azure-automation

name	azure-automation
description	Expert knowledge for Azure Automation development including troubleshooting, best practices, decision making, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when building runbooks, DSC/Hybrid Workers, Entra/RBAC auth, webhooks/email integrations, or AMA-based tracking, and other Azure Automation related development tasks. Not for Azure Functions (use azure-functions), Azure Logic Apps (use azure-logic-apps), Azure DevOps (use azure-devops), Azure Resource Manager (use azure-resource-manager).
compatibility	Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation.
metadata	{"generated_at":"2026-08-09","generator":"docs2skills/1.0.0"}

Azure Automation Skill

This skill provides expert guidance for Azure Automation. Covers troubleshooting, best practices, decision making, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

• Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
• Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Troubleshooting	L36-L46	Diagnosing and fixing Azure Automation issues: runbook failures, DSC/State Configuration, Hybrid Runbook Workers, managed identities, shared resources, and collecting logs for support.
Best Practices	L47-L56	Best practices for structuring and running Automation runbooks: modular parent-child design, execution patterns, error handling, stream/output usage, and avoiding context/locking issues.
Decision Making	L57-L65	Guidance on choosing runbook types and planning migrations: Orchestrator to Automation, Log Analytics to AMA, agent to extension workers, and Run As accounts to managed identities.
Limits & Quotas	L66-L73	Limits, quotas, and version details for Azure Automation: DSC extension history, Automation account capacity, job/runbook limits, and Change Tracking/Inventory support matrix with AMA.
Security	L74-L94	Securing Automation accounts: identities (system/user-assigned), Entra auth, RBAC, encryption, credentials/certs, private endpoints, policies, and security best practices.
Configuration	L95-L136	Configuring Azure Automation runbooks, DSC/State Configuration, Hybrid Runbook Workers, schedules, modules/packages, alerts, policies, and integrations (VS Code, source control, ARM, Azure Monitor).
Integrations & Coding Patterns	L137-L149	Patterns for integrating runbooks with AWS, ARM/SQL/Office 365, webhooks, email (SendGrid), Azure Monitor logging, and using the graphical runbook SDK with managed identities
Deployment	L150-L156	Guides for deploying Automation resources: setting up DSC continuous deployment with Chocolatey and installing/configuring Windows and Linux Hybrid Runbook Worker agents (agent- and extension-based).

Troubleshooting

Topic	URL
Collect diagnostic data for Azure Automation support cases	https://learn.microsoft.com/en-us/azure/automation/troubleshoot/collect-data-microsoft-azure-automation-case
Troubleshoot Azure Automation State Configuration problems	https://learn.microsoft.com/en-us/azure/automation/troubleshoot/desired-state-configuration
Troubleshoot extension-based Hybrid Runbook Worker failures	https://learn.microsoft.com/en-us/azure/automation/troubleshoot/extension-based-hybrid-runbook-worker
Troubleshoot agent-based Hybrid Runbook Worker issues	https://learn.microsoft.com/en-us/azure/automation/troubleshoot/hybrid-runbook-worker
Troubleshoot managed identity issues in Azure Automation	https://learn.microsoft.com/en-us/azure/automation/troubleshoot/managed-identity
Diagnose and fix Azure Automation runbook issues	https://learn.microsoft.com/en-us/azure/automation/troubleshoot/runbooks
Troubleshoot Azure Automation shared resource problems	https://learn.microsoft.com/en-us/azure/automation/troubleshoot/shared-resources

Best Practices

Topic	URL
Design modular parent-child runbooks in Azure Automation	https://learn.microsoft.com/en-us/azure/automation/automation-child-runbooks
Design and manage Azure Automation runbook execution	https://learn.microsoft.com/en-us/azure/automation/automation-runbook-execution
Implement error handling in Azure Automation graphical runbooks	https://learn.microsoft.com/en-us/azure/automation/automation-runbook-graphical-error-handling
Configure output and message streams in Automation runbooks	https://learn.microsoft.com/en-us/azure/automation/automation-runbook-output-and-messages
Avoid context switching issues in Azure Automation runbooks	https://learn.microsoft.com/en-us/azure/automation/context-switching
Manage Azure Automation runbooks with recommended design patterns	https://learn.microsoft.com/en-us/azure/automation/manage-runbooks

Decision Making

Topic	URL
Migrate System Center Orchestrator runbooks to Azure Automation	https://learn.microsoft.com/en-us/azure/automation/automation-orchestrator-migration
Choose appropriate Azure Automation runbook type	https://learn.microsoft.com/en-us/azure/automation/automation-runbook-types
Migrate Change Tracking from Log Analytics agent to AMA	https://learn.microsoft.com/en-us/azure/automation/change-tracking/guidance-migration-log-analytics-monitoring-agent
Migrate agent-based workers to extension-based	https://learn.microsoft.com/en-us/azure/automation/migrate-existing-agent-based-hybrid-worker-to-extension-based-workers
Plan and execute migration from Run As to managed identities	https://learn.microsoft.com/en-us/azure/automation/migrate-run-as-accounts-managed-identity

Limits & Quotas

Topic	URL
Reference Azure DSC extension version history details	https://learn.microsoft.com/en-us/azure/automation/automation-dsc-extension-history
View and manage Azure Automation limits and quotas	https://learn.microsoft.com/en-us/azure/automation/automation-limits-quotas
Azure Automation subscription limits and quotas reference	https://learn.microsoft.com/en-us/azure/automation/automation-subscription-limits-faq
Support matrix for Change Tracking and Inventory with AMA	https://learn.microsoft.com/en-us/azure/azure-change-tracking-inventory/change-tracking-inventory-support-matrix

Security

Topic	URL
Configure user-assigned managed identity for Azure Automation	https://learn.microsoft.com/en-us/azure/automation/add-user-assigned-identity
Configure and understand Azure Automation data security	https://learn.microsoft.com/en-us/azure/automation/automation-managing-data
Assign Azure RBAC roles and permissions for Automation accounts	https://learn.microsoft.com/en-us/azure/automation/automation-role-based-access-control
Configure encryption for secure assets in Azure Automation	https://learn.microsoft.com/en-us/azure/automation/automation-secure-asset-encryption
Apply security best practices for Azure Automation accounts	https://learn.microsoft.com/en-us/azure/automation/automation-security-guidelines
Configure authentication methods for Azure Automation accounts	https://learn.microsoft.com/en-us/azure/automation/automation-security-overview
Configure Microsoft Entra ID authentication for Azure Automation	https://learn.microsoft.com/en-us/azure/automation/automation-use-azure-ad
Disable local authentication for Azure Automation securely	https://learn.microsoft.com/en-us/azure/automation/disable-local-authentication
Disable system-assigned managed identity in Azure Automation	https://learn.microsoft.com/en-us/azure/automation/disable-managed-identity-for-automation
Enable system-assigned managed identity for Azure Automation	https://learn.microsoft.com/en-us/azure/automation/enable-managed-identity-for-automation
Secure Azure Automation access with Private Link and private endpoints

Configuration

Topic	URL
Configure metric alerts for Azure Automation runbooks	https://learn.microsoft.com/en-us/azure/automation/automation-alert-metric
Configure and use connection assets in Azure Automation	https://learn.microsoft.com/en-us/azure/automation/automation-connections
Trigger Azure Automation runbooks from Azure Monitor alerts	https://learn.microsoft.com/en-us/azure/automation/automation-create-alert-triggered-runbook
Compile DSC configurations in Azure Automation	https://learn.microsoft.com/en-us/azure/automation/automation-dsc-compile
Configure DSC data at scale in Azure Automation	https://learn.microsoft.com/en-us/azure/automation/automation-dsc-config-data-at-scale
Generate DSC configurations from existing servers	https://learn.microsoft.com/en-us/azure/automation/automation-dsc-config-from-server
Configure STIG-based DSC data in Azure Automation	https://learn.microsoft.com/en-us/azure/automation/automation-dsc-configuration-based-on-stig
Convert DSC configurations to composite resources	https://learn.microsoft.com/en-us/azure/automation/automation-dsc-create-composite
Send State Configuration data to Azure Monitor Logs	https://learn.microsoft.com/en-us/azure/automation/automation-dsc-diagnostics
Configure core Azure Automation State Configuration tasks	https://learn.microsoft.com/en-us/azure/automation/automation-dsc-getting-started
Enable and onboard machines to State Configuration	https://learn.microsoft.com/en-us/azure/automation/automation-dsc-onboarding

Integrations & Coding Patterns

Topic	URL
Configure Azure Automation runbooks to authenticate with AWS	https://learn.microsoft.com/en-us/azure/automation/automation-config-aws-account
Deploy ARM templates from Azure Automation PowerShell runbooks	https://learn.microsoft.com/en-us/azure/automation/automation-deploy-template-runbook
Forward Azure Automation job logs to Azure Monitor	https://learn.microsoft.com/en-us/azure/automation/automation-manage-send-joblogs-log-analytics
Provision AWS virtual machines using Azure Automation runbooks	https://learn.microsoft.com/en-us/azure/automation/automation-scenario-aws-deployment
Send email from Azure Automation runbook using SendGrid	https://learn.microsoft.com/en-us/azure/automation/automation-send-email
Trigger Azure Automation runbooks using webhooks	https://learn.microsoft.com/en-us/azure/automation/automation-webhooks
Use the Azure Automation graphical runbook SDK	https://learn.microsoft.com/en-us/azure/automation/graphical-runbook-sdk
Manage Office 365 services with Azure Automation	https://learn.microsoft.com/en-us/azure/automation/manage-office-365
Manage Azure SQL databases using Automation managed identity	https://learn.microsoft.com/en-us/azure/automation/manage-sql-server-in-automation

Deployment

Topic	URL
Set up continuous deployment with DSC and Chocolatey	https://learn.microsoft.com/en-us/azure/automation/automation-dsc-cd-chocolatey
Deploy Linux Hybrid Runbook Worker agent	https://learn.microsoft.com/en-us/azure/automation/automation-linux-hrw-install
Deploy agent-based Windows Hybrid Runbook Workers in Automation	https://learn.microsoft.com/en-us/azure/automation/automation-windows-hrw-install
Deploy extension-based Hybrid Runbook Workers	https://learn.microsoft.com/en-us/azure/automation/extension-based-hybrid-runbook-worker-install