cloud▌

Assess and automate upgrades of Azure workloads across plans, tiers, and SKUs. \n \n Handles plan migrations (Consumption to Flex Consumption), tier upgrades, and cross-service moves (App Service to Container Apps) with sequential assessment before any changes \n Generates pre-upgrade readiness reports, collects existing app settings and configurations, then executes automated upgrade steps with idempotent scripts \n Requires explicit user confirmation for destructive actions and target plan/SKU

Unified access to Azure blob storage, file shares, queues, tables, and data lake services. \n \n Supports five storage service types: Blob Storage for objects and backups, File Shares for SMB access, Queue Storage for async messaging, Table Storage for NoSQL key-value data, and Data Lake for big data analytics \n MCP server tools enable listing storage accounts, containers, and blobs, plus downloading and uploading blob content directly \n Configurable access tiers (hot, cool, cold, archive) and

Fast discovery and inventory of Azure resources across subscriptions using Resource Graph queries. \n \n Queries any Azure resource type (VMs, storage accounts, web apps, container apps, Key Vaults, etc.) across subscriptions and resource groups in a single command \n Supports cross-cutting searches for orphaned resources, missing tags, unhealthy states, and resource inventory counts \n Routes single-resource-type queries to dedicated MCP tools when available; falls back to Azure Resource Graph

Find minimal Azure RBAC roles, generate assignment commands, and provide Bicep infrastructure code. \n \n Identifies built-in roles matching desired permissions using Azure documentation, or creates custom role definitions when no built-in role fits \n Generates Azure CLI commands and Bicep code snippets for assigning roles to identities, service principals, and managed identities \n Clarifies prerequisites for granting roles, including which permissions ( Microsoft.Authorization/roleAssignments

Guidance and reference material for instrumenting webapps with Azure Application Insights. \n \n Covers SDK setup, telemetry patterns, and configuration for ASP.NET Core, Node.js, and Python applications hosted in Azure \n Distinguishes between this skill (reference and guidance) and azure-prepare (which orchestrates actual instrumentation changes) \n Recommends auto-instrumentation for C# ASP.NET Core apps on Azure App Service; provides manual instrumentation paths for other stacks \n Includes

Category: test

Category: service

Find minimal Azure RBAC roles, generate assignment commands, and provide Bicep infrastructure code. \n \n Identifies built-in roles matching desired permissions using Azure documentation, or generates custom role definitions when no built-in role fits \n Produces Azure CLI commands and Bicep code snippets for role assignments to identities, managed identities, and service principals \n Documents prerequisites for granting roles, including required permissions and recommended least-privilege role

kubernetes

Prepare Azure applications for deployment with infrastructure-as-code, configuration, and containerization. \n \n Generates Bicep or Terraform infrastructure code, azure.yaml configuration, and Dockerfiles based on application type and requirements \n Follows mandatory plan-first workflow: analyze workspace, gather requirements, select deployment recipe (AZD, AZCLI, Bicep, or Terraform), design architecture, and get user approval before code generation \n Supports creation, modernization, and up