Design Azure architectures for startups and enterprises. Use when asked to design Azure infrastructure, create Bicep/ARM templates, optimize Azure costs, set up Azure DevOps pipelines, or migrate to Azure. Covers AKS, App Service, Azure Functions, Cosmos DB, and cost optimization.
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Une commande directe contourne le prompt de vérification. Examinez la source avant de l'exécuter.
Design Azure architectures for startups and enterprises. Use when asked to design Azure infrastructure, create Bicep/ARM templates, optimize Azure costs, set up Azure DevOps pipelines, or migrate to Azure. Covers AKS, App Service, Azure Functions, Cosmos DB, and cost optimization.
compatibility
opencode
Azure Cloud Architect
Design scalable, cost-effective Azure architectures for startups and enterprises with Bicep infrastructure-as-code templates.
Workflow
Step 1: Gather Requirements
Collect application specifications:
- Application type (web app, mobile backend, data pipeline, SaaS, microservices)
- Expected users and requests per second
- Budget constraints (monthly spend limit)
- Team size and Azure experience level
- Compliance requirements (GDPR, HIPAA, SOC 2, ISO 27001)
- Availability requirements (SLA, RPO/RTO)
- Region preferences (data residency, latency)
Step 2: Design Architecture
Run the architecture designer to get pattern recommendations:
App Service Web: Front Door + App Service + Azure SQL + Redis Cache
Microservices on AKS: AKS + Service Bus + Cosmos DB + API Management
Serverless Event-Driven: Functions + Event Grid + Service Bus + Cosmos DB
Data Pipeline: Data Factory + Synapse Analytics + Data Lake Storage + Event Hubs
See references/architecture_patterns.md for detailed pattern specifications.
Validation checkpoint: Confirm the recommended pattern matches the team's operational maturity and compliance requirements before proceeding to Step 3.
Step 3: Generate IaC Templates
Create infrastructure-as-code for the selected pattern:
Full templates including Front Door, Key Vault, Managed Identity, and monitoring are generated by bicep_generator.py and also available in references/architecture_patterns.md.
Bicep is the recommended IaC language for Azure. Prefer Bicep over ARM JSON templates: Bicep compiles to ARM JSON, has cleaner syntax, supports modules, and is first-party supported by Microsoft.
Step 4: Review Costs
Analyze estimated costs and optimization opportunities:
{"current_monthly_usd":2000,"recommendations":[{"action":"Right-size SQL Database GP_S_Gen5_8 to GP_S_Gen5_2","savings_usd":380,"priority":"high"},{"action":"Purchase 1-year Reserved Instances for AKS node pools","savings_usd":290,"priority":"high"},{"action":"Move Blob Storage to Cool tier for objects >30 days old","savings_usd":65,"priority":"medium"}],"total_potential_savings_usd":735}
Output includes:
Monthly cost breakdown by service
Right-sizing recommendations
Reserved Instance and Savings Plan opportunities
Potential monthly savings
Step 5: Configure CI/CD
Set up Azure DevOps Pipelines or GitHub Actions with Azure:
# GitHub Actions — deploy Bicep to Azurename:DeployInfrastructureon:push:branches: [main]
permissions:id-token:writecontents:readjobs:deploy:runs-on:ubuntu-lateststeps:-uses:actions/checkout@v4-uses:azure/login@v2with:client-id:${{secrets.AZURE_CLIENT_ID}}tenant-id:${{secrets.AZURE_TENANT_ID}}subscription-id:${{secrets.AZURE_SUBSCRIPTION_ID}}-uses:azure/arm-deploy@v2with:resourceGroupName:rg-myapp-devtemplate:./infra/main.bicepparameters:environment=dev
# Azure DevOps Pipelinetrigger:branches:include:-mainpool:vmImage:'ubuntu-latest'steps:-task:AzureCLI@2inputs:azureSubscription:'MyServiceConnection'scriptType:'bash'scriptLocation:'inlineScript'inlineScript:|
az deployment group create \
--resource-group rg-myapp-dev \
--template-file infra/main.bicep \
--parameters environment=dev
Step 6: Security Review
Validate security posture before production:
Identity: Entra ID (Azure AD) with RBAC, Managed Identity for service-to-service auth — never store credentials in code
Secrets: Key Vault for all secrets, certificates, and connection strings
Network: NSGs on all subnets, Private Endpoints for PaaS services, Application Gateway with WAF
Encryption: TLS 1.2+ in transit, Azure-managed or customer-managed keys at rest
Monitoring: Microsoft Defender for Cloud enabled, Azure Policy for guardrails
Compliance: Azure Policy assignments for SOC 2 / HIPAA / ISO 27001 initiatives
If deployment fails:
Check the deployment status:
az deployment group show \
--resource-group rg-myapp-dev \
--name main \
--query 'properties.error'
Review Activity Log for RBAC or policy errors.
Validate the Bicep template before deploying:
az bicep build --file main.bicep
az deployment group validate \
--resource-group rg-myapp-dev \
--template-file main.bicep
Common failure causes:
RBAC permission errors — verify the deploying principal has Contributor on the resource group
Resource provider not registered — run az provider register --namespace Microsoft.Web
Naming conflicts — Azure resource names are often globally unique (storage accounts, web apps)
Ask: "Design an Azure web app for a startup with 5000 users"
Result:
- App Service (B1 Linux) for the application
- Azure SQL Serverless for relational data
- Azure Blob Storage for static assets
- Front Door (free tier) for CDN and routing
- Key Vault for secrets
- Estimated: $40-80/month
Microservices on AKS ($500-2000/month)
Ask: "Design a microservices architecture on Azure for a SaaS platform with 50k users"
Result:
- AKS cluster with 3 node pools (system, app, jobs)
- API Management for gateway and rate limiting
- Cosmos DB for multi-model data
- Service Bus for async messaging
- Azure Monitor + Application Insights for observability
- Multi-zone deployment
Serverless Event-Driven (< $200/month)
Ask: "Design an event-driven backend for processing orders"
Result:
- Azure Functions (Consumption plan) for compute
- Event Grid for event routing
- Service Bus for reliable messaging
- Cosmos DB for order data
- Application Insights for monitoring
- Estimated: $30-150/month depending on volume
Data Pipeline ($300-1500/month)
Ask: "Design a data pipeline for ingesting 10M events/day"
Result:
- Event Hubs for ingestion
- Stream Analytics or Functions for processing
- Data Lake Storage Gen2 for raw data
- Synapse Analytics for warehouse
- Power BI for dashboards
