What problem does it solve? Designing Azure infrastructure correctly requires navigating scattered Microsoft documentation on identity, networking, and monitoring, and mistakes like misconfigured private DNS zones or RBAC propagation gaps cause hard-to-diagnose outages. This Skill gives an agent a curated, source-ranked reference for Azure hosted services so recommendations are grounded in first-party Microsoft guidance. ## Core Features & Use Cases - Service reference library: Covers Microsoft Entra ID, Key Vault, Managed SignalR, Storage Accounts, Private Endpoints, ExpressRoute, and Log Analytics via on-demand reference files. - Source authority hierarchy: Prioritizes Microsoft Learn, CLI/SDK docs, and Architecture Center over community sources, with a defined process for documenting conflicts between first-party sources. - Pitfall detection: Flags immutable settings (ADLS Gen2 hierarchical namespace, Key Vault purge protection), retired components (classic App Insights, MMA agent), and common DNS/RBAC misconfigurations. - Use Case: When planning a hub-and-spoke network with private endpoints for Key Vault and Storage, the Skill produces a recommendation with the correct privatelink DNS zones, RBAC role assignments, and Bicep/Terraform/az CLI snippets. ## Quick Start Ask the agent to recommend an Azure architecture for securing a Storage account with private endpoints and managed identity access, including DNS and RBAC requirements.
