菜单
Use when designing or scaffolding Azure enterprise-scale landing zones (ESLZ) following the Cloud Adoption Framework. Provides IaC templates for management groups, hub networking, policy assignments, and landing zone vending.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Use when designing Copilot agents, authoring agent definitions, creating skill folders, or scaffolding instruction files. Provides templates and conventions for the agent ecosystem.
Use when designing, reviewing, or evolving API contracts. Provides OpenAPI templates, breaking-change checklists, versioning decision trees, and governance checklists.
API authentication, authorization, input validation, rate limiting, and protection patterns
Scan legacy applications to discover project structure, NuGet/npm dependencies, database connection strings, external service bindings, framework versions, and migration complexity scores. Produces structured JSON, YAML, or Markdown inventory reports.
Use when designing systems, recording architecture decisions, evaluating technologies, or assessing architectural risks. Provides C4 diagram templates, ADR format, technology selection matrices, and risk registers.
Deploy, scale, and manage containerized applications on Azure Container Apps with Dapr, revision management, and advanced networking
| name | azure-landing-zone |
| description | Use when designing or scaffolding Azure enterprise-scale landing zones (ESLZ) following the Cloud Adoption Framework. Provides IaC templates for management groups, hub networking, policy assignments, and landing zone vending. |
| compatibility | ["VS Code","Cursor","Windsurf","Claude Code"] |
| metadata | {"category":"Uncategorized","tags":["uncategorized"],"maturity":"beta","audience":["developers"]} |
| allowed-tools | ["bash","git","grep","find"] |
Use this skill when the task involves designing, scaffolding, or reviewing an Azure enterprise-scale landing zone (ESLZ) aligned to Microsoft's Cloud Adoption Framework (CAF).
Reference this skill by attaching skills/azure-landing-zone/SKILL.md to your agent context, or instruct the agent:
Use the azure-landing-zone skill. Generate a hub networking Bicep module for the Connectivity subscription and assign the NIST 800-53 policy initiative at the Landing Zones management group scope.
| Template | Purpose |
|---|---|
adr-template.md | Architecture Decision Record for ESLZ design choices (connectivity model, DNS, identity, policy baseline) |
platform-subscription-template.bicep | Bicep module for deploying a platform subscription (Connectivity, Identity, or Management) |
hub-networking-template.bicep | Bicep module for hub virtual network, Azure Firewall, DNS Private Resolver, Bastion, and gateway |
policy-assignment-template.json | Azure Policy initiative assignment parameter file for regulatory baselines |
policy-exemption-template.json | Azure Policy exemption template with required justification and expiration fields |
landing-zone-vending-template.bicep | Bicep module for vending a new application landing zone subscription |
This skill is designed to be used alongside the azure-landing-zone agent. The agent drives the ESLZ workflow; this skill provides the reference templates and standards.
For cross-cutting concerns, collaborate with:
solution-architect — for high-level system design and ADRs beyond IaC scopepolicy-as-code-compliance — for ongoing policy compliance validation and audit reportinginfrastructure-deploy — for executing Bicep deployments to Azure