Azure Enterprise Infra Planner
If you're standing up enterprise Azure infrastructure and need more than just app deployment, this is your planner. It architects landing zones, hub-spoke networks, multi-region DR setups, and the full stack of VNets, firewalls, private endpoints, and compliance-driven RBAC from a workload description. Outputs production-ready Bicep or Terraform at subscription scope, validates against WAF best practices, and won't let you deploy until you approve the plan. The seven-phase workflow keeps you from skipping steps, and it taps Microsoft Learn and Bicep schemas via MCP tools to stay current. Note that it's for platform engineers doing infrastructure, not app-centric deployments where azure-prepare is the better fit.
- GitHub stars
- 217
- last updated
- Jun 11, 2026
Install
$ npx -y skills add microsoft/github-copilot-for-azure --skill azure-enterprise-infra-planner --agent claude-codeInstalls into .claude/skills of the current project.
Files
Azure Enterprise Infra Planner
When to Use This Skill
Activate this skill when user wants to:
- Plan enterprise Azure infrastructure from a workload or architecture description
- Architect a landing zone, hub-spoke network, or multi-region topology
- Design networking infrastructure: VNets, subnets, firewalls, private endpoints, VPN gateways
- Plan identity, RBAC, and compliance-driven infrastructure
- Generate Bicep or Terraform for subscription-scope or multi-resource-group deployments
- Plan disaster recovery, failover, or cross-region high-availability topologies
Quick Reference
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/microsoft/github-copilot-for-azure
- Categories
- Security, DevOps & CI/CD, Git & Pull Requests, Code Review & Quality, AI & Agent Building, Productivity & Planning, Cloud & Infrastructure, Design & UI/UX
- First seen
- Jun 11, 2026
More from microsoft/github-copilot-for-azure
All 40- Azure Kubernetes
- Azure Quotas
- Azure Reliability
- Azure Upgrade
- Entra Agent Id
- Investigate Integration Test
- Skill Reviewer
- Submit Skill Fix Pr
- Vally Eval
- Azure Ai103.7K
- Azure Cost Optimization103.2K
- Azure Deploy103.2K
- Azure Storage103.2K
- Azure Diagnostics103.1K
- Microsoft Foundry103.1K
- Appinsights Instrumentation103K
- Azure Aigateway103K
- Azure Compliance103K
- Azure Kusto103K
- Azure Prepare103K
- Azure Rbac103K
- Azure Resource Lookup103K
- Azure Resource Visualizer103K
- Azure Validate103K
Recommended
More Security
GitLab Stack Validatorrknall/claude-skillsValidates GitLab stack projects before deployment, ensuring proper architecture patterns, directory structure, secrets management, .env configuration, and Docke0skills.sh installs
code-reviewthinkinaixyz/deepchatComprehensive code review assistant that analyzes code quality, security, and best practices0skills.sh installs
microsoft-foundrymicrosoft/azure-skillsDeploy, evaluate, fine-tune, and manage Foundry agents end-to-end with azd: hosted agent scaffold/run/deploy, prompt agent create, batch eval, continuous eval, 671.4Kskills.sh installsazure-validatemicrosoft/azure-skillsPre-deployment validation for Azure readiness. Run deep checks on configuration, infrastructure (Bicep or Terraform), RBAC role assignments, managed identity pe659.9Kskills.sh installsazure-compliancemicrosoft/azure-skillsRun Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validat659Kskills.sh installs