infrastructure▌

Query and analyze massive datasets in Azure Data Explorer using KQL for logs, telemetry, and time series data. \n \n Execute KQL queries against billions of records with sub-second performance; discover clusters, databases, and table schemas \n Supports five core query patterns: basic retrieval, aggregation analysis, time series analytics, multi-table joins, and schema exploration \n Includes 4 MCP tools (cluster list, database list, query execution, table schema) with Azure CLI fallback for tim

Execute Azure deployments for applications with validated infrastructure and deployment plans. \n \n Requires .azure/plan.md with Validated status from azure-validate and prior completion of azure-prepare; will not proceed without both prerequisites \n Executes azd up , azd deploy , terraform apply , and az deployment commands with built-in error recovery and post-deployment verification \n Includes pre-deploy checklist validation, recipe-based deployment workflows, and post-deployment configura

Access Azure AI Search, Speech, OpenAI, and Document Intelligence services through unified MCP tools. \n \n AI Search supports full-text, vector, hybrid, and semantic search with built-in AI enrichment for entity extraction and OCR \n Speech service handles real-time and batch speech-to-text transcription, text-to-speech synthesis with neural voices, and speaker diarization \n MCP tools provide direct commands for listing search indexes, querying indexes, transcribing audio, and synthesizing spe

$23

Check and manage Azure quotas and usage across regions for deployment planning and capacity validation. \n \n Azure CLI ( az quota ) is the only reliable method for checking quotas; REST API and Portal are unreliable and show misleading \"No Limit\" values that do not indicate unlimited capacity \n Supports quota discovery, usage tracking, limit checking, and increase requests across compute, network, storage, and container services \n Quota resource names do not map 1:1 to ARM resource types; u

Pre-deployment validation for Azure infrastructure, configuration, and permissions before deploying. \n \n Runs recipe-specific validation commands (azd provision, bicep build, terraform validate) and records proof in .azure/plan.md \n Requires .azure/plan.md from azure-prepare skill as input; blocks deployment if plan is missing or status is not Approved \n Validates azure.yaml, Bicep templates, Terraform configurations, Azure Functions, and app readiness across multiple deployment scenarios \n

Plan, create, and configure production-ready Azure Kubernetes Service (AKS) clusters. Covers Day-0 checklist, SKU selection (Automatic vs Standard), networking options (private API server, Azure CNI Overlay, egress configuration), security, and operations (autoscaling, upgrade strategy, cost analysis). WHEN: create AKS environment, provision AKS environment, enable AKS observability, design AKS networking, choose AKS SKU, secure AKS.

This skill handles assessment and automated upgrades of existing Azure workloads from one Azure service, hosting plan, or SKU to another — all within Azure. This includes plan/tier upgrades (e.g. Consumption → Flex Consumption), cross-service migrations (e.g. App Service → Container Apps), and SKU changes. This is NOT for cross-cloud migration — use azure-cloud-migrate for that.

Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment'. PREFER

Govern AI models, MCP tools, and agents through Azure API Management with semantic caching, token limits, and content safety. \n \n Supports five core policy categories: semantic caching (60-80% cost savings), token rate limiting, content safety filtering, jailbreak detection, and request rate limiting for MCP tool protection \n Enables backend configuration for Azure OpenAI, AI Foundry models, and custom APIs with load balancing and managed identity authentication \n Includes token metrics and