azure-resource-manager

name	azure-resource-manager
description	Expert knowledge for Azure Resource Manager development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when authoring Bicep/ARM templates, using CLI/PowerShell/REST, Key Vault, AKS, or ARM deployment stacks, and other Azure Resource Manager related development tasks. Not for Azure Policy (use azure-policy), Azure Resource Graph (use azure-resource-graph), Azure Portal (use azure-portal), Azure Networking (use azure-networking).
compatibility	Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation.
metadata	{"generated_at":"2026-08-09","generator":"docs2skills/1.0.0"}

Azure Resource Manager Skill

This skill provides expert guidance for Azure Resource Manager. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

• Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
• Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Troubleshooting	L37-L135	Diagnosing and fixing Azure Bicep/ARM deployment errors, including specific BCP codes, template syntax/type issues, scope and decorator problems, policy/SKU/name constraints, and common deployment failures.
Best Practices	L136-L182	Bicep/ARM template authoring and linting best practices: naming, locations, dependencies, unused code, safe patterns, testing with ARM toolkit, and resilient tagging/custom endpoints.
Decision Making	L183-L196	Guidance on migration and relocation decisions: moving from classic/ASM to ARM/Bicep, blueprint-to-stack migration, regional move planning, resource move/tag support, and relocation strategies.
Architecture & Design Patterns	L197-L204	Bicep architecture patterns for reusable configs, flexible parameters, deterministic name generation, and sharing variables across templates for scalable ARM deployments.
Limits & Quotas	L205-L234	Limits, quotas, and constraints for ARM/Bicep deployments: resource counts, parameters/outputs, naming/tag rules, throttling, subscription/RG limits, history cleanup, and quota error troubleshooting.
Security	L235-L264	Securing ARM/Bicep deployments: cross-tenant auth, private endpoints/VNETs, secrets handling (Key Vault, secure params), RBAC/locks, policy/regulatory mapping, and TLS/network hardening.
Configuration	L265-L320	Configuring ARM and Bicep: template structure, parameters, scopes, tags, policies, custom providers, UI Form view, monitoring, async ops, and deployment/dev environment settings.
Integrations & Coding Patterns	L321-L382	Bicep and ARM template functions, operators, and patterns; integrating with CLI/PowerShell/SDKs/REST, using Key Vault, AKS, custom providers, and programmatic resource/tag management.
Deployment	L383-L439	Deploying and moving Azure resources with ARM/Bicep: scripts, stacks, registries, multi-scope deployments, CI/CD, and region/subscription relocation for many Azure services.

Troubleshooting

Topic	URL
Understand and manage Bicep diagnostic codes	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-core-diagnostics
Fix BCP007 unrecognized Bicep declaration type	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/diagnostics/bcp007
Resolve BCP009 incomplete Bicep declarations	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/diagnostics/bcp009
Resolve BCP018 missing character syntax errors	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/diagnostics/bcp018
Fix BCP029 invalid Bicep resource type format	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/diagnostics/bcp029
Resolve BCP033 type mismatch diagnostics in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/diagnostics/bcp033
Resolve BCP034 Bicep array type mismatch errors	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/diagnostics/bcp034
Fix BCP035 missing required Bicep resource properties	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/diagnostics/bcp035
Resolve BCP036 Bicep property type mismatch issues	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/diagnostics/bcp036
Fix BCP037 invalid property on Bicep object type	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/diagnostics/bcp037
Resolve BCP040 unsupported string interpolation for keys

Best Practices

Topic	URL
Apply Bicep development best practices for ARM templates	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/best-practices
Use ARM preflight validation to catch deployment errors early	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deploy-preflight
Apply and customize Bicep linter best practices	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter
Use explicit locations for Bicep module parameters	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-explicit-values-for-loc-params
Scope nested deployment templates correctly in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-nested-deployment-template-scoping
Avoid conflicting metadata decorators in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-no-conflicting-metadata
Avoid root-level deployment resources in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-no-deployments-resources
Discourage explicit any type usage in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-no-explicit-any
Apply Bicep linter rule for environment-specific URLs	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-no-hardcoded-environment-urls
Avoid hardcoded Azure locations in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-no-hardcoded-location

Decision Making

Topic	URL
Plan migration from ARM JSON templates to Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/migrate
Migrate Azure Blueprints to deployment stacks	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/migrate-blueprint
Plan migration from Azure Service Manager to ARM	https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/asm-retirement
Choose between classic and Resource Manager deployment models	https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/deployment-models
Determine which Azure resources support move operations	https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/move-support-resources
Evaluate Azure workloads for regional relocation	https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/relocate-evaluate
Plan Azure workload relocation projects by phase	https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/relocate-index
Initiate large-scale Azure relocation projects	https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/relocate-initiate
Choose strategies for Azure workload relocation	https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/relocate-select
Determine Azure resource types that support tags	https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/tag-support

Architecture & Design Patterns

Topic	URL
Apply the configuration set pattern in Bicep templates	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/patterns-configuration-set
Use logical parameter pattern for flexible Bicep deployments	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/patterns-logical-parameter
Implement robust name generation patterns in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/patterns-name-generation
Use shared variable file pattern in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/patterns-shared-variable-file

Limits & Quotas

Topic	URL
Deploy Bicep to subscriptions within RG limits	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deploy-to-subscription
Review deployment stack limitations and known issues	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-stacks-known-issues
Enforce maximum predeployment asserts in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-max-asserts
Validate Bicep outputs against ARM template limits	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-max-outputs
Validate Bicep parameters against ARM template limits	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-max-parameters
Validate Bicep resources against ARM template limits	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-max-resources
Enforce ARM variable count limits in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-max-variables
Configure outputs in Bicep templates	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/outputs
Use and constrain parameters in Bicep files	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/parameters
Declare Bicep resources within file limits	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/resource-declaration
Understand template spec limitations and workarounds

Security

Topic	URL
Grant cross-tenant Bicep registry access with Lighthouse	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/cross-tenant-registry-lighthouse
Run Bicep deployment scripts inside private virtual networks	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-script-vnet
Execute Bicep deployment scripts via private endpoints	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-script-vnet-private-endpoint
Resolve BCP446 trusted registry restriction in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/diagnostics/bcp446
Prevent exposing secrets in Bicep outputs	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-outputs-should-not-contain-secrets
Protect commandToExecute secrets in Bicep scripts	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-protect-commandtoexecute-secrets
Avoid hardcoded defaults for secure Bicep parameters	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-secure-parameter-default
Secure parameters in nested Bicep deployments	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-secure-params-in-nested-deploy
Use Bicep linter to secure parameter files	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-secure-params-in-parameters-file
Ensure secret-like parameters are marked secure

Configuration

Topic	URL
Configure Bicep environment with bicepconfig.json	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-config
Configure Bicep linter settings in bicepconfig.json	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-config-linter
Configure Bicep module aliases and credentials	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-config-modules
Configure and use Bicep extensions for external resources	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-extension
Run and configure the Bicep MCP server for AI tools	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-mcp-server
Configure child resource names and types in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/child-resource-name-type
Use supported data types in Bicep files	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/data-types
Configure dev environments for Bicep deployment scripts	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-script-bicep-configure-dev
Configure artifacts parameters for Bicep linter compliance	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-artifacts-parameters
Use iterative loops to generate Bicep resources	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/loops
Define and use Bicep parameter files for deployments

Integrations & Coding Patterns

Topic	URL
Use Bicep CLI commands with Azure CLI and PowerShell	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-cli
Use Bicep CLI jsonrpc for programmatic tooling integration	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-cli-jsonrpc
Use Bicep any() to bypass type checking	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions-any
Use Azure Bicep array functions in templates	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions-array
Manipulate CIDR IP ranges in Bicep templates	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions-cidr
Work with date functions in Bicep files	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions-date
Retrieve deployment metadata with Bicep functions	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions-deployment
Use Bicep file functions to load external content	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions-files
Control Bicep deployment flow with fail()	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions-flow-control
Use lambda expressions and functions in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions-lambda
Apply logical functions and bool() in Bicep

Deployment

Topic	URL
Create Azure resource groups using Bicep deployments	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/create-resource-group
Use deploymentScripts resources in Bicep deployments	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-script-bicep
Develop and structure deployment scripts in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-script-develop
Manage Azure deployment stacks using Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-stacks
Set up a private Azure container registry for Bicep modules	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/private-module-registry
Create and deploy ARM template specs with Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/template-specs
Move Azure App Service across subscriptions	https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/move-limitations/app-service-move-limitations
Move classic Azure resources with ARM	https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/move-limitations/classic-model-move-limitations
Move Cloud Services (extended support) resources	https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/move-limitations/cloud-services-extended-support
Handle special cases when moving Azure VMs	https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/move-limitations/virtual-machines-move-limitations