azure-resource-manager

name	azure-resource-manager
description	Expert knowledge for Azure Resource Manager development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when authoring Bicep/ARM templates, CI/CD deployments, template specs, deployment stacks, or ARM REST/CLI automations, and other Azure Resource Manager related development tasks. Not for Azure Blueprints (use azure-blueprints), Azure Policy (use azure-policy), Azure Portal (use azure-portal), Azure Resource Graph (use azure-resource-graph).
compatibility	Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation.
metadata	{"generated_at":"2026-04-19","generator":"docs2skills/1.0.0"}

Azure Resource Manager Skill

This skill provides expert guidance for Azure Resource Manager. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

• Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
• Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Troubleshooting	L37-L131	Diagnosing and fixing ARM/Bicep deployment and syntax errors (BCP codes), template validation issues, policy/SKU/location/name failures, and enabling detailed deployment troubleshooting logs.
Best Practices	L132-L177	Best practices for authoring and linting Bicep/ARM templates: naming, parameters, locations, IDs, dependencies, API/module versions, test toolkit usage, and resilient tagging/endpoint design.
Decision Making	L178-L192	Guidance on choosing ARM deployment models and modes, migrating (ASM→ARM, JSON→Bicep, Blueprints→stacks), planning large-scale regional relocations, and understanding tags and delete behavior.
Architecture & Design Patterns	L193-L200	Bicep architecture patterns for reusable configs, flexible parameters, deterministic name generation, and sharing variables across templates for scalable ARM deployments.
Limits & Quotas	L201-L226	ARM/Bicep limits and quotas: subscription/group caps, resources/params/variables/outputs, tags and naming rules, deployment history, throttling, and quota‑related deployment errors and fixes
Security	L227-L253	Securing ARM/Bicep deployments: handling secrets, secure parameters, RBAC, locks, Private Link, TLS, cross-tenant auth, policy mappings, and management group protection.
Configuration	L254-L319	Authoring and configuring ARM/Bicep templates: syntax, parameters, types, loops, modules, functions, tags, networking/monitoring resources, policy/governance, and deployment/monitoring behavior.
Integrations & Coding Patterns	L320-L371	Bicep/ARM functions and operators, programmatic integrations (CLI, REST, SDKs), and patterns for deploying, querying, tagging, and automating Azure resources and Kubernetes.
Deployment	L372-L428	Deploying and moving Azure resources with ARM/Bicep: CI/CD pipelines, template specs, deployment scripts, deployment stacks, and cross-subscription/region relocation of many Azure services.

Troubleshooting

Topic	URL
Interpret Bicep warnings and error diagnostics	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-core-diagnostics
Use ARM preflight validation to catch deployment errors	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deploy-preflight
Resolve BCP007 unknown declaration type errors	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/diagnostics/bcp007
Fix BCP009 incomplete declaration syntax issues	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/diagnostics/bcp009
Correct BCP018 missing character syntax errors	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/diagnostics/bcp018
Resolve BCP029 invalid resource type format	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/diagnostics/bcp029
Handle BCP033 type mismatch assignment errors	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/diagnostics/bcp033
Fix BCP034 array item type mismatch issues	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/diagnostics/bcp034
Resolve BCP035 missing required resource properties	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/diagnostics/bcp035
Address BCP036 property type mismatch problems	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/diagnostics/bcp036
Fix BCP037 invalid property on resource type

Best Practices

Topic	URL
Apply recommended best practices for Bicep development	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/best-practices
Use and customize Bicep linter rules	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter
Avoid literal admin usernames in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-admin-username-should-not-be-literal
Validate artifacts parameters in Bicep templates	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-artifacts-parameters
Clean up decompiled names in Bicep files	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-decompiler-cleanup
Use explicit locations for Bicep module parameters	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-explicit-values-for-loc-params
Scope nested deployment templates correctly in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-nested-deployment-template-scoping
Avoid conflicting metadata decorators in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-no-conflicting-metadata
Avoid root-level deployment resources in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-no-deployments-resources
Discourage explicit any type usage in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-no-explicit-any

Decision Making

Topic	URL
Plan migration from ARM JSON templates to Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/migrate
Migrate Azure Blueprints to deployment stacks	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/migrate-blueprint
Plan migration from Azure Service Manager to ARM	https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/asm-retirement
Choose between classic and Resource Manager deployment models	https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/deployment-models
Evaluate Azure workloads for regional relocation	https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/relocate-evaluate
Plan Azure workload relocation projects by phase	https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/relocate-index
Initiate large-scale Azure relocation projects	https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/relocate-initiate
Choose strategies for Azure workload relocation	https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/relocate-select
Determine Azure resource types that support tags	https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/tag-support
Understand complete mode deletion behavior by resource	https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/deployment-complete-mode-deletion

Architecture & Design Patterns

Topic	URL
Apply the configuration set pattern in Bicep templates	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/patterns-configuration-set
Use logical parameter pattern for flexible Bicep deployments	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/patterns-logical-parameter
Implement robust name generation patterns in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/patterns-name-generation
Use shared variable file pattern in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/patterns-shared-variable-file

Limits & Quotas

Topic	URL
Deploy Bicep templates at subscription scope	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deploy-to-subscription
Limit predeployment asserts in Bicep templates	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-max-asserts
Respect ARM output limits in Bicep templates	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-max-outputs
Enforce ARM parameter limits in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-max-parameters
Enforce ARM resource count limits in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-max-resources
Enforce ARM variable count limits in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-max-variables
Configure outputs in Bicep templates	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/outputs
Define and manage parameters in Bicep templates	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/parameters
Declare resources in Bicep and observe limits	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/resource-declaration
Review Azure subscription and service limits and quotas	https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits
Handle Azure Resource Manager request throttling limits

Security

Topic	URL
Run Bicep deployment scripts inside private virtual networks	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-script-vnet
Execute Bicep deployment scripts via private endpoints	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-script-vnet-private-endpoint
Pass Key Vault secrets as Bicep parameters	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/key-vault-parameter
Prevent exposing secrets in Bicep outputs	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-outputs-should-not-contain-secrets
Protect commandToExecute secrets in Bicep scripts	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-protect-commandtoexecute-secrets
Avoid hardcoded defaults for secure Bicep parameters	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-secure-parameter-default
Secure parameters in nested Bicep deployments	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-secure-params-in-nested-deploy
Ensure secret-like parameters are marked secure	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-secure-secrets-in-parameters
Enforce secure adminPassword values in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter-rule-use-secure-value-for-secure-inputs
Define Azure RBAC roles and assignments with Bicep

Configuration

Topic	URL
Use Bicep CLI commands to manage ARM templates	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-cli
Configure Bicep environment with bicepconfig.json	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-config
Configure Bicep linter rules in bicepconfig.json	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-config-linter
Configure Bicep module aliases and credentials	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-config-modules
Use the any() function to relax Bicep typing	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions-any
Import shared functionality and namespaces in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-import
Run and configure the Bicep MCP server for AI tools	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-mcp-server
Configure using and using none in Bicep parameters	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-using
Configure child resource names and types in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/child-resource-name-type
Configure conditional resource deployments in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/conditional-resource-deployment
Use supported data types in Bicep files

Integrations & Coding Patterns

Topic	URL
Use Bicep CLI jsonrpc for programmatic tooling integration	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-cli-jsonrpc
Use Bicep extensions to reach external resources	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-extension
Use built-in functions in Azure Bicep templates	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions
Use Bicep array functions in ARM templates	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions-array
Manipulate IP ranges with Bicep CIDR functions	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions-cidr
Work with dates using Bicep date functions	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions-date
Retrieve deployment metadata with Bicep functions	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions-deployment
Load external file content in Bicep deployments	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions-files
Control Bicep execution flow with fail function	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions-flow-control
Use lambda expressions and functions in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-functions-lambda
Apply logical functions and operators in Bicep

Deployment

Topic	URL
Configure Azure Pipelines to deploy Bicep files	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/add-template-to-azure-pipelines
Create Azure resource groups using Bicep deployments	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/create-resource-group
Deploy Bicep from Azure Cloud Shell with constraints	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deploy-cloud-shell
Automate Bicep deployments with GitHub Actions	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deploy-github-actions
Deploy Bicep templates to management groups	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deploy-to-management-group
Deploy Bicep templates to Azure resource groups	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deploy-to-resource-group
Deploy Bicep templates at tenant scope	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deploy-to-tenant
Use deploymentScripts resources in Bicep deployments	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-script-bicep
Develop and structure deployment scripts in Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-script-develop
Manage Azure deployment stacks using Bicep	https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/deployment-stacks