Azure Ops

8 skills inclus

• 01

  Azure Diagnostics

  Fait diagnostiquer par l'agent un incident Azure en production : santé des ressources, AppLens, KQL, scripts de preuves en lecture seule, playbooks par service.+

  sf-azure-diagnostics/SKILL.md, de microsoft/azure-skills, licence MIT.

  1---

  2name: sf-azure-diagnostics

  3description: "Diagnoses and root-causes Azure production incidents with resource health, AppLens, Azure Monit…

  4---

  5

  6# Azure Production Diagnostics

  7

  8Find the root cause of a failing Azure workload from evidence, then propose the smallest safe fix. Diagnosis…

  9

  10## When to use

  11

  12- A deployed Azure resource fails, is slow, restarts, or stopped sending telemetry or messages.

  13- The user supplies logs, metrics, events, or a timeline and wants an analysis.

  14- The symptom looks like "healthy runtime, wrong destination" (data flows to the wrong resource after a confi…

  15

  16Do not use it for: creating or deploying new infrastructure (use `sf-azure-prepare` / `sf-azure-deploy`), quo…
• 02

  Azure Reliability

  Fait évaluer et renforcer par l'agent la fiabilité d'apps Functions et App Service : redondance de zone, stockage ZRS, sondes de santé, bascule multi-région.+

  sf-azure-reliability/SKILL.md, de microsoft/azure-skills, licence MIT.

  1---

  2name: sf-azure-reliability

  3description: "Assesses and improves the reliability posture of Azure Functions and Azure App Service apps: sc…

  4---

  5

  6# Azure Reliability Assessment and Remediation

  7

  8Show the user, for one scope, which of the four core reliability features are on, then close the gaps in a sa…

  9

  10## Scope

  11

  12- **Covered:** Azure Functions and Azure App Service (sites and plans), plus the storage accounts, Front Door…

  13- **Not covered:** Container Apps and other compute. List them in discovery as `⚪ not assessed (planned)` and…

  14- **Not this skill:** full new-app IaC scaffolding (`sf-azure-prepare`), general deployments (`sf-azure-deplo…

  15

  16## Prerequisites
• 03

  Azure Compliance

  Fait auditer par l'agent la conformité et la posture de sécurité Azure : scan azqr, tri des constats Defender, Advisor et Policy, Key Vault.+

  sf-azure-compliance/SKILL.md, de microsoft/azure-skills, licence MIT.

  1---

  2name: sf-azure-compliance

  3description: "Runs Azure compliance and security posture audits: an Azure Quick Review (azqr) best-practice s…

  4---

  5

  6# Azure Compliance and Security Audit

  7

  8Produce an evidence-based compliance report for an Azure scope and a prioritized list of fixes. Auditing is r…

  9

  10## When to use

  11

  12- Best-practice or security posture review of existing resources (azqr).

  13- Governance checks: Azure Policy non-compliance, missing tags, diagnostics, private endpoints.

  14- Key Vault hygiene: expired, soon-to-expire, or no-expiry keys, secrets and certificates.

  15

  16Not this skill: reliability remediation of App Service/Functions (`sf-azure-reliability`), live incident root…
• 04

  Azure Quotas

  Fait vérifier par l'agent les quotas Azure face à l'usage avec az quota, comparer les régions et préparer les demandes d'augmentation.+

  sf-azure-quotas/SKILL.md, de microsoft/azure-skills, licence MIT.

  1---

  2name: sf-azure-quotas

  3description: "Checks Azure quota limits against current usage with the az quota CLI, finds the right quota re…

  4---

  5

  6# Azure Quotas and Capacity

  7

  8Tell the user how much quota is left for a resource in a region, which region has room, and, if needed, file…

  9

  10## When to use

  11

  12- Before deploying or choosing a region.

  13- A deployment failed with `QuotaExceeded` or a vCPU/family limit error.

  14- The user wants to raise a limit or see pending requests.

  15

  16Not this skill: Microsoft Foundry / Azure OpenAI model TPM and PTU quota (use the quota section of `sf-micros…
• 05

  Azure Resource Lookup

  Fait lister et inventorier par l'agent les ressources Azure de tout type, via un outil MCP dédié ou Azure Resource Graph, entre abonnements.+

  sf-azure-resource-lookup/SKILL.md, de microsoft/azure-skills, licence MIT.

  1---

  2name: sf-azure-resource-lookup

  3description: "Lists, finds, counts and inventories Azure resources of any type across subscriptions and resou…

  4---

  5

  6# Azure Resource Lookup

  7

  8Answer "what do I have, where, and in what state" quickly and accurately. This skill only reads; it never cre…

  9

  10## When not to use

  11

  12- Deploying or changing resources: `sf-azure-deploy`.

  13- Cost of resources or savings: `sf-azure-cost-analysis` / `sf-azure-cost-optimize`. (Orphan discovery is fin…

  14- Live troubleshooting: `sf-azure-diagnostics`.

  15- Real-time state: Resource Graph data lags by up to a few minutes. Use the resource's own API for live value…

  16
• 06

  Azure Kusto Query

  Fait découvrir par l'agent clusters, bases et schémas Azure Data Explorer, puis écrire et lancer des requêtes KQL efficaces en lecture seule.+

  sf-azure-kusto-query/SKILL.md, de microsoft/azure-skills, licence MIT.

  1---

  2name: sf-azure-kusto-query

  3description: "Discovers Azure Data Explorer (Kusto/ADX) clusters, databases and table schemas, then writes an…

  4---

  5

  6# Azure Data Explorer (Kusto) Queries

  7

  8Get the user a correct answer from Kusto data with the cheapest query that produces it: find the right table,…

  9

  10## When to use

  11

  12- Querying ADX clusters with KQL, exploring schemas, building time-series or correlation queries.

  13- Locating a table across several clusters, databases or Log Analytics workspaces.

  14

  15Not this skill: Application Insights / Log Analytics incident triage (`sf-azure-diagnostics` has the playbook…

  16
• 07

  Entra App Registration

  Fait créer et configurer par l'agent des inscriptions d'app Entra ID : flux OAuth adapté, permissions, consentement, identifiants sans secret de préférence.+

  sf-entra-app-registration/SKILL.md, de microsoft/azure-skills, licence MIT.

  1---

  2name: sf-entra-app-registration

  3description: "Creates and configures Microsoft Entra ID (Azure AD) app registrations and service principals,…

  4---

  5

  6# Microsoft Entra App Registration

  7

  8Register an application with the Microsoft identity platform and get it authenticating with the least privile…

  9

  10## When to use

  11

  12- New app registration (web, SPA, mobile/desktop, daemon/service) by portal, CLI or Bicep.

  13- OAuth flow choice, redirect URIs, API permissions and consent.

  14- Client credentials: managed identity, federated identity credential, certificate, or secret.

  15- MSAL / Azure Identity code for sign-in or service-to-service calls.

  16- `AADSTS...` sign-in errors.
• 08

  Azure Enterprise Infra Planner

  Fait planifier puis provisionner par l'agent une infrastructure Azure d'entreprise via un pipeline en 7 phases avec validations et accords à chaque étape.+

  sf-azure-infra-planner/SKILL.md, de microsoft/azure-skills, licence MIT.

  1---

  2name: sf-azure-infra-planner

  3description: "Plans and provisions enterprise Azure infrastructure from a workload or architecture descriptio…

  4---

  5

  6# Azure Enterprise Infrastructure Planner

  7

  8Turn a workload description into an approved infrastructure plan, then into validated, secure-by-default IaC,…

  9

  10## When to use

  11

  12- Landing zones, hub-spoke, VNets/subnets, Azure Firewall, VPN/ExpressRoute gateways, private endpoints and D…

  13- Identity, RBAC and compliance-driven topology; subscription-scope or multi-resource-group deployments.

  14- DR, failover and cross-region HA designs.

  15- Adding a new workload to existing infrastructure ("referenced" or brownfield mode).

  16

Extraits. Les dossiers complets sont livrés après le paiement.

Installation