_get | Bicep schema definition for any Azure resource type (latest API version) |

Error Handling

| Error | Cause | Fix |

|---|---|---|

| MCP tool error or not available | Tool call timeout, connection error, or tool doesn't exist | Retry once; fall back to reference files and notify user if unresolved |

| Plan approval missing | meta.status is not approved | Stop and prompt user for approval before IaC generation or deployment |

| IaC validation failure | az bicep build or terraform validate returns errors | Fix the generated code and re-validate; notify user if unresolved |

| Pairing constraint violation | Incompatible SKU or resource combination | Fix in plan before proceeding to IaC generation |

| Infra plan or IaC files not found | Files written to wrong location or not created | Verify files exist at <project-root>/.azure/ and <project-root>/infra/; if missing, re-create the files by following workflow.md exactly |

Repackaged in 1 other repositories

same content, different owner

microsoft/azure-skills open on GitHub →

How to use it

Copy the folder

Take microsoft/azure-enterprise-infra-planner from the repository into ~/.claude/skills for personal use, or into .claude/skills inside a project.

Check the name does not clash

The agent identifies a skill by the name field in its header. Two skills with the same name cannot sit side by side — one of them will be ignored.