#617 by GitHub stars
microsoft/azure-skills
Official agent plugin providing skills and MCP server configurations for Azure scenarios.
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
skills/airunway-aks-setup/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/appinsights-instrumentation/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-ai/SKILL.md
Week of Nov 2, 2026 · +5 / −3 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
- 3 description: "Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybrid search, speech-to-text, text-to-speech, transcription, OCR. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, OCR, convert text to speech."
+ 3 description: "Build and troubleshoot Azure AI Search, Speech, OpenAI, and Document Intelligence apps. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, Speech SDK logs, session ID, result ID, OCR, convert text to speech."
- 7 version: "1.2.2"
+ 7 version: "1.2.3"
- 17 | Speech | Speech-to-text, text-to-speech | `azure__speech` | - |
+ 17 | Speech | Speech-to-text, text-to-speech, SDK logs | `azure__speech` | - |
+ 53 | Client SDK diagnostics | [Speech SDK client diagnostics](references/speech/diagnostics.md) for log collection, offline analysis, features, and session/result IDs (no MCP or login required) |
+ 73 - Speech SDK client logs and troubleshooting -> [Speech SDK client diagnostics](references/speech/diagnostics.md)
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-aigateway/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-app-onboard/SKILL.md
Week of Nov 2, 2026 · +1 / −1 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
- 7 version: "1.2.6"
+ 7 version: "1.2.8"
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-app-onboard-prereq/SKILL.md
Week of Nov 2, 2026 · +2 / −2 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
- 7 version: "1.2.3"
+ 7 version: "1.2.4"
- 77 ⛔ Verify `context.json` exists on disk. Read [readiness-gate.md](references/readiness-gate.md) (verdicts, tiers, batch-then-approve, fast-track) then [prereq-artifacts.md](references/prereq-artifacts.md) (write procedures, schemas).
+ 77 ⛔ Verify `context.json` exists on disk. ⛔ **You MUST read [readiness-gate.md](references/readiness-gate.md)** (verdicts, tiers, batch-then-approve, fast-track), then ⛔ **You MUST read [prereq-artifacts.md](references/prereq-artifacts.md)** (write procedures, schemas).
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-app-onboard/deploy/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-app-onboard/prepare/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-app-onboard/scaffold/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-cloud-migrate/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-compliance/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-compute/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-deploy/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-diagnostics/SKILL.md
Week of Nov 2, 2026 · +1 / −1 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
- 7 version: "1.2.12"
+ 7 version: "1.2.14"
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-enterprise-infra-planner/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-kubernetes/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-kubernetes/azure-kubernetes-app-deploy/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-kubernetes/azure-kubernetes-automatic-readiness/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-kusto/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-messaging/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-prepare/SKILL.md
Week of Nov 2, 2026 · +1 / −1 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
- 7 version: "1.3.8"
+ 7 version: "1.3.9"
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-quotas/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-reliability/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-resource-lookup/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-resource-visualizer/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-storage/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-upgrade/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/azure-validate/SKILL.md
Week of Nov 2, 2026 · +1 / −1 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
- 7 version: "1.2.3"
+ 7 version: "1.2.4"
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/discover-azure-skills/SKILL.md
Week of Nov 2, 2026 · +1 / −1 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
- 7 version: "1.0.1"
+ 7 version: "1.0.2"
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/entra-agent-id/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/entra-app-registration/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/microsoft-foundry/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/microsoft-foundry/finetuning/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/microsoft-foundry/models/deploy-model/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/microsoft-foundry/models/deploy-model/capacity/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/microsoft-foundry/models/deploy-model/customize/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/microsoft-foundry/models/deploy-model/preset/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
skills/python-appservice-deploy/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
e484244aad82 → 3c89228484f4
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → e484244aad82
No earlier version was observed for comparison.
View on GitHubAdd to my skills
Verified commit 3c89228484f4a9241d255ec7c703976d13277c2d
git clone --filter=blob:none --no-checkout https://github.com/microsoft/azure-skills.git .hotskills/microsoft-azure-skills && git -C .hotskills/microsoft-azure-skills checkout --detach 3c89228484f4a9241d255ec7c703976d13277c2d
# Copy each selected skill directory from .hotskills/microsoft-azure-skills into .claude/skills/<skill-name>/git clone --filter=blob:none --no-checkout https://github.com/microsoft/azure-skills.git .hotskills/microsoft-azure-skills && git -C .hotskills/microsoft-azure-skills checkout --detach 3c89228484f4a9241d255ec7c703976d13277c2d
# Copy each selected skill directory from .hotskills/microsoft-azure-skills into .gemini/skills/<skill-name>/1.6kGitHub stars
18stars in 7 days
38skills in this repository
24commits in 30 days
Heat
6.1- Star growth, last 7 daysAhead of 86% of tracked repositories
- Star growth, last 24 hoursAhead of 69% of tracked repositories
- Rank movement, last 7 daysAhead of 26% of tracked repositories
- Commits, last 30 daysAhead of 85% of tracked repositories
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekAhead of 0% of tracked repositories
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
Individual skills in this repository
- airunway-aks-setup
skills/airunway-aks-setup - appinsights-instrumentation
skills/appinsights-instrumentation - azure-ai
skills/azure-ai - azure-aigateway
skills/azure-aigateway - azure-app-onboard
skills/azure-app-onboard - azure-app-onboard-prereq
skills/azure-app-onboard-prereq - deploy
skills/azure-app-onboard/deploy - prepare
skills/azure-app-onboard/prepare - scaffold
skills/azure-app-onboard/scaffold - azure-cloud-migrate
skills/azure-cloud-migrate - azure-compliance
skills/azure-compliance - azure-compute
skills/azure-compute - azure-deploy
skills/azure-deploy - azure-diagnostics
skills/azure-diagnostics - azure-enterprise-infra-planner
skills/azure-enterprise-infra-planner - azure-kubernetes
skills/azure-kubernetes - azure-kubernetes-app-deploy
skills/azure-kubernetes/azure-kubernetes-app-deploy - azure-kubernetes-automatic-readiness
skills/azure-kubernetes/azure-kubernetes-automatic-readiness - azure-kusto
skills/azure-kusto - azure-messaging
skills/azure-messaging - azure-prepare
skills/azure-prepare - azure-quotas
skills/azure-quotas - azure-reliability
skills/azure-reliability - azure-resource-lookup
skills/azure-resource-lookup - azure-resource-visualizer
skills/azure-resource-visualizer - azure-storage
skills/azure-storage - azure-upgrade
skills/azure-upgrade - azure-validate
skills/azure-validate - discover-azure-skills
skills/discover-azure-skills - entra-agent-id
skills/entra-agent-id - entra-app-registration
skills/entra-app-registration - microsoft-foundry
skills/microsoft-foundry - finetuning
skills/microsoft-foundry/finetuning - deploy-model
skills/microsoft-foundry/models/deploy-model - capacity
skills/microsoft-foundry/models/deploy-model/capacity - customize
skills/microsoft-foundry/models/deploy-model/customize - preset
skills/microsoft-foundry/models/deploy-model/preset - python-appservice-deploy
skills/python-appservice-deploy
How it works
airunway-aks-setup
When your agent uses it
Set up AI Runway on AKS — from bare cluster to running model. Covers cluster verification, controller install, GPU assessment, provider setup, and first deployment. WHEN: "setup AI Runway", "onboard AKS cluster", "install AI Runway", "airunway setup", "deploy model to AKS", "GPU inference on AKS", "KAITO setup on AKS", "run LLM on AKS", "vLLM on AKS", "set up model serving on AKS", "AI Runway controller".
What it loads into context
Frontmatter
158 tokensAlways available to the agent
SKILL.md
1,104 tokensWhen the skill is activated
Reference documents
1,806,895 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Prerequisites
- Quick Reference
- When to Use This Skill
- GPU setup versus Day-2 incidents
- MCP Tools
- Rules
- Steps
- Error Handling
Scripts executed separately
../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/collect-azure-network-info.ps1../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/collect-azure-network-info.sh../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/create-capture.ps1../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/create-capture.sh../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/generate-test-traffic.ps1../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/generate-test-traffic.sh../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/retrieve-captures.ps1../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/retrieve-captures.sh../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/run-capture.sh../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/setup-capture-configmap.ps1../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/setup-capture-configmap.sh../../.github/plugins/aks-skills/skills/aks-troubleshooting/scripts/cluster-snapshot.sh../../.github/plugins/aks-skills/skills/aks-troubleshooting/scripts/pod-deep-dive.sh../../.github/plugins/aks-skills/skills/azure-search-nav/references/Invoke-PortalSearchNav.ps1../../.github/plugins/azure-skills/skills/appinsights-instrumentation/scripts/appinsights.ps1../../.github/plugins/azure-skills/skills/azure-ai/scripts/analyze-speech-sdk-log.mjs../../.github/plugins/azure-skills/skills/azure-ai/scripts/analyze-speech-sdk-log.ps1../../.github/plugins/azure-skills/skills/azure-ai/scripts/analyze-speech-sdk-log.sh../../.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/prereq-schemas.ts../../.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/session-schemas.ts../../.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/deploy-schemas.ts../../.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/prepare-schemas.ts../../.github/plugins/azure-skills/skills/azure-app-onboard/references/session-schemas.ts../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/scaffold-schemas.ts../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/scripts/scaffold-conformance.ps1../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/scripts/scaffold-conformance.sh../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/scripts/apply-migrations.ps1../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/scripts/apply-migrations.sh../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/scripts/grant-and-migrate.ps1../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/scripts/grant-and-migrate.sh../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/aks-baseline.ps1../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/aks-baseline.sh../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/appservice-diagnostics.ps1../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/appservice-diagnostics.sh../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/containerapp-diagnostics.ps1../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/containerapp-diagnostics.sh../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/pod-evidence.ps1../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/pod-evidence.sh../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/run-ig.ps1../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/run-ig.sh../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/test-messaging-connectivity.ps1../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/test-messaging-connectivity.sh../../.github/plugins/azure-skills/skills/azure-prepare/references/services/sql-database/scripts/grant-sql-access.ps1../../.github/plugins/azure-skills/skills/azure-prepare/references/services/sql-database/scripts/grant-sql-access.sh../../.github/plugins/azure-skills/skills/azure-quotas/scripts/check-quota.ps1../../.github/plugins/azure-skills/skills/azure-quotas/scripts/check-quota.sh../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/scripts/upgrade_bom.py../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/azd/scripts/set-aspire-aca-env.ps1../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/azd/scripts/set-aspire-aca-env.sh../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/scripts/validate-deployment.ps1../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/scripts/validate-deployment.sh../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/terraform/scripts/validate-terraform.ps1../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/terraform/scripts/validate-terraform.sh../../.github/plugins/azure-skills/skills/azure-validate/references/scripts/scan-aspire-functions-secrets.ps1../../.github/plugins/azure-skills/skills/azure-validate/references/scripts/scan-aspire-functions-secrets.sh../../.github/plugins/azure-skills/skills/azure-validate/references/scripts/workflow.ps1../../.github/plugins/azure-skills/skills/azure-validate/references/scripts/workflow.sh../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/calibrate_grader.py../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/check_training.py../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/cleanup.py../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/common.py../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/convert_dataset.py../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/deploy_model.py../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/evaluate_model.py../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/generate_distillation_data.py../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/monitor_training.py../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/score_dataset.py../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/submit_training.py../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/validate/__init__.py../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/validate/data_stats.py../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/validate/validate_dpo.py../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/validate/validate_rft.py../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/validate/validate_sft.py../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/check-copilot-app-entry.ps1../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/check-copilot-app-entry.sh../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/resolve-project-id.ps1../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/resolve-project-id.sh../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/smoke-test-voice.ps1../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/smoke-test-voice.sh../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/smoke_test_voice.py../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/verify-environment.ps1../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/verify-environment.sh../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/scripts/get-catalog-inputs.ps1../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/scripts/get-catalog-inputs.sh../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.ps1../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.sh../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/capacity/scripts/query_capacity.ps1../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/capacity/scripts/query_capacity.sh../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/scripts/generate_deployment_url.ps1../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/scripts/generate_deployment_url.sh../../.github/plugins/azure-skills/skills/microsoft-foundry/scripts/check-and-setup-dependencies.ps1../../.github/plugins/azure-skills/skills/microsoft-foundry/scripts/check-and-setup-dependencies.sh../../.github/plugins/azure-skills/skills/python-appservice-deploy/scripts/generate-app-name.ps1../../.github/plugins/azure-skills/skills/python-appservice-deploy/scripts/generate-app-name.sh../../.github/plugins/azure-skills/skills/python-appservice-deploy/scripts/retry-az-create.ps1../../.github/plugins/azure-skills/skills/python-appservice-deploy/scripts/retry-az-create.sh../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_blob_observation.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_blob_source_read.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_bootstrap_io.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_cleanup_dependencies.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_cleanup_receipts.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_common.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_document_adapters.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_document_limits.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_embedding.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_file_inventory.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_file_source_config.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_indexer_observation.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_initial_prompt.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_private_json.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_progress.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_prompt_read.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_search_read.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_source_readback.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/blob_inventory.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/blob_recheck.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/blob_source.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/bootstrap_azure.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/cleanup_plan.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/cu_ingestion_auth.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/document_assess.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/file_cu_canary.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/file_cu_mi.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/file_ingest.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/file_source.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/file_upload.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/hosted_connect.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/knowledge_base_retrieve.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/model_discovery.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/private_artifacts.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/prompt_cleanup.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/prompt_connect.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/retrieval_verify.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/search_intake.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/search_reconcile.py../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/source_vector.py../appinsights-instrumentation/scripts/appinsights.ps1../azure-ai/scripts/analyze-speech-sdk-log.mjs../azure-ai/scripts/analyze-speech-sdk-log.ps1../azure-ai/scripts/analyze-speech-sdk-log.sh../azure-app-onboard-prereq/references/prereq-schemas.ts../azure-app-onboard-prereq/references/session-schemas.ts../azure-app-onboard/deploy/references/deploy-schemas.ts../azure-app-onboard/prepare/references/prepare-schemas.ts../azure-app-onboard/references/session-schemas.ts../azure-app-onboard/scaffold/references/scaffold-schemas.ts../azure-app-onboard/scaffold/scripts/scaffold-conformance.ps1../azure-app-onboard/scaffold/scripts/scaffold-conformance.sh../azure-deploy/references/recipes/azd/scripts/apply-migrations.ps1../azure-deploy/references/recipes/azd/scripts/apply-migrations.sh../azure-deploy/references/recipes/azd/scripts/grant-and-migrate.ps1../azure-deploy/references/recipes/azd/scripts/grant-and-migrate.sh../azure-diagnostics/scripts/aks-baseline.ps1../azure-diagnostics/scripts/aks-baseline.sh../azure-diagnostics/scripts/appservice-diagnostics.ps1../azure-diagnostics/scripts/appservice-diagnostics.sh../azure-diagnostics/scripts/containerapp-diagnostics.ps1../azure-diagnostics/scripts/containerapp-diagnostics.sh../azure-diagnostics/scripts/pod-evidence.ps1../azure-diagnostics/scripts/pod-evidence.sh../azure-diagnostics/scripts/run-ig.ps1../azure-diagnostics/scripts/run-ig.sh../azure-diagnostics/scripts/test-messaging-connectivity.ps1../azure-diagnostics/scripts/test-messaging-connectivity.sh../azure-prepare/references/services/sql-database/scripts/grant-sql-access.ps1../azure-prepare/references/services/sql-database/scripts/grant-sql-access.sh../azure-quotas/scripts/check-quota.ps1../azure-quotas/scripts/check-quota.sh../azure-upgrade/references/languages/java/scripts/upgrade_bom.py../azure-validate/references/recipes/azd/scripts/set-aspire-aca-env.ps1../azure-validate/references/recipes/azd/scripts/set-aspire-aca-env.sh../azure-validate/references/recipes/scripts/validate-deployment.ps1../azure-validate/references/recipes/scripts/validate-deployment.sh../azure-validate/references/recipes/terraform/scripts/validate-terraform.ps1../azure-validate/references/recipes/terraform/scripts/validate-terraform.sh../azure-validate/references/scripts/scan-aspire-functions-secrets.ps1../azure-validate/references/scripts/scan-aspire-functions-secrets.sh../azure-validate/references/scripts/workflow.ps1../azure-validate/references/scripts/workflow.sh../microsoft-foundry/finetuning/scripts/calibrate_grader.py../microsoft-foundry/finetuning/scripts/check_training.py../microsoft-foundry/finetuning/scripts/cleanup.py../microsoft-foundry/finetuning/scripts/common.py../microsoft-foundry/finetuning/scripts/convert_dataset.py../microsoft-foundry/finetuning/scripts/deploy_model.py../microsoft-foundry/finetuning/scripts/evaluate_model.py../microsoft-foundry/finetuning/scripts/generate_distillation_data.py../microsoft-foundry/finetuning/scripts/monitor_training.py../microsoft-foundry/finetuning/scripts/score_dataset.py../microsoft-foundry/finetuning/scripts/submit_training.py../microsoft-foundry/finetuning/scripts/validate/__init__.py../microsoft-foundry/finetuning/scripts/validate/data_stats.py../microsoft-foundry/finetuning/scripts/validate/validate_dpo.py../microsoft-foundry/finetuning/scripts/validate/validate_rft.py../microsoft-foundry/finetuning/scripts/validate/validate_sft.py
Files
../../.claude-plugin/marketplace.jsonasset3,699 bytes../../.claude-plugin/plugin.jsonasset747 bytes../../.claude-plugin/plugin.jsonasset747 bytes../../.github/plugins/aks-skills/.claude-plugin/plugin.jsonasset713 bytes../../.github/plugins/aks-skills/.mcp.jsonasset22 bytes../../.github/plugins/aks-skills/com.github.copilot/hooks/hooks.jsonasset1,095 bytes../../.github/plugins/aks-skills/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/aks-skills/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/aks-skills/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/aks-skills/skills/aks-cost-optimization/SKILL.mddoc1,880 bytes../../.github/plugins/aks-skills/skills/aks-cost-optimization/references/aks-bin-packing.mddoc3,846 bytes../../.github/plugins/aks-skills/skills/aks-cost-optimization/references/aks-nap.mddoc3,237 bytes../../.github/plugins/aks-skills/skills/aks-cost-optimization/references/aks-savings-plans-reservations.mddoc3,612 bytes../../.github/plugins/aks-skills/skills/aks-cost-optimization/references/aks-storage-optimization.mddoc3,628 bytes../../.github/plugins/aks-skills/skills/aks-cost-optimization/references/bin-packing-evidence.mddoc3,926 bytes../../.github/plugins/aks-skills/skills/aks-cost-optimization/references/nap-decisions.mddoc3,341 bytes../../.github/plugins/aks-skills/skills/aks-cost-optimization/references/nap-enablement-and-rollback.mddoc1,886 bytes../../.github/plugins/aks-skills/skills/aks-cost-optimization/references/nap-evidence-collection.mddoc3,996 bytes../../.github/plugins/aks-skills/skills/aks-cost-optimization/references/node-scaling-bottlenecks.mddoc3,930 bytes../../.github/plugins/aks-skills/skills/aks-cost-optimization/references/self-hosted-karpenter-migration.mddoc2,143 bytes../../.github/plugins/aks-skills/skills/aks-cost-optimization/references/storage-container-insights.mddoc2,922 bytes../../.github/plugins/aks-skills/skills/aks-cost-optimization/references/storage-decisions.mddoc3,388 bytes../../.github/plugins/aks-skills/skills/aks-cost-optimization/references/storage-metrics.mddoc3,765 bytes../../.github/plugins/aks-skills/skills/aks-gpu-inference/SKILL.mddoc3,041 bytes../../.github/plugins/aks-skills/skills/aks-gpu-inference/references/gpu-cost-and-scaling.mddoc1,616 bytes../../.github/plugins/aks-skills/skills/aks-gpu-inference/references/gpu-observability.mddoc2,721 bytes../../.github/plugins/aks-skills/skills/aks-gpu-inference/references/gpu-scheduling.mddoc3,306 bytes../../.github/plugins/aks-skills/skills/aks-gpu-inference/references/kaito-workspaces.mddoc1,802 bytes../../.github/plugins/aks-skills/skills/aks-known-issues/SKILL.mddoc1,930 bytes../../.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.mddoc6,922 bytes../../.github/plugins/aks-skills/skills/aks-network-capture/SKILL.mddoc2,939 bytes../../.github/plugins/aks-skills/skills/aks-network-capture/references/capture-authorization.mddoc1,484 bytes../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/collect-azure-network-info.ps1runs8,078 bytes../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/collect-azure-network-info.shruns7,164 bytes../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/create-capture.ps1runs11,781 bytes../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/create-capture.shruns12,649 bytes../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/generate-test-traffic.ps1runs5,556 bytes../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/generate-test-traffic.shruns6,196 bytes../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/retrieve-captures.ps1runs9,602 bytes../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/retrieve-captures.shruns8,319 bytes../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/run-capture.shruns2,473 bytes../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/setup-capture-configmap.ps1runs1,699 bytes../../.github/plugins/aks-skills/skills/aks-network-capture/scripts/setup-capture-configmap.shruns1,278 bytes../../.github/plugins/aks-skills/skills/aks-troubleshooting/SKILL.mddoc12,762 bytes../../.github/plugins/aks-skills/skills/aks-troubleshooting/general-diagnostics.mddoc2,863 bytes../../.github/plugins/aks-skills/skills/aks-troubleshooting/load-balancer-and-ingress.mddoc7,663 bytes../../.github/plugins/aks-skills/skills/aks-troubleshooting/network-policy.mddoc1,225 bytes../../.github/plugins/aks-skills/skills/aks-troubleshooting/networking.mddoc14,351 bytes../../.github/plugins/aks-skills/skills/aks-troubleshooting/node-issues.mddoc15,829 bytes../../.github/plugins/aks-skills/skills/aks-troubleshooting/pod-failures.mddoc8,195 bytes../../.github/plugins/aks-skills/skills/aks-troubleshooting/references/api-server-webhooks-tunnel.mddoc6,454 bytes../../.github/plugins/aks-skills/skills/aks-troubleshooting/references/auto-upgrade-evidence.mddoc4,487 bytes../../.github/plugins/aks-skills/skills/aks-troubleshooting/references/azure-mcp.mddoc2,566 bytes../../.github/plugins/aks-skills/skills/aks-troubleshooting/references/azure-network-path.mddoc7,738 bytes../../.github/plugins/aks-skills/skills/aks-troubleshooting/references/command-flows.mddoc3,353 bytes../../.github/plugins/aks-skills/skills/aks-troubleshooting/references/inspektor-gadget.mddoc8,311 bytes../../.github/plugins/aks-skills/skills/aks-troubleshooting/references/report-template.mddoc1,145 bytes../../.github/plugins/aks-skills/skills/aks-troubleshooting/references/structured-input-modes.mddoc3,851 bytes../../.github/plugins/aks-skills/skills/aks-troubleshooting/references/symptom-map.mddoc15,145 bytes../../.github/plugins/aks-skills/skills/aks-troubleshooting/scripts/cluster-snapshot.shruns3,860 bytes../../.github/plugins/aks-skills/skills/aks-troubleshooting/scripts/pod-deep-dive.shruns3,701 bytes../../.github/plugins/aks-skills/skills/aks-troubleshooting/spot-and-zone-issues.mddoc2,608 bytes../../.github/plugins/aks-skills/skills/aks-troubleshooting/upgrade-operations.mddoc4,601 bytes../../.github/plugins/aks-skills/skills/azure-search-nav/SKILL.mddoc2,397 bytes../../.github/plugins/aks-skills/skills/azure-search-nav/references/Invoke-PortalSearchNav.ps1runs9,812 bytes../../.github/plugins/aks-skills/skills/azure-search-nav/references/README.mddoc3,867 bytes../../.github/plugins/aks-skills/skills/azure-search-nav/references/resource-types.jsonasset4,418 bytes../../.github/plugins/azure-advisor/.claude-plugin/plugin.jsonasset616 bytes../../.github/plugins/azure-advisor/.mcp.jsonasset137 bytes../../.github/plugins/azure-advisor/com.github.copilot/hooks/hooks.jsonasset1,095 bytes../../.github/plugins/azure-advisor/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/azure-advisor/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/azure-advisor/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/azure-advisor/skills/azure-advisor-actionability/SKILL.mddoc1,972 bytes../../.github/plugins/azure-advisor/skills/azure-advisor/SKILL.mddoc1,531 bytes../../.github/plugins/azure-cost/.claude-plugin/plugin.jsonasset684 bytes../../.github/plugins/azure-cost/.mcp.jsonasset207 bytes../../.github/plugins/azure-cost/com.github.copilot/hooks/hooks.jsonasset1,095 bytes../../.github/plugins/azure-cost/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/azure-cost/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/azure-cost/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/azure-cost/skills/cost-analysis/SKILL.mddoc1,942 bytes../../.github/plugins/azure-cost/skills/cost-analysis/references/ai-cost-analysis.mddoc2,169 bytes../../.github/plugins/azure-cost/skills/cost-analysis/references/aks-anomaly.mddoc4,635 bytes../../.github/plugins/azure-cost/skills/cost-analysis/references/aks-cost-analysis.mddoc1,531 bytes../../.github/plugins/azure-cost/skills/cost-analysis/references/aks-enablement.mddoc1,458 bytes../../.github/plugins/azure-cost/skills/cost-analysis/references/cost-investigation.mddoc3,247 bytes../../.github/plugins/azure-cost/skills/cost-analysis/references/cost-query/dimensions-by-scope.mddoc1,534 bytes../../.github/plugins/azure-cost/skills/cost-analysis/references/cost-query/error-handling.mddoc1,557 bytes../../.github/plugins/azure-cost/skills/cost-analysis/references/cost-query/examples.mddoc1,183 bytes../../.github/plugins/azure-cost/skills/cost-analysis/references/cost-query/guardrails.mddoc1,694 bytes../../.github/plugins/azure-cost/skills/cost-analysis/references/cost-query/request-body-schema.mddoc1,448 bytes../../.github/plugins/azure-cost/skills/cost-analysis/references/cost-query/workflow.mddoc2,640 bytes../../.github/plugins/azure-cost/skills/cost-analysis/references/tools-and-safety.mddoc2,288 bytes../../.github/plugins/azure-cost/skills/cost-estimation/SKILL.mddoc1,931 bytes../../.github/plugins/azure-cost/skills/cost-estimation/references/cost-forecast/error-handling.mddoc1,362 bytes../../.github/plugins/azure-cost/skills/cost-estimation/references/cost-forecast/examples.mddoc772 bytes../../.github/plugins/azure-cost/skills/cost-estimation/references/cost-forecast/guardrails.mddoc884 bytes../../.github/plugins/azure-cost/skills/cost-estimation/references/cost-forecast/request-body-schema.mddoc1,018 bytes../../.github/plugins/azure-cost/skills/cost-estimation/references/cost-forecast/workflow.mddoc1,909 bytes../../.github/plugins/azure-cost/skills/cost-estimation/references/pricing-estimate.mddoc2,002 bytes../../.github/plugins/azure-cost/skills/cost-estimation/references/tool-fallback.mddoc1,154 bytes../../.github/plugins/azure-cost/skills/cost-governance/SKILL.mddoc1,889 bytes../../.github/plugins/azure-cost/skills/cost-governance/references/budget-health.mddoc1,930 bytes../../.github/plugins/azure-cost/skills/cost-governance/references/budget-setup.mddoc2,609 bytes../../.github/plugins/azure-cost/skills/cost-governance/references/guardrails.mddoc1,870 bytes../../.github/plugins/azure-cost/skills/cost-governance/references/tool-fallback.mddoc1,251 bytes../../.github/plugins/azure-cost/skills/cost-optimization/SKILL.mddoc1,934 bytes../../.github/plugins/azure-cost/skills/cost-optimization/references/commitments.mddoc3,005 bytes../../.github/plugins/azure-cost/skills/cost-optimization/references/optimization.mddoc3,042 bytes../../.github/plugins/azure-cost/skills/cost-optimization/references/report-template.mddoc1,762 bytes../../.github/plugins/azure-cost/skills/cost-optimization/references/resource-graph.mddoc3,416 bytes../../.github/plugins/azure-cost/skills/cost-optimization/references/services/redis.mddoc2,154 bytes../../.github/plugins/azure-cost/skills/cost-optimization/references/services/storage-lifecycle.mddoc1,738 bytes../../.github/plugins/azure-cost/skills/cost-optimization/references/services/storage.mddoc3,881 bytes../../.github/plugins/azure-cost/skills/cost-optimization/references/tool-fallback.mddoc1,454 bytes../../.github/plugins/azure-kusto-graph-skills/.claude-plugin/plugin.jsonasset635 bytes../../.github/plugins/azure-kusto-graph-skills/.mcp.jsonasset138 bytes../../.github/plugins/azure-kusto-graph-skills/com.github.copilot/hooks/hooks.jsonasset1,095 bytes../../.github/plugins/azure-kusto-graph-skills/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/azure-kusto-graph-skills/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/azure-kusto-graph-skills/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-graph/SKILL.mddoc19,229 bytes../../.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-graph/references/EXAMPLES.mddoc2,975 bytes../../.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-graph/references/KUSTO_EXPLORER_LAUNCH.mddoc2,659 bytes../../.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-graph/references/SCENARIOS.mddoc3,853 bytes../../.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql-graph/SKILL.mddoc19,112 bytes../../.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql-graph/references/DEPLOY_IRQL_FUNCTIONS.mddoc11,414 bytes../../.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql-graph/references/EXAMPLES.mddoc3,642 bytes../../.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql-graph/references/KUSTO_EXPLORER_LAUNCH.mddoc2,659 bytes../../.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql/SKILL.mddoc10,489 bytes../../.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql/references/EXAMPLES.mddoc2,284 bytes../../.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql/references/KUSTO_EXPLORER_LAUNCH.mddoc2,659 bytes../../.github/plugins/azure-local-skills/.claude-plugin/plugin.jsonasset796 bytes../../.github/plugins/azure-local-skills/.claude-plugin/plugin.jsonasset796 bytes../../.github/plugins/azure-local-skills/.mcp.jsonasset178 bytes../../.github/plugins/azure-local-skills/com.github.copilot/hooks/hooks.jsonasset1,095 bytes../../.github/plugins/azure-local-skills/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/azure-local-skills/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/azure-local-skills/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/azure-local-skills/skills/azure-local-multi-rack/SKILL.mddoc3,814 bytes../../.github/plugins/azure-local-skills/skills/azure-local-multi-rack/references/cli-and-prereqs.mddoc2,524 bytes../../.github/plugins/azure-local-skills/skills/azure-local-multi-rack/references/docs-map.mddoc4,054 bytes../../.github/plugins/azure-local-skills/skills/azure-local-multi-rack/references/resource-types.mddoc2,791 bytes../../.github/plugins/azure-local-skills/skills/azure-local-multi-rack/references/safety-rules.mddoc2,345 bytes../../.github/plugins/azure-local-skills/skills/azure-local-multi-rack/workflows/networking/networking.mddoc3,000 bytes../../.github/plugins/azure-local-skills/skills/azure-local-multi-rack/workflows/operate-and-monitor/operate-and-monitor.mddoc2,976 bytes../../.github/plugins/azure-local-skills/skills/azure-local-multi-rack/workflows/plan-and-deploy/plan-and-deploy.mddoc3,629 bytes../../.github/plugins/azure-local-skills/skills/azure-local-multi-rack/workflows/workload-management/workload-management.mddoc2,637 bytes../../.github/plugins/azure-local-skills/skills/azure-local/SKILL.mddoc3,408 bytes../../.github/plugins/azure-local-skills/skills/azure-local/references/docs-map.mddoc7,770 bytes../../.github/plugins/azure-local-skills/skills/azure-local/references/mcp-and-cli-tools.mddoc3,497 bytes../../.github/plugins/azure-local-skills/skills/azure-local/references/resource-types.mddoc2,550 bytes../../.github/plugins/azure-local-skills/skills/azure-local/references/safety-rules.mddoc2,133 bytes../../.github/plugins/azure-local-skills/skills/azure-local/workflows/networking-and-security/networking-and-security.mddoc3,574 bytes../../.github/plugins/azure-local-skills/skills/azure-local/workflows/operate-and-update/operate-and-update.mddoc3,681 bytes../../.github/plugins/azure-local-skills/skills/azure-local/workflows/plan-and-deploy/plan-and-deploy.mddoc4,422 bytes../../.github/plugins/azure-local-skills/skills/azure-local/workflows/troubleshooting/troubleshooting.mddoc3,750 bytes../../.github/plugins/azure-local-skills/skills/azure-local/workflows/workload-management/workload-management.mddoc3,508 bytes../../.github/plugins/azure-skills/.claude-plugin/plugin.jsonasset747 bytes../../.github/plugins/azure-skills/.mcp.jsonasset138 bytes../../.github/plugins/azure-skills/com.github.copilot/hooks/hooks.jsonasset1,095 bytes../../.github/plugins/azure-skills/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/azure-skills/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/azure-skills/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/azure-skills/skills/airunway-aks-setup/SKILL.mddoc4,501 bytes../../.github/plugins/azure-skills/skills/airunway-aks-setup/references/gpu-profiles.mddoc2,566 bytes../../.github/plugins/azure-skills/skills/airunway-aks-setup/references/model-sizing.mddoc1,878 bytes../../.github/plugins/azure-skills/skills/airunway-aks-setup/references/optional-gpu-day2.mddoc1,085 bytes../../.github/plugins/azure-skills/skills/airunway-aks-setup/references/powershell-notes.mddoc3,218 bytes../../.github/plugins/azure-skills/skills/airunway-aks-setup/references/steps/step-1-verify.mddoc1,972 bytes../../.github/plugins/azure-skills/skills/airunway-aks-setup/references/steps/step-2-controller.mddoc1,075 bytes../../.github/plugins/azure-skills/skills/airunway-aks-setup/references/steps/step-3-gpu.mddoc834 bytes../../.github/plugins/azure-skills/skills/airunway-aks-setup/references/steps/step-4-provider.mddoc2,059 bytes../../.github/plugins/azure-skills/skills/airunway-aks-setup/references/steps/step-5-deploy.mddoc3,648 bytes../../.github/plugins/azure-skills/skills/airunway-aks-setup/references/steps/step-6-summary.mddoc1,745 bytes../../.github/plugins/azure-skills/skills/airunway-aks-setup/references/troubleshooting.mddoc1,566 bytes../../.github/plugins/azure-skills/skills/appinsights-instrumentation/LICENSE.txtdoc1,078 bytes../../.github/plugins/azure-skills/skills/appinsights-instrumentation/SKILL.mddoc3,794 bytes../../.github/plugins/azure-skills/skills/appinsights-instrumentation/examples/appinsights.bicepasset759 bytes../../.github/plugins/azure-skills/skills/appinsights-instrumentation/references/aspnetcore.mddoc1,717 bytes../../.github/plugins/azure-skills/skills/appinsights-instrumentation/references/auto.mddoc891 bytes../../.github/plugins/azure-skills/skills/appinsights-instrumentation/references/container-apps.mddoc7,367 bytes../../.github/plugins/azure-skills/skills/appinsights-instrumentation/references/nodejs.mddoc1,815 bytes../../.github/plugins/azure-skills/skills/appinsights-instrumentation/references/python.mddoc1,812 bytes../../.github/plugins/azure-skills/skills/appinsights-instrumentation/references/sdk/azure-monitor-opentelemetry-exporter-java.mddoc1,173 bytes../../.github/plugins/azure-skills/skills/appinsights-instrumentation/references/sdk/azure-monitor-opentelemetry-exporter-py.mddoc963 bytes../../.github/plugins/azure-skills/skills/appinsights-instrumentation/references/sdk/azure-monitor-opentelemetry-py.mddoc880 bytes../../.github/plugins/azure-skills/skills/appinsights-instrumentation/references/sdk/azure-monitor-opentelemetry-ts.mddoc986 bytes../../.github/plugins/azure-skills/skills/appinsights-instrumentation/scripts/appinsights.ps1runs1,221 bytes../../.github/plugins/azure-skills/skills/azure-ai/SKILL.mddoc3,681 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/auth-best-practices.mddoc6,207 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/sdk/azure-ai-contentsafety-java.mddoc1,401 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/sdk/azure-ai-contentsafety-py.mddoc1,361 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/sdk/azure-ai-contentsafety-ts.mddoc1,413 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/sdk/azure-ai-document-intelligence-dotnet.mddoc1,456 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/sdk/azure-ai-document-intelligence-ts.mddoc1,573 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/sdk/azure-ai-openai-dotnet.mddoc1,419 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/sdk/azure-ai-transcription-py.mddoc1,210 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/sdk/azure-ai-translation-text-py.mddoc1,345 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/sdk/azure-ai-translation-ts.mddoc1,369 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/sdk/azure-ai-vision-imageanalysis-java.mddoc1,325 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/sdk/azure-ai-vision-imageanalysis-py.mddoc1,297 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/sdk/azure-search-documents-dotnet.mddoc1,334 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/sdk/azure-search-documents-py.mddoc1,561 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/sdk/azure-search-documents-ts.mddoc1,259 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/speech/azure-checks.mddoc3,534 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/speech/collection.mddoc3,608 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/speech/diagnostics.mddoc3,999 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/speech/interpretation.mddoc3,875 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/speech/logging-apis.mddoc3,930 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/speech/output.mddoc3,548 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/speech/source-contract.mddoc3,885 bytes../../.github/plugins/azure-skills/skills/azure-ai/references/speech/without-node.mddoc1,970 bytes../../.github/plugins/azure-skills/skills/azure-ai/scripts/analyze-speech-sdk-log.mjsruns18,156 bytes../../.github/plugins/azure-skills/skills/azure-ai/scripts/analyze-speech-sdk-log.ps1runs1,411 bytes../../.github/plugins/azure-skills/skills/azure-ai/scripts/analyze-speech-sdk-log.shruns1,342 bytes../../.github/plugins/azure-skills/skills/azure-aigateway/SKILL.mddoc5,029 bytes../../.github/plugins/azure-skills/skills/azure-aigateway/references/auth-best-practices.mddoc6,207 bytes../../.github/plugins/azure-skills/skills/azure-aigateway/references/patterns.mddoc6,786 bytes../../.github/plugins/azure-skills/skills/azure-aigateway/references/policies.mddoc9,375 bytes../../.github/plugins/azure-skills/skills/azure-aigateway/references/sdk/azure-ai-contentsafety-py.mddoc1,361 bytes../../.github/plugins/azure-skills/skills/azure-aigateway/references/sdk/azure-ai-contentsafety-ts.mddoc1,413 bytes../../.github/plugins/azure-skills/skills/azure-aigateway/references/sdk/azure-mgmt-apimanagement-dotnet.mddoc1,310 bytes../../.github/plugins/azure-skills/skills/azure-aigateway/references/sdk/azure-mgmt-apimanagement-py.mddoc1,028 bytes../../.github/plugins/azure-skills/skills/azure-aigateway/references/troubleshooting.mddoc7,881 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard-prereq/SKILL.mddoc10,243 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/build-check.mddoc5,798 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/cloud-sdk-migration.mddoc2,219 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/completeness-check.mddoc4,530 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/component-mapping.mddoc4,724 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/dependency-compatibility.mddoc10,220 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/deployability-check.mddoc3,153 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/prereq-artifacts.mddoc2,404 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/prereq-schemas.tsruns4,301 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/readiness-gate.mddoc5,528 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/remediation-protocol.mddoc3,641 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/session-protocol.mddoc7,581 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/session-schemas.tsruns5,373 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/subagent-starter-scaffold.mddoc4,093 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/subscription-resolution.mddoc1,888 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/zero-code-path.mddoc3,715 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/SKILL.mddoc6,809 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/deploy/SKILL.mddoc7,636 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/approval-gate-template.mddoc2,988 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/blocked-patterns.mddoc5,883 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/code-deployment-appservice.mddoc4,735 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/code-deployment-container-apps.mddoc8,648 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/code-deployment-swa.mddoc5,828 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/database-post-deploy.mddoc4,578 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/deploy-checklist-template.mddoc10,385 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/deploy-safety.mddoc4,640 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/deploy-schemas.tsruns3,558 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/error-classification.mddoc3,732 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/health-check-patterns.mddoc5,633 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/mcp-tools.mddoc5,642 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/portal-links.mddoc3,142 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/preflight-checks.mddoc4,470 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/subagent-preflight.mddoc5,210 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/prepare/SKILL.mddoc6,595 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/deploy-strategy.mddoc6,996 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/mcp-tools.mddoc5,695 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/naming-patterns.mddoc4,713 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/prepare-schemas.tsruns7,154 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/pricing-guide-services.mddoc8,646 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/pricing-guide.mddoc4,085 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/service-mapping.mddoc8,706 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/sku-matrix.mddoc3,291 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/sku-quota-validation.mddoc9,205 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/subagent-pricing.mddoc2,557 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/subagent-quota.mddoc3,568 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/validation-rubric.mddoc2,351 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/references/approval-gates.mddoc8,632 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/references/azd-template-routing.mddoc4,832 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/references/handoff-protocol.mddoc8,013 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/references/iac-resources.mddoc2,682 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/references/intent-gathering.mddoc2,289 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/references/mcp-tool-reference.mddoc3,780 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/references/pipeline-rules-runtime.mddoc3,619 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/references/pipeline-rules.mddoc6,492 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/references/session-protocol.mddoc8,198 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/references/session-schemas.tsruns5,298 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/references/subscription-resolution.mddoc2,187 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/SKILL.mddoc14,534 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/bicep-app-service.mddoc5,557 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/bicep-container-apps.mddoc9,508 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/bicep-patterns-data.mddoc4,054 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/bicep-patterns-security.mddoc7,979 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/bicep-patterns.mddoc6,974 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/bicep-swa.mddoc757 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/cicd-pipelines.mddoc325 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/dockerfile-generation.mddoc4,164 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/env-var-secrets.mddoc4,213 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/error-handling.mddoc1,506 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/iac-generation-rules.mddoc6,777 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/mcp-tools.mddoc7,182 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/rbac-roles.mddoc3,942 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/scaffold-healing-rules.mddoc3,409 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/scaffold-schemas.tsruns3,575 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/self-healing.mddoc2,405 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/self-review-checklist.mddoc9,252 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/self-review-procedure.mddoc2,343 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/subagent-iac-gen.mddoc9,749 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/subagent-review.mddoc3,596 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/subagent-validate.mddoc7,325 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/terraform-patterns.mddoc7,037 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/validation-and-manifest.mddoc5,255 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/waf-checklist.mddoc2,330 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/scripts/scaffold-conformance.ps1runs13,131 bytes../../.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/scripts/scaffold-conformance.shruns14,083 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/SKILL.mddoc4,355 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/app-service/app-engine-to-app-service.mddoc7,302 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/app-service/assessment.mddoc5,342 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/app-service/beanstalk-to-app-service.mddoc6,508 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/app-service/code-migration.mddoc5,069 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/app-service/global-rules.mddoc2,911 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/app-service/heroku-to-app-service.mddoc7,728 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/container-apps/assessment-guide.mddoc7,164 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/container-apps/cloudrun-assessment-guide.mddoc2,554 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/container-apps/cloudrun-deployment-guide.mddoc8,117 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/container-apps/cloudrun-to-container-apps.mddoc2,233 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/container-apps/deployment-guide.mddoc9,859 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/container-apps/fargate-assessment-guide.mddoc2,456 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/container-apps/fargate-deployment-guide.mddoc10,351 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/container-apps/fargate-to-container-apps.mddoc4,052 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/container-apps/k8s-to-container-apps.mddoc4,987 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/container-apps/spring-apps-to-aca.mddoc3,858 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/container-apps/spring-assessment-guide.mddoc5,372 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/container-apps/spring-dependency-patterns.mddoc1,180 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/container-apps/spring-deployment-guide.mddoc15,483 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/functions/assessment.mddoc6,454 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/functions/code-migration.mddoc6,121 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/functions/global-rules.mddoc3,403 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/functions/lambda-to-functions.mddoc10,489 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/functions/runtimes/csharp.mddoc5,611 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/functions/runtimes/java.mddoc6,554 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/functions/runtimes/javascript.mddoc8,740 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/functions/runtimes/powershell.mddoc5,112 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/functions/runtimes/python.mddoc6,530 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/functions/runtimes/typescript.mddoc3,592 bytes../../.github/plugins/azure-skills/skills/azure-cloud-migrate/references/workflow-details.mddoc2,388 bytes../../.github/plugins/azure-skills/skills/azure-compliance/SKILL.mddoc3,974 bytes../../.github/plugins/azure-skills/skills/azure-compliance/references/auth-best-practices.mddoc6,207 bytes../../.github/plugins/azure-skills/skills/azure-compliance/references/azqr-recommendations.mddoc5,786 bytes../../.github/plugins/azure-skills/skills/azure-compliance/references/azqr-remediation-patterns.mddoc7,946 bytes../../.github/plugins/azure-skills/skills/azure-compliance/references/azure-keyvault-expiration-audit.mddoc5,152 bytes../../.github/plugins/azure-skills/skills/azure-compliance/references/azure-quick-review.mddoc5,069 bytes../../.github/plugins/azure-skills/skills/azure-compliance/references/azure-resource-graph.mddoc2,697 bytes../../.github/plugins/azure-skills/skills/azure-compliance/references/sdk/azure-keyvault-certificates-rust.mddoc1,013 bytes../../.github/plugins/azure-skills/skills/azure-compliance/references/sdk/azure-keyvault-keys-rust.mddoc1,291 bytes../../.github/plugins/azure-skills/skills/azure-compliance/references/sdk/azure-keyvault-keys-ts.mddoc1,019 bytes../../.github/plugins/azure-skills/skills/azure-compliance/references/sdk/azure-keyvault-py.mddoc1,135 bytes../../.github/plugins/azure-skills/skills/azure-compliance/references/sdk/azure-keyvault-secrets-rust.mddoc1,334 bytes../../.github/plugins/azure-skills/skills/azure-compliance/references/sdk/azure-keyvault-secrets-ts.mddoc1,043 bytes../../.github/plugins/azure-skills/skills/azure-compliance/references/sdk/azure-security-keyvault-keys-dotnet.mddoc1,170 bytes../../.github/plugins/azure-skills/skills/azure-compliance/references/sdk/azure-security-keyvault-keys-java.mddoc1,381 bytes../../.github/plugins/azure-skills/skills/azure-compliance/references/sdk/azure-security-keyvault-secrets-java.mddoc1,517 bytes../../.github/plugins/azure-skills/skills/azure-compute/SKILL.mddoc2,619 bytes../../.github/plugins/azure-skills/skills/azure-compute/references/retail-prices-api.mddoc6,439 bytes../../.github/plugins/azure-skills/skills/azure-compute/references/vm-families.mddoc5,942 bytes../../.github/plugins/azure-skills/skills/azure-compute/references/vm-quotas.mddoc4,191 bytes../../.github/plugins/azure-skills/skills/azure-compute/references/vmss-guide.mddoc6,348 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/capacity-reservation/capacity-reservation.mddoc7,971 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/capacity-reservation/references/association-disassociation.mddoc3,908 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/capacity-reservation/references/capacity-reservation-overview.mddoc6,108 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/essential-machine-management/essential-machine-management.mddoc5,101 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/essential-machine-management/references/emm-enable-flow-portal-guidance.mddoc3,140 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/essential-machine-management/references/emm-enable-flow.mddoc9,429 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/essential-machine-management/references/emm-overview.mddoc2,442 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/essential-machine-management/references/emm-prerequisites.mddoc3,544 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/examples/bicep/README.mddoc1,681 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/examples/bicep/main.bicepasset3,858 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/examples/terraform/README.mddoc2,562 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/examples/terraform/main.tfasset3,324 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/examples/terraform/outputs.tfasset135 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/examples/terraform/variables.tfasset1,010 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/delivery-options/github-pr.mddoc3,289 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/delivery-options/index.mddoc2,326 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/delivery-options/print.mddoc474 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/delivery-options/save-local.mddoc2,045 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/depth-probe/beginner.mddoc1,214 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/depth-probe/cost-deep.mddoc1,150 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/depth-probe/index.mddoc3,043 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/depth-probe/networking-deep.mddoc1,623 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/depth-probe/security-deep.mddoc1,270 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/depth-probe/spec-deep.mddoc1,377 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/mcp-tools.mddoc2,329 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/output-adapters/az-cli.mddoc1,948 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/output-adapters/bicep.mddoc1,760 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/output-adapters/index.mddoc3,053 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/output-adapters/mcp-apply.mddoc2,649 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/output-adapters/terraform.mddoc1,555 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/plan-card.mddoc4,015 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/validation-gates.mddoc2,225 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/vm-creator.mddoc7,681 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-recommender/references/handoff-to-creator.mddoc1,684 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-recommender/references/web-fetch-policy.mddoc1,661 bytes../../.github/plugins/azure-skills/skills/azure-compute/workflows/vm-recommender/vm-recommender.mddoc6,586 bytes../../.github/plugins/azure-skills/skills/azure-deploy/SKILL.mddoc6,632 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/auth-best-practices.mddoc6,207 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/global-rules.mddoc1,269 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/live-role-verification.mddoc3,965 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/pre-deploy-checklist.mddoc18,891 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/README.mddoc431 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azcli/README.mddoc1,721 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azcli/errors.mddoc492 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azcli/verify.mddoc2,059 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/README.mddoc3,746 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/ef-migrations.mddoc5,102 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/errors.mddoc15,752 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/functions-deploy.mddoc3,542 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/post-deployment.mddoc4,299 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/scripts/apply-migrations.ps1runs1,865 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/scripts/apply-migrations.shruns1,793 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/scripts/grant-and-migrate.ps1runs4,351 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/scripts/grant-and-migrate.shruns4,368 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/sql-entra-auth.mddoc2,566 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/sql-managed-identity.mddoc7,612 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/verify.mddoc4,985 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/bicep/README.mddoc2,412 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/bicep/errors.mddoc511 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/bicep/verify.mddoc763 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/cicd/README.mddoc1,232 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/cicd/errors.mddoc542 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/cicd/examples/azdo-azd.ymlasset487 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/cicd/examples/azdo-multistage.ymlasset831 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/cicd/examples/github-azd.ymlasset782 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/cicd/examples/github-bicep.ymlasset660 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/cicd/verify.mddoc754 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/terraform/README.mddoc3,235 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/terraform/errors.mddoc858 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/recipes/terraform/verify.mddoc752 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/region-availability.mddoc3,031 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/sdk/azd-deployment.mddoc792 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/sdk/azure-identity-dotnet.mddoc941 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/sdk/azure-identity-java.mddoc1,249 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/sdk/azure-identity-py.mddoc1,149 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/sdk/azure-identity-ts.mddoc1,145 bytes../../.github/plugins/azure-skills/skills/azure-deploy/references/troubleshooting.mddoc8,172 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/SKILL.mddoc7,481 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/references/app-service/README.mddoc7,967 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/references/azure-resource-graph.mddoc2,909 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/references/container-apps/README.mddoc3,577 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/references/functions/README.mddoc3,979 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/references/functions/durable.mddoc7,827 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/references/functions/triggers.mddoc8,516 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/references/kql-queries.mddoc1,342 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/aks-baseline.ps1runs7,581 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/aks-baseline.shruns7,141 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/appservice-diagnostics.ps1runs2,750 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/appservice-diagnostics.shruns3,362 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/containerapp-diagnostics.ps1runs2,605 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/containerapp-diagnostics.shruns3,200 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/pod-evidence.ps1runs6,749 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/pod-evidence.shruns7,222 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/run-ig.ps1runs5,690 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/run-ig.shruns6,664 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/test-messaging-connectivity.ps1runs6,491 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/scripts/test-messaging-connectivity.shruns6,974 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/aks/aks-troubleshooting.mddoc9,424 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/aks/general-diagnostics.mddoc2,053 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/aks/load-balancer-and-ingress.mddoc3,687 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/aks/network-policy.mddoc832 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/aks/networking.mddoc5,597 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/aks/node-issues.mddoc4,833 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/aks/optional-aks-operations.mddoc2,402 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/aks/pod-failures.mddoc7,751 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/aks/references/aks-mcp.mddoc2,404 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/aks/references/command-flows.mddoc4,160 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/aks/references/inspektor-gadget.mddoc7,795 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/aks/references/structured-input-modes.mddoc1,508 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/aks/spot-and-zone-issues.mddoc2,608 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/aks/upgrade-operations.mddoc2,252 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/compute/references/cannot-connect-to-vm.mddoc3,204 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/compute/references/credential-auth-errors.mddoc2,365 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/compute/references/firewall-blocking.mddoc2,376 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/compute/references/network-connectivity.mddoc2,604 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/compute/references/rdp-connectivity.mddoc2,800 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/compute/references/rdp-service-config.mddoc3,299 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/compute/references/ssh-connectivity.mddoc2,979 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/compute/references/vm-agent-not-responding.mddoc3,723 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/compute/vm-troubleshooting.mddoc3,384 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/README.mddoc1,606 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/auth-best-practices.mddoc6,207 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/azure-eventhubs-dotnet.mddoc3,573 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/azure-eventhubs-java.mddoc3,298 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/azure-eventhubs-js.mddoc2,777 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/azure-eventhubs-py.mddoc4,454 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/azure-servicebus-dotnet.mddoc2,568 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/azure-servicebus-java.mddoc2,281 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/azure-servicebus-js.mddoc2,489 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/azure-servicebus-py.mddoc2,388 bytes../../.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/service-troubleshooting.mddoc5,193 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/SKILL.mddoc6,339 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/bicep-generation.mddoc5,246 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/constraints/README.mddoc1,249 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/constraints/ai-ml.mddoc3,292 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/constraints/compute-apps.mddoc8,000 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/constraints/compute-infra.mddoc4,564 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/constraints/data-analytics.mddoc6,489 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/constraints/data-relational.mddoc5,044 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/constraints/messaging.mddoc2,573 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/constraints/monitoring.mddoc1,776 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/constraints/networking-connectivity.mddoc6,282 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/constraints/networking-core.mddoc7,166 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/constraints/networking-traffic.mddoc4,708 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/constraints/security.mddoc2,409 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/deployment.mddoc3,803 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/pairing-checks.mddoc3,753 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/phases/1-extract-insights.mddoc2,653 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/phases/2-research-best-practices.mddoc2,906 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/phases/3-research-resources.mddoc3,387 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/phases/4-generate-plan.mddoc792 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/phases/5-verify.mddoc814 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/phases/6-generate-iac.mddoc2,606 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/phases/7-deploy.mddoc1,300 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/referenced-workload.mddoc7,504 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/README.mddoc1,647 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/ai-ml.mddoc2,162 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/compute-apps.mddoc4,118 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/compute-infra.mddoc2,897 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/data-analytics.mddoc3,078 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/data-relational.mddoc2,695 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/messaging.mddoc2,001 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/monitoring.mddoc1,515 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/networking-connectivity.mddoc3,698 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/networking-core.mddoc4,406 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/networking-traffic.mddoc2,634 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/security.mddoc1,510 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/schema.mddoc3,853 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/terraform-generation.mddoc4,504 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/verification.mddoc2,669 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/waf-checklist.mddoc1,947 bytes../../.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/workflow.mddoc5,028 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/SKILL.mddoc13,065 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/SKILL.mddoc2,012 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/aspnet-core.mddoc7,432 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/django.mddoc6,142 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/express.mddoc6,811 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/fastapi.mddoc5,947 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/flask.mddoc6,322 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/go.mddoc6,997 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/nestjs.mddoc6,845 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/nextjs.mddoc7,318 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/spring-boot.mddoc6,157 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/phases/quick-deploy.mddoc8,017 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/references/base-images.mddoc3,657 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/references/detection.mddoc3,623 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/references/rollback.mddoc2,048 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/references/safeguards.mddoc2,999 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/references/workload-identity.mddoc7,566 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/dotnet.Dockerfileasset2,618 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/dotnet.dockerignoreasset125 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/go.Dockerfileasset2,177 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/go.dockerignoreasset128 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/java.Dockerfileasset3,120 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/java.dockerignoreasset156 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/node.Dockerfileasset3,063 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/node.dockerignoreasset173 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/python.Dockerfileasset2,637 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/python.dockerignoreasset201 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/rust.Dockerfileasset3,227 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/rust.dockerignoreasset87 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/github-actions/deploy.ymlasset7,623 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/github-actions/deploy.ymlasset7,623 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/configmap.yamlasset1,054 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/deployment.yamlasset3,458 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/gateway.yamlasset1,543 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/hpa.yamlasset1,418 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/httproute.yamlasset1,339 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/ingress.yamlasset1,959 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/namespace.yamlasset734 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/networkpolicy.yamlasset1,627 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/pdb.yamlasset758 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/pdb.yamlasset758 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/service.yamlasset864 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/serviceaccount.yamlasset1,476 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/mermaid/architecture-diagram.mddoc1,663 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/mermaid/summary-dashboard.mddoc1,785 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/SKILL.mddoc17,606 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/references/common-fixes.mddoc7,459 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/references/constraint-spec-v1.yamlasset24,895 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/references/constraint-spec-v1.yamlasset24,895 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/references/constraint-spec-v1.yamlasset24,895 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/references/constraint-spec-v1.yamlasset24,895 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/references/constraint-spec-v1.yamlasset24,895 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/references/constraint-spec-v1.yamlasset24,895 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/references/mcp-integration.mddoc8,651 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/references/migration-guide-summary.mddoc7,081 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/scripts/sanitize-readiness-input.jqasset7,953 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/references/azure-aks-autoscaler.mddoc4,083 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/references/azure-aks-nap-readiness.mddoc2,527 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/references/azure-aks-rightsizing.mddoc4,444 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/references/azure-aks-spot.mddoc4,751 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/references/azure-aks-vpa.mddoc1,472 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/references/cli-reference.mddoc1,188 bytes../../.github/plugins/azure-skills/skills/azure-kubernetes/references/optional-aks-operations.mddoc3,111 bytes../../.github/plugins/azure-skills/skills/azure-kusto/SKILL.mddoc8,555 bytes../../.github/plugins/azure-skills/skills/azure-messaging/SKILL.mddoc3,282 bytes../../.github/plugins/azure-skills/skills/azure-prepare/SKILL.mddoc12,861 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/analyze.mddoc4,115 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/apim.mddoc5,848 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/architecture.mddoc6,874 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/aspire.mddoc18,609 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/auth-best-practices.mddoc6,207 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/azure-context.mddoc5,880 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/functional-verification.mddoc3,301 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/generate.mddoc5,444 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/global-rules.mddoc2,045 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/plan-template.mddoc10,304 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/recipe-selection.mddoc3,249 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/recipes/azcli/README.mddoc1,893 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/recipes/azcli/commands.mddoc1,608 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/recipes/azcli/scripts.mddoc2,285 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/recipes/azd/README.mddoc3,894 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/recipes/azd/aspire.mddoc9,153 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/recipes/azd/azure-yaml.mddoc6,821 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/recipes/azd/docker.mddoc2,071 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/recipes/azd/iac-rules.mddoc5,934 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/recipes/azd/terraform.mddoc14,305 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/recipes/bicep/README.mddoc1,396 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/recipes/bicep/patterns.mddoc3,103 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/recipes/terraform/README.mddoc2,594 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/recipes/terraform/patterns.mddoc3,631 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/region-availability.mddoc1,742 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/requirements.mddoc2,590 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/research.mddoc8,798 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/resources-limits-quotas.mddoc13,322 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/runtimes/nodejs.mddoc6,047 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/scan.mddoc3,080 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/sdk/azd-deployment.mddoc792 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/sdk/azure-appconfiguration-java.mddoc1,535 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/sdk/azure-appconfiguration-py.mddoc1,171 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/sdk/azure-appconfiguration-ts.mddoc1,217 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/sdk/azure-identity-dotnet.mddoc941 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/sdk/azure-identity-java.mddoc1,249 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/sdk/azure-identity-py.mddoc1,149 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/sdk/azure-identity-ts.mddoc1,145 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/security.mddoc8,661 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/aks/README.mddoc1,072 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/aks/addons.mddoc957 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/aks/bicep.mddoc1,688 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/aks/manifests.mddoc1,388 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-insights/README.mddoc848 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/README.mddoc2,365 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/bicep.mddoc4,267 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/custom-domains.mddoc4,910 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/deployment-slots.mddoc4,635 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/networking.mddoc6,747 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/scaling.mddoc1,517 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/sku-selection.mddoc4,801 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/README.mddoc2,879 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/auth/README.mddoc3,150 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/auth/source/dotnet.mddoc1,380 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/auth/source/nodejs.mddoc2,511 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/auth/source/python.mddoc2,227 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/composition.mddoc4,881 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/cosmos/README.mddoc3,689 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/cosmos/source/dotnet.mddoc1,304 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/cosmos/source/nodejs.mddoc1,260 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/cosmos/source/python.mddoc1,142 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/redis/README.mddoc3,329 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/redis/source/dotnet.mddoc1,687 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/redis/source/nodejs.mddoc2,260 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/redis/source/python.mddoc2,968 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/sql/README.mddoc3,554 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/sql/source/dotnet.mddoc2,997 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/sql/source/nodejs.mddoc3,091 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/sql/source/python.mddoc4,506 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/selection.mddoc2,912 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/web-api.mddoc5,050 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/web-app.mddoc5,046 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/container-apps/README.mddoc1,333 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/container-apps/bicep.mddoc4,873 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/container-apps/day2-operations.mddoc5,240 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/container-apps/environment.mddoc1,227 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/container-apps/health-probes.mddoc1,141 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/container-apps/networking.mddoc5,209 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/container-apps/revisions.mddoc5,064 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/container-apps/scaling.mddoc1,397 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/container-apps/terraform.mddoc6,267 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/cosmos-db/README.mddoc1,462 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/cosmos-db/bicep.mddoc1,893 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/cosmos-db/partitioning.mddoc1,103 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/cosmos-db/sdk.mddoc1,604 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/durable-task-scheduler/README.mddoc4,991 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/durable-task-scheduler/bicep.mddoc4,960 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/durable-task-scheduler/dotnet.mddoc6,274 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/durable-task-scheduler/java.mddoc7,910 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/durable-task-scheduler/javascript.mddoc5,785 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/durable-task-scheduler/python.mddoc6,590 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/event-grid/README.mddoc1,052 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/event-grid/bicep.mddoc1,698 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/event-grid/subscriptions.mddoc1,596 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/foundry/README.mddoc1,368 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/foundry/region-availability.mddoc826 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/README.mddoc3,221 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/aspire-containerapps.mddoc3,394 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/bicep.mddoc12,204 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/cold-start.mddoc6,421 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/durable.mddoc1,858 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/hosting-plans.mddoc6,991 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/README.mddoc6,698 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/base/eval/python.mddoc762 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/base/eval/summary.mddoc1,912 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/base/eval/typescript.mddoc1,096 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/README.mddoc1,076 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/blob-eventgrid/README.mddoc1,628 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/blob-eventgrid/eval/python.mddoc1,269 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/blob-eventgrid/eval/summary.mddoc2,613 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/common/dotnet-entry-point.mddoc2,003 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/common/error-handling.mddoc2,238 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/common/health-check.mddoc2,743 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/common/nodejs-entry-point.mddoc4,234 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/composition.mddoc11,356 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/cosmosdb/README.mddoc1,587 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/cosmosdb/eval/python.mddoc1,248 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/cosmosdb/eval/summary.mddoc1,885 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/cosmosdb/eval/typescript.mddoc1,368 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/durable/README.mddoc1,872 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/durable/eval/python.mddoc1,255 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/durable/eval/summary.mddoc1,642 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/eventhubs/README.mddoc1,265 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/eventhubs/eval/python.mddoc1,262 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/eventhubs/eval/summary.mddoc1,533 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/mcp/README.mddoc1,946 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/mcp/eval/python.mddoc1,264 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/mcp/eval/summary.mddoc1,559 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/servicebus/README.mddoc1,316 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/servicebus/eval/python.mddoc1,344 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/servicebus/eval/summary.mddoc1,813 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/servicebus/eval/typescript.mddoc1,401 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/sql/README.mddoc1,849 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/sql/eval/python.mddoc1,211 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/sql/eval/summary.mddoc2,818 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/timer/README.mddoc1,490 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/timer/eval/python.mddoc1,198 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/timer/eval/summary.mddoc1,499 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/selection.mddoc4,436 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/terraform.mddoc13,650 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/key-vault/README.mddoc1,344 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/key-vault/bicep.mddoc1,789 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/key-vault/sdk.mddoc1,933 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/logic-apps/README.mddoc1,072 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/logic-apps/bicep.mddoc1,889 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/logic-apps/triggers.mddoc1,725 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/service-bus/README.mddoc1,481 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/service-bus/bicep.mddoc3,768 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/service-bus/patterns.mddoc4,349 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/sql-database/README.mddoc1,922 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/sql-database/auth.mddoc4,124 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/sql-database/bicep.mddoc8,266 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/sql-database/scripts/grant-sql-access.ps1runs4,535 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/sql-database/scripts/grant-sql-access.shruns4,304 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/sql-database/sdk.mddoc1,889 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/static-web-apps/README.mddoc1,357 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/static-web-apps/bicep.mddoc1,036 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/static-web-apps/deployment.mddoc1,887 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/static-web-apps/region-availability.mddoc674 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/static-web-apps/routing.mddoc1,212 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/static-web-apps/terraform.mddoc3,551 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/storage/README.mddoc1,476 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/storage/access.mddoc3,666 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/services/storage/bicep.mddoc1,746 bytes../../.github/plugins/azure-skills/skills/azure-prepare/references/specialized-routing.mddoc4,405 bytes../../.github/plugins/azure-skills/skills/azure-quotas/SKILL.mddoc12,065 bytes../../.github/plugins/azure-skills/skills/azure-quotas/references/advanced-commands.mddoc1,814 bytes../../.github/plugins/azure-skills/skills/azure-quotas/references/commands.mddoc10,619 bytes../../.github/plugins/azure-skills/skills/azure-quotas/scripts/check-quota.ps1runs3,409 bytes../../.github/plugins/azure-skills/skills/azure-quotas/scripts/check-quota.shruns3,175 bytes../../.github/plugins/azure-skills/skills/azure-reliability/SKILL.mddoc24,910 bytes../../.github/plugins/azure-skills/skills/azure-reliability/references/configure-health-probes.mddoc2,190 bytes../../.github/plugins/azure-skills/skills/azure-reliability/references/configure-multi-region.mddoc18,934 bytes../../.github/plugins/azure-skills/skills/azure-reliability/references/configure-storage.mddoc5,481 bytes../../.github/plugins/azure-skills/skills/azure-reliability/references/configure-zone-redundancy.mddoc1,955 bytes../../.github/plugins/azure-skills/skills/azure-reliability/references/health-probe-checks.mddoc3,544 bytes../../.github/plugins/azure-skills/skills/azure-reliability/references/iac-patching-bicep.mddoc7,031 bytes../../.github/plugins/azure-skills/skills/azure-reliability/references/iac-patching-terraform.mddoc4,815 bytes../../.github/plugins/azure-skills/skills/azure-reliability/references/multi-region-checks.mddoc6,120 bytes../../.github/plugins/azure-skills/skills/azure-reliability/references/services/app-service/reliability.mddoc10,484 bytes../../.github/plugins/azure-skills/skills/azure-reliability/references/services/functions/reliability.mddoc6,389 bytes../../.github/plugins/azure-skills/skills/azure-reliability/references/storage-redundancy-checks.mddoc5,206 bytes../../.github/plugins/azure-skills/skills/azure-reliability/references/zone-redundancy-checks.mddoc2,930 bytes../../.github/plugins/azure-skills/skills/azure-resource-lookup/SKILL.mddoc5,569 bytes../../.github/plugins/azure-skills/skills/azure-resource-lookup/references/azure-resource-graph.mddoc5,048 bytes../../.github/plugins/azure-skills/skills/azure-resource-visualizer/SKILL.mddoc8,528 bytes../../.github/plugins/azure-skills/skills/azure-resource-visualizer/assets/example-diagram.mddoc1,778 bytes../../.github/plugins/azure-skills/skills/azure-resource-visualizer/assets/template-architecture.mddoc970 bytes../../.github/plugins/azure-skills/skills/azure-resource-visualizer/references/azure-resource-graph.mddoc2,390 bytes../../.github/plugins/azure-skills/skills/azure-storage/SKILL.mddoc5,024 bytes../../.github/plugins/azure-skills/skills/azure-storage/references/auth-best-practices.mddoc6,207 bytes../../.github/plugins/azure-skills/skills/azure-storage/references/sdk-usage.mddoc4,542 bytes../../.github/plugins/azure-skills/skills/azure-storage/references/sdk/azure-data-tables-java.mddoc1,314 bytes../../.github/plugins/azure-skills/skills/azure-storage/references/sdk/azure-data-tables-py.mddoc1,070 bytes../../.github/plugins/azure-skills/skills/azure-storage/references/sdk/azure-storage-blob-java.mddoc1,350 bytes../../.github/plugins/azure-skills/skills/azure-storage/references/sdk/azure-storage-blob-py.mddoc1,025 bytes../../.github/plugins/azure-skills/skills/azure-storage/references/sdk/azure-storage-blob-rust.mddoc1,094 bytes../../.github/plugins/azure-skills/skills/azure-storage/references/sdk/azure-storage-blob-ts.mddoc1,221 bytes../../.github/plugins/azure-skills/skills/azure-storage/references/sdk/azure-storage-file-datalake-py.mddoc1,367 bytes../../.github/plugins/azure-skills/skills/azure-storage/references/sdk/azure-storage-file-share-py.mddoc1,006 bytes../../.github/plugins/azure-skills/skills/azure-storage/references/sdk/azure-storage-file-share-ts.mddoc1,262 bytes../../.github/plugins/azure-skills/skills/azure-storage/references/sdk/azure-storage-queue-py.mddoc1,091 bytes../../.github/plugins/azure-skills/skills/azure-storage/references/sdk/azure-storage-queue-ts.mddoc1,258 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/SKILL.mddoc8,861 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/global-rules.mddoc4,586 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/INSTRUCTION.mddoc11,589 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/README.mddoc3,066 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/bom-migration/bom-gradle-settings.mddoc6,863 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/bom-migration/bom-gradle-toml.mddoc2,794 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/bom-migration/bom-gradle.mddoc5,266 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/bom-migration/bom-maven.mddoc4,835 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/bom-migration/bom-migration.mddoc4,293 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/bom-migration/bom-validation.mddoc1,549 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/package-specific/com.microsoft.azure.eventprocessorhost.mddoc5,675 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/package-specific/com.microsoft.azure.management.mddoc9,713 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/rules/efficiency.mddoc265 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/rules/execution-guidelines.mddoc1,063 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/rules/review-code-changes.mddoc541 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/rules/troubleshooting.mddoc2,586 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/rules/upgrade-strategy.mddoc1,403 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/rules/upgrade-success-criteria.mddoc686 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/scripts/upgrade_bom.pyruns20,074 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/templates/PLAN_TEMPLATE.mddoc9,656 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/templates/PROGRESS_TEMPLATE.mddoc9,336 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/templates/SUMMARY_TEMPLATE.mddoc8,815 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/workflow/phase-1-precheck.mddoc2,397 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/workflow/phase-2-plan.mddoc2,960 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/workflow/phase-3-execute.mddoc2,435 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/workflow/phase-4-summarize.mddoc1,154 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/linux/assessment.mddoc4,692 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/linux/automation.mddoc17,691 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/linux/workflow.mddoc11,863 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/assessment.mddoc6,998 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation.mddoc4,215 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/access-key-copy.mddoc2,540 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/access-key-strategy.mddoc2,128 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/app-creation.mddoc17,037 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/app-settings.mddoc12,298 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/built-in-authentication.mddoc3,378 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/cleanup-and-rollback.mddoc3,244 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/code-deployment.mddoc8,818 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/configuration-inventory.mddoc7,341 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/deployment-package.mddoc6,144 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/discovery-and-assessment.mddoc9,305 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/networking-and-storage.mddoc4,011 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/site-and-identity.mddoc5,102 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/trigger-safety-and-monitoring.mddoc12,119 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/validation-and-cutover.mddoc9,944 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/dependency-scan.mddoc13,603 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/progress-tracking.mddoc5,371 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/workflow.mddoc28,555 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/services/redis/redis-to-amr.mddoc7,700 bytes../../.github/plugins/azure-skills/skills/azure-upgrade/references/workflow-details.mddoc2,135 bytes../../.github/plugins/azure-skills/skills/azure-validate/SKILL.mddoc3,535 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/aspire-functions-secrets.mddoc3,771 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/global-rules.mddoc1,215 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/policy-validation.mddoc1,493 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/README.mddoc374 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/azcli/README.mddoc2,786 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/azcli/errors.mddoc505 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/azd/README.mddoc5,410 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/azd/aspire.mddoc1,772 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/azd/environment.mddoc1,979 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/azd/errors.mddoc2,680 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/azd/scripts/set-aspire-aca-env.ps1runs3,588 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/azd/scripts/set-aspire-aca-env.shruns3,638 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/bicep/README.mddoc2,562 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/bicep/errors.mddoc374 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/scripts/validate-deployment.ps1runs5,278 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/scripts/validate-deployment.shruns6,198 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/terraform/README.mddoc4,040 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/terraform/errors.mddoc2,889 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/terraform/scripts/validate-terraform.ps1runs6,933 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/recipes/terraform/scripts/validate-terraform.shruns6,808 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/region-availability.mddoc3,031 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/role-verification.mddoc3,947 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/scripts/scan-aspire-functions-secrets.ps1runs3,053 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/scripts/scan-aspire-functions-secrets.shruns3,342 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/scripts/workflow.ps1runs5,289 bytes../../.github/plugins/azure-skills/skills/azure-validate/references/scripts/workflow.shruns5,856 bytes../../.github/plugins/azure-skills/skills/discover-azure-skills/SKILL.mddoc2,316 bytes../../.github/plugins/azure-skills/skills/discover-azure-skills/references/install/claude-code.mddoc339 bytes../../.github/plugins/azure-skills/skills/discover-azure-skills/references/install/copilot-cli.mddoc339 bytes../../.github/plugins/azure-skills/skills/discover-azure-skills/references/install/other.mddoc328 bytes../../.github/plugins/azure-skills/skills/entra-agent-id/SKILL.mddoc16,036 bytes../../.github/plugins/azure-skills/skills/entra-agent-id/references/known-limitations.mddoc4,754 bytes../../.github/plugins/azure-skills/skills/entra-agent-id/references/oauth2-token-flow.mddoc4,507 bytes../../.github/plugins/azure-skills/skills/entra-agent-id/references/obo-blueprint-setup.mddoc4,235 bytes../../.github/plugins/azure-skills/skills/entra-agent-id/references/runtime-token-exchange.mddoc6,746 bytes../../.github/plugins/azure-skills/skills/entra-agent-id/references/sdk-sidecar-deployment.mddoc6,276 bytes../../.github/plugins/azure-skills/skills/entra-agent-id/references/sdk-sidecar.mddoc6,107 bytes../../.github/plugins/azure-skills/skills/entra-app-registration/SKILL.mddoc8,223 bytes../../.github/plugins/azure-skills/skills/entra-app-registration/references/BICEP-EXAMPLE.bicepasset5,328 bytes../../.github/plugins/azure-skills/skills/entra-app-registration/references/api-permissions.mddoc10,198 bytes../../.github/plugins/azure-skills/skills/entra-app-registration/references/auth-best-practices.mddoc6,207 bytes../../.github/plugins/azure-skills/skills/entra-app-registration/references/cli-commands.mddoc8,852 bytes../../.github/plugins/azure-skills/skills/entra-app-registration/references/console-app-example.mddoc11,005 bytes../../.github/plugins/azure-skills/skills/entra-app-registration/references/first-app-registration.mddoc7,415 bytes../../.github/plugins/azure-skills/skills/entra-app-registration/references/oauth-flows.mddoc9,540 bytes../../.github/plugins/azure-skills/skills/entra-app-registration/references/sdk/azure-identity-dotnet.mddoc940 bytes../../.github/plugins/azure-skills/skills/entra-app-registration/references/sdk/azure-identity-java.mddoc1,248 bytes../../.github/plugins/azure-skills/skills/entra-app-registration/references/sdk/azure-identity-py.mddoc1,148 bytes../../.github/plugins/azure-skills/skills/entra-app-registration/references/sdk/azure-identity-rust.mddoc805 bytes../../.github/plugins/azure-skills/skills/entra-app-registration/references/sdk/azure-identity-ts.mddoc1,144 bytes../../.github/plugins/azure-skills/skills/entra-app-registration/references/sdk/azure-keyvault-py.mddoc1,135 bytes../../.github/plugins/azure-skills/skills/entra-app-registration/references/sdk/azure-keyvault-secrets-ts.mddoc1,043 bytes../../.github/plugins/azure-skills/skills/entra-app-registration/references/sdk/microsoft-azure-webjobs-extensions-authentication-events-dotnet.mddoc1,522 bytes../../.github/plugins/azure-skills/skills/entra-app-registration/references/troubleshooting.mddoc7,594 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/.gitignoreasset0 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/SKILL.mddoc31,092 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/SKILL.mddoc5,509 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/references/agentic-rft.mddoc3,234 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/references/dataset-formats.mddoc3,740 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/references/deployment.mddoc3,503 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/references/evaluation.mddoc5,924 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/references/grader-design.mddoc3,437 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/references/hyperparameters.mddoc3,233 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/references/large-file-uploads.mddoc927 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/references/platform-gotchas.mddoc2,069 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/references/reward-hacking.mddoc2,945 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/references/training-curves.mddoc4,183 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/references/training-types.mddoc3,161 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/references/vision-fine-tuning.mddoc4,205 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/calibrate_grader.pyruns9,493 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/check_training.pyruns7,987 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/cleanup.pyruns9,687 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/common.pyruns7,808 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/convert_dataset.pyruns10,936 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/deploy_model.pyruns9,618 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/evaluate_model.pyruns11,690 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/generate_distillation_data.pyruns10,299 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/monitor_training.pyruns5,866 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/score_dataset.pyruns7,873 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/submit_training.pyruns11,070 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/validate/__init__.pyruns305 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/validate/data_stats.pyruns6,331 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/validate/validate_dpo.pyruns3,807 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/validate/validate_rft.pyruns8,799 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/validate/validate_sft.pyruns4,573 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/workflows/dataset-creation.mddoc3,161 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/workflows/diagnose-poor-results.mddoc2,401 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/workflows/full-pipeline.mddoc3,167 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/workflows/iterative-training.mddoc3,178 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/workflows/quickstart.mddoc4,600 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/agent-optimizer/agent-optimizer.mddoc3,372 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/agent-optimizer/references/azd-setup.mddoc1,221 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/agent-optimizer/references/eval-yaml.mddoc3,311 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/agent-optimizer/references/optimize-workflow.mddoc2,187 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/agent-optimizer/references/python-patterns.mddoc4,096 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/agent-optimizer/references/scaffold.mddoc3,415 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/azd-guidance/azd-guidance.mddoc1,230 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/azd-guidance/references/azd-ai-cli.mddoc10,598 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/cicd/cicd.mddoc301 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/create-hosted.mddoc34,649 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/create-managed-harness.mddoc7,351 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/create-prompt.mddoc4,692 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/create-voice.mddoc13,430 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/quick-start-hosted.mddoc24,132 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/enable-incoming-a2a.mddoc3,740 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/foundry-model.mddoc1,598 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/foundry-tool-catalog.mddoc43,918 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/guardrails/guardrail-api-create.mddoc3,860 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/guardrails/guardrail-attach.mddoc3,855 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/guardrails/guardrail-manage.mddoc2,197 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/hosted-voice-yaml.mddoc1,737 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/langchain-langgraph-hosting.mddoc2,257 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/local-run.mddoc11,754 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/managed-harness-agent.mddoc3,616 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/re-host.mddoc2,683 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/sdk-operations.mddoc2,216 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/skills/managed-harness-agent-skill-attach.mddoc1,312 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/skills/skill-attach.mddoc7,176 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/skills/skill-manage.mddoc5,490 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/skills/skill-toolbox-attach.mddoc5,226 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/agent-tools.mddoc1,819 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-a2a.mddoc1,171 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-azure-ai-search.mddoc1,271 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-code-interpreter.mddoc391 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-fabric-iq.mddoc1,142 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-file-search.mddoc526 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-github-copilot-toolset.mddoc1,206 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-mcp.mddoc1,694 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-openapi.mddoc1,190 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-toolbox.mddoc2,125 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-web-search.mddoc387 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-work-iq.mddoc1,329 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/agent-tools.mddoc4,573 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-a2a.mddoc675 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-azure-ai-search.mddoc3,423 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-bing-grounding.mddoc2,869 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-code-interpreter.mddoc1,075 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-fabric-iq.mddoc1,933 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-file-search.mddoc2,699 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-function-calling.mddoc842 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-mcp.mddoc3,452 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-memory.mddoc4,888 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-openapi.mddoc1,528 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-web-search.mddoc3,703 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-work-iq.mddoc1,745 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/use-toolbox-in-hosted-agent.mddoc10,630 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/voice-agent-common.mddoc1,618 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/voice-agent-hosted-bridge.mddoc8,345 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/voice-agent-prompt-yaml.mddoc3,951 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/voice-agent-settings.mddoc5,978 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/voice-agent-smoke-test.mddoc8,010 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/check-copilot-app-entry.ps1runs5,586 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/check-copilot-app-entry.shruns4,295 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/resolve-project-id.ps1runs5,952 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/resolve-project-id.shruns9,243 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/smoke-test-voice.ps1runs2,713 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/smoke-test-voice.shruns966 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/smoke_test_voice.pyruns14,876 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/verify-environment.ps1runs8,397 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/verify-environment.shruns6,630 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/deploy/deploy.mddoc26,301 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/deploy/references/container-deploy.mddoc2,140 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/deploy/references/voice-deploy.mddoc2,261 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/eval-datasets/eval-datasets.mddoc11,462 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/eval-datasets/references/dataset-comparison.mddoc4,836 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/eval-datasets/references/dataset-curation.mddoc4,167 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/eval-datasets/references/dataset-organization.mddoc4,777 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/eval-datasets/references/dataset-versioning.mddoc7,490 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/eval-datasets/references/eval-lineage.mddoc4,090 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/eval-datasets/references/eval-regression.mddoc7,023 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/eval-datasets/references/eval-trending.mddoc4,921 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/eval-datasets/references/generate-seed-dataset.mddoc8,893 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/eval-datasets/references/trace-to-dataset.mddoc17,416 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/insights/insights.mddoc4,655 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/insights/references/tool-contract.mddoc3,479 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/invocations-ws/invocations-ws.mddoc10,649 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/invocations-ws/references/invocations-ws-protocol.mddoc7,943 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/invoke/invoke.mddoc12,051 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/invoke/references/file-operations.mddoc2,883 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/invoke/references/invocations-protocol.mddoc3,516 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/invoke/references/session-management.mddoc3,660 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/observe/observe.mddoc15,636 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/observe/references/analyze-results.mddoc6,462 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/observe/references/cicd-monitoring.mddoc3,701 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/observe/references/compare-iterate.mddoc3,351 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/observe/references/continuous-eval.mddoc15,492 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/observe/references/deploy-and-setup.mddoc5,662 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/observe/references/evaluate-step.mddoc8,745 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/observe/references/evaluation-suite-generation.mddoc12,582 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/observe/references/optimize-deploy.mddoc1,579 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/routine/references/azure-yaml.mddoc2,661 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/routine/references/cli-crud.mddoc6,149 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/routine/routine.mddoc8,151 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/mcp-protocol.mddoc3,326 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/test-endpoint.mddoc6,592 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-a2a.mddoc2,263 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-azure-ai-search.mddoc7,147 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-browser-automation.mddoc3,548 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-code-interpreter.mddoc3,582 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-fabric-iq.mddoc4,475 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-file-search.mddoc4,176 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-agent-identity.mddoc8,030 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-custom-oauth-azure-starter.mddoc4,126 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-custom-oauth.mddoc8,058 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-key-auth.mddoc4,338 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-managed-oauth.mddoc6,473 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-noauth.mddoc3,947 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-user-entra-token.mddoc5,275 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-openapi.mddoc6,299 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-tool-search.mddoc6,015 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-web-search.mddoc3,186 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-work-iq.mddoc7,754 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/toolbox-azd.mddoc6,291 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/scripts/get-catalog-inputs.ps1runs13,030 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/scripts/get-catalog-inputs.shruns13,291 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/toolbox.mddoc7,942 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/trace/references/analyze-failures.mddoc4,013 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/trace/references/analyze-latency.mddoc3,880 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/trace/references/conversation-detail.mddoc3,785 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/trace/references/eval-correlation.mddoc2,555 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/trace/references/kql-templates.mddoc10,839 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/trace/references/search-traces.mddoc6,925 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/trace/trace.mddoc6,696 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/troubleshoot/troubleshoot.mddoc8,911 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/validate/references/default-rules.yamlasset18,540 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/validate/references/default-rules.yamlasset18,540 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/validate/references/default-rules.yamlasset18,540 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/validate/references/report-schema.jsonasset3,406 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/validate/references/report-schema.jsonasset3,406 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/validate/references/report-template.md.tplasset2,876 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/validate/references/rules-schema.jsonasset2,554 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/validate/validate.mddoc7,536 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/SKILL.mddoc7,301 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/TEST_PROMPTS.mddoc3,367 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/capacity/SKILL.mddoc7,011 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.ps1runs4,677 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.shruns4,641 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/capacity/scripts/query_capacity.ps1runs3,030 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/capacity/scripts/query_capacity.shruns2,942 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/customize/EXAMPLES.mddoc4,402 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/customize/SKILL.mddoc8,988 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/customize/references/customize-guides.mddoc3,487 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/customize/references/customize-workflow.mddoc13,403 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/preset/EXAMPLES.mddoc2,989 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/preset/SKILL.mddoc4,960 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/preset/references/preset-workflow.mddoc22,492 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/preset/references/workflow.mddoc5,763 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/scripts/generate_deployment_url.ps1runs2,371 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/scripts/generate_deployment_url.shruns2,687 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/project/connections.mddoc3,203 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/project/create/create-foundry-project.mddoc8,586 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/quota/quota.mddoc9,189 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/quota/references/capacity-planning.mddoc8,375 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/quota/references/error-resolution.mddoc5,013 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/quota/references/optimization.mddoc7,818 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/quota/references/ptu-guide.mddoc6,332 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/quota/references/troubleshooting.mddoc7,521 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/quota/references/workflows.mddoc7,036 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/rbac/rbac.mddoc7,269 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/references/agent-metadata-contract.mddoc8,866 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/references/auth-best-practices.mddoc6,669 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/references/standard-agent-setup.mddoc4,290 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/resource/create/create-foundry-resource.mddoc6,204 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/resource/create/references/patterns.mddoc4,007 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/resource/create/references/troubleshooting.mddoc2,470 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/resource/create/references/workflows.mddoc6,859 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/resource/private-network/private-network.mddoc6,448 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/resource/private-network/references/custom-template-adaptation.mddoc1,630 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/resource/private-network/references/deploy.mddoc3,759 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/resource/private-network/references/end-to-end-test.mddoc4,197 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/resource/private-network/references/intake.mddoc6,700 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/resource/private-network/references/post-deployment-validation.mddoc3,739 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/resource/private-network/references/scaffold.mddoc1,773 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/resource/private-network/references/template-index.mddoc1,590 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/resource/private-network/references/vpn-dns-setup.bicepasset4,564 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/resource/private-network/references/vpn-dns-setup.mddoc6,531 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/scripts/check-and-setup-dependencies.ps1runs1,276 bytes../../.github/plugins/azure-skills/skills/microsoft-foundry/scripts/check-and-setup-dependencies.shruns845 bytes../../.github/plugins/azure-skills/skills/python-appservice-deploy/SKILL.mddoc2,787 bytes../../.github/plugins/azure-skills/skills/python-appservice-deploy/references/create-app.mddoc6,202 bytes../../.github/plugins/azure-skills/skills/python-appservice-deploy/references/deploy-azcli.mddoc4,800 bytes../../.github/plugins/azure-skills/skills/python-appservice-deploy/references/deploy-azd.mddoc2,372 bytes../../.github/plugins/azure-skills/skills/python-appservice-deploy/references/detect.mddoc3,733 bytes../../.github/plugins/azure-skills/skills/python-appservice-deploy/references/errors.mddoc3,855 bytes../../.github/plugins/azure-skills/skills/python-appservice-deploy/references/post-deploy-message.mddoc4,488 bytes../../.github/plugins/azure-skills/skills/python-appservice-deploy/references/startup-commands.mddoc4,421 bytes../../.github/plugins/azure-skills/skills/python-appservice-deploy/references/transient-retry.mddoc2,365 bytes../../.github/plugins/azure-skills/skills/python-appservice-deploy/scripts/generate-app-name.ps1runs1,744 bytes../../.github/plugins/azure-skills/skills/python-appservice-deploy/scripts/generate-app-name.shruns1,844 bytes../../.github/plugins/azure-skills/skills/python-appservice-deploy/scripts/retry-az-create.ps1runs2,201 bytes../../.github/plugins/azure-skills/skills/python-appservice-deploy/scripts/retry-az-create.shruns1,936 bytes../../.github/plugins/foundry-iq-skills/.claude-plugin/plugin.jsonasset820 bytes../../.github/plugins/foundry-iq-skills/.mcp.jsonasset22 bytes../../.github/plugins/foundry-iq-skills/com.github.copilot/hooks/hooks.jsonasset1,095 bytes../../.github/plugins/foundry-iq-skills/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/foundry-iq-skills/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/foundry-iq-skills/hooks/claude-hooks.jsonasset455 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/SKILL.mddoc3,785 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/agents/connect-hosted-toolbox.mddoc7,987 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/agents/connect-hosted.mddoc7,992 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/agents/connect-prompt-sdk-fallback.mddoc7,990 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/agents/connect.mddoc7,994 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/agents/create-missing-agent.mddoc8,004 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_blob_observation.pyruns4,515 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_blob_source_read.pyruns40,414 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_bootstrap_io.pyruns30,842 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_cleanup_dependencies.pyruns28,199 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_cleanup_receipts.pyruns13,861 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_common.pyruns37,108 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_document_adapters.pyruns15,346 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_document_limits.pyruns3,984 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_embedding.pyruns7,214 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_file_inventory.pyruns24,998 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_file_source_config.pyruns15,933 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_indexer_observation.pyruns7,253 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_initial_prompt.pyruns12,787 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_private_json.pyruns2,478 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_progress.pyruns12,433 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_prompt_read.pyruns18,168 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_search_read.pyruns6,134 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_source_readback.pyruns1,609 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/blob-contracts.mddoc7,960 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/blob-cu-contracts.mddoc7,988 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/blob_inventory.pyruns17,484 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/blob_recheck.pyruns66,189 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/blob_source.pyruns36,636 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/bootstrap-contracts.mddoc8,011 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/bootstrap_azure.pyruns42,465 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/cleanup_plan.pyruns42,390 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/contracts.mddoc7,988 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/cu_ingestion_auth.pyruns12,760 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/document-assessment.mddoc7,948 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/document_assess.pyruns14,377 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/file-upload-recovery.mddoc7,958 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/file_cu_canary.pyruns33,447 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/file_cu_mi.pyruns9,802 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/file_ingest.pyruns15,723 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/file_source.pyruns32,443 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/file_upload.pyruns54,977 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/hosted_connect.pyruns31,590 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/kb-contracts.mddoc7,974 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/knowledge_base_retrieve.pyruns7,933 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/model-discovery-contracts.mddoc7,994 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/model-discovery-scopes.mddoc7,967 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/model_discovery.pyruns24,266 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/private-artifacts.mddoc7,371 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/private_artifacts.pyruns4,888 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/prompt_cleanup.pyruns22,527 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/prompt_connect.pyruns63,827 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/requirements-assessment.txtdoc103 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/retrieval-verification-contracts.mddoc7,996 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/retrieval_verify.pyruns20,111 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/search-intake-contracts.mddoc7,818 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/search_intake.pyruns18,810 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/search_reconcile.pyruns61,140 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/source_vector.pyruns33,962 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/throttle-recovery.mddoc5,103 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/vector-contracts.mddoc7,985 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/knowledge-bases/create.mddoc8,258 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/knowledge-bases/retrieve.mddoc8,000 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/knowledge-sources/create-azure-blob.mddoc7,992 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/knowledge-sources/create-file.mddoc7,997 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/lifecycle/cleanup.mddoc7,997 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/references/abstention.mddoc1,054 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/references/blob-binding-evidence.mddoc7,996 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/references/blob-indexer-observation.mddoc7,873 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/references/blob-ingestion-progress.mddoc6,636 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/references/blob-readiness-recheck.mddoc7,997 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/references/blob-vector-readiness.mddoc2,672 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/references/bootstrap-azure.mddoc7,994 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/references/content-fit.mddoc7,975 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/references/cu-ingestion.mddoc7,995 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/references/file-cu-canary.mddoc8,026 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/references/intent-routing.mddoc7,910 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/references/owner.mddoc2,140 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/references/platform-contracts.mddoc7,934 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/references/platform-interfaces.mddoc7,972 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/references/resource-intake.mddoc7,961 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/references/search-substrate.mddoc7,955 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/references/standard-cu.mddoc7,953 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/search-services/create.mddoc8,000 bytes../../.github/plugins/foundry-iq-skills/skills/foundry-iq/troubleshooting/diagnose.mddoc8,901 bytes../../.mcp.jsonasset138 bytes../../com.github.copilot/hooks/hooks.jsonasset1,095 bytes../../hooks/claude-hooks.jsonasset455 bytesSKILL.mdcore4,501 bytesreferences/gpu-profiles.mddoc2,566 bytesreferences/model-sizing.mddoc1,878 bytesreferences/optional-gpu-day2.mddoc1,085 bytesreferences/powershell-notes.mddoc3,218 bytesreferences/steps/step-1-verify.mddoc1,972 bytesreferences/steps/step-2-controller.mddoc1,075 bytesreferences/steps/step-3-gpu.mddoc834 bytesreferences/steps/step-4-provider.mddoc2,059 bytesreferences/steps/step-5-deploy.mddoc3,648 bytesreferences/steps/step-6-summary.mddoc1,745 bytesreferences/troubleshooting.mddoc1,566 bytes../appinsights-instrumentation/LICENSE.txtdoc1,078 bytes../appinsights-instrumentation/SKILL.mddoc3,794 bytes../appinsights-instrumentation/examples/appinsights.bicepasset759 bytes../appinsights-instrumentation/references/aspnetcore.mddoc1,717 bytes../appinsights-instrumentation/references/auto.mddoc891 bytes../appinsights-instrumentation/references/container-apps.mddoc7,367 bytes../appinsights-instrumentation/references/nodejs.mddoc1,815 bytes../appinsights-instrumentation/references/python.mddoc1,812 bytes../appinsights-instrumentation/references/sdk/azure-monitor-opentelemetry-exporter-java.mddoc1,173 bytes../appinsights-instrumentation/references/sdk/azure-monitor-opentelemetry-exporter-py.mddoc963 bytes../appinsights-instrumentation/references/sdk/azure-monitor-opentelemetry-py.mddoc880 bytes../appinsights-instrumentation/references/sdk/azure-monitor-opentelemetry-ts.mddoc986 bytes../appinsights-instrumentation/scripts/appinsights.ps1runs1,221 bytes../azure-ai/SKILL.mddoc3,681 bytes../azure-ai/references/auth-best-practices.mddoc6,207 bytes../azure-ai/references/sdk/azure-ai-contentsafety-java.mddoc1,401 bytes../azure-ai/references/sdk/azure-ai-contentsafety-py.mddoc1,361 bytes../azure-ai/references/sdk/azure-ai-contentsafety-ts.mddoc1,413 bytes../azure-ai/references/sdk/azure-ai-document-intelligence-dotnet.mddoc1,456 bytes../azure-ai/references/sdk/azure-ai-document-intelligence-ts.mddoc1,573 bytes../azure-ai/references/sdk/azure-ai-openai-dotnet.mddoc1,419 bytes../azure-ai/references/sdk/azure-ai-transcription-py.mddoc1,210 bytes../azure-ai/references/sdk/azure-ai-translation-text-py.mddoc1,345 bytes../azure-ai/references/sdk/azure-ai-translation-ts.mddoc1,369 bytes../azure-ai/references/sdk/azure-ai-vision-imageanalysis-java.mddoc1,325 bytes../azure-ai/references/sdk/azure-ai-vision-imageanalysis-py.mddoc1,297 bytes../azure-ai/references/sdk/azure-search-documents-dotnet.mddoc1,334 bytes../azure-ai/references/sdk/azure-search-documents-py.mddoc1,561 bytes../azure-ai/references/sdk/azure-search-documents-ts.mddoc1,259 bytes../azure-ai/references/speech/azure-checks.mddoc3,534 bytes../azure-ai/references/speech/collection.mddoc3,608 bytes../azure-ai/references/speech/diagnostics.mddoc3,999 bytes../azure-ai/references/speech/interpretation.mddoc3,875 bytes../azure-ai/references/speech/logging-apis.mddoc3,930 bytes../azure-ai/references/speech/output.mddoc3,548 bytes../azure-ai/references/speech/source-contract.mddoc3,885 bytes../azure-ai/references/speech/without-node.mddoc1,970 bytes../azure-ai/scripts/analyze-speech-sdk-log.mjsruns18,156 bytes../azure-ai/scripts/analyze-speech-sdk-log.ps1runs1,411 bytes../azure-ai/scripts/analyze-speech-sdk-log.shruns1,342 bytes../azure-aigateway/SKILL.mddoc5,029 bytes../azure-aigateway/references/auth-best-practices.mddoc6,207 bytes../azure-aigateway/references/patterns.mddoc6,786 bytes../azure-aigateway/references/policies.mddoc9,375 bytes../azure-aigateway/references/sdk/azure-ai-contentsafety-py.mddoc1,361 bytes../azure-aigateway/references/sdk/azure-ai-contentsafety-ts.mddoc1,413 bytes../azure-aigateway/references/sdk/azure-mgmt-apimanagement-dotnet.mddoc1,310 bytes../azure-aigateway/references/sdk/azure-mgmt-apimanagement-py.mddoc1,028 bytes../azure-aigateway/references/troubleshooting.mddoc7,881 bytes../azure-app-onboard-prereq/SKILL.mddoc10,243 bytes../azure-app-onboard-prereq/references/build-check.mddoc5,798 bytes../azure-app-onboard-prereq/references/cloud-sdk-migration.mddoc2,219 bytes../azure-app-onboard-prereq/references/completeness-check.mddoc4,530 bytes../azure-app-onboard-prereq/references/component-mapping.mddoc4,724 bytes../azure-app-onboard-prereq/references/dependency-compatibility.mddoc10,220 bytes../azure-app-onboard-prereq/references/deployability-check.mddoc3,153 bytes../azure-app-onboard-prereq/references/prereq-artifacts.mddoc2,404 bytes../azure-app-onboard-prereq/references/prereq-schemas.tsruns4,301 bytes../azure-app-onboard-prereq/references/readiness-gate.mddoc5,528 bytes../azure-app-onboard-prereq/references/remediation-protocol.mddoc3,641 bytes../azure-app-onboard-prereq/references/session-protocol.mddoc7,581 bytes../azure-app-onboard-prereq/references/session-schemas.tsruns5,373 bytes../azure-app-onboard-prereq/references/subagent-starter-scaffold.mddoc4,093 bytes../azure-app-onboard-prereq/references/subscription-resolution.mddoc1,888 bytes../azure-app-onboard-prereq/references/zero-code-path.mddoc3,715 bytes../azure-app-onboard/SKILL.mddoc6,809 bytes../azure-app-onboard/deploy/SKILL.mddoc7,636 bytes../azure-app-onboard/deploy/references/approval-gate-template.mddoc2,988 bytes../azure-app-onboard/deploy/references/blocked-patterns.mddoc5,883 bytes../azure-app-onboard/deploy/references/code-deployment-appservice.mddoc4,735 bytes../azure-app-onboard/deploy/references/code-deployment-container-apps.mddoc8,648 bytes../azure-app-onboard/deploy/references/code-deployment-swa.mddoc5,828 bytes../azure-app-onboard/deploy/references/database-post-deploy.mddoc4,578 bytes../azure-app-onboard/deploy/references/deploy-checklist-template.mddoc10,385 bytes../azure-app-onboard/deploy/references/deploy-safety.mddoc4,640 bytes../azure-app-onboard/deploy/references/deploy-schemas.tsruns3,558 bytes../azure-app-onboard/deploy/references/error-classification.mddoc3,732 bytes../azure-app-onboard/deploy/references/health-check-patterns.mddoc5,633 bytes../azure-app-onboard/deploy/references/mcp-tools.mddoc5,642 bytes../azure-app-onboard/deploy/references/portal-links.mddoc3,142 bytes../azure-app-onboard/deploy/references/preflight-checks.mddoc4,470 bytes../azure-app-onboard/deploy/references/subagent-preflight.mddoc5,210 bytes../azure-app-onboard/prepare/SKILL.mddoc6,595 bytes../azure-app-onboard/prepare/references/deploy-strategy.mddoc6,996 bytes../azure-app-onboard/prepare/references/mcp-tools.mddoc5,695 bytes../azure-app-onboard/prepare/references/naming-patterns.mddoc4,713 bytes../azure-app-onboard/prepare/references/prepare-schemas.tsruns7,154 bytes../azure-app-onboard/prepare/references/pricing-guide-services.mddoc8,646 bytes../azure-app-onboard/prepare/references/pricing-guide.mddoc4,085 bytes../azure-app-onboard/prepare/references/service-mapping.mddoc8,706 bytes../azure-app-onboard/prepare/references/sku-matrix.mddoc3,291 bytes../azure-app-onboard/prepare/references/sku-quota-validation.mddoc9,205 bytes../azure-app-onboard/prepare/references/subagent-pricing.mddoc2,557 bytes../azure-app-onboard/prepare/references/subagent-quota.mddoc3,568 bytes../azure-app-onboard/prepare/references/validation-rubric.mddoc2,351 bytes../azure-app-onboard/references/approval-gates.mddoc8,632 bytes../azure-app-onboard/references/azd-template-routing.mddoc4,832 bytes../azure-app-onboard/references/handoff-protocol.mddoc8,013 bytes../azure-app-onboard/references/iac-resources.mddoc2,682 bytes../azure-app-onboard/references/intent-gathering.mddoc2,289 bytes../azure-app-onboard/references/mcp-tool-reference.mddoc3,780 bytes../azure-app-onboard/references/pipeline-rules-runtime.mddoc3,619 bytes../azure-app-onboard/references/pipeline-rules.mddoc6,492 bytes../azure-app-onboard/references/session-protocol.mddoc8,198 bytes../azure-app-onboard/references/session-schemas.tsruns5,298 bytes../azure-app-onboard/references/subscription-resolution.mddoc2,187 bytes../azure-app-onboard/scaffold/SKILL.mddoc14,534 bytes../azure-app-onboard/scaffold/references/bicep-app-service.mddoc5,557 bytes../azure-app-onboard/scaffold/references/bicep-container-apps.mddoc9,508 bytes../azure-app-onboard/scaffold/references/bicep-patterns-data.mddoc4,054 bytes../azure-app-onboard/scaffold/references/bicep-patterns-security.mddoc7,979 bytes../azure-app-onboard/scaffold/references/bicep-patterns.mddoc6,974 bytes../azure-app-onboard/scaffold/references/bicep-swa.mddoc757 bytes../azure-app-onboard/scaffold/references/cicd-pipelines.mddoc325 bytes../azure-app-onboard/scaffold/references/dockerfile-generation.mddoc4,164 bytes../azure-app-onboard/scaffold/references/env-var-secrets.mddoc4,213 bytes../azure-app-onboard/scaffold/references/error-handling.mddoc1,506 bytes../azure-app-onboard/scaffold/references/iac-generation-rules.mddoc6,777 bytes../azure-app-onboard/scaffold/references/mcp-tools.mddoc7,182 bytes../azure-app-onboard/scaffold/references/rbac-roles.mddoc3,942 bytes../azure-app-onboard/scaffold/references/scaffold-healing-rules.mddoc3,409 bytes../azure-app-onboard/scaffold/references/scaffold-schemas.tsruns3,575 bytes../azure-app-onboard/scaffold/references/self-healing.mddoc2,405 bytes../azure-app-onboard/scaffold/references/self-review-checklist.mddoc9,252 bytes../azure-app-onboard/scaffold/references/self-review-procedure.mddoc2,343 bytes../azure-app-onboard/scaffold/references/subagent-iac-gen.mddoc9,749 bytes../azure-app-onboard/scaffold/references/subagent-review.mddoc3,596 bytes../azure-app-onboard/scaffold/references/subagent-validate.mddoc7,325 bytes../azure-app-onboard/scaffold/references/terraform-patterns.mddoc7,037 bytes../azure-app-onboard/scaffold/references/validation-and-manifest.mddoc5,255 bytes../azure-app-onboard/scaffold/references/waf-checklist.mddoc2,330 bytes../azure-app-onboard/scaffold/scripts/scaffold-conformance.ps1runs13,131 bytes../azure-app-onboard/scaffold/scripts/scaffold-conformance.shruns14,083 bytes../azure-cloud-migrate/SKILL.mddoc4,355 bytes../azure-cloud-migrate/references/services/app-service/app-engine-to-app-service.mddoc7,302 bytes../azure-cloud-migrate/references/services/app-service/assessment.mddoc5,342 bytes../azure-cloud-migrate/references/services/app-service/beanstalk-to-app-service.mddoc6,508 bytes../azure-cloud-migrate/references/services/app-service/code-migration.mddoc5,069 bytes../azure-cloud-migrate/references/services/app-service/global-rules.mddoc2,911 bytes../azure-cloud-migrate/references/services/app-service/heroku-to-app-service.mddoc7,728 bytes../azure-cloud-migrate/references/services/container-apps/assessment-guide.mddoc7,164 bytes../azure-cloud-migrate/references/services/container-apps/cloudrun-assessment-guide.mddoc2,554 bytes../azure-cloud-migrate/references/services/container-apps/cloudrun-deployment-guide.mddoc8,117 bytes../azure-cloud-migrate/references/services/container-apps/cloudrun-to-container-apps.mddoc2,233 bytes../azure-cloud-migrate/references/services/container-apps/deployment-guide.mddoc9,859 bytes../azure-cloud-migrate/references/services/container-apps/fargate-assessment-guide.mddoc2,456 bytes../azure-cloud-migrate/references/services/container-apps/fargate-deployment-guide.mddoc10,351 bytes../azure-cloud-migrate/references/services/container-apps/fargate-to-container-apps.mddoc4,052 bytes../azure-cloud-migrate/references/services/container-apps/k8s-to-container-apps.mddoc4,987 bytes../azure-cloud-migrate/references/services/container-apps/spring-apps-to-aca.mddoc3,858 bytes../azure-cloud-migrate/references/services/container-apps/spring-assessment-guide.mddoc5,372 bytes../azure-cloud-migrate/references/services/container-apps/spring-dependency-patterns.mddoc1,180 bytes../azure-cloud-migrate/references/services/container-apps/spring-deployment-guide.mddoc15,483 bytes../azure-cloud-migrate/references/services/functions/assessment.mddoc6,454 bytes../azure-cloud-migrate/references/services/functions/code-migration.mddoc6,121 bytes../azure-cloud-migrate/references/services/functions/global-rules.mddoc3,403 bytes../azure-cloud-migrate/references/services/functions/lambda-to-functions.mddoc10,489 bytes../azure-cloud-migrate/references/services/functions/runtimes/csharp.mddoc5,611 bytes../azure-cloud-migrate/references/services/functions/runtimes/java.mddoc6,554 bytes../azure-cloud-migrate/references/services/functions/runtimes/javascript.mddoc8,740 bytes../azure-cloud-migrate/references/services/functions/runtimes/powershell.mddoc5,112 bytes../azure-cloud-migrate/references/services/functions/runtimes/python.mddoc6,530 bytes../azure-cloud-migrate/references/services/functions/runtimes/typescript.mddoc3,592 bytes../azure-cloud-migrate/references/workflow-details.mddoc2,388 bytes../azure-compliance/SKILL.mddoc3,974 bytes../azure-compliance/references/auth-best-practices.mddoc6,207 bytes../azure-compliance/references/azqr-recommendations.mddoc5,786 bytes../azure-compliance/references/azqr-remediation-patterns.mddoc7,946 bytes../azure-compliance/references/azure-keyvault-expiration-audit.mddoc5,152 bytes../azure-compliance/references/azure-quick-review.mddoc5,069 bytes../azure-compliance/references/azure-resource-graph.mddoc2,697 bytes../azure-compliance/references/sdk/azure-keyvault-certificates-rust.mddoc1,013 bytes../azure-compliance/references/sdk/azure-keyvault-keys-rust.mddoc1,291 bytes../azure-compliance/references/sdk/azure-keyvault-keys-ts.mddoc1,019 bytes../azure-compliance/references/sdk/azure-keyvault-py.mddoc1,135 bytes../azure-compliance/references/sdk/azure-keyvault-secrets-rust.mddoc1,334 bytes../azure-compliance/references/sdk/azure-keyvault-secrets-ts.mddoc1,043 bytes../azure-compliance/references/sdk/azure-security-keyvault-keys-dotnet.mddoc1,170 bytes../azure-compliance/references/sdk/azure-security-keyvault-keys-java.mddoc1,381 bytes../azure-compliance/references/sdk/azure-security-keyvault-secrets-java.mddoc1,517 bytes../azure-compute/SKILL.mddoc2,619 bytes../azure-compute/references/retail-prices-api.mddoc6,439 bytes../azure-compute/references/vm-families.mddoc5,942 bytes../azure-compute/references/vm-quotas.mddoc4,191 bytes../azure-compute/references/vmss-guide.mddoc6,348 bytes../azure-compute/workflows/capacity-reservation/capacity-reservation.mddoc7,971 bytes../azure-compute/workflows/capacity-reservation/references/association-disassociation.mddoc3,908 bytes../azure-compute/workflows/capacity-reservation/references/capacity-reservation-overview.mddoc6,108 bytes../azure-compute/workflows/essential-machine-management/essential-machine-management.mddoc5,101 bytes../azure-compute/workflows/essential-machine-management/references/emm-enable-flow-portal-guidance.mddoc3,140 bytes../azure-compute/workflows/essential-machine-management/references/emm-enable-flow.mddoc9,429 bytes../azure-compute/workflows/essential-machine-management/references/emm-overview.mddoc2,442 bytes../azure-compute/workflows/essential-machine-management/references/emm-prerequisites.mddoc3,544 bytes../azure-compute/workflows/vm-creator/examples/bicep/README.mddoc1,681 bytes../azure-compute/workflows/vm-creator/examples/bicep/main.bicepasset3,858 bytes../azure-compute/workflows/vm-creator/examples/terraform/README.mddoc2,562 bytes../azure-compute/workflows/vm-creator/examples/terraform/main.tfasset3,324 bytes../azure-compute/workflows/vm-creator/examples/terraform/outputs.tfasset135 bytes../azure-compute/workflows/vm-creator/examples/terraform/variables.tfasset1,010 bytes../azure-compute/workflows/vm-creator/references/delivery-options/github-pr.mddoc3,289 bytes../azure-compute/workflows/vm-creator/references/delivery-options/index.mddoc2,326 bytes../azure-compute/workflows/vm-creator/references/delivery-options/print.mddoc474 bytes../azure-compute/workflows/vm-creator/references/delivery-options/save-local.mddoc2,045 bytes../azure-compute/workflows/vm-creator/references/depth-probe/beginner.mddoc1,214 bytes../azure-compute/workflows/vm-creator/references/depth-probe/cost-deep.mddoc1,150 bytes../azure-compute/workflows/vm-creator/references/depth-probe/index.mddoc3,043 bytes../azure-compute/workflows/vm-creator/references/depth-probe/networking-deep.mddoc1,623 bytes../azure-compute/workflows/vm-creator/references/depth-probe/security-deep.mddoc1,270 bytes../azure-compute/workflows/vm-creator/references/depth-probe/spec-deep.mddoc1,377 bytes../azure-compute/workflows/vm-creator/references/mcp-tools.mddoc2,329 bytes../azure-compute/workflows/vm-creator/references/output-adapters/az-cli.mddoc1,948 bytes../azure-compute/workflows/vm-creator/references/output-adapters/bicep.mddoc1,760 bytes../azure-compute/workflows/vm-creator/references/output-adapters/index.mddoc3,053 bytes../azure-compute/workflows/vm-creator/references/output-adapters/mcp-apply.mddoc2,649 bytes../azure-compute/workflows/vm-creator/references/output-adapters/terraform.mddoc1,555 bytes../azure-compute/workflows/vm-creator/references/plan-card.mddoc4,015 bytes../azure-compute/workflows/vm-creator/references/validation-gates.mddoc2,225 bytes../azure-compute/workflows/vm-creator/vm-creator.mddoc7,681 bytes../azure-compute/workflows/vm-recommender/references/handoff-to-creator.mddoc1,684 bytes../azure-compute/workflows/vm-recommender/references/web-fetch-policy.mddoc1,661 bytes../azure-compute/workflows/vm-recommender/vm-recommender.mddoc6,586 bytes../azure-deploy/SKILL.mddoc6,632 bytes../azure-deploy/references/auth-best-practices.mddoc6,207 bytes../azure-deploy/references/global-rules.mddoc1,269 bytes../azure-deploy/references/live-role-verification.mddoc3,965 bytes../azure-deploy/references/pre-deploy-checklist.mddoc18,891 bytes../azure-deploy/references/recipes/README.mddoc431 bytes../azure-deploy/references/recipes/azcli/README.mddoc1,721 bytes../azure-deploy/references/recipes/azcli/errors.mddoc492 bytes../azure-deploy/references/recipes/azcli/verify.mddoc2,059 bytes../azure-deploy/references/recipes/azd/README.mddoc3,746 bytes../azure-deploy/references/recipes/azd/ef-migrations.mddoc5,102 bytes../azure-deploy/references/recipes/azd/errors.mddoc15,752 bytes../azure-deploy/references/recipes/azd/functions-deploy.mddoc3,542 bytes../azure-deploy/references/recipes/azd/post-deployment.mddoc4,299 bytes../azure-deploy/references/recipes/azd/scripts/apply-migrations.ps1runs1,865 bytes../azure-deploy/references/recipes/azd/scripts/apply-migrations.shruns1,793 bytes../azure-deploy/references/recipes/azd/scripts/grant-and-migrate.ps1runs4,351 bytes../azure-deploy/references/recipes/azd/scripts/grant-and-migrate.shruns4,368 bytes../azure-deploy/references/recipes/azd/sql-entra-auth.mddoc2,566 bytes../azure-deploy/references/recipes/azd/sql-managed-identity.mddoc7,612 bytes../azure-deploy/references/recipes/azd/verify.mddoc4,985 bytes../azure-deploy/references/recipes/bicep/README.mddoc2,412 bytes../azure-deploy/references/recipes/bicep/errors.mddoc511 bytes../azure-deploy/references/recipes/bicep/verify.mddoc763 bytes../azure-deploy/references/recipes/cicd/README.mddoc1,232 bytes../azure-deploy/references/recipes/cicd/errors.mddoc542 bytes../azure-deploy/references/recipes/cicd/examples/azdo-azd.ymlasset487 bytes../azure-deploy/references/recipes/cicd/examples/azdo-multistage.ymlasset831 bytes../azure-deploy/references/recipes/cicd/examples/github-azd.ymlasset782 bytes../azure-deploy/references/recipes/cicd/examples/github-bicep.ymlasset660 bytes../azure-deploy/references/recipes/cicd/verify.mddoc754 bytes../azure-deploy/references/recipes/terraform/README.mddoc3,235 bytes../azure-deploy/references/recipes/terraform/errors.mddoc858 bytes../azure-deploy/references/recipes/terraform/verify.mddoc752 bytes../azure-deploy/references/region-availability.mddoc3,031 bytes../azure-deploy/references/sdk/azd-deployment.mddoc792 bytes../azure-deploy/references/sdk/azure-identity-dotnet.mddoc941 bytes../azure-deploy/references/sdk/azure-identity-java.mddoc1,249 bytes../azure-deploy/references/sdk/azure-identity-py.mddoc1,149 bytes../azure-deploy/references/sdk/azure-identity-ts.mddoc1,145 bytes../azure-deploy/references/troubleshooting.mddoc8,172 bytes../azure-diagnostics/SKILL.mddoc7,481 bytes../azure-diagnostics/references/app-service/README.mddoc7,967 bytes../azure-diagnostics/references/azure-resource-graph.mddoc2,909 bytes../azure-diagnostics/references/container-apps/README.mddoc3,577 bytes../azure-diagnostics/references/functions/README.mddoc3,979 bytes../azure-diagnostics/references/functions/durable.mddoc7,827 bytes../azure-diagnostics/references/functions/triggers.mddoc8,516 bytes../azure-diagnostics/references/kql-queries.mddoc1,342 bytes../azure-diagnostics/scripts/aks-baseline.ps1runs7,581 bytes../azure-diagnostics/scripts/aks-baseline.shruns7,141 bytes../azure-diagnostics/scripts/appservice-diagnostics.ps1runs2,750 bytes../azure-diagnostics/scripts/appservice-diagnostics.shruns3,362 bytes../azure-diagnostics/scripts/containerapp-diagnostics.ps1runs2,605 bytes../azure-diagnostics/scripts/containerapp-diagnostics.shruns3,200 bytes../azure-diagnostics/scripts/pod-evidence.ps1runs6,749 bytes../azure-diagnostics/scripts/pod-evidence.shruns7,222 bytes../azure-diagnostics/scripts/run-ig.ps1runs5,690 bytes../azure-diagnostics/scripts/run-ig.shruns6,664 bytes../azure-diagnostics/scripts/test-messaging-connectivity.ps1runs6,491 bytes../azure-diagnostics/scripts/test-messaging-connectivity.shruns6,974 bytes../azure-diagnostics/troubleshooting/aks/aks-troubleshooting.mddoc9,424 bytes../azure-diagnostics/troubleshooting/aks/general-diagnostics.mddoc2,053 bytes../azure-diagnostics/troubleshooting/aks/load-balancer-and-ingress.mddoc3,687 bytes../azure-diagnostics/troubleshooting/aks/network-policy.mddoc832 bytes../azure-diagnostics/troubleshooting/aks/networking.mddoc5,597 bytes../azure-diagnostics/troubleshooting/aks/node-issues.mddoc4,833 bytes../azure-diagnostics/troubleshooting/aks/optional-aks-operations.mddoc2,402 bytes../azure-diagnostics/troubleshooting/aks/pod-failures.mddoc7,751 bytes../azure-diagnostics/troubleshooting/aks/references/aks-mcp.mddoc2,404 bytes../azure-diagnostics/troubleshooting/aks/references/command-flows.mddoc4,160 bytes../azure-diagnostics/troubleshooting/aks/references/inspektor-gadget.mddoc7,795 bytes../azure-diagnostics/troubleshooting/aks/references/structured-input-modes.mddoc1,508 bytes../azure-diagnostics/troubleshooting/aks/spot-and-zone-issues.mddoc2,608 bytes../azure-diagnostics/troubleshooting/aks/upgrade-operations.mddoc2,252 bytes../azure-diagnostics/troubleshooting/compute/references/cannot-connect-to-vm.mddoc3,204 bytes../azure-diagnostics/troubleshooting/compute/references/credential-auth-errors.mddoc2,365 bytes../azure-diagnostics/troubleshooting/compute/references/firewall-blocking.mddoc2,376 bytes../azure-diagnostics/troubleshooting/compute/references/network-connectivity.mddoc2,604 bytes../azure-diagnostics/troubleshooting/compute/references/rdp-connectivity.mddoc2,800 bytes../azure-diagnostics/troubleshooting/compute/references/rdp-service-config.mddoc3,299 bytes../azure-diagnostics/troubleshooting/compute/references/ssh-connectivity.mddoc2,979 bytes../azure-diagnostics/troubleshooting/compute/references/vm-agent-not-responding.mddoc3,723 bytes../azure-diagnostics/troubleshooting/compute/vm-troubleshooting.mddoc3,384 bytes../azure-diagnostics/troubleshooting/messaging/README.mddoc1,606 bytes../azure-diagnostics/troubleshooting/messaging/auth-best-practices.mddoc6,207 bytes../azure-diagnostics/troubleshooting/messaging/azure-eventhubs-dotnet.mddoc3,573 bytes../azure-diagnostics/troubleshooting/messaging/azure-eventhubs-java.mddoc3,298 bytes../azure-diagnostics/troubleshooting/messaging/azure-eventhubs-js.mddoc2,777 bytes../azure-diagnostics/troubleshooting/messaging/azure-eventhubs-py.mddoc4,454 bytes../azure-diagnostics/troubleshooting/messaging/azure-servicebus-dotnet.mddoc2,568 bytes../azure-diagnostics/troubleshooting/messaging/azure-servicebus-java.mddoc2,281 bytes../azure-diagnostics/troubleshooting/messaging/azure-servicebus-js.mddoc2,489 bytes../azure-diagnostics/troubleshooting/messaging/azure-servicebus-py.mddoc2,388 bytes../azure-diagnostics/troubleshooting/messaging/service-troubleshooting.mddoc5,193 bytes../azure-enterprise-infra-planner/SKILL.mddoc6,339 bytes../azure-enterprise-infra-planner/references/bicep-generation.mddoc5,246 bytes../azure-enterprise-infra-planner/references/constraints/README.mddoc1,249 bytes../azure-enterprise-infra-planner/references/constraints/ai-ml.mddoc3,292 bytes../azure-enterprise-infra-planner/references/constraints/compute-apps.mddoc8,000 bytes../azure-enterprise-infra-planner/references/constraints/compute-infra.mddoc4,564 bytes../azure-enterprise-infra-planner/references/constraints/data-analytics.mddoc6,489 bytes../azure-enterprise-infra-planner/references/constraints/data-relational.mddoc5,044 bytes../azure-enterprise-infra-planner/references/constraints/messaging.mddoc2,573 bytes../azure-enterprise-infra-planner/references/constraints/monitoring.mddoc1,776 bytes../azure-enterprise-infra-planner/references/constraints/networking-connectivity.mddoc6,282 bytes../azure-enterprise-infra-planner/references/constraints/networking-core.mddoc7,166 bytes../azure-enterprise-infra-planner/references/constraints/networking-traffic.mddoc4,708 bytes../azure-enterprise-infra-planner/references/constraints/security.mddoc2,409 bytes../azure-enterprise-infra-planner/references/deployment.mddoc3,803 bytes../azure-enterprise-infra-planner/references/pairing-checks.mddoc3,753 bytes../azure-enterprise-infra-planner/references/phases/1-extract-insights.mddoc2,653 bytes../azure-enterprise-infra-planner/references/phases/2-research-best-practices.mddoc2,906 bytes../azure-enterprise-infra-planner/references/phases/3-research-resources.mddoc3,387 bytes../azure-enterprise-infra-planner/references/phases/4-generate-plan.mddoc792 bytes../azure-enterprise-infra-planner/references/phases/5-verify.mddoc814 bytes../azure-enterprise-infra-planner/references/phases/6-generate-iac.mddoc2,606 bytes../azure-enterprise-infra-planner/references/phases/7-deploy.mddoc1,300 bytes../azure-enterprise-infra-planner/references/referenced-workload.mddoc7,504 bytes../azure-enterprise-infra-planner/references/resources/README.mddoc1,647 bytes../azure-enterprise-infra-planner/references/resources/ai-ml.mddoc2,162 bytes../azure-enterprise-infra-planner/references/resources/compute-apps.mddoc4,118 bytes../azure-enterprise-infra-planner/references/resources/compute-infra.mddoc2,897 bytes../azure-enterprise-infra-planner/references/resources/data-analytics.mddoc3,078 bytes../azure-enterprise-infra-planner/references/resources/data-relational.mddoc2,695 bytes../azure-enterprise-infra-planner/references/resources/messaging.mddoc2,001 bytes../azure-enterprise-infra-planner/references/resources/monitoring.mddoc1,515 bytes../azure-enterprise-infra-planner/references/resources/networking-connectivity.mddoc3,698 bytes../azure-enterprise-infra-planner/references/resources/networking-core.mddoc4,406 bytes../azure-enterprise-infra-planner/references/resources/networking-traffic.mddoc2,634 bytes../azure-enterprise-infra-planner/references/resources/security.mddoc1,510 bytes../azure-enterprise-infra-planner/references/schema.mddoc3,853 bytes../azure-enterprise-infra-planner/references/terraform-generation.mddoc4,504 bytes../azure-enterprise-infra-planner/references/verification.mddoc2,669 bytes../azure-enterprise-infra-planner/references/waf-checklist.mddoc1,947 bytes../azure-enterprise-infra-planner/references/workflow.mddoc5,028 bytes../azure-kubernetes/SKILL.mddoc13,065 bytes../azure-kubernetes/azure-kubernetes-app-deploy/SKILL.mddoc2,012 bytes../azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/aspnet-core.mddoc7,432 bytes../azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/django.mddoc6,142 bytes../azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/express.mddoc6,811 bytes../azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/fastapi.mddoc5,947 bytes../azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/flask.mddoc6,322 bytes../azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/go.mddoc6,997 bytes../azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/nestjs.mddoc6,845 bytes../azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/nextjs.mddoc7,318 bytes../azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/spring-boot.mddoc6,157 bytes../azure-kubernetes/azure-kubernetes-app-deploy/phases/quick-deploy.mddoc8,017 bytes../azure-kubernetes/azure-kubernetes-app-deploy/references/base-images.mddoc3,657 bytes../azure-kubernetes/azure-kubernetes-app-deploy/references/detection.mddoc3,623 bytes../azure-kubernetes/azure-kubernetes-app-deploy/references/rollback.mddoc2,048 bytes../azure-kubernetes/azure-kubernetes-app-deploy/references/safeguards.mddoc2,999 bytes../azure-kubernetes/azure-kubernetes-app-deploy/references/workload-identity.mddoc7,566 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/dotnet.Dockerfileasset2,618 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/dotnet.dockerignoreasset125 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/go.Dockerfileasset2,177 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/go.dockerignoreasset128 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/java.Dockerfileasset3,120 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/java.dockerignoreasset156 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/node.Dockerfileasset3,063 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/node.dockerignoreasset173 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/python.Dockerfileasset2,637 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/python.dockerignoreasset201 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/rust.Dockerfileasset3,227 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/rust.dockerignoreasset87 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/github-actions/deploy.ymlasset7,623 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/configmap.yamlasset1,054 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/deployment.yamlasset3,458 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/gateway.yamlasset1,543 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/hpa.yamlasset1,418 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/httproute.yamlasset1,339 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/ingress.yamlasset1,959 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/namespace.yamlasset734 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/networkpolicy.yamlasset1,627 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/pdb.yamlasset758 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/service.yamlasset864 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/serviceaccount.yamlasset1,476 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/mermaid/architecture-diagram.mddoc1,663 bytes../azure-kubernetes/azure-kubernetes-app-deploy/templates/mermaid/summary-dashboard.mddoc1,785 bytes../azure-kubernetes/azure-kubernetes-automatic-readiness/SKILL.mddoc17,606 bytes../azure-kubernetes/azure-kubernetes-automatic-readiness/references/common-fixes.mddoc7,459 bytes../azure-kubernetes/azure-kubernetes-automatic-readiness/references/constraint-spec-v1.yamlasset24,895 bytes../azure-kubernetes/azure-kubernetes-automatic-readiness/references/mcp-integration.mddoc8,651 bytes../azure-kubernetes/azure-kubernetes-automatic-readiness/references/migration-guide-summary.mddoc7,081 bytes../azure-kubernetes/azure-kubernetes-automatic-readiness/scripts/sanitize-readiness-input.jqasset7,953 bytes../azure-kubernetes/references/azure-aks-autoscaler.mddoc4,083 bytes../azure-kubernetes/references/azure-aks-nap-readiness.mddoc2,527 bytes../azure-kubernetes/references/azure-aks-rightsizing.mddoc4,444 bytes../azure-kubernetes/references/azure-aks-spot.mddoc4,751 bytes../azure-kubernetes/references/azure-aks-vpa.mddoc1,472 bytes../azure-kubernetes/references/cli-reference.mddoc1,188 bytes../azure-kubernetes/references/optional-aks-operations.mddoc3,111 bytes../azure-kusto/SKILL.mddoc8,555 bytes../azure-messaging/SKILL.mddoc3,282 bytes../azure-prepare/SKILL.mddoc12,861 bytes../azure-prepare/references/analyze.mddoc4,115 bytes../azure-prepare/references/apim.mddoc5,848 bytes../azure-prepare/references/architecture.mddoc6,874 bytes../azure-prepare/references/aspire.mddoc18,609 bytes../azure-prepare/references/auth-best-practices.mddoc6,207 bytes../azure-prepare/references/azure-context.mddoc5,880 bytes../azure-prepare/references/functional-verification.mddoc3,301 bytes../azure-prepare/references/generate.mddoc5,444 bytes../azure-prepare/references/global-rules.mddoc2,045 bytes../azure-prepare/references/plan-template.mddoc10,304 bytes../azure-prepare/references/recipe-selection.mddoc3,249 bytes../azure-prepare/references/recipes/azcli/README.mddoc1,893 bytes../azure-prepare/references/recipes/azcli/commands.mddoc1,608 bytes../azure-prepare/references/recipes/azcli/scripts.mddoc2,285 bytes../azure-prepare/references/recipes/azd/README.mddoc3,894 bytes../azure-prepare/references/recipes/azd/aspire.mddoc9,153 bytes../azure-prepare/references/recipes/azd/azure-yaml.mddoc6,821 bytes../azure-prepare/references/recipes/azd/docker.mddoc2,071 bytes../azure-prepare/references/recipes/azd/iac-rules.mddoc5,934 bytes../azure-prepare/references/recipes/azd/terraform.mddoc14,305 bytes../azure-prepare/references/recipes/bicep/README.mddoc1,396 bytes../azure-prepare/references/recipes/bicep/patterns.mddoc3,103 bytes../azure-prepare/references/recipes/terraform/README.mddoc2,594 bytes../azure-prepare/references/recipes/terraform/patterns.mddoc3,631 bytes../azure-prepare/references/region-availability.mddoc1,742 bytes../azure-prepare/references/requirements.mddoc2,590 bytes../azure-prepare/references/research.mddoc8,798 bytes../azure-prepare/references/resources-limits-quotas.mddoc13,322 bytes../azure-prepare/references/runtimes/nodejs.mddoc6,047 bytes../azure-prepare/references/scan.mddoc3,080 bytes../azure-prepare/references/sdk/azd-deployment.mddoc792 bytes../azure-prepare/references/sdk/azure-appconfiguration-java.mddoc1,535 bytes../azure-prepare/references/sdk/azure-appconfiguration-py.mddoc1,171 bytes../azure-prepare/references/sdk/azure-appconfiguration-ts.mddoc1,217 bytes../azure-prepare/references/sdk/azure-identity-dotnet.mddoc941 bytes../azure-prepare/references/sdk/azure-identity-java.mddoc1,249 bytes../azure-prepare/references/sdk/azure-identity-py.mddoc1,149 bytes../azure-prepare/references/sdk/azure-identity-ts.mddoc1,145 bytes../azure-prepare/references/security.mddoc8,661 bytes../azure-prepare/references/services/aks/README.mddoc1,072 bytes../azure-prepare/references/services/aks/addons.mddoc957 bytes../azure-prepare/references/services/aks/bicep.mddoc1,688 bytes../azure-prepare/references/services/aks/manifests.mddoc1,388 bytes../azure-prepare/references/services/app-insights/README.mddoc848 bytes../azure-prepare/references/services/app-service/README.mddoc2,365 bytes../azure-prepare/references/services/app-service/bicep.mddoc4,267 bytes../azure-prepare/references/services/app-service/custom-domains.mddoc4,910 bytes../azure-prepare/references/services/app-service/deployment-slots.mddoc4,635 bytes../azure-prepare/references/services/app-service/networking.mddoc6,747 bytes../azure-prepare/references/services/app-service/scaling.mddoc1,517 bytes../azure-prepare/references/services/app-service/sku-selection.mddoc4,801 bytes../azure-prepare/references/services/app-service/templates/recipes/README.mddoc2,879 bytes../azure-prepare/references/services/app-service/templates/recipes/auth/README.mddoc3,150 bytes../azure-prepare/references/services/app-service/templates/recipes/auth/source/dotnet.mddoc1,380 bytes../azure-prepare/references/services/app-service/templates/recipes/auth/source/nodejs.mddoc2,511 bytes../azure-prepare/references/services/app-service/templates/recipes/auth/source/python.mddoc2,227 bytes../azure-prepare/references/services/app-service/templates/recipes/composition.mddoc4,881 bytes../azure-prepare/references/services/app-service/templates/recipes/cosmos/README.mddoc3,689 bytes../azure-prepare/references/services/app-service/templates/recipes/cosmos/source/dotnet.mddoc1,304 bytes../azure-prepare/references/services/app-service/templates/recipes/cosmos/source/nodejs.mddoc1,260 bytes../azure-prepare/references/services/app-service/templates/recipes/cosmos/source/python.mddoc1,142 bytes../azure-prepare/references/services/app-service/templates/recipes/redis/README.mddoc3,329 bytes../azure-prepare/references/services/app-service/templates/recipes/redis/source/dotnet.mddoc1,687 bytes../azure-prepare/references/services/app-service/templates/recipes/redis/source/nodejs.mddoc2,260 bytes../azure-prepare/references/services/app-service/templates/recipes/redis/source/python.mddoc2,968 bytes../azure-prepare/references/services/app-service/templates/recipes/sql/README.mddoc3,554 bytes../azure-prepare/references/services/app-service/templates/recipes/sql/source/dotnet.mddoc2,997 bytes../azure-prepare/references/services/app-service/templates/recipes/sql/source/nodejs.mddoc3,091 bytes../azure-prepare/references/services/app-service/templates/recipes/sql/source/python.mddoc4,506 bytes../azure-prepare/references/services/app-service/templates/selection.mddoc2,912 bytes../azure-prepare/references/services/app-service/templates/web-api.mddoc5,050 bytes../azure-prepare/references/services/app-service/templates/web-app.mddoc5,046 bytes../azure-prepare/references/services/container-apps/README.mddoc1,333 bytes../azure-prepare/references/services/container-apps/bicep.mddoc4,873 bytes../azure-prepare/references/services/container-apps/day2-operations.mddoc5,240 bytes../azure-prepare/references/services/container-apps/environment.mddoc1,227 bytes../azure-prepare/references/services/container-apps/health-probes.mddoc1,141 bytes../azure-prepare/references/services/container-apps/networking.mddoc5,209 bytes../azure-prepare/references/services/container-apps/revisions.mddoc5,064 bytes../azure-prepare/references/services/container-apps/scaling.mddoc1,397 bytes../azure-prepare/references/services/container-apps/terraform.mddoc6,267 bytes../azure-prepare/references/services/cosmos-db/README.mddoc1,462 bytes../azure-prepare/references/services/cosmos-db/bicep.mddoc1,893 bytes../azure-prepare/references/services/cosmos-db/partitioning.mddoc1,103 bytes../azure-prepare/references/services/cosmos-db/sdk.mddoc1,604 bytes../azure-prepare/references/services/durable-task-scheduler/README.mddoc4,991 bytes../azure-prepare/references/services/durable-task-scheduler/bicep.mddoc4,960 bytes../azure-prepare/references/services/durable-task-scheduler/dotnet.mddoc6,274 bytes../azure-prepare/references/services/durable-task-scheduler/java.mddoc7,910 bytes../azure-prepare/references/services/durable-task-scheduler/javascript.mddoc5,785 bytes../azure-prepare/references/services/durable-task-scheduler/python.mddoc6,590 bytes../azure-prepare/references/services/event-grid/README.mddoc1,052 bytes../azure-prepare/references/services/event-grid/bicep.mddoc1,698 bytes../azure-prepare/references/services/event-grid/subscriptions.mddoc1,596 bytes../azure-prepare/references/services/foundry/README.mddoc1,368 bytes../azure-prepare/references/services/foundry/region-availability.mddoc826 bytes../azure-prepare/references/services/functions/README.mddoc3,221 bytes../azure-prepare/references/services/functions/aspire-containerapps.mddoc3,394 bytes../azure-prepare/references/services/functions/bicep.mddoc12,204 bytes../azure-prepare/references/services/functions/cold-start.mddoc6,421 bytes../azure-prepare/references/services/functions/durable.mddoc1,858 bytes../azure-prepare/references/services/functions/hosting-plans.mddoc6,991 bytes../azure-prepare/references/services/functions/templates/README.mddoc6,698 bytes../azure-prepare/references/services/functions/templates/base/eval/python.mddoc762 bytes../azure-prepare/references/services/functions/templates/base/eval/summary.mddoc1,912 bytes../azure-prepare/references/services/functions/templates/base/eval/typescript.mddoc1,096 bytes../azure-prepare/references/services/functions/templates/recipes/README.mddoc1,076 bytes../azure-prepare/references/services/functions/templates/recipes/blob-eventgrid/README.mddoc1,628 bytes../azure-prepare/references/services/functions/templates/recipes/blob-eventgrid/eval/python.mddoc1,269 bytes../azure-prepare/references/services/functions/templates/recipes/blob-eventgrid/eval/summary.mddoc2,613 bytes../azure-prepare/references/services/functions/templates/recipes/common/dotnet-entry-point.mddoc2,003 bytes../azure-prepare/references/services/functions/templates/recipes/common/error-handling.mddoc2,238 bytes../azure-prepare/references/services/functions/templates/recipes/common/health-check.mddoc2,743 bytes../azure-prepare/references/services/functions/templates/recipes/common/nodejs-entry-point.mddoc4,234 bytes../azure-prepare/references/services/functions/templates/recipes/composition.mddoc11,356 bytes../azure-prepare/references/services/functions/templates/recipes/cosmosdb/README.mddoc1,587 bytes../azure-prepare/references/services/functions/templates/recipes/cosmosdb/eval/python.mddoc1,248 bytes../azure-prepare/references/services/functions/templates/recipes/cosmosdb/eval/summary.mddoc1,885 bytes../azure-prepare/references/services/functions/templates/recipes/cosmosdb/eval/typescript.mddoc1,368 bytes../azure-prepare/references/services/functions/templates/recipes/durable/README.mddoc1,872 bytes../azure-prepare/references/services/functions/templates/recipes/durable/eval/python.mddoc1,255 bytes../azure-prepare/references/services/functions/templates/recipes/durable/eval/summary.mddoc1,642 bytes../azure-prepare/references/services/functions/templates/recipes/eventhubs/README.mddoc1,265 bytes../azure-prepare/references/services/functions/templates/recipes/eventhubs/eval/python.mddoc1,262 bytes../azure-prepare/references/services/functions/templates/recipes/eventhubs/eval/summary.mddoc1,533 bytes../azure-prepare/references/services/functions/templates/recipes/mcp/README.mddoc1,946 bytes../azure-prepare/references/services/functions/templates/recipes/mcp/eval/python.mddoc1,264 bytes../azure-prepare/references/services/functions/templates/recipes/mcp/eval/summary.mddoc1,559 bytes../azure-prepare/references/services/functions/templates/recipes/servicebus/README.mddoc1,316 bytes../azure-prepare/references/services/functions/templates/recipes/servicebus/eval/python.mddoc1,344 bytes../azure-prepare/references/services/functions/templates/recipes/servicebus/eval/summary.mddoc1,813 bytes../azure-prepare/references/services/functions/templates/recipes/servicebus/eval/typescript.mddoc1,401 bytes../azure-prepare/references/services/functions/templates/recipes/sql/README.mddoc1,849 bytes../azure-prepare/references/services/functions/templates/recipes/sql/eval/python.mddoc1,211 bytes../azure-prepare/references/services/functions/templates/recipes/sql/eval/summary.mddoc2,818 bytes../azure-prepare/references/services/functions/templates/recipes/timer/README.mddoc1,490 bytes../azure-prepare/references/services/functions/templates/recipes/timer/eval/python.mddoc1,198 bytes../azure-prepare/references/services/functions/templates/recipes/timer/eval/summary.mddoc1,499 bytes../azure-prepare/references/services/functions/templates/selection.mddoc4,436 bytes../azure-prepare/references/services/functions/terraform.mddoc13,650 bytes../azure-prepare/references/services/key-vault/README.mddoc1,344 bytes../azure-prepare/references/services/key-vault/bicep.mddoc1,789 bytes../azure-prepare/references/services/key-vault/sdk.mddoc1,933 bytes../azure-prepare/references/services/logic-apps/README.mddoc1,072 bytes../azure-prepare/references/services/logic-apps/bicep.mddoc1,889 bytes../azure-prepare/references/services/logic-apps/triggers.mddoc1,725 bytes../azure-prepare/references/services/service-bus/README.mddoc1,481 bytes../azure-prepare/references/services/service-bus/bicep.mddoc3,768 bytes../azure-prepare/references/services/service-bus/patterns.mddoc4,349 bytes../azure-prepare/references/services/sql-database/README.mddoc1,922 bytes../azure-prepare/references/services/sql-database/auth.mddoc4,124 bytes../azure-prepare/references/services/sql-database/bicep.mddoc8,266 bytes../azure-prepare/references/services/sql-database/scripts/grant-sql-access.ps1runs4,535 bytes../azure-prepare/references/services/sql-database/scripts/grant-sql-access.shruns4,304 bytes../azure-prepare/references/services/sql-database/sdk.mddoc1,889 bytes../azure-prepare/references/services/static-web-apps/README.mddoc1,357 bytes../azure-prepare/references/services/static-web-apps/bicep.mddoc1,036 bytes../azure-prepare/references/services/static-web-apps/deployment.mddoc1,887 bytes../azure-prepare/references/services/static-web-apps/region-availability.mddoc674 bytes../azure-prepare/references/services/static-web-apps/routing.mddoc1,212 bytes../azure-prepare/references/services/static-web-apps/terraform.mddoc3,551 bytes../azure-prepare/references/services/storage/README.mddoc1,476 bytes../azure-prepare/references/services/storage/access.mddoc3,666 bytes../azure-prepare/references/services/storage/bicep.mddoc1,746 bytes../azure-prepare/references/specialized-routing.mddoc4,405 bytes../azure-quotas/SKILL.mddoc12,065 bytes../azure-quotas/references/advanced-commands.mddoc1,814 bytes../azure-quotas/references/commands.mddoc10,619 bytes../azure-quotas/scripts/check-quota.ps1runs3,409 bytes../azure-quotas/scripts/check-quota.shruns3,175 bytes../azure-reliability/SKILL.mddoc24,910 bytes../azure-reliability/references/configure-health-probes.mddoc2,190 bytes../azure-reliability/references/configure-multi-region.mddoc18,934 bytes../azure-reliability/references/configure-storage.mddoc5,481 bytes../azure-reliability/references/configure-zone-redundancy.mddoc1,955 bytes../azure-reliability/references/health-probe-checks.mddoc3,544 bytes../azure-reliability/references/iac-patching-bicep.mddoc7,031 bytes../azure-reliability/references/iac-patching-terraform.mddoc4,815 bytes../azure-reliability/references/multi-region-checks.mddoc6,120 bytes../azure-reliability/references/services/app-service/reliability.mddoc10,484 bytes../azure-reliability/references/services/functions/reliability.mddoc6,389 bytes../azure-reliability/references/storage-redundancy-checks.mddoc5,206 bytes../azure-reliability/references/zone-redundancy-checks.mddoc2,930 bytes../azure-resource-lookup/SKILL.mddoc5,569 bytes../azure-resource-lookup/references/azure-resource-graph.mddoc5,048 bytes../azure-resource-visualizer/SKILL.mddoc8,528 bytes../azure-resource-visualizer/assets/example-diagram.mddoc1,778 bytes../azure-resource-visualizer/assets/template-architecture.mddoc970 bytes../azure-resource-visualizer/references/azure-resource-graph.mddoc2,390 bytes../azure-storage/SKILL.mddoc5,024 bytes../azure-storage/references/auth-best-practices.mddoc6,207 bytes../azure-storage/references/sdk-usage.mddoc4,542 bytes../azure-storage/references/sdk/azure-data-tables-java.mddoc1,314 bytes../azure-storage/references/sdk/azure-data-tables-py.mddoc1,070 bytes../azure-storage/references/sdk/azure-storage-blob-java.mddoc1,350 bytes../azure-storage/references/sdk/azure-storage-blob-py.mddoc1,025 bytes../azure-storage/references/sdk/azure-storage-blob-rust.mddoc1,094 bytes../azure-storage/references/sdk/azure-storage-blob-ts.mddoc1,221 bytes../azure-storage/references/sdk/azure-storage-file-datalake-py.mddoc1,367 bytes../azure-storage/references/sdk/azure-storage-file-share-py.mddoc1,006 bytes../azure-storage/references/sdk/azure-storage-file-share-ts.mddoc1,262 bytes../azure-storage/references/sdk/azure-storage-queue-py.mddoc1,091 bytes../azure-storage/references/sdk/azure-storage-queue-ts.mddoc1,258 bytes../azure-upgrade/SKILL.mddoc8,861 bytes../azure-upgrade/references/global-rules.mddoc4,586 bytes../azure-upgrade/references/languages/java/INSTRUCTION.mddoc11,589 bytes../azure-upgrade/references/languages/java/README.mddoc3,066 bytes../azure-upgrade/references/languages/java/bom-migration/bom-gradle-settings.mddoc6,863 bytes../azure-upgrade/references/languages/java/bom-migration/bom-gradle-toml.mddoc2,794 bytes../azure-upgrade/references/languages/java/bom-migration/bom-gradle.mddoc5,266 bytes../azure-upgrade/references/languages/java/bom-migration/bom-maven.mddoc4,835 bytes../azure-upgrade/references/languages/java/bom-migration/bom-migration.mddoc4,293 bytes../azure-upgrade/references/languages/java/bom-migration/bom-validation.mddoc1,549 bytes../azure-upgrade/references/languages/java/package-specific/com.microsoft.azure.eventprocessorhost.mddoc5,675 bytes../azure-upgrade/references/languages/java/package-specific/com.microsoft.azure.management.mddoc9,713 bytes../azure-upgrade/references/languages/java/rules/efficiency.mddoc265 bytes../azure-upgrade/references/languages/java/rules/execution-guidelines.mddoc1,063 bytes../azure-upgrade/references/languages/java/rules/review-code-changes.mddoc541 bytes../azure-upgrade/references/languages/java/rules/troubleshooting.mddoc2,586 bytes../azure-upgrade/references/languages/java/rules/upgrade-strategy.mddoc1,403 bytes../azure-upgrade/references/languages/java/rules/upgrade-success-criteria.mddoc686 bytes../azure-upgrade/references/languages/java/scripts/upgrade_bom.pyruns20,074 bytes../azure-upgrade/references/languages/java/templates/PLAN_TEMPLATE.mddoc9,656 bytes../azure-upgrade/references/languages/java/templates/PROGRESS_TEMPLATE.mddoc9,336 bytes../azure-upgrade/references/languages/java/templates/SUMMARY_TEMPLATE.mddoc8,815 bytes../azure-upgrade/references/languages/java/workflow/phase-1-precheck.mddoc2,397 bytes../azure-upgrade/references/languages/java/workflow/phase-2-plan.mddoc2,960 bytes../azure-upgrade/references/languages/java/workflow/phase-3-execute.mddoc2,435 bytes../azure-upgrade/references/languages/java/workflow/phase-4-summarize.mddoc1,154 bytes../azure-upgrade/references/services/functions/consumption-to-flex/linux/assessment.mddoc4,692 bytes../azure-upgrade/references/services/functions/consumption-to-flex/linux/automation.mddoc17,691 bytes../azure-upgrade/references/services/functions/consumption-to-flex/linux/workflow.mddoc11,863 bytes../azure-upgrade/references/services/functions/consumption-to-flex/windows/assessment.mddoc6,998 bytes../azure-upgrade/references/services/functions/consumption-to-flex/windows/automation.mddoc4,215 bytes../azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/access-key-copy.mddoc2,540 bytes../azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/access-key-strategy.mddoc2,128 bytes../azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/app-creation.mddoc17,037 bytes../azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/app-settings.mddoc12,298 bytes../azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/built-in-authentication.mddoc3,378 bytes../azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/cleanup-and-rollback.mddoc3,244 bytes../azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/code-deployment.mddoc8,818 bytes../azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/configuration-inventory.mddoc7,341 bytes../azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/deployment-package.mddoc6,144 bytes../azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/discovery-and-assessment.mddoc9,305 bytes../azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/networking-and-storage.mddoc4,011 bytes../azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/site-and-identity.mddoc5,102 bytes../azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/trigger-safety-and-monitoring.mddoc12,119 bytes../azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/validation-and-cutover.mddoc9,944 bytes../azure-upgrade/references/services/functions/consumption-to-flex/windows/dependency-scan.mddoc13,603 bytes../azure-upgrade/references/services/functions/consumption-to-flex/windows/progress-tracking.mddoc5,371 bytes../azure-upgrade/references/services/functions/consumption-to-flex/windows/workflow.mddoc28,555 bytes../azure-upgrade/references/services/redis/redis-to-amr.mddoc7,700 bytes../azure-upgrade/references/workflow-details.mddoc2,135 bytes../azure-validate/SKILL.mddoc3,535 bytes../azure-validate/references/aspire-functions-secrets.mddoc3,771 bytes../azure-validate/references/global-rules.mddoc1,215 bytes../azure-validate/references/policy-validation.mddoc1,493 bytes../azure-validate/references/recipes/README.mddoc374 bytes../azure-validate/references/recipes/azcli/README.mddoc2,786 bytes../azure-validate/references/recipes/azcli/errors.mddoc505 bytes../azure-validate/references/recipes/azd/README.mddoc5,410 bytes../azure-validate/references/recipes/azd/aspire.mddoc1,772 bytes../azure-validate/references/recipes/azd/environment.mddoc1,979 bytes../azure-validate/references/recipes/azd/errors.mddoc2,680 bytes../azure-validate/references/recipes/azd/scripts/set-aspire-aca-env.ps1runs3,588 bytes../azure-validate/references/recipes/azd/scripts/set-aspire-aca-env.shruns3,638 bytes../azure-validate/references/recipes/bicep/README.mddoc2,562 bytes../azure-validate/references/recipes/bicep/errors.mddoc374 bytes../azure-validate/references/recipes/scripts/validate-deployment.ps1runs5,278 bytes../azure-validate/references/recipes/scripts/validate-deployment.shruns6,198 bytes../azure-validate/references/recipes/terraform/README.mddoc4,040 bytes../azure-validate/references/recipes/terraform/errors.mddoc2,889 bytes../azure-validate/references/recipes/terraform/scripts/validate-terraform.ps1runs6,933 bytes../azure-validate/references/recipes/terraform/scripts/validate-terraform.shruns6,808 bytes../azure-validate/references/region-availability.mddoc3,031 bytes../azure-validate/references/role-verification.mddoc3,947 bytes../azure-validate/references/scripts/scan-aspire-functions-secrets.ps1runs3,053 bytes../azure-validate/references/scripts/scan-aspire-functions-secrets.shruns3,342 bytes../azure-validate/references/scripts/workflow.ps1runs5,289 bytes../azure-validate/references/scripts/workflow.shruns5,856 bytes../discover-azure-skills/SKILL.mddoc2,316 bytes../discover-azure-skills/references/install/claude-code.mddoc339 bytes../discover-azure-skills/references/install/copilot-cli.mddoc339 bytes../discover-azure-skills/references/install/other.mddoc328 bytes../entra-agent-id/SKILL.mddoc16,036 bytes../entra-agent-id/references/known-limitations.mddoc4,754 bytes../entra-agent-id/references/oauth2-token-flow.mddoc4,507 bytes../entra-agent-id/references/obo-blueprint-setup.mddoc4,235 bytes../entra-agent-id/references/runtime-token-exchange.mddoc6,746 bytes../entra-agent-id/references/sdk-sidecar-deployment.mddoc6,276 bytes../entra-agent-id/references/sdk-sidecar.mddoc6,107 bytes../entra-app-registration/SKILL.mddoc8,223 bytes../entra-app-registration/references/BICEP-EXAMPLE.bicepasset5,328 bytes../entra-app-registration/references/api-permissions.mddoc10,198 bytes../entra-app-registration/references/auth-best-practices.mddoc6,207 bytes../entra-app-registration/references/cli-commands.mddoc8,852 bytes../entra-app-registration/references/console-app-example.mddoc11,005 bytes../entra-app-registration/references/first-app-registration.mddoc7,415 bytes../entra-app-registration/references/oauth-flows.mddoc9,540 bytes../entra-app-registration/references/sdk/azure-identity-dotnet.mddoc940 bytes../entra-app-registration/references/sdk/azure-identity-java.mddoc1,248 bytes../entra-app-registration/references/sdk/azure-identity-py.mddoc1,148 bytes../entra-app-registration/references/sdk/azure-identity-rust.mddoc805 bytes../entra-app-registration/references/sdk/azure-identity-ts.mddoc1,144 bytes../entra-app-registration/references/sdk/azure-keyvault-py.mddoc1,135 bytes../entra-app-registration/references/sdk/azure-keyvault-secrets-ts.mddoc1,043 bytes../entra-app-registration/references/sdk/microsoft-azure-webjobs-extensions-authentication-events-dotnet.mddoc1,522 bytes../entra-app-registration/references/troubleshooting.mddoc7,594 bytes../microsoft-foundry/.gitignoreasset0 bytes../microsoft-foundry/SKILL.mddoc31,092 bytes../microsoft-foundry/finetuning/SKILL.mddoc5,509 bytes../microsoft-foundry/finetuning/references/agentic-rft.mddoc3,234 bytes../microsoft-foundry/finetuning/references/dataset-formats.mddoc3,740 bytes../microsoft-foundry/finetuning/references/deployment.mddoc3,503 bytes../microsoft-foundry/finetuning/references/evaluation.mddoc5,924 bytes../microsoft-foundry/finetuning/references/grader-design.mddoc3,437 bytes../microsoft-foundry/finetuning/references/hyperparameters.mddoc3,233 bytes../microsoft-foundry/finetuning/references/large-file-uploads.mddoc927 bytes../microsoft-foundry/finetuning/references/platform-gotchas.mddoc2,069 bytes../microsoft-foundry/finetuning/references/reward-hacking.mddoc2,945 bytes../microsoft-foundry/finetuning/references/training-curves.mddoc4,183 bytes../microsoft-foundry/finetuning/references/training-types.mddoc3,161 bytes../microsoft-foundry/finetuning/references/vision-fine-tuning.mddoc4,205 bytes../microsoft-foundry/finetuning/scripts/calibrate_grader.pyruns9,493 bytes../microsoft-foundry/finetuning/scripts/check_training.pyruns7,987 bytes../microsoft-foundry/finetuning/scripts/cleanup.pyruns9,687 bytes../microsoft-foundry/finetuning/scripts/common.pyruns7,808 bytes../microsoft-foundry/finetuning/scripts/convert_dataset.pyruns10,936 bytes../microsoft-foundry/finetuning/scripts/deploy_model.pyruns9,618 bytes../microsoft-foundry/finetuning/scripts/evaluate_model.pyruns11,690 bytes../microsoft-foundry/finetuning/scripts/generate_distillation_data.pyruns10,299 bytes../microsoft-foundry/finetuning/scripts/monitor_training.pyruns5,866 bytes../microsoft-foundry/finetuning/scripts/score_dataset.pyruns7,873 bytes../microsoft-foundry/finetuning/scripts/submit_training.pyruns11,070 bytes../microsoft-foundry/finetuning/scripts/validate/__init__.pyruns305 bytes../microsoft-foundry/finetuning/scripts/validate/data_stats.pyruns6,331 bytes../microsoft-foundry/finetuning/scripts/validate/validate_dpo.pyruns3,807 bytes../microsoft-foundry/finetuning/scripts/validate/validate_rft.pyruns8,799 bytes../microsoft-foundry/finetuning/scripts/validate/validate_sft.pyruns4,573 bytes../microsoft-foundry/finetuning/workflows/dataset-creation.mddoc3,161 bytes../microsoft-foundry/finetuning/workflows/diagnose-poor-results.mddoc2,401 bytes../microsoft-foundry/finetuning/workflows/full-pipeline.mddoc3,167 bytes../microsoft-foundry/finetuning/workflows/iterative-training.mddoc3,178 bytes../microsoft-foundry/finetuning/workflows/quickstart.mddoc4,600 bytes../microsoft-foundry/foundry-agent/agent-optimizer/agent-optimizer.mddoc3,372 bytes../microsoft-foundry/foundry-agent/agent-optimizer/references/azd-setup.mddoc1,221 bytes../microsoft-foundry/foundry-agent/agent-optimizer/references/eval-yaml.mddoc3,311 bytes../microsoft-foundry/foundry-agent/agent-optimizer/references/optimize-workflow.mddoc2,187 bytes../microsoft-foundry/foundry-agent/agent-optimizer/references/python-patterns.mddoc4,096 bytes../microsoft-foundry/foundry-agent/agent-optimizer/references/scaffold.mddoc3,415 bytes../microsoft-foundry/foundry-agent/azd-guidance/azd-guidance.mddoc1,230 bytes../microsoft-foundry/foundry-agent/azd-guidance/references/azd-ai-cli.mddoc10,598 bytes../microsoft-foundry/foundry-agent/cicd/cicd.mddoc301 bytes../microsoft-foundry/foundry-agent/create/create-hosted.mddoc34,649 bytes../microsoft-foundry/foundry-agent/create/create-managed-harness.mddoc7,351 bytes../microsoft-foundry/foundry-agent/create/create-prompt.mddoc4,692 bytes../microsoft-foundry/foundry-agent/create/create-voice.mddoc13,430 bytes../microsoft-foundry/foundry-agent/create/quick-start-hosted.mddoc24,132 bytes../microsoft-foundry/foundry-agent/create/references/enable-incoming-a2a.mddoc3,740 bytes../microsoft-foundry/foundry-agent/create/references/foundry-model.mddoc1,598 bytes../microsoft-foundry/foundry-agent/create/references/foundry-tool-catalog.mddoc43,918 bytes../microsoft-foundry/foundry-agent/create/references/guardrails/guardrail-api-create.mddoc3,860 bytes../microsoft-foundry/foundry-agent/create/references/guardrails/guardrail-attach.mddoc3,855 bytes../microsoft-foundry/foundry-agent/create/references/guardrails/guardrail-manage.mddoc2,197 bytes../microsoft-foundry/foundry-agent/create/references/hosted-voice-yaml.mddoc1,737 bytes../microsoft-foundry/foundry-agent/create/references/langchain-langgraph-hosting.mddoc2,257 bytes../microsoft-foundry/foundry-agent/create/references/local-run.mddoc11,754 bytes../microsoft-foundry/foundry-agent/create/references/managed-harness-agent.mddoc3,616 bytes../microsoft-foundry/foundry-agent/create/references/re-host.mddoc2,683 bytes../microsoft-foundry/foundry-agent/create/references/sdk-operations.mddoc2,216 bytes../microsoft-foundry/foundry-agent/create/references/skills/managed-harness-agent-skill-attach.mddoc1,312 bytes../microsoft-foundry/foundry-agent/create/references/skills/skill-attach.mddoc7,176 bytes
Read SKILL.md
# AI Runway AKS Setup
This skill walks users from a bare Kubernetes cluster to a running AI model deployment. Follow each step in sequence unless the user provides `skip-to-step N` to resume from a specific phase.
> **Cost awareness:** GPU node pools incur significant compute charges (A100-80GB can cost $3–5+/hr). Confirm the user understands cost implications before provisioning GPU resources.
## Prerequisites
This skill assumes an AKS cluster already exists. If the user does not have a cluster, hand off to the `azure-kubernetes` skill first to provision one (with a GPU node pool unless CPU-only inference is acceptable), then return here.
## Quick Reference
| Property | Value |
|----------|-------|appinsights-instrumentation
When your agent uses it
Guidance for instrumenting webapps with Azure Application Insights. Provides telemetry patterns, SDK setup, and configuration references. WHEN: how to instrument app, App Insights SDK, telemetry patterns, what is App Insights, Application Insights guidance, instrumentation examples, APM best practices.
What it loads into context
Frontmatter
87 tokensAlways available to the agent
SKILL.md
852 tokensWhen the skill is activated
Reference documents
3,863 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Use This Skill
- When to Use azure-prepare Instead
- Prerequisites
- Guidelines
- SDK Quick References
- Platform-Specific Guides
Scripts executed separately
scripts/appinsights.ps1
Files
LICENSE.txtdoc1,078 bytesSKILL.mdcore3,794 bytesSKILL.mdcore3,794 bytesexamples/appinsights.bicepasset759 bytesreferences/aspnetcore.mddoc1,717 bytesreferences/auto.mddoc891 bytesreferences/container-apps.mddoc7,367 bytesreferences/nodejs.mddoc1,815 bytesreferences/python.mddoc1,812 bytesreferences/sdk/azure-monitor-opentelemetry-exporter-java.mddoc1,173 bytesreferences/sdk/azure-monitor-opentelemetry-exporter-py.mddoc963 bytesreferences/sdk/azure-monitor-opentelemetry-py.mddoc880 bytesreferences/sdk/azure-monitor-opentelemetry-ts.mddoc986 bytesscripts/appinsights.ps1runs1,221 bytes
Read SKILL.md
# AppInsights Instrumentation Guide
This skill provides **guidance and reference material** for instrumenting webapps with Azure Application Insights.
> **⛔ ADDING COMPONENTS?**
>
> If the user wants to **add App Insights to their app**, invoke **azure-prepare** instead.
> This skill provides reference material—azure-prepare orchestrates the actual changes.
## When to Use This Skill
- User asks **how** to instrument (guidance, patterns, examples)
- User needs SDK setup instructions
- azure-prepare invokes this skill during research phaseazure-ai
When your agent uses it
Build and troubleshoot Azure AI Search, Speech, OpenAI, and Document Intelligence apps. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, Speech SDK logs, session ID, result ID, OCR, convert text to speech.
What it loads into context
Frontmatter
92 tokensAlways available to the agent
SKILL.md
871 tokensWhen the skill is activated
Reference documents
12,303 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Services
- MCP Server (Preferred)
- AI Search Capabilities
- Speech Capabilities
- SDK Quick References
- Service Details
Scripts executed separately
scripts/analyze-speech-sdk-log.mjsscripts/analyze-speech-sdk-log.ps1scripts/analyze-speech-sdk-log.sh
Files
SKILL.mdcore3,681 bytesreferences/auth-best-practices.mddoc6,207 bytesreferences/sdk/azure-ai-contentsafety-java.mddoc1,401 bytesreferences/sdk/azure-ai-contentsafety-py.mddoc1,361 bytesreferences/sdk/azure-ai-contentsafety-ts.mddoc1,413 bytesreferences/sdk/azure-ai-document-intelligence-dotnet.mddoc1,456 bytesreferences/sdk/azure-ai-document-intelligence-ts.mddoc1,573 bytesreferences/sdk/azure-ai-openai-dotnet.mddoc1,419 bytesreferences/sdk/azure-ai-transcription-py.mddoc1,210 bytesreferences/sdk/azure-ai-translation-text-py.mddoc1,345 bytesreferences/sdk/azure-ai-translation-ts.mddoc1,369 bytesreferences/sdk/azure-ai-vision-imageanalysis-java.mddoc1,325 bytesreferences/sdk/azure-ai-vision-imageanalysis-py.mddoc1,297 bytesreferences/sdk/azure-search-documents-dotnet.mddoc1,334 bytesreferences/sdk/azure-search-documents-py.mddoc1,561 bytesreferences/sdk/azure-search-documents-ts.mddoc1,259 bytesreferences/speech/azure-checks.mddoc3,534 bytesreferences/speech/collection.mddoc3,608 bytesreferences/speech/diagnostics.mddoc3,999 bytesreferences/speech/interpretation.mddoc3,875 bytesreferences/speech/logging-apis.mddoc3,930 bytesreferences/speech/output.mddoc3,548 bytesreferences/speech/source-contract.mddoc3,885 bytesreferences/speech/without-node.mddoc1,970 bytesscripts/analyze-speech-sdk-log.mjsruns18,156 bytesscripts/analyze-speech-sdk-log.ps1runs1,411 bytesscripts/analyze-speech-sdk-log.shruns1,342 bytes
Read SKILL.md
# Azure AI Services
## Services
| Service | Use When | MCP Tools | CLI |
|---------|----------|-----------|-----|
| AI Search | Full-text, vector, hybrid search | `azure__search` | `az search` |
| Speech | Speech-to-text, text-to-speech, SDK logs | `azure__speech` | - |
| OpenAI | GPT models, embeddings, DALL-E | - | `az cognitiveservices` |
| Document Intelligence | Form extraction, OCR | - | - |
## MCP Server (Preferred)
When Azure MCP is enabled:azure-aigateway
When your agent uses it
Configure Azure API Management as an AI Gateway for AI models, MCP tools, and agents. WHEN: semantic caching, token limit, content safety, load balancing, AI model governance, MCP rate limiting, jailbreak detection, add Azure OpenAI backend, add AI Foundry model, test AI gateway, LLM policies, configure AI backend, token metrics, AI cost control, convert API to MCP, import OpenAPI to gateway.
What it loads into context
Frontmatter
129 tokensAlways available to the agent
SKILL.md
1,292 tokensWhen the skill is activated
Reference documents
8,414 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Use This Skill
- Quick Reference
- Get Gateway Details
- Test AI Endpoint
- Common Tasks
- Troubleshooting
- References
- SDK Quick References
Files
SKILL.mdcore5,029 bytesSKILL.mdcore5,029 bytesSKILL.mdcore5,029 bytesSKILL.mdcore5,029 bytesreferences/auth-best-practices.mddoc6,207 bytesreferences/patterns.mddoc6,786 bytesreferences/policies.mddoc9,375 bytesreferences/sdk/azure-ai-contentsafety-py.mddoc1,361 bytesreferences/sdk/azure-ai-contentsafety-ts.mddoc1,413 bytesreferences/sdk/azure-mgmt-apimanagement-dotnet.mddoc1,310 bytesreferences/sdk/azure-mgmt-apimanagement-py.mddoc1,028 bytesreferences/troubleshooting.mddoc7,881 bytes
Read SKILL.md
# Azure AI Gateway
Configure Azure API Management (APIM) as an AI Gateway for governing AI models, MCP tools, and agents.
> **To deploy APIM**, use the **azure-prepare** skill. See [APIM deployment guide](https://learn.microsoft.com/azure/api-management/get-started-create-service-instance).
## When to Use This Skill
| Category | Triggers |
|----------|----------|
| **Model Governance** | "semantic caching", "token limits", "load balance AI", "track token usage" |
| **Tool Governance** | "rate limit MCP", "protect my tools", "configure my tool", "convert API to MCP" |
| **Agent Governance** | "content safety", "jailbreak detection", "filter harmful content" |
| **Configuration** | "add Azure OpenAI backend", "configure my model", "add AI Foundry model" |azure-app-onboard
When your agent uses it
End-to-end orchestrator: from a business idea, app idea, or existing app to running Azure deployment with cost estimates and pre-deploy approval. Analyzes your app, auto-detects the right Azure services, scaffolds infrastructure code, and deploys — tailored to your app, not a template. Handles moving existing apps to Azure without rewriting or with minimal changes. WHEN: bring your app to Azure, plan my app, cost to run, is my code ready to deploy, deploy my app to the cloud, deploy all my services, what Azure services do I need, plan my Azure deployment, deploy my new app to Azure, one-click deploy, I have an app and want it on Azure, migrate my app to Azure, help me get started, build an app, no code yet, starter project. DO NOT USE FOR: use azd for deployment(use azure-deploy), optimizing existing costs (use cost-optimization), code readiness checks only (use azure-app-onboard-prereq).
What it loads into context
Frontmatter
236 tokensAlways available to the agent
SKILL.md
1,655 tokensWhen the skill is activated
Reference documents
12,148 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Quick Reference
- When to Use This Skill
- When NOT to Use
- Pipeline Rules
- Workflow
- Error Handling
Scripts executed separately
references/session-schemas.ts
Files
SKILL.mdcore6,809 bytesreferences/approval-gates.mddoc8,632 bytesreferences/azd-template-routing.mddoc4,832 bytesreferences/handoff-protocol.mddoc8,013 bytesreferences/iac-resources.mddoc2,682 bytesreferences/intent-gathering.mddoc2,289 bytesreferences/mcp-tool-reference.mddoc3,780 bytesreferences/pipeline-rules-runtime.mddoc3,619 bytesreferences/pipeline-rules.mddoc6,492 bytesreferences/session-protocol.mddoc8,198 bytesreferences/session-schemas.tsruns5,298 bytesreferences/subscription-resolution.mddoc2,187 bytes
Read SKILL.md
# Azure App Onboard
> ⛔ **Every repo goes through the full pipeline (Steps 1–10). No exceptions.** Do not skip steps, refuse, or short-circuit based on what you recognize. Follow the Workflow table below sequentially — read each step's references before acting.
## Quick Reference
| Property | Value |
|----------|-------|
| Best for | Developers who know what to build but not which Azure services to use |
| Inputs | Business idea or existing codebase, budget/scale preferences (optional) |
| Outputs | Architecture plan, cost estimate, IaC files, deployed Azure resources |
| Phases | Discover → Architect → Scaffold → Deploy (self-contained, no external skill calls) |
## When to Use This Skillazure-app-onboard-prereq
When your agent uses it
Assess whether source code is ready to deploy to Azure — the check BEFORE infrastructure work. Evaluates build health, app completeness, dependencies and local services, stack compatibility, and deployment feasibility. Answers questions about what your app needs before it can be deployed — frameworks, dependencies, and configuration. Checks whether dependencies are compatible and identifies deployment blockers and unsupported frameworks. WHEN: "evaluate my repo", "is my app ready to deploy", "what does my app need to deploy", "what do I need before deploying", "does my app need", "can I ship this to Azure", "scan my repo for issues", "is this app deployable", "check if my app is ready for Azure", "do I need a Dockerfile", "what's blocking my deployment", "are there any blockers", "are my dependencies compatible", "does Azure support my framework", "what needs to change before deploying", "check my app configuration".
What it loads into context
Frontmatter
223 tokensAlways available to the agent
SKILL.md
2,537 tokensWhen the skill is activated
Reference documents
15,190 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When NOT to Use
- Rules
- MCP Tools
- Workflow
- Outputs
Scripts executed separately
references/prereq-schemas.tsreferences/session-schemas.ts
Files
SKILL.mdcore10,243 bytesSKILL.mdcore10,243 bytesreferences/build-check.mddoc5,798 bytesreferences/cloud-sdk-migration.mddoc2,219 bytesreferences/completeness-check.mddoc4,530 bytesreferences/component-mapping.mddoc4,724 bytesreferences/dependency-compatibility.mddoc10,220 bytesreferences/deployability-check.mddoc3,153 bytesreferences/prereq-artifacts.mddoc2,404 bytesreferences/prereq-schemas.tsruns4,301 bytesreferences/readiness-gate.mddoc5,528 bytesreferences/remediation-protocol.mddoc3,641 bytesreferences/session-protocol.mddoc7,581 bytesreferences/session-schemas.tsruns5,373 bytesreferences/subagent-starter-scaffold.mddoc4,093 bytesreferences/subscription-resolution.mddoc1,888 bytesreferences/zero-code-path.mddoc3,715 bytes
Read SKILL.md
# Azure App Onboard Prereq — Repository Evaluation
Evaluate a user's repository for build health, app completeness, and Azure deployment feasibility — before infrastructure planning. Produces per-component verdicts (PASS/WARN/FAIL) consumed by downstream phases.
> **Orchestrator relationship:** Called by `azure-app-onboard` at Step 3, or standalone for code readiness checks. When called by orchestrator, return control to `azure-app-onboard` after writing artifacts — do NOT invoke downstream phases directly.
Phase 1 of 4 in AppOnboard pipeline. Session: `.copilot-azure/sessions/{session-id}/`. Reads `context.json`. Writes `components[]`, `repo{}`, `detectedInfra[]`. Produces `prereq-output.json`. Schema: [`prereq-schemas.ts`](references/prereq-schemas.ts) — `PrereqOutput`, `BuildRequirements`. Direct entry supported.
## When NOT to Use
| Signal | Redirect |
|--------|----------|
| Validate infrastructure (Bicep/TF/azure.yaml) | **azure-validate** |
| Generate IaC | **azure-prepare** |When your agent uses it
What it loads into context
Frontmatter
0 tokensAlways available to the agent
SKILL.md
1,910 tokensWhen the skill is activated
Reference documents
22,135 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Quick Reference
- When to Use This Skill
- When NOT to Use
- Workflow
Scripts executed separately
references/deploy-schemas.ts
Files
../SKILL.mddoc6,809 bytesSKILL.mdcore7,636 bytesreferences/approval-gate-template.mddoc2,988 bytesreferences/blocked-patterns.mddoc5,883 bytesreferences/code-deployment-appservice.mddoc4,735 bytesreferences/code-deployment-container-apps.mddoc8,648 bytesreferences/code-deployment-swa.mddoc5,828 bytesreferences/database-post-deploy.mddoc4,578 bytesreferences/deploy-checklist-template.mddoc10,385 bytesreferences/deploy-safety.mddoc4,640 bytesreferences/deploy-schemas.tsruns3,558 bytesreferences/error-classification.mddoc3,732 bytesreferences/health-check-patterns.mddoc5,633 bytesreferences/mcp-tools.mddoc5,642 bytesreferences/portal-links.mddoc3,142 bytesreferences/preflight-checks.mddoc4,470 bytesreferences/subagent-preflight.mddoc5,210 bytes../prepare/SKILL.mddoc6,595 bytes
Read SKILL.md
# Deploy — IaC Execution & Health Verification
## Quick Reference
| Property | Value |
|----------|-------|
| Best for | Executing validated IaC against Azure, health-checking deployed resources |
| Inputs | `prepare-plan.json` + `scaffold-manifest.json` from `.copilot-azure/sessions/{id}/` |
| Outputs | `deploy-result.json` written to session directory |
| Parent | [azure-app-onboard](../SKILL.md) |
## When to Use This Skill
Invoked by the `azure-app-onboard` orchestrator at Phase 4 when `scaffold-manifest.json` exists with `files[]` and `validationResult`. Not directly user-routable.
When your agent uses it
What it loads into context
Frontmatter
0 tokensAlways available to the agent
SKILL.md
1,638 tokensWhen the skill is activated
Reference documents
17,543 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Quick Reference
- When to Use This Skill
- When NOT to Use
- MCP Tools
- Workflow
- Error Handling
Scripts executed separately
references/prepare-schemas.ts
Files
../SKILL.mddoc6,809 bytesSKILL.mdcore6,595 bytesreferences/deploy-strategy.mddoc6,996 bytesreferences/mcp-tools.mddoc5,695 bytesreferences/naming-patterns.mddoc4,713 bytesreferences/prepare-schemas.tsruns7,154 bytesreferences/pricing-guide-services.mddoc8,646 bytesreferences/pricing-guide.mddoc4,085 bytesreferences/service-mapping.mddoc8,706 bytesreferences/sku-matrix.mddoc3,291 bytesreferences/sku-quota-validation.mddoc9,205 bytesreferences/subagent-pricing.mddoc2,557 bytesreferences/subagent-quota.mddoc3,568 bytesreferences/validation-rubric.mddoc2,351 bytes../references/subscription-resolution.mddoc2,187 bytes
Read SKILL.md
# Prepare — Architecture Planning & Cost Estimation
## Quick Reference
| Property | Value |
|----------|-------|
| Best for | Mapping app components to Azure services with cost estimation and quota validation |
| Inputs | `prereq-output.json` + `context.json` from `.copilot-azure/sessions/{id}/` |
| Outputs | `prepare-plan.json` written to session directory |
| Parent | [azure-app-onboard](../SKILL.md) |
## When to Use This Skill
Invoked by the `azure-app-onboard` orchestrator at Phase 2 when `prereq-output.json` exists. Not directly user-routable.
When your agent uses it
What it loads into context
Frontmatter
0 tokensAlways available to the agent
SKILL.md
3,771 tokensWhen the skill is activated
Reference documents
36,011 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Quick Reference
- When to Use This Skill
- When NOT to Use
- MCP Tools
- Workflow
- Self-Healing Loop
- Error Handling
Scripts executed separately
../deploy/references/deploy-schemas.tsreferences/scaffold-schemas.tsscripts/scaffold-conformance.ps1scripts/scaffold-conformance.sh
Files
../SKILL.mddoc6,809 bytes../deploy/references/deploy-checklist-template.mddoc10,385 bytes../deploy/references/deploy-schemas.tsruns3,558 bytes../references/mcp-tool-reference.mddoc3,780 bytes../references/pipeline-rules.mddoc6,492 bytesSKILL.mdcore14,534 bytesSKILL.mdcore14,534 bytesSKILL.mdcore14,534 bytesSKILL.mdcore14,534 bytesreferences/bicep-app-service.mddoc5,557 bytesreferences/bicep-container-apps.mddoc9,508 bytesreferences/bicep-patterns-data.mddoc4,054 bytesreferences/bicep-patterns-security.mddoc7,979 bytesreferences/bicep-patterns.mddoc6,974 bytesreferences/bicep-swa.mddoc757 bytesreferences/cicd-pipelines.mddoc325 bytesreferences/dockerfile-generation.mddoc4,164 bytesreferences/env-var-secrets.mddoc4,213 bytesreferences/error-handling.mddoc1,506 bytesreferences/iac-generation-rules.mddoc6,777 bytesreferences/mcp-tools.mddoc7,182 bytesreferences/rbac-roles.mddoc3,942 bytesreferences/scaffold-healing-rules.mddoc3,409 bytesreferences/scaffold-schemas.tsruns3,575 bytesreferences/self-healing.mddoc2,405 bytesreferences/self-review-checklist.mddoc9,252 bytesreferences/self-review-procedure.mddoc2,343 bytesreferences/subagent-iac-gen.mddoc9,749 bytesreferences/subagent-review.mddoc3,596 bytesreferences/subagent-validate.mddoc7,325 bytesreferences/terraform-patterns.mddoc7,037 bytesreferences/validation-and-manifest.mddoc5,255 bytesreferences/waf-checklist.mddoc2,330 bytesscripts/scaffold-conformance.ps1runs13,131 bytesscripts/scaffold-conformance.shruns14,083 bytes
Read SKILL.md
# Azure App Onboard Scaffold — IaC Generation + Self-Review
Generate deployment-ready infrastructure code from an architecture plan, verify it with adversarial self-review, and bridge to validation — all without deploying.
## Quick Reference
| Property | Value |
|----------|-------|
| Parent | [azure-app-onboard](../SKILL.md) |
| Best for | Turning `prepare-plan.json` service list into Bicep templates with secure-by-default patterns |
| Inputs | `prepare-plan.json` (services, naming, quotas), `context.json` (overrides, components, repo info) |
| Outputs | `scaffold-manifest.json`, generated IaC files in `infra/` |
| Pipeline position | Phase 3 of 4: prereq → prepare → **scaffold** → deploy |
| IaC format | Bicep (v1 default). Terraform when existing `.tf` detected or user override. |
azure-cloud-migrate
When your agent uses it
Assess and migrate cross-cloud workloads to Azure with reports and code conversion. Supports Lambda→Functions, Beanstalk/Heroku/App Engine→App Service, Fargate/Kubernetes/Cloud Run/Spring Boot→Container Apps. WHEN: migrate Lambda to Functions, AWS to Azure, migrate Beanstalk, migrate Heroku, migrate App Engine, Cloud Run migration, Fargate to ACA, ECS/Kubernetes/GKE/EKS to Container Apps, Spring Boot to Container Apps, cross-cloud migration.
What it loads into context
Frontmatter
132 tokensAlways available to the agent
SKILL.md
984 tokensWhen the skill is activated
Reference documents
43,771 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Rules
- Migration Scenarios
- Output Directory
- Steps
Files
SKILL.mdcore4,355 bytesSKILL.mdcore4,355 bytesSKILL.mdcore4,355 bytesreferences/services/app-service/app-engine-to-app-service.mddoc7,302 bytesreferences/services/app-service/assessment.mddoc5,342 bytesreferences/services/app-service/beanstalk-to-app-service.mddoc6,508 bytesreferences/services/app-service/code-migration.mddoc5,069 bytesreferences/services/app-service/global-rules.mddoc2,911 bytesreferences/services/app-service/heroku-to-app-service.mddoc7,728 bytesreferences/services/container-apps/assessment-guide.mddoc7,164 bytesreferences/services/container-apps/cloudrun-assessment-guide.mddoc2,554 bytesreferences/services/container-apps/cloudrun-deployment-guide.mddoc8,117 bytesreferences/services/container-apps/cloudrun-to-container-apps.mddoc2,233 bytesreferences/services/container-apps/deployment-guide.mddoc9,859 bytesreferences/services/container-apps/fargate-assessment-guide.mddoc2,456 bytesreferences/services/container-apps/fargate-deployment-guide.mddoc10,351 bytesreferences/services/container-apps/fargate-to-container-apps.mddoc4,052 bytesreferences/services/container-apps/k8s-to-container-apps.mddoc4,987 bytesreferences/services/container-apps/spring-apps-to-aca.mddoc3,858 bytesreferences/services/container-apps/spring-assessment-guide.mddoc5,372 bytesreferences/services/container-apps/spring-dependency-patterns.mddoc1,180 bytesreferences/services/container-apps/spring-deployment-guide.mddoc15,483 bytesreferences/services/functions/assessment.mddoc6,454 bytesreferences/services/functions/code-migration.mddoc6,121 bytesreferences/services/functions/global-rules.mddoc3,403 bytesreferences/services/functions/lambda-to-functions.mddoc10,489 bytesreferences/services/functions/runtimes/csharp.mddoc5,611 bytesreferences/services/functions/runtimes/java.mddoc6,554 bytesreferences/services/functions/runtimes/javascript.mddoc8,740 bytesreferences/services/functions/runtimes/powershell.mddoc5,112 bytesreferences/services/functions/runtimes/python.mddoc6,530 bytesreferences/services/functions/runtimes/typescript.mddoc3,592 bytesreferences/workflow-details.mddoc2,388 bytes
Read SKILL.md
# Azure Cloud Migrate
> This skill handles **assessment and code migration** of existing cloud workloads to Azure.
## Rules
1. Follow phases sequentially — do not skip
2. Generate assessment before any code migration
3. Load the scenario reference and follow its rules
4. Use `mcp_azure_mcp_get_azure_bestpractices` and `mcp_azure_mcp_documentation` MCP tools
5. Use the latest supported runtime for the target service
6. Destructive actions require `ask_user` — [functions global-rules](references/services/functions/global-rules.md) | [app-service global-rules](references/services/app-service/global-rules.md)
7. **Report progress to user** — During long-running operations (deployments, image pushes), provide resource-level status updates so the user is never left waiting without feedback — see [workflow-details.md](references/workflow-details.md)
8. **Audit service discovery in app code** — Kubernetes DNS names (e.g., `http://order-service:3001`) do not resolve in Container Apps. During assessment, scan source code for hardcoded hostnames/ports in HTTP clients and flag them for env-var-driven URL injectionazure-compliance
When your agent uses it
Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.
What it loads into context
Frontmatter
105 tokensAlways available to the agent
SKILL.md
874 tokensWhen the skill is activated
Reference documents
9,959 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Quick Reference
- Prerequisites
- Assessments
- MCP Tools
- Assessment Workflow
- Error Handling
- Best Practices
- SDK Quick References
Files
SKILL.mdcore3,974 bytesreferences/auth-best-practices.mddoc6,207 bytesreferences/azqr-recommendations.mddoc5,786 bytesreferences/azqr-remediation-patterns.mddoc7,946 bytesreferences/azure-keyvault-expiration-audit.mddoc5,152 bytesreferences/azure-quick-review.mddoc5,069 bytesreferences/azure-resource-graph.mddoc2,697 bytesreferences/sdk/azure-keyvault-certificates-rust.mddoc1,013 bytesreferences/sdk/azure-keyvault-keys-rust.mddoc1,291 bytesreferences/sdk/azure-keyvault-keys-ts.mddoc1,019 bytesreferences/sdk/azure-keyvault-py.mddoc1,135 bytesreferences/sdk/azure-keyvault-secrets-rust.mddoc1,334 bytesreferences/sdk/azure-keyvault-secrets-ts.mddoc1,043 bytesreferences/sdk/azure-security-keyvault-keys-dotnet.mddoc1,170 bytesreferences/sdk/azure-security-keyvault-keys-java.mddoc1,381 bytesreferences/sdk/azure-security-keyvault-secrets-java.mddoc1,517 bytes
Read SKILL.md
# Azure Compliance & Security Auditing
## Quick Reference
| Property | Details |
|---|---|
| Best for | Compliance scans, security audits, Key Vault expiration checks |
| Primary capabilities | Comprehensive Resources Assessment, Key Vault Expiration Monitoring |
| MCP tools | azqr, subscription and resource group listing, Key Vault item inspection |
## Prerequisites
- Authentication: user is logged in to Azure via `az login`
- Permissions to read resource configuration and Key Vault metadataazure-compute
When your agent uses it
Azure VM/VMSS router. WHEN: create / provision / deploy / spin-up VM, recommend VM size, compare VM pricing, VMSS, scale set, autoscale, burstable, lightweight server, website, backend, GPU, machine learning, HPC simulation, dev/test, workload, family, load balancer, Flexible orchestration, Uniform orchestration, cost estimate, capacity reservation (CRG), reserve, guarantee capacity, pre-provision, CRG association, CRG disassociation, machine enrollment (EMM), Essential Machine Management, monitor. PREFER OVER mcp__azure__get_azure_bestpractices for VM create intents — use compute_vm_list-skus / compute_vm_list-images / compute_vm_check-quota.
What it loads into context
Frontmatter
180 tokensAlways available to the agent
SKILL.md
622 tokensWhen the skill is activated
Reference documents
29,434 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Use This Skill
- Routing
Files
SKILL.mdcore2,619 bytesreferences/retail-prices-api.mddoc6,439 bytesreferences/vm-families.mddoc5,942 bytesreferences/vm-quotas.mddoc4,191 bytesreferences/vmss-guide.mddoc6,348 bytesworkflows/capacity-reservation/capacity-reservation.mddoc7,971 bytesworkflows/capacity-reservation/references/association-disassociation.mddoc3,908 bytesworkflows/capacity-reservation/references/capacity-reservation-overview.mddoc6,108 bytesworkflows/essential-machine-management/essential-machine-management.mddoc5,101 bytesworkflows/essential-machine-management/references/emm-enable-flow-portal-guidance.mddoc3,140 bytesworkflows/essential-machine-management/references/emm-enable-flow.mddoc9,429 bytesworkflows/essential-machine-management/references/emm-overview.mddoc2,442 bytesworkflows/essential-machine-management/references/emm-prerequisites.mddoc3,544 bytesworkflows/vm-creator/examples/bicep/README.mddoc1,681 bytesworkflows/vm-creator/examples/bicep/main.bicepasset3,858 bytesworkflows/vm-creator/examples/terraform/README.mddoc2,562 bytesworkflows/vm-creator/examples/terraform/main.tfasset3,324 bytesworkflows/vm-creator/examples/terraform/outputs.tfasset135 bytesworkflows/vm-creator/examples/terraform/variables.tfasset1,010 bytesworkflows/vm-creator/references/delivery-options/github-pr.mddoc3,289 bytesworkflows/vm-creator/references/delivery-options/index.mddoc2,326 bytesworkflows/vm-creator/references/delivery-options/print.mddoc474 bytesworkflows/vm-creator/references/delivery-options/save-local.mddoc2,045 bytesworkflows/vm-creator/references/depth-probe/beginner.mddoc1,214 bytesworkflows/vm-creator/references/depth-probe/cost-deep.mddoc1,150 bytesworkflows/vm-creator/references/depth-probe/index.mddoc3,043 bytesworkflows/vm-creator/references/depth-probe/networking-deep.mddoc1,623 bytesworkflows/vm-creator/references/depth-probe/security-deep.mddoc1,270 bytesworkflows/vm-creator/references/depth-probe/spec-deep.mddoc1,377 bytesworkflows/vm-creator/references/mcp-tools.mddoc2,329 bytesworkflows/vm-creator/references/output-adapters/az-cli.mddoc1,948 bytesworkflows/vm-creator/references/output-adapters/bicep.mddoc1,760 bytesworkflows/vm-creator/references/output-adapters/index.mddoc3,053 bytesworkflows/vm-creator/references/output-adapters/mcp-apply.mddoc2,649 bytesworkflows/vm-creator/references/output-adapters/terraform.mddoc1,555 bytesworkflows/vm-creator/references/plan-card.mddoc4,015 bytesworkflows/vm-creator/references/validation-gates.mddoc2,225 bytesworkflows/vm-creator/vm-creator.mddoc7,681 bytesworkflows/vm-recommender/references/handoff-to-creator.mddoc1,684 bytesworkflows/vm-recommender/references/web-fetch-policy.mddoc1,661 bytesworkflows/vm-recommender/vm-recommender.mddoc6,586 bytes
Read SKILL.md
# Azure Compute Skill
Routes Azure VM and Virtual Machine Scale Set (VMSS) requests to the right workflow.
## When to Use This Skill
- User wants to **recommend, compare, or price** a VM or VMSS
- User wants to **create, provision, or deploy** a VM or VMSS
- User asks about **Capacity Reservation Groups** (CRG) — reserve, guarantee capacity, pre-provision
- User asks about **Essential Machine Management** (EMM) — machine enrollment, monitor
**Disambiguate with `azure-prepare`:** if the user wants to deploy an **application** (Docker service, web app, API, serverless workload), route to `azure-prepare`. `vm-creator` is for **bare VM/VMSS infrastructure** only.
## Routingazure-deploy
When your agent uses it
Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application — use azure-prepare instead. This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. Requires .azure/deployment-plan.md from azure-prepare and validated status from azure-validate. WHEN: "run azd up", "run azd deploy", "execute deployment", "push to production", "push to cloud", "go live", "ship it", "bicep deploy", "terraform apply", "publish to Azure", "launch on Azure". DO NOT USE WHEN: "create and deploy", "build and deploy", "create a new app", "set up infrastructure", "create and deploy to Azure using Terraform" — use azure-prepare for these.
What it loads into context
Frontmatter
217 tokensAlways available to the agent
SKILL.md
1,595 tokensWhen the skill is activated
Reference documents
26,945 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Triggers
- Rules
- Steps
- SDK Quick References
- MCP Tools
- References
Scripts executed separately
references/recipes/azd/scripts/apply-migrations.ps1references/recipes/azd/scripts/apply-migrations.shreferences/recipes/azd/scripts/grant-and-migrate.ps1references/recipes/azd/scripts/grant-and-migrate.sh
Files
SKILL.mdcore6,632 bytesreferences/auth-best-practices.mddoc6,207 bytesreferences/global-rules.mddoc1,269 bytesreferences/live-role-verification.mddoc3,965 bytesreferences/pre-deploy-checklist.mddoc18,891 bytesreferences/recipes/README.mddoc431 bytesreferences/recipes/azcli/README.mddoc1,721 bytesreferences/recipes/azcli/errors.mddoc492 bytesreferences/recipes/azcli/verify.mddoc2,059 bytesreferences/recipes/azd/README.mddoc3,746 bytesreferences/recipes/azd/ef-migrations.mddoc5,102 bytesreferences/recipes/azd/errors.mddoc15,752 bytesreferences/recipes/azd/functions-deploy.mddoc3,542 bytesreferences/recipes/azd/post-deployment.mddoc4,299 bytesreferences/recipes/azd/scripts/apply-migrations.ps1runs1,865 bytesreferences/recipes/azd/scripts/apply-migrations.shruns1,793 bytesreferences/recipes/azd/scripts/grant-and-migrate.ps1runs4,351 bytesreferences/recipes/azd/scripts/grant-and-migrate.shruns4,368 bytesreferences/recipes/azd/sql-entra-auth.mddoc2,566 bytesreferences/recipes/azd/sql-managed-identity.mddoc7,612 bytesreferences/recipes/azd/verify.mddoc4,985 bytesreferences/recipes/bicep/README.mddoc2,412 bytesreferences/recipes/bicep/errors.mddoc511 bytesreferences/recipes/bicep/verify.mddoc763 bytesreferences/recipes/cicd/README.mddoc1,232 bytesreferences/recipes/cicd/errors.mddoc542 bytesreferences/recipes/cicd/examples/azdo-azd.ymlasset487 bytesreferences/recipes/cicd/examples/azdo-multistage.ymlasset831 bytesreferences/recipes/cicd/examples/github-azd.ymlasset782 bytesreferences/recipes/cicd/examples/github-bicep.ymlasset660 bytesreferences/recipes/cicd/verify.mddoc754 bytesreferences/recipes/terraform/README.mddoc3,235 bytesreferences/recipes/terraform/errors.mddoc858 bytesreferences/recipes/terraform/verify.mddoc752 bytesreferences/region-availability.mddoc3,031 bytesreferences/sdk/azd-deployment.mddoc792 bytesreferences/sdk/azure-identity-dotnet.mddoc941 bytesreferences/sdk/azure-identity-java.mddoc1,249 bytesreferences/sdk/azure-identity-py.mddoc1,149 bytesreferences/sdk/azure-identity-ts.mddoc1,145 bytesreferences/troubleshooting.mddoc8,172 bytes
Read SKILL.md
# Azure Deploy
> **AUTHORITATIVE GUIDANCE — MANDATORY COMPLIANCE**
>
> **PREREQUISITE**: The **azure-validate** skill **MUST** be invoked and completed with status `Validated` BEFORE executing this skill.
> **⛔ STOP — PREREQUISITE CHECK REQUIRED**
> Before proceeding, verify BOTH prerequisites are met:
>
> 1. **azure-prepare** was invoked and completed → `.azure/deployment-plan.md` exists
> 2. **azure-validate** was invoked and passed → plan status = `Validated`
>
> If EITHER is missing, **STOP IMMEDIATELY**:
> - No plan? → Invoke **azure-prepare** skill firstazure-diagnostics
When your agent uses it
Debug Azure production issues using AppLens, Azure Monitor, resource health, and safe triage, including evidence-only diagnosis without live access. WHEN: debug production issues, troubleshoot app service, app service high CPU, app service deployment failure, troubleshoot container apps, container app 503 or target port mismatch, troubleshoot functions, function telemetry missing or stopped after a config/connection-string change, troubleshoot AKS, VM RDP, Linux SSH, VM black screen, can't connect to VM, reset VM password, NSG or firewall blocking, kubectl cannot connect, kube-system/CoreDNS failures, pod pending, crashloop, node not ready, upgrade failures, analyze logs, KQL, insights, image pull failures, cold start issues, health probe failures, resource health, root cause of errors, troubleshoot event hubs, troubleshoot service bus, messaging SDK error, AMQP connection failure, message lock lost, lock renewal during long-running processing, service bus dead letter.
What it loads into context
Frontmatter
221 tokensAlways available to the agent
SKILL.md
1,645 tokensWhen the skill is activated
Reference documents
35,849 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Triggers
- Rules
- Quick Diagnosis Flow
- Troubleshooting Guides by Service
- Routing
- Quick Reference
- Check Azure Resource Health
- References
Scripts executed separately
scripts/aks-baseline.ps1scripts/aks-baseline.shscripts/appservice-diagnostics.ps1scripts/appservice-diagnostics.shscripts/containerapp-diagnostics.ps1scripts/containerapp-diagnostics.shscripts/pod-evidence.ps1scripts/pod-evidence.shscripts/run-ig.ps1scripts/run-ig.shscripts/test-messaging-connectivity.ps1scripts/test-messaging-connectivity.sh
Files
SKILL.mdcore7,481 bytesSKILL.mdcore7,481 bytesSKILL.mdcore7,481 bytesSKILL.mdcore7,481 bytesreferences/app-service/README.mddoc7,967 bytesreferences/azure-resource-graph.mddoc2,909 bytesreferences/container-apps/README.mddoc3,577 bytesreferences/functions/README.mddoc3,979 bytesreferences/functions/durable.mddoc7,827 bytesreferences/functions/triggers.mddoc8,516 bytesreferences/kql-queries.mddoc1,342 bytesscripts/aks-baseline.ps1runs7,581 bytesscripts/aks-baseline.shruns7,141 bytesscripts/appservice-diagnostics.ps1runs2,750 bytesscripts/appservice-diagnostics.shruns3,362 bytesscripts/containerapp-diagnostics.ps1runs2,605 bytesscripts/containerapp-diagnostics.shruns3,200 bytesscripts/pod-evidence.ps1runs6,749 bytesscripts/pod-evidence.shruns7,222 bytesscripts/run-ig.ps1runs5,690 bytesscripts/run-ig.shruns6,664 bytesscripts/test-messaging-connectivity.ps1runs6,491 bytesscripts/test-messaging-connectivity.shruns6,974 bytestroubleshooting/aks/aks-troubleshooting.mddoc9,424 bytestroubleshooting/aks/general-diagnostics.mddoc2,053 bytestroubleshooting/aks/load-balancer-and-ingress.mddoc3,687 bytestroubleshooting/aks/network-policy.mddoc832 bytestroubleshooting/aks/networking.mddoc5,597 bytestroubleshooting/aks/node-issues.mddoc4,833 bytestroubleshooting/aks/optional-aks-operations.mddoc2,402 bytestroubleshooting/aks/pod-failures.mddoc7,751 bytestroubleshooting/aks/references/aks-mcp.mddoc2,404 bytestroubleshooting/aks/references/command-flows.mddoc4,160 bytestroubleshooting/aks/references/inspektor-gadget.mddoc7,795 bytestroubleshooting/aks/references/structured-input-modes.mddoc1,508 bytestroubleshooting/aks/spot-and-zone-issues.mddoc2,608 bytestroubleshooting/aks/upgrade-operations.mddoc2,252 bytestroubleshooting/compute/references/cannot-connect-to-vm.mddoc3,204 bytestroubleshooting/compute/references/credential-auth-errors.mddoc2,365 bytestroubleshooting/compute/references/firewall-blocking.mddoc2,376 bytestroubleshooting/compute/references/network-connectivity.mddoc2,604 bytestroubleshooting/compute/references/rdp-connectivity.mddoc2,800 bytestroubleshooting/compute/references/rdp-service-config.mddoc3,299 bytestroubleshooting/compute/references/ssh-connectivity.mddoc2,979 bytestroubleshooting/compute/references/vm-agent-not-responding.mddoc3,723 bytestroubleshooting/compute/vm-troubleshooting.mddoc3,384 bytestroubleshooting/messaging/README.mddoc1,606 bytestroubleshooting/messaging/auth-best-practices.mddoc6,207 bytestroubleshooting/messaging/azure-eventhubs-dotnet.mddoc3,573 bytestroubleshooting/messaging/azure-eventhubs-java.mddoc3,298 bytestroubleshooting/messaging/azure-eventhubs-js.mddoc2,777 bytestroubleshooting/messaging/azure-eventhubs-py.mddoc4,454 bytestroubleshooting/messaging/azure-servicebus-dotnet.mddoc2,568 bytestroubleshooting/messaging/azure-servicebus-java.mddoc2,281 bytestroubleshooting/messaging/azure-servicebus-js.mddoc2,489 bytestroubleshooting/messaging/azure-servicebus-py.mddoc2,388 bytestroubleshooting/messaging/service-troubleshooting.mddoc5,193 bytes
Read SKILL.md
# Azure Diagnostics
> **AUTHORITATIVE GUIDANCE — MANDATORY COMPLIANCE**
>
> This document is the **official source** for debugging and troubleshooting Azure production issues. Follow these instructions to diagnose and resolve common Azure service problems systematically.
## Triggers
Activate this skill when user wants to:
- Debug or troubleshoot production issues
- Diagnose errors in Azure services
- Analyze application logs or metrics
- Fix image pull, cold start, or health probe issues
- Investigate why Azure resources are failingazure-enterprise-infra-planner
When your agent uses it
Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure Backup for VM workloads'. PREFER azure-prepare FOR app-centric workflows.
What it loads into context
Frontmatter
145 tokensAlways available to the agent
SKILL.md
1,520 tokensWhen the skill is activated
Reference documents
32,345 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Use This Skill
- Quick Reference
- Workflow (Start Here)
- Architecture
- MCP Tools
- Error Handling
Files
SKILL.mdcore6,339 bytesreferences/bicep-generation.mddoc5,246 bytesreferences/constraints/README.mddoc1,249 bytesreferences/constraints/ai-ml.mddoc3,292 bytesreferences/constraints/compute-apps.mddoc8,000 bytesreferences/constraints/compute-infra.mddoc4,564 bytesreferences/constraints/data-analytics.mddoc6,489 bytesreferences/constraints/data-relational.mddoc5,044 bytesreferences/constraints/messaging.mddoc2,573 bytesreferences/constraints/monitoring.mddoc1,776 bytesreferences/constraints/networking-connectivity.mddoc6,282 bytesreferences/constraints/networking-core.mddoc7,166 bytesreferences/constraints/networking-traffic.mddoc4,708 bytesreferences/constraints/security.mddoc2,409 bytesreferences/deployment.mddoc3,803 bytesreferences/pairing-checks.mddoc3,753 bytesreferences/phases/1-extract-insights.mddoc2,653 bytesreferences/phases/2-research-best-practices.mddoc2,906 bytesreferences/phases/3-research-resources.mddoc3,387 bytesreferences/phases/4-generate-plan.mddoc792 bytesreferences/phases/5-verify.mddoc814 bytesreferences/phases/6-generate-iac.mddoc2,606 bytesreferences/phases/7-deploy.mddoc1,300 bytesreferences/referenced-workload.mddoc7,504 bytesreferences/resources/README.mddoc1,647 bytesreferences/resources/ai-ml.mddoc2,162 bytesreferences/resources/compute-apps.mddoc4,118 bytesreferences/resources/compute-infra.mddoc2,897 bytesreferences/resources/data-analytics.mddoc3,078 bytesreferences/resources/data-relational.mddoc2,695 bytesreferences/resources/messaging.mddoc2,001 bytesreferences/resources/monitoring.mddoc1,515 bytesreferences/resources/networking-connectivity.mddoc3,698 bytesreferences/resources/networking-core.mddoc4,406 bytesreferences/resources/networking-traffic.mddoc2,634 bytesreferences/resources/security.mddoc1,510 bytesreferences/schema.mddoc3,853 bytesreferences/terraform-generation.mddoc4,504 bytesreferences/verification.mddoc2,669 bytesreferences/waf-checklist.mddoc1,947 bytesreferences/workflow.mddoc5,028 bytes
Read SKILL.md
# Azure Enterprise Infra Planner
## When to Use This Skill
Activate this skill when user wants to:
- Plan enterprise Azure infrastructure from a workload or architecture description
- Architect a landing zone, hub-spoke network, or multi-region topology
- Design networking infrastructure: VNets, subnets, firewalls, private endpoints, VPN gateways
- Plan identity, RBAC, and compliance-driven infrastructure
- Generate Bicep or Terraform for subscription-scope or multi-resource-group deployments
- Plan disaster recovery, failover, or cross-region high-availability topologies
## Quick Reference
azure-kubernetes
When your agent uses it
Plan, create, and configure production-ready Azure Kubernetes Service (AKS) clusters. Covers Day-0 checklist, SKU selection (Automatic vs Standard), networking options (private API server, Azure CNI Overlay, egress configuration), security, and operations (autoscaling, upgrade strategy, cost analysis). WHEN: create AKS environment, provision AKS, enable AKS observability, design AKS networking, choose AKS SKU, secure AKS, optimize AKS, AKS spot nodes, AKS cluster-autoscaler, rightsize AKS pod, pod rightsizing, over-provisioned AKS pod, pod resource requests and limits, Vertical Pod Autoscaler, VPA recommendations.
What it loads into context
Frontmatter
170 tokensAlways available to the agent
SKILL.md
2,937 tokensWhen the skill is activated
Reference documents
5,106 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Quick Reference
- When to Use This Skill
- Rules
- Required Inputs (Ask only what’s needed)
- Workflow
- Guardrails / Safety
- MCP Tools
- Error Handling
Files
SKILL.mdcore13,065 bytesSKILL.mdcore13,065 bytesSKILL.mdcore13,065 bytesSKILL.mdcore13,065 bytesSKILL.mdcore13,065 bytesSKILL.mdcore13,065 bytesSKILL.mdcore13,065 bytesSKILL.mdcore13,065 bytesSKILL.mdcore13,065 bytesSKILL.mdcore13,065 bytesSKILL.mdcore13,065 bytesSKILL.mdcore13,065 bytesreferences/azure-aks-autoscaler.mddoc4,083 bytesreferences/azure-aks-nap-readiness.mddoc2,527 bytesreferences/azure-aks-rightsizing.mddoc4,444 bytesreferences/azure-aks-spot.mddoc4,751 bytesreferences/azure-aks-vpa.mddoc1,472 bytesreferences/cli-reference.mddoc1,188 bytesreferences/optional-aks-operations.mddoc3,111 bytes
Read SKILL.md
# Azure Kubernetes Service
> **AUTHORITATIVE GUIDANCE — MANDATORY COMPLIANCE**
>
> This skill produces a **recommended AKS cluster configuration** based on user requirements, distinguishing **Day-0 decisions** (networking, API server — hard to change later) from **Day-1 features** (can enable post-creation). See [CLI reference](./references/cli-reference.md) for commands.
## Quick Reference
| Property | Value |
|----------|-------|
| Best for | AKS cluster planning and Day-0 decisions |
| MCP Tools | `mcp_azure_mcp_aks` |
| CLI | `az aks create`, `az aks show`, `kubectl get`, `kubectl describe` |
| Related skills | azure-kubernetes-app-deploy (deploy an app to an existing cluster), azure-diagnostics (baseline AKS troubleshooting), azure-validate (readiness checks), azure-kubernetes-automatic-readiness (migrate existing cluster to AKS Automatic), optional `aks-skills` operations add-on (focused incident, advanced cost-efficiency, exact-signature, packet-capture, and GPU Day-2 workflows) |
azure-kubernetes-app-deploy
When your agent uses it
Use when deploying an existing web application or API to an already-running Azure Kubernetes Service cluster. Detects the framework, generates a Dockerfile and Kubernetes manifests, validates against AKS Deployment Safeguards, and deploys with verification. WHEN: deploy app to AKS, deploy to existing AKS cluster, containerize app for Kubernetes, generate K8s manifests for Azure, set up CI/CD for AKS, my AKS deployment is failing safeguard checks, I have a Django/Express/Spring Boot app to run on AKS. DO NOT USE FOR: creating or provisioning an AKS cluster (use azure-kubernetes), assessing migration to AKS Automatic (use azure-kubernetes-automatic-readiness), or deploying to non-AKS targets like Web Apps, Container Apps, or Functions.
What it loads into context
Frontmatter
192 tokensAlways available to the agent
SKILL.md
491 tokensWhen the skill is activated
Reference documents
23,155 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Workflow
- References
- Knowledge Packs
- Templates
Files
SKILL.mdcore2,012 bytesknowledge-packs/frameworks/aspnet-core.mddoc7,432 bytesknowledge-packs/frameworks/django.mddoc6,142 bytesknowledge-packs/frameworks/express.mddoc6,811 bytesknowledge-packs/frameworks/fastapi.mddoc5,947 bytesknowledge-packs/frameworks/flask.mddoc6,322 bytesknowledge-packs/frameworks/go.mddoc6,997 bytesknowledge-packs/frameworks/nestjs.mddoc6,845 bytesknowledge-packs/frameworks/nextjs.mddoc7,318 bytesknowledge-packs/frameworks/spring-boot.mddoc6,157 bytesphases/quick-deploy.mddoc8,017 bytesreferences/base-images.mddoc3,657 bytesreferences/detection.mddoc3,623 bytesreferences/rollback.mddoc2,048 bytesreferences/safeguards.mddoc2,999 bytesreferences/workload-identity.mddoc7,566 bytestemplates/dockerfiles/dotnet.Dockerfileasset2,618 bytestemplates/dockerfiles/dotnet.dockerignoreasset125 bytestemplates/dockerfiles/go.Dockerfileasset2,177 bytestemplates/dockerfiles/go.dockerignoreasset128 bytestemplates/dockerfiles/java.Dockerfileasset3,120 bytestemplates/dockerfiles/java.dockerignoreasset156 bytestemplates/dockerfiles/node.Dockerfileasset3,063 bytestemplates/dockerfiles/node.dockerignoreasset173 bytestemplates/dockerfiles/python.Dockerfileasset2,637 bytestemplates/dockerfiles/python.dockerignoreasset201 bytestemplates/dockerfiles/rust.Dockerfileasset3,227 bytestemplates/dockerfiles/rust.dockerignoreasset87 bytestemplates/github-actions/deploy.ymlasset7,623 bytestemplates/k8s/configmap.yamlasset1,054 bytestemplates/k8s/deployment.yamlasset3,458 bytestemplates/k8s/gateway.yamlasset1,543 bytestemplates/k8s/hpa.yamlasset1,418 bytestemplates/k8s/httproute.yamlasset1,339 bytestemplates/k8s/ingress.yamlasset1,959 bytestemplates/k8s/namespace.yamlasset734 bytestemplates/k8s/networkpolicy.yamlasset1,627 bytestemplates/k8s/pdb.yamlasset758 bytestemplates/k8s/service.yamlasset864 bytestemplates/k8s/serviceaccount.yamlasset1,476 bytestemplates/mermaid/architecture-diagram.mddoc1,663 bytestemplates/mermaid/summary-dashboard.mddoc1,785 bytes
Read SKILL.md
# Deploy to AKS
**Use when:** deploying a web app/API to AKS; containerizing for Kubernetes; generating manifests; AKS CI/CD; DS001–DS013 failures.
**Not for:** provisioning clusters (`azure-kubernetes`), AKS Automatic readiness (`azure-kubernetes-automatic-readiness`), non-AKS targets.
## Workflow
Requires: existing AKS cluster, `az login`, `kubectl` configured. Follow `phases/quick-deploy.md`. On failure: `references/rollback.md`.
## References
- [detection.md](./references/detection.md) — framework/port/health detection
- [safeguards.md](./references/safeguards.md) — DS001-DS013 checklistazure-kubernetes-automatic-readiness
When your agent uses it
Assess Kubernetes workloads and cluster configuration for AKS Automatic compatibility. Identifies incompatibilities, generates fixes, and guides migration from AKS Standard to AKS Automatic. WHEN: migrate to AKS Automatic, check AKS Automatic readiness, validate manifests for Automatic, assess cluster for Automatic compatibility, fix deployment for Automatic compatibility, identify AKS Automatic migration blockers, is my cluster ready for AKS Automatic.
What it loads into context
Frontmatter
113 tokensAlways available to the agent
SKILL.md
3,880 tokensWhen the skill is activated
Reference documents
5,454 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Quick Reference
- When to Use This Skill
- Routing Rules
- Guardrails — READ FIRST
- MCP Tools
- Workflow
- Error Handling
- Reference Files
Files
SKILL.mdcore17,606 bytesSKILL.mdcore17,606 bytesSKILL.mdcore17,606 bytesSKILL.mdcore17,606 bytesSKILL.mdcore17,606 bytesSKILL.mdcore17,606 bytesreferences/common-fixes.mddoc7,459 bytesreferences/constraint-spec-v1.yamlasset24,895 bytesreferences/mcp-integration.mddoc8,651 bytesreferences/migration-guide-summary.mddoc7,081 bytesscripts/sanitize-readiness-input.jqasset7,953 bytes
Read SKILL.md
# AKS Automatic Readiness Assessment
> **AUTHORITATIVE GUIDANCE — MANDATORY COMPLIANCE**
>
> This skill assesses existing AKS clusters or local manifests for AKS Automatic compatibility.
> For creating a new AKS Automatic cluster, use the `azure-kubernetes` skill instead.
> See [constraint spec](./references/constraint-spec-v1.yaml) for all safeguard rules, [common fixes](./references/common-fixes.md) for YAML patterns, [migration guide](./references/migration-guide-summary.md) for end-to-end steps, and [MCP integration](./references/mcp-integration.md) for tool details and fallback handling.
You are an AKS Automatic compatibility assessment agent. Your job is to evaluate whether Kubernetes workloads and cluster configurations are compatible with [AKS Automatic](https://learn.microsoft.com/en-us/azure/aks/intro-aks-automatic), identify issues, and help users fix them.
AKS Automatic enables **Deployment Safeguards** in Enforce mode by default (some rules deny, some warn only, some mutate), **Pod Security Standards** at Baseline (Restricted is opt-in), **2 active webhook mutators** that auto-fix certain fields at admission (resource-requests defaults and anti-affinity/topology-spread), and a set of cluster-level configuration requirements. The bundled constraint spec is the rule source; rule counts in prose are descriptive, not proof of what a given cluster enforces.
## Quick Reference
| Property | Value |azure-kusto
When your agent uses it
Query and analyze data in Azure Data Explorer (Kusto/ADX) using KQL for log analytics, telemetry, and time series analysis. WHEN: KQL queries, Kusto database queries, Azure Data Explorer, ADX clusters, log analytics, time series data, IoT telemetry, anomaly detection.
What it loads into context
Frontmatter
91 tokensAlways available to the agent
SKILL.md
1,972 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Overview
- Core Workflow
- Query Patterns
- Key Data Fields
- Result Format
- KQL Best Practices
- Best Practices
- MCP Tools Used
- Fallback Strategy: Azure CLI Commands
- Common Issues
- Use Cases
Files
SKILL.mdcore8,555 bytesSKILL.mdcore8,555 bytes
Read SKILL.md
# Azure Data Explorer (Kusto) Query & Analytics
Execute KQL queries and manage Azure Data Explorer resources for fast, scalable big data analytics on log, telemetry, and time series data.
## Overview
This skill enables querying and managing Azure Data Explorer (Kusto), a fast and highly scalable data exploration service optimized for log and telemetry data. Azure Data Explorer provides sub-second query performance on billions of records using the Kusto Query Language (KQL).
Key capabilities:
- **Query Execution**: Run KQL queries against massive datasets
- **Schema Exploration**: Discover tables, columns, and data types
- **Resource Management**: List clusters and databases
- **Analytics**: Aggregations, time series, anomaly detection, machine learning
azure-messaging
When your agent uses it
Troubleshoot and resolve issues with Azure Messaging SDKs for Event Hubs and Service Bus. Covers connection failures, authentication errors, message processing issues, and SDK configuration problems. WHEN: event hub SDK error, service bus SDK issue, messaging connection failure, AMQP error, event processor host issue, message lock lost, message lock expired, lock renewal, lock renewal batch, send timeout, receiver disconnected, SDK troubleshooting, azure messaging SDK, event hub consumer, service bus queue issue, topic subscription error, enable logging event hub, service bus logging, eventhub python, servicebus java, eventhub javascript, servicebus dotnet, event hub checkpoint, event hub not receiving messages, service bus dead letter, batch processing lock, session lock expired, idle timeout, connection inactive, link detach, slow reconnect, session error, duplicate events, offset reset, receive batch.
What it loads into context
Frontmatter
204 tokensAlways available to the agent
SKILL.md
727 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Quick Reference
- When to Use This Skill
- MCP Tools
- Diagnosis Workflow
- Troubleshooting Guides
- References
Files
SKILL.mdcore3,282 bytes
Read SKILL.md
# Azure Messaging SDK Troubleshooting
## Quick Reference
| Property | Value |
|----------|-------|
| **Services** | Azure Event Hubs, Azure Service Bus |
| **MCP Tools** | `mcp_azure_mcp_eventhubs`, `mcp_azure_mcp_servicebus` |
| **Best For** | Diagnosing SDK connection, auth, and message processing issues |
## When to Use This Skill
- SDK connection failures, auth errors, or AMQP link errors
- Idle timeout, connection inactivity, or slow reconnection after disconnectazure-prepare
When your agent uses it
Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.
What it loads into context
Frontmatter
192 tokensAlways available to the agent
SKILL.md
2,964 tokensWhen the skill is activated
Reference documents
132,812 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Triggers
- Rules
- ❌ PLAN-FIRST WORKFLOW — MANDATORY
- ❌ STEP 0: Specialized Technology Check — MANDATORY FIRST ACTION
- Phase 1: Planning (BLOCKING — Complete Before Any Execution)
- Phase 2: Execution (Only After Plan Approval)
- Outputs
- SDK Quick References
- Next
Scripts executed separately
references/services/sql-database/scripts/grant-sql-access.ps1references/services/sql-database/scripts/grant-sql-access.sh
Files
SKILL.mdcore12,861 bytesSKILL.mdcore12,861 bytesreferences/analyze.mddoc4,115 bytesreferences/apim.mddoc5,848 bytesreferences/architecture.mddoc6,874 bytesreferences/aspire.mddoc18,609 bytesreferences/auth-best-practices.mddoc6,207 bytesreferences/azure-context.mddoc5,880 bytesreferences/functional-verification.mddoc3,301 bytesreferences/generate.mddoc5,444 bytesreferences/global-rules.mddoc2,045 bytesreferences/plan-template.mddoc10,304 bytesreferences/recipe-selection.mddoc3,249 bytesreferences/recipes/azcli/README.mddoc1,893 bytesreferences/recipes/azcli/commands.mddoc1,608 bytesreferences/recipes/azcli/scripts.mddoc2,285 bytesreferences/recipes/azd/README.mddoc3,894 bytesreferences/recipes/azd/aspire.mddoc9,153 bytesreferences/recipes/azd/azure-yaml.mddoc6,821 bytesreferences/recipes/azd/docker.mddoc2,071 bytesreferences/recipes/azd/iac-rules.mddoc5,934 bytesreferences/recipes/azd/terraform.mddoc14,305 bytesreferences/recipes/bicep/README.mddoc1,396 bytesreferences/recipes/bicep/patterns.mddoc3,103 bytesreferences/recipes/terraform/README.mddoc2,594 bytesreferences/recipes/terraform/patterns.mddoc3,631 bytesreferences/region-availability.mddoc1,742 bytesreferences/requirements.mddoc2,590 bytesreferences/research.mddoc8,798 bytesreferences/resources-limits-quotas.mddoc13,322 bytesreferences/runtimes/nodejs.mddoc6,047 bytesreferences/scan.mddoc3,080 bytesreferences/sdk/azd-deployment.mddoc792 bytesreferences/sdk/azure-appconfiguration-java.mddoc1,535 bytesreferences/sdk/azure-appconfiguration-py.mddoc1,171 bytesreferences/sdk/azure-appconfiguration-ts.mddoc1,217 bytesreferences/sdk/azure-identity-dotnet.mddoc941 bytesreferences/sdk/azure-identity-java.mddoc1,249 bytesreferences/sdk/azure-identity-py.mddoc1,149 bytesreferences/sdk/azure-identity-ts.mddoc1,145 bytesreferences/security.mddoc8,661 bytesreferences/services/aks/README.mddoc1,072 bytesreferences/services/aks/addons.mddoc957 bytesreferences/services/aks/bicep.mddoc1,688 bytesreferences/services/aks/manifests.mddoc1,388 bytesreferences/services/app-insights/README.mddoc848 bytesreferences/services/app-service/README.mddoc2,365 bytesreferences/services/app-service/bicep.mddoc4,267 bytesreferences/services/app-service/custom-domains.mddoc4,910 bytesreferences/services/app-service/deployment-slots.mddoc4,635 bytesreferences/services/app-service/networking.mddoc6,747 bytesreferences/services/app-service/scaling.mddoc1,517 bytesreferences/services/app-service/sku-selection.mddoc4,801 bytesreferences/services/app-service/templates/recipes/README.mddoc2,879 bytesreferences/services/app-service/templates/recipes/auth/README.mddoc3,150 bytesreferences/services/app-service/templates/recipes/auth/source/dotnet.mddoc1,380 bytesreferences/services/app-service/templates/recipes/auth/source/nodejs.mddoc2,511 bytesreferences/services/app-service/templates/recipes/auth/source/python.mddoc2,227 bytesreferences/services/app-service/templates/recipes/composition.mddoc4,881 bytesreferences/services/app-service/templates/recipes/cosmos/README.mddoc3,689 bytesreferences/services/app-service/templates/recipes/cosmos/source/dotnet.mddoc1,304 bytesreferences/services/app-service/templates/recipes/cosmos/source/nodejs.mddoc1,260 bytesreferences/services/app-service/templates/recipes/cosmos/source/python.mddoc1,142 bytesreferences/services/app-service/templates/recipes/redis/README.mddoc3,329 bytesreferences/services/app-service/templates/recipes/redis/source/dotnet.mddoc1,687 bytesreferences/services/app-service/templates/recipes/redis/source/nodejs.mddoc2,260 bytesreferences/services/app-service/templates/recipes/redis/source/python.mddoc2,968 bytesreferences/services/app-service/templates/recipes/sql/README.mddoc3,554 bytesreferences/services/app-service/templates/recipes/sql/source/dotnet.mddoc2,997 bytesreferences/services/app-service/templates/recipes/sql/source/nodejs.mddoc3,091 bytesreferences/services/app-service/templates/recipes/sql/source/python.mddoc4,506 bytesreferences/services/app-service/templates/selection.mddoc2,912 bytesreferences/services/app-service/templates/web-api.mddoc5,050 bytesreferences/services/app-service/templates/web-app.mddoc5,046 bytesreferences/services/container-apps/README.mddoc1,333 bytesreferences/services/container-apps/bicep.mddoc4,873 bytesreferences/services/container-apps/day2-operations.mddoc5,240 bytesreferences/services/container-apps/environment.mddoc1,227 bytesreferences/services/container-apps/health-probes.mddoc1,141 bytesreferences/services/container-apps/networking.mddoc5,209 bytesreferences/services/container-apps/revisions.mddoc5,064 bytesreferences/services/container-apps/scaling.mddoc1,397 bytesreferences/services/container-apps/terraform.mddoc6,267 bytesreferences/services/cosmos-db/README.mddoc1,462 bytesreferences/services/cosmos-db/bicep.mddoc1,893 bytesreferences/services/cosmos-db/partitioning.mddoc1,103 bytesreferences/services/cosmos-db/sdk.mddoc1,604 bytesreferences/services/durable-task-scheduler/README.mddoc4,991 bytesreferences/services/durable-task-scheduler/bicep.mddoc4,960 bytesreferences/services/durable-task-scheduler/dotnet.mddoc6,274 bytesreferences/services/durable-task-scheduler/java.mddoc7,910 bytesreferences/services/durable-task-scheduler/javascript.mddoc5,785 bytesreferences/services/durable-task-scheduler/python.mddoc6,590 bytesreferences/services/event-grid/README.mddoc1,052 bytesreferences/services/event-grid/bicep.mddoc1,698 bytesreferences/services/event-grid/subscriptions.mddoc1,596 bytesreferences/services/foundry/README.mddoc1,368 bytesreferences/services/foundry/region-availability.mddoc826 bytesreferences/services/functions/README.mddoc3,221 bytesreferences/services/functions/aspire-containerapps.mddoc3,394 bytesreferences/services/functions/bicep.mddoc12,204 bytesreferences/services/functions/cold-start.mddoc6,421 bytesreferences/services/functions/durable.mddoc1,858 bytesreferences/services/functions/hosting-plans.mddoc6,991 bytesreferences/services/functions/templates/README.mddoc6,698 bytesreferences/services/functions/templates/base/eval/python.mddoc762 bytesreferences/services/functions/templates/base/eval/summary.mddoc1,912 bytesreferences/services/functions/templates/base/eval/typescript.mddoc1,096 bytesreferences/services/functions/templates/recipes/README.mddoc1,076 bytesreferences/services/functions/templates/recipes/blob-eventgrid/README.mddoc1,628 bytesreferences/services/functions/templates/recipes/blob-eventgrid/eval/python.mddoc1,269 bytesreferences/services/functions/templates/recipes/blob-eventgrid/eval/summary.mddoc2,613 bytesreferences/services/functions/templates/recipes/common/dotnet-entry-point.mddoc2,003 bytesreferences/services/functions/templates/recipes/common/error-handling.mddoc2,238 bytesreferences/services/functions/templates/recipes/common/health-check.mddoc2,743 bytesreferences/services/functions/templates/recipes/common/nodejs-entry-point.mddoc4,234 bytesreferences/services/functions/templates/recipes/composition.mddoc11,356 bytesreferences/services/functions/templates/recipes/cosmosdb/README.mddoc1,587 bytesreferences/services/functions/templates/recipes/cosmosdb/eval/python.mddoc1,248 bytesreferences/services/functions/templates/recipes/cosmosdb/eval/summary.mddoc1,885 bytesreferences/services/functions/templates/recipes/cosmosdb/eval/typescript.mddoc1,368 bytesreferences/services/functions/templates/recipes/durable/README.mddoc1,872 bytesreferences/services/functions/templates/recipes/durable/eval/python.mddoc1,255 bytesreferences/services/functions/templates/recipes/durable/eval/summary.mddoc1,642 bytesreferences/services/functions/templates/recipes/eventhubs/README.mddoc1,265 bytesreferences/services/functions/templates/recipes/eventhubs/eval/python.mddoc1,262 bytesreferences/services/functions/templates/recipes/eventhubs/eval/summary.mddoc1,533 bytesreferences/services/functions/templates/recipes/mcp/README.mddoc1,946 bytesreferences/services/functions/templates/recipes/mcp/eval/python.mddoc1,264 bytesreferences/services/functions/templates/recipes/mcp/eval/summary.mddoc1,559 bytesreferences/services/functions/templates/recipes/servicebus/README.mddoc1,316 bytesreferences/services/functions/templates/recipes/servicebus/eval/python.mddoc1,344 bytesreferences/services/functions/templates/recipes/servicebus/eval/summary.mddoc1,813 bytesreferences/services/functions/templates/recipes/servicebus/eval/typescript.mddoc1,401 bytesreferences/services/functions/templates/recipes/sql/README.mddoc1,849 bytesreferences/services/functions/templates/recipes/sql/eval/python.mddoc1,211 bytesreferences/services/functions/templates/recipes/sql/eval/summary.mddoc2,818 bytesreferences/services/functions/templates/recipes/timer/README.mddoc1,490 bytesreferences/services/functions/templates/recipes/timer/eval/python.mddoc1,198 bytesreferences/services/functions/templates/recipes/timer/eval/summary.mddoc1,499 bytesreferences/services/functions/templates/selection.mddoc4,436 bytesreferences/services/functions/terraform.mddoc13,650 bytesreferences/services/key-vault/README.mddoc1,344 bytesreferences/services/key-vault/bicep.mddoc1,789 bytesreferences/services/key-vault/sdk.mddoc1,933 bytesreferences/services/logic-apps/README.mddoc1,072 bytesreferences/services/logic-apps/bicep.mddoc1,889 bytesreferences/services/logic-apps/triggers.mddoc1,725 bytesreferences/services/service-bus/README.mddoc1,481 bytesreferences/services/service-bus/bicep.mddoc3,768 bytesreferences/services/service-bus/patterns.mddoc4,349 bytesreferences/services/sql-database/README.mddoc1,922 bytesreferences/services/sql-database/auth.mddoc4,124 bytesreferences/services/sql-database/bicep.mddoc8,266 bytesreferences/services/sql-database/scripts/grant-sql-access.ps1runs4,535 bytesreferences/services/sql-database/scripts/grant-sql-access.shruns4,304 bytesreferences/services/sql-database/sdk.mddoc1,889 bytesreferences/services/static-web-apps/README.mddoc1,357 bytesreferences/services/static-web-apps/bicep.mddoc1,036 bytesreferences/services/static-web-apps/deployment.mddoc1,887 bytesreferences/services/static-web-apps/region-availability.mddoc674 bytesreferences/services/static-web-apps/routing.mddoc1,212 bytesreferences/services/static-web-apps/terraform.mddoc3,551 bytesreferences/services/storage/README.mddoc1,476 bytesreferences/services/storage/access.mddoc3,666 bytesreferences/services/storage/bicep.mddoc1,746 bytesreferences/specialized-routing.mddoc4,405 bytes
Read SKILL.md
# Azure Prepare
> **AUTHORITATIVE GUIDANCE — MANDATORY COMPLIANCE**
>
> This document is the **official, canonical source** for preparing applications for Azure deployment. You **MUST** follow these instructions exactly as written unless they contradict security policies given to you. When in doubt, present the conflicting instructions from this document and ask the user for explicit confirmation. Do not improvise, infer, or substitute steps.
---
## Triggers
Activate this skill when user wants to:
- Create a new application
- Add services or components to an existing app
- Make updates or changes to existing applicationazure-quotas
When your agent uses it
Check/manage Azure quotas and usage across providers. For deployment planning, capacity validation, region selection. WHEN: "check quotas", "service limits", "current usage", "request quota increase", "quota exceeded", "validate capacity", "regional availability", "provisioning limits", "vCPU limit", "how many vCPUs available in my subscription".
What it loads into context
Frontmatter
104 tokensAlways available to the agent
SKILL.md
2,810 tokensWhen the skill is activated
Reference documents
3,037 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Overview
- When to Use This Skill
- Quick Reference
- Quota Types
- Understanding Resource Name Mapping
- Scripts
- Core Workflows
- Troubleshooting
- Additional Resources
- Best Practices
Scripts executed separately
scripts/check-quota.ps1scripts/check-quota.sh
Files
SKILL.mdcore12,065 bytesSKILL.mdcore12,065 bytesSKILL.mdcore12,065 bytesSKILL.mdcore12,065 bytesSKILL.mdcore12,065 bytesSKILL.mdcore12,065 bytesSKILL.mdcore12,065 bytesSKILL.mdcore12,065 bytesSKILL.mdcore12,065 bytesreferences/advanced-commands.mddoc1,814 bytesreferences/commands.mddoc10,619 bytesscripts/check-quota.ps1runs3,409 bytesscripts/check-quota.shruns3,175 bytes
Read SKILL.md
# Azure Quotas - Service Limits & Capacity Management
> **AUTHORITATIVE GUIDANCE** — Follow these instructions exactly for quota management and capacity validation.
## Overview
**What are Azure Quotas?**
Azure quotas (also called service limits) are the maximum number of resources you can deploy in a subscription. Quotas:
- Prevent accidental over-provisioning
- Ensure fair resource distribution across Azure
- Represent **available capacity** in each region
- Can be increased (adjustable quotas) or are fixed (non-adjustable)azure-reliability
When your agent uses it
Assess and improve the reliability posture of PaaS Applications (Azure Functions and Azure App Service). Scans deployed resources for zone redundancy, ZRS storage, health probes, and multi-region failover. Presents a feature-pivoted checklist, then drives staged remediation (CLI or IaC patches) end-to-end with user confirmation. WHEN: "assess reliability", "check reliability", "zone redundant", "multi-region failover", "high availability", "disaster recovery", "single points of failure", "reliability posture", "resiliency".
What it loads into context
Frontmatter
145 tokensAlways available to the agent
SKILL.md
5,530 tokensWhen the skill is activated
Reference documents
18,536 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Quick Reference
- When to Use This Skill
- Prerequisites
- MCP Tools
- Assessment Workflow
- Configuration Workflow
- Priority Classification
- Error Handling
- Best Practices
- Skill Boundaries
Files
SKILL.mdcore24,910 bytesSKILL.mdcore24,910 bytesSKILL.mdcore24,910 bytesreferences/configure-health-probes.mddoc2,190 bytesreferences/configure-multi-region.mddoc18,934 bytesreferences/configure-storage.mddoc5,481 bytesreferences/configure-zone-redundancy.mddoc1,955 bytesreferences/health-probe-checks.mddoc3,544 bytesreferences/iac-patching-bicep.mddoc7,031 bytesreferences/iac-patching-terraform.mddoc4,815 bytesreferences/multi-region-checks.mddoc6,120 bytesreferences/services/app-service/reliability.mddoc10,484 bytesreferences/services/functions/reliability.mddoc6,389 bytesreferences/storage-redundancy-checks.mddoc5,206 bytesreferences/zone-redundancy-checks.mddoc2,930 bytes
Read SKILL.md
# Azure Reliability Assessment & Configuration
## Quick Reference
| Property | Details |
|---|---|
| Best for | Reliability posture assessment, zone redundancy enablement, multi-region failover setup |
| Primary capabilities | Reliability assessment table, Zone Redundancy Configuration, Multi-Region IaC Generation |
| Supported services | Azure Functions, App Service (Container Apps planned for a future version) |
| MCP tools | Azure Resource Graph queries, Azure CLI commands |
## When to Use This Skill
Activate this skill when user wants to:azure-resource-lookup
When your agent uses it
List, find, and show Azure resources across subscriptions or resource groups. Handles prompts like "list the websites in my subscription", "list my web apps", "show my app services", "list virtual machines", "list my VMs", "show storage accounts", "find container apps", and "what resources do I have". USE FOR: list websites, list web apps, list app services, show websites in subscription, resource inventory, find resources by tag, tag analysis, orphaned resource discovery (not for cost analysis), unattached disks, count resources by type, cross-subscription lookup, and Azure Resource Graph queries. DO NOT USE FOR: deploying/changing resources (use azure-deploy), cost optimization (use cost-optimization from the optional azure-cost plugin), or non-Azure clouds.
What it loads into context
Frontmatter
193 tokensAlways available to the agent
SKILL.md
1,323 tokensWhen the skill is activated
Reference documents
1,215 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Use This Skill
- Quick Reference
- MCP Tools
- Workflow
- Error Handling
- Constraints
Files
SKILL.mdcore5,569 bytesSKILL.mdcore5,569 bytesSKILL.mdcore5,569 bytesreferences/azure-resource-graph.mddoc5,048 bytes
Read SKILL.md
# Azure Resource Lookup
List, find, and discover Azure resources of any type across subscriptions and resource groups. Use Azure Resource Graph (ARG) for fast, cross-cutting queries when dedicated MCP tools don't cover the resource type.
## When to Use This Skill
Use this skill when the user wants to:
- **List resources** of any type (VMs, web apps, storage accounts, container apps, databases, etc.)
- **Show resources** in a specific subscription or resource group
- Query resources **across multiple subscriptions** or resource types
- Find **orphaned resources** (unattached disks, unused NICs, idle IPs)
- Discover resources **missing required tags** or configurations
- Get a **resource inventory** spanning multiple types
- Find resources in a **specific state** (unhealthy, failed provisioning, stopped)azure-resource-visualizer
When your agent uses it
Analyze Azure resource groups and generate detailed Mermaid architecture diagrams showing the relationships between individual resources. WHEN: create architecture diagram, visualize Azure resources, show resource relationships, generate Mermaid diagram, analyze resource group, diagram my resources, architecture visualization, resource topology, map Azure infrastructure.
What it loads into context
Frontmatter
85 tokensAlways available to the agent
SKILL.md
1,789 tokensWhen the skill is activated
Reference documents
1,213 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Core Responsibilities
- Workflow Process
- Operating Guidelines
- Output Format Specifications
- Success Criteria
Files
SKILL.mdcore8,528 bytesSKILL.mdcore8,528 bytesSKILL.mdcore8,528 bytesSKILL.mdcore8,528 bytesassets/example-diagram.mddoc1,778 bytesassets/template-architecture.mddoc970 bytesreferences/azure-resource-graph.mddoc2,390 bytes
Read SKILL.md
# Azure Resource Visualizer - Architecture Diagram Generator
A user may ask for help understanding how individual resources fit together, or to create a diagram showing their relationships. Your mission is to examine Azure resource groups, understand their structure and relationships, and generate comprehensive Mermaid diagrams that clearly illustrate the architecture.
## Core Responsibilities
1. **Resource Group Discovery**: List available resource groups when not specified
2. **Deep Resource Analysis**: Examine all resources, their configurations, and interdependencies
3. **Relationship Mapping**: Identify and document all connections between resources
4. **Diagram Generation**: Create detailed, accurate Mermaid diagrams
5. **Documentation Creation**: Produce clear markdown files with embedded diagrams
## Workflow Process
azure-storage
When your agent uses it
Azure Storage Services including Blob Storage, File Shares, Queue Storage, Table Storage, and Data Lake. Answers questions about storage access tiers (hot, cool, cold, archive), when to use each tier, and tier comparison. Provides object storage, SMB file shares, async messaging, NoSQL key-value, and big data analytics. Includes lifecycle management. USE FOR: blob storage, file shares, queue storage, table storage, data lake, upload files, download blobs, storage accounts, access tiers, storage tiers, hot cool cold archive, storage tier comparison, when to use storage tiers, lifecycle management, Azure Storage concepts. DO NOT USE FOR: SQL databases, Cosmos DB (use azure-prepare), messaging with Event Hubs or Service Bus (use azure-messaging).
What it loads into context
Frontmatter
185 tokensAlways available to the agent
SKILL.md
1,171 tokensWhen the skill is activated
Reference documents
5,253 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Services
- MCP Server (Preferred)
- CLI Fallback
- Storage Account Tiers
- Blob Access Tiers
- Redundancy Options
- Service Details
- SDK Quick References
- Azure SDKs
Files
SKILL.mdcore5,024 bytesSKILL.mdcore5,024 bytesreferences/auth-best-practices.mddoc6,207 bytesreferences/sdk-usage.mddoc4,542 bytesreferences/sdk/azure-data-tables-java.mddoc1,314 bytesreferences/sdk/azure-data-tables-py.mddoc1,070 bytesreferences/sdk/azure-storage-blob-java.mddoc1,350 bytesreferences/sdk/azure-storage-blob-py.mddoc1,025 bytesreferences/sdk/azure-storage-blob-rust.mddoc1,094 bytesreferences/sdk/azure-storage-blob-ts.mddoc1,221 bytesreferences/sdk/azure-storage-file-datalake-py.mddoc1,367 bytesreferences/sdk/azure-storage-file-share-py.mddoc1,006 bytesreferences/sdk/azure-storage-file-share-ts.mddoc1,262 bytesreferences/sdk/azure-storage-queue-py.mddoc1,091 bytesreferences/sdk/azure-storage-queue-ts.mddoc1,258 bytes
Read SKILL.md
# Azure Storage Services
## Services
| Service | Use When | MCP Tools | CLI |
|---------|----------|-----------|-----|
| Blob Storage | Objects, files, backups, static content | `azure__storage` | `az storage blob` |
| File Shares | SMB file shares, lift-and-shift | - | `az storage file` |
| Queue Storage | Async messaging, task queues | - | `az storage queue` |
| Table Storage | NoSQL key-value (consider Cosmos DB) | - | `az storage table` |
| Data Lake | Big data analytics, hierarchical namespace | - | `az storage fs` |
## MCP Server (Preferred)
azure-upgrade
When your agent uses it
Assess and upgrade Azure workloads between plans, tiers, or SKUs, or modernize Azure SDK dependencies in source code. WHEN: upgrade Consumption to Flex Consumption, upgrade Azure Functions plan, change hosting plan, function app SKU, migrate App Service to Container Apps, modernize legacy Azure Java SDKs (com.microsoft.azure to com.azure), migrate Azure Cache for Redis (ACR/ACRE) to Azure Managed Redis (AMR).
What it loads into context
Frontmatter
126 tokensAlways available to the agent
SKILL.md
1,985 tokensWhen the skill is activated
Reference documents
69,552 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Triggers
- Rules
- Upgrade Scenarios
- MCP Tools
- Steps
- References
- Next
Scripts executed separately
references/languages/java/scripts/upgrade_bom.py
Files
SKILL.mdcore8,861 bytesSKILL.mdcore8,861 bytesSKILL.mdcore8,861 bytesSKILL.mdcore8,861 bytesSKILL.mdcore8,861 bytesSKILL.mdcore8,861 bytesreferences/global-rules.mddoc4,586 bytesreferences/languages/java/INSTRUCTION.mddoc11,589 bytesreferences/languages/java/README.mddoc3,066 bytesreferences/languages/java/bom-migration/bom-gradle-settings.mddoc6,863 bytesreferences/languages/java/bom-migration/bom-gradle-toml.mddoc2,794 bytesreferences/languages/java/bom-migration/bom-gradle.mddoc5,266 bytesreferences/languages/java/bom-migration/bom-maven.mddoc4,835 bytesreferences/languages/java/bom-migration/bom-migration.mddoc4,293 bytesreferences/languages/java/bom-migration/bom-validation.mddoc1,549 bytesreferences/languages/java/package-specific/com.microsoft.azure.eventprocessorhost.mddoc5,675 bytesreferences/languages/java/package-specific/com.microsoft.azure.management.mddoc9,713 bytesreferences/languages/java/rules/efficiency.mddoc265 bytesreferences/languages/java/rules/execution-guidelines.mddoc1,063 bytesreferences/languages/java/rules/review-code-changes.mddoc541 bytesreferences/languages/java/rules/troubleshooting.mddoc2,586 bytesreferences/languages/java/rules/upgrade-strategy.mddoc1,403 bytesreferences/languages/java/rules/upgrade-success-criteria.mddoc686 bytesreferences/languages/java/scripts/upgrade_bom.pyruns20,074 bytesreferences/languages/java/templates/PLAN_TEMPLATE.mddoc9,656 bytesreferences/languages/java/templates/PROGRESS_TEMPLATE.mddoc9,336 bytesreferences/languages/java/templates/SUMMARY_TEMPLATE.mddoc8,815 bytesreferences/languages/java/workflow/phase-1-precheck.mddoc2,397 bytesreferences/languages/java/workflow/phase-2-plan.mddoc2,960 bytesreferences/languages/java/workflow/phase-3-execute.mddoc2,435 bytesreferences/languages/java/workflow/phase-4-summarize.mddoc1,154 bytesreferences/services/functions/consumption-to-flex/linux/assessment.mddoc4,692 bytesreferences/services/functions/consumption-to-flex/linux/automation.mddoc17,691 bytesreferences/services/functions/consumption-to-flex/linux/workflow.mddoc11,863 bytesreferences/services/functions/consumption-to-flex/windows/assessment.mddoc6,998 bytesreferences/services/functions/consumption-to-flex/windows/automation.mddoc4,215 bytesreferences/services/functions/consumption-to-flex/windows/automation/access-key-copy.mddoc2,540 bytesreferences/services/functions/consumption-to-flex/windows/automation/access-key-strategy.mddoc2,128 bytesreferences/services/functions/consumption-to-flex/windows/automation/app-creation.mddoc17,037 bytesreferences/services/functions/consumption-to-flex/windows/automation/app-settings.mddoc12,298 bytesreferences/services/functions/consumption-to-flex/windows/automation/built-in-authentication.mddoc3,378 bytesreferences/services/functions/consumption-to-flex/windows/automation/cleanup-and-rollback.mddoc3,244 bytesreferences/services/functions/consumption-to-flex/windows/automation/code-deployment.mddoc8,818 bytesreferences/services/functions/consumption-to-flex/windows/automation/configuration-inventory.mddoc7,341 bytesreferences/services/functions/consumption-to-flex/windows/automation/deployment-package.mddoc6,144 bytesreferences/services/functions/consumption-to-flex/windows/automation/discovery-and-assessment.mddoc9,305 bytesreferences/services/functions/consumption-to-flex/windows/automation/networking-and-storage.mddoc4,011 bytesreferences/services/functions/consumption-to-flex/windows/automation/site-and-identity.mddoc5,102 bytesreferences/services/functions/consumption-to-flex/windows/automation/trigger-safety-and-monitoring.mddoc12,119 bytesreferences/services/functions/consumption-to-flex/windows/automation/validation-and-cutover.mddoc9,944 bytesreferences/services/functions/consumption-to-flex/windows/dependency-scan.mddoc13,603 bytesreferences/services/functions/consumption-to-flex/windows/progress-tracking.mddoc5,371 bytesreferences/services/functions/consumption-to-flex/windows/workflow.mddoc28,555 bytesreferences/services/redis/redis-to-amr.mddoc7,700 bytesreferences/workflow-details.mddoc2,135 bytes
Read SKILL.md
# Azure Upgrade
> This skill handles **assessment and automated upgrades** of existing Azure workloads from one Azure service, hosting plan, or SKU to another — all within Azure. This includes plan/tier upgrades (e.g. Consumption → Flex Consumption), cross-service migrations (e.g. App Service → Container Apps), and SKU changes. It also covers **Azure SDK for Java source-code modernization** (e.g. legacy Java `com.microsoft.azure.*` → modern `com.azure.*`). This is NOT for cross-cloud migration — use `azure-cloud-migrate` for that.
## Triggers
| User Intent | Example Prompts |
|-------------|-----------------|
| Upgrade Azure Functions plan | "Upgrade my function app from Consumption to Flex Consumption" |
| Discover Functions upgrade candidates | "What Consumption Function Apps do I have that can be upgraded to Flex Consumption?" |
| Change hosting tier | "Move my function app to a better plan" |
| Assess upgrade readiness | "Is my function app ready for Flex Consumption?" |
| Automate plan migration | "Automate the steps to upgrade my Functions plan" |
| Modernize legacy Azure Java SDK | "Migrate legacy Azure SDKs for Java", "Upgrade legacy Azure Java SDK", "Migrate my Java project from com.microsoft.azure to com.azure" |azure-validate
When your agent uses it
Pre-deployment validation for Azure readiness. Run deep checks on configuration, infrastructure (Bicep or Terraform), RBAC role assignments, managed identity permissions, and prerequisites before deploying. WHEN: validate my app, check deployment readiness, run preflight checks, verify configuration, check if ready to deploy, validate azure.yaml, validate Bicep, test before deploying, troubleshoot deployment errors, validate Azure Functions, validate function app, validate serverless deployment, verify RBAC roles, check role assignments, review managed identity permissions, what-if analysis, validate Container Apps deployment.
What it loads into context
Frontmatter
143 tokensAlways available to the agent
SKILL.md
782 tokensWhen the skill is activated
Reference documents
9,261 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Triggers
- Rules
- Steps
Scripts executed separately
references/recipes/azd/scripts/set-aspire-aca-env.ps1references/recipes/azd/scripts/set-aspire-aca-env.shreferences/recipes/scripts/validate-deployment.ps1references/recipes/scripts/validate-deployment.shreferences/recipes/terraform/scripts/validate-terraform.ps1references/recipes/terraform/scripts/validate-terraform.shreferences/scripts/scan-aspire-functions-secrets.ps1references/scripts/scan-aspire-functions-secrets.shreferences/scripts/workflow.ps1references/scripts/workflow.sh
Files
SKILL.mdcore3,535 bytesSKILL.mdcore3,535 bytesreferences/aspire-functions-secrets.mddoc3,771 bytesreferences/global-rules.mddoc1,215 bytesreferences/policy-validation.mddoc1,493 bytesreferences/recipes/README.mddoc374 bytesreferences/recipes/azcli/README.mddoc2,786 bytesreferences/recipes/azcli/errors.mddoc505 bytesreferences/recipes/azd/README.mddoc5,410 bytesreferences/recipes/azd/aspire.mddoc1,772 bytesreferences/recipes/azd/environment.mddoc1,979 bytesreferences/recipes/azd/errors.mddoc2,680 bytesreferences/recipes/azd/scripts/set-aspire-aca-env.ps1runs3,588 bytesreferences/recipes/azd/scripts/set-aspire-aca-env.shruns3,638 bytesreferences/recipes/bicep/README.mddoc2,562 bytesreferences/recipes/bicep/errors.mddoc374 bytesreferences/recipes/scripts/validate-deployment.ps1runs5,278 bytesreferences/recipes/scripts/validate-deployment.shruns6,198 bytesreferences/recipes/terraform/README.mddoc4,040 bytesreferences/recipes/terraform/errors.mddoc2,889 bytesreferences/recipes/terraform/scripts/validate-terraform.ps1runs6,933 bytesreferences/recipes/terraform/scripts/validate-terraform.shruns6,808 bytesreferences/region-availability.mddoc3,031 bytesreferences/role-verification.mddoc3,947 bytesreferences/scripts/scan-aspire-functions-secrets.ps1runs3,053 bytesreferences/scripts/scan-aspire-functions-secrets.shruns3,342 bytesreferences/scripts/workflow.ps1runs5,289 bytesreferences/scripts/workflow.shruns5,856 bytes
Read SKILL.md
# Azure Validate
> **AUTHORITATIVE GUIDANCE** — Follow these instructions exactly unless they contradict security policies given to you.
> **⛔ STOP — PREREQUISITE CHECK REQUIRED**
>
> Before proceeding, verify this prerequisite is met:
>
> **azure-prepare** was invoked and completed → `.azure/deployment-plan.md` exists with status `Approved` or later
>
> If the plan is missing, **STOP IMMEDIATELY** and invoke **azure-prepare** first.
>
> The complete workflow ensures success:
>discover-azure-skills
When your agent uses it
Searches the Azure skills catalog and recommends installable agent skills by matching an Azure task to skill metadata and plugin installation guidance. WHEN: before starting any task that involves an Azure or Microsoft-cloud service, product, or data source, when no currently loaded skill or tool already covers it.
What it loads into context
Frontmatter
89 tokensAlways available to the agent
SKILL.md
489 tokensWhen the skill is activated
Reference documents
249 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
Files
SKILL.mdcore2,316 bytesreferences/install/claude-code.mddoc339 bytesreferences/install/copilot-cli.mddoc339 bytesreferences/install/other.mddoc328 bytes
Read SKILL.md
Follow these steps to discover the available azure skill matching the given task description.
1. List plugins
List Azure plugin directories from the GitHub Contents API: https://api.github.com/repos/microsoft/azure-skills/contents/.github/plugins?ref=main
In the result, each entry whose `type` is `dir` is a plugin directory. Skills are organized by plugins.
2. List skills
For each plugin, list their skills from the GitHub Contents API: https://api.github.com/repos/microsoft/azure-skills/contents/.github/plugins/{plugin-dirname}/skills?ref=main
In the result, each entry whose `type` is `dir` is a skill directory. Each skill has a SKILL.md file that explains what this skill should be used for.
entra-agent-id
When your agent uses it
Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmi_path, OBO, cross-tenant) including the Microsoft Entra SDK for AgentID sidecar. USE FOR: Agent Identity Blueprint, BlueprintPrincipal, agent OAuth, fmi_path token exchange, agent OBO, Workload Identity Federation for agents, polyglot agent auth, Microsoft.Identity.Web.AgentIdentities. DO NOT USE FOR: standard Entra app registration (use entra-app-registration), Microsoft Foundry agent authoring (use microsoft-foundry).
What it loads into context
Frontmatter
158 tokensAlways available to the agent
SKILL.md
3,692 tokensWhen the skill is activated
Reference documents
7,734 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Quick Reference
- When to Use This Skill
- MCP Tools
- Before You Start
- Conceptual Model
- Prerequisites
- Authentication
- Core Workflow
- Runtime Authentication
- Granting Permissions (Per Agent Identity)
- Cross-Tenant Agent Identities
- API Reference
- Required Graph Permissions
- Best Practices
- Troubleshooting
- References
Files
SKILL.mdcore16,036 bytesSKILL.mdcore16,036 bytesSKILL.mdcore16,036 bytesSKILL.mdcore16,036 bytesSKILL.mdcore16,036 bytesSKILL.mdcore16,036 bytesSKILL.mdcore16,036 bytesSKILL.mdcore16,036 bytesSKILL.mdcore16,036 bytesSKILL.mdcore16,036 bytesSKILL.mdcore16,036 bytesreferences/known-limitations.mddoc4,754 bytesreferences/oauth2-token-flow.mddoc4,507 bytesreferences/obo-blueprint-setup.mddoc4,235 bytesreferences/runtime-token-exchange.mddoc6,746 bytesreferences/sdk-sidecar-deployment.mddoc6,276 bytesreferences/sdk-sidecar.mddoc6,107 bytes
Read SKILL.md
# Microsoft Entra Agent ID
Create and manage OAuth 2.0-capable identities for AI agents using Microsoft Graph. Every agent instance gets a distinct identity, audit trail, and independently-scoped permission grants.
## Quick Reference
| Property | Value |
|----------|-------|
| Service | Microsoft Entra Agent ID |
| API | Microsoft Graph (`https://graph.microsoft.com/v1.0`) |
| Required role | Agent Identity Developer, Agent Identity Administrator, or Application Administrator |
| Object model | Blueprint (application) → BlueprintPrincipal (SP) → Agent Identity (SP) |
| Runtime exchange | Two-step `fmi_path` exchange (autonomous and OBO) |
| .NET helper | `Microsoft.Identity.Web.AgentIdentities` |entra-app-registration
When your agent uses it
Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication. DO NOT USE FOR: Key Vault secrets (use azure-keyvault-expiration-audit), general Azure resource security guidance.
What it loads into context
Frontmatter
119 tokensAlways available to the agent
SKILL.md
1,799 tokensWhen the skill is activated
Reference documents
16,569 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Overview
- Core Workflow
- Common Patterns
- MCP Tools and CLI
- Security Best Practices
- SDK Quick References
- References
- External Resources
Files
SKILL.mdcore8,223 bytesreferences/BICEP-EXAMPLE.bicepasset5,328 bytesreferences/api-permissions.mddoc10,198 bytesreferences/auth-best-practices.mddoc6,207 bytesreferences/cli-commands.mddoc8,852 bytesreferences/console-app-example.mddoc11,005 bytesreferences/first-app-registration.mddoc7,415 bytesreferences/oauth-flows.mddoc9,540 bytesreferences/sdk/azure-identity-dotnet.mddoc940 bytesreferences/sdk/azure-identity-java.mddoc1,248 bytesreferences/sdk/azure-identity-py.mddoc1,148 bytesreferences/sdk/azure-identity-rust.mddoc805 bytesreferences/sdk/azure-identity-ts.mddoc1,144 bytesreferences/sdk/azure-keyvault-py.mddoc1,135 bytesreferences/sdk/azure-keyvault-secrets-ts.mddoc1,043 bytesreferences/sdk/microsoft-azure-webjobs-extensions-authentication-events-dotnet.mddoc1,522 bytesreferences/troubleshooting.mddoc7,594 bytes
Read SKILL.md
## Overview
Microsoft Entra ID (formerly Azure Active Directory) is Microsoft's cloud-based identity and access management service. App registrations allow applications to authenticate users and access Azure resources securely.
### Key Concepts
| Concept | Description |
|---------|-------------|
| **App Registration** | Configuration that allows an app to use Microsoft identity platform |
| **Application (Client) ID** | Unique identifier for your application |
| **Tenant ID** | Unique identifier for your Azure AD tenant/directory |
| **Client Secret** | Password for the application (confidential clients only) |
| **Redirect URI** | URL where authentication responses are sent |
| **API Permissions** | Access scopes your app requests |microsoft-foundry
When your agent uses it
Build, deploy, evaluate, optimize, fine-tune, and manage Microsoft Foundry agents, models, and resources end to end. USE FOR: foundry, azd ai agent, azd provision/deploy, hosted agent scaffold/develop/run/deploy/troubleshoot, prompt agent, managed harness agent, Copilot harness, voice agent, create/update/invoke/evaluate agent, add tool to agent, agent insights, batch/continuous eval, continuous monitoring, agent CI/CD, optimize/improve prompt, optimize agent instructions, Agent Optimizer, dataset curation from traces, deploy model, model fine-tuning (SFT/DPO/RFT), Foundry project, RBAC, role assignment, permissions, quota, capacity, region, deployment failure, AI Services, create Foundry resource, knowledge index, customize deployment, onboard, availability, training-data, grader, distillation, large file upload. DO NOT USE FOR: Azure Functions, App Service, general Azure deploy (use azure-deploy), general Azure prep (use azure-prepare).
What it loads into context
Frontmatter
243 tokensAlways available to the agent
SKILL.md
7,048 tokensWhen the skill is activated
Reference documents
205,289 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Pre-Execution Requirements
- Sub-Skills
- Infrastructure Lifecycle
- Agent Development Lifecycle
- Agent: .foundry Workspace Standard
- Agent: Setup References
- Agent: Common Project Context Resolution
- Agent: Agent Types
- Tool Usage Conventions
- Azure Authentication
- Additional Resources
- Network Isolation Errors
Scripts executed separately
foundry-agent/create/scripts/check-copilot-app-entry.ps1foundry-agent/create/scripts/check-copilot-app-entry.shfoundry-agent/create/scripts/resolve-project-id.ps1foundry-agent/create/scripts/resolve-project-id.shfoundry-agent/create/scripts/smoke-test-voice.ps1foundry-agent/create/scripts/smoke-test-voice.shfoundry-agent/create/scripts/smoke_test_voice.pyfoundry-agent/create/scripts/verify-environment.ps1foundry-agent/create/scripts/verify-environment.shfoundry-agent/toolbox/scripts/get-catalog-inputs.ps1foundry-agent/toolbox/scripts/get-catalog-inputs.shscripts/check-and-setup-dependencies.ps1scripts/check-and-setup-dependencies.sh
Files
.gitignoreasset0 bytesSKILL.mdcore31,092 bytesSKILL.mdcore31,092 bytesSKILL.mdcore31,092 bytesSKILL.mdcore31,092 bytesSKILL.mdcore31,092 bytesSKILL.mdcore31,092 bytesSKILL.mdcore31,092 bytesSKILL.mdcore31,092 bytesSKILL.mdcore31,092 bytesfoundry-agent/agent-optimizer/agent-optimizer.mddoc3,372 bytesfoundry-agent/agent-optimizer/references/azd-setup.mddoc1,221 bytesfoundry-agent/agent-optimizer/references/eval-yaml.mddoc3,311 bytesfoundry-agent/agent-optimizer/references/optimize-workflow.mddoc2,187 bytesfoundry-agent/agent-optimizer/references/python-patterns.mddoc4,096 bytesfoundry-agent/agent-optimizer/references/scaffold.mddoc3,415 bytesfoundry-agent/azd-guidance/azd-guidance.mddoc1,230 bytesfoundry-agent/azd-guidance/references/azd-ai-cli.mddoc10,598 bytesfoundry-agent/cicd/cicd.mddoc301 bytesfoundry-agent/create/create-hosted.mddoc34,649 bytesfoundry-agent/create/create-managed-harness.mddoc7,351 bytesfoundry-agent/create/create-prompt.mddoc4,692 bytesfoundry-agent/create/create-voice.mddoc13,430 bytesfoundry-agent/create/quick-start-hosted.mddoc24,132 bytesfoundry-agent/create/references/enable-incoming-a2a.mddoc3,740 bytesfoundry-agent/create/references/foundry-model.mddoc1,598 bytesfoundry-agent/create/references/foundry-tool-catalog.mddoc43,918 bytesfoundry-agent/create/references/guardrails/guardrail-api-create.mddoc3,860 bytesfoundry-agent/create/references/guardrails/guardrail-attach.mddoc3,855 bytesfoundry-agent/create/references/guardrails/guardrail-manage.mddoc2,197 bytesfoundry-agent/create/references/hosted-voice-yaml.mddoc1,737 bytesfoundry-agent/create/references/langchain-langgraph-hosting.mddoc2,257 bytesfoundry-agent/create/references/local-run.mddoc11,754 bytesfoundry-agent/create/references/managed-harness-agent.mddoc3,616 bytesfoundry-agent/create/references/re-host.mddoc2,683 bytesfoundry-agent/create/references/sdk-operations.mddoc2,216 bytesfoundry-agent/create/references/skills/managed-harness-agent-skill-attach.mddoc1,312 bytesfoundry-agent/create/references/skills/skill-attach.mddoc7,176 bytesfoundry-agent/create/references/skills/skill-manage.mddoc5,490 bytesfoundry-agent/create/references/skills/skill-toolbox-attach.mddoc5,226 bytesfoundry-agent/create/references/tools/managed-harness-agent/agent-tools.mddoc1,819 bytesfoundry-agent/create/references/tools/managed-harness-agent/tool-a2a.mddoc1,171 bytesfoundry-agent/create/references/tools/managed-harness-agent/tool-azure-ai-search.mddoc1,271 bytesfoundry-agent/create/references/tools/managed-harness-agent/tool-code-interpreter.mddoc391 bytesfoundry-agent/create/references/tools/managed-harness-agent/tool-fabric-iq.mddoc1,142 bytesfoundry-agent/create/references/tools/managed-harness-agent/tool-file-search.mddoc526 bytesfoundry-agent/create/references/tools/managed-harness-agent/tool-github-copilot-toolset.mddoc1,206 bytesfoundry-agent/create/references/tools/managed-harness-agent/tool-mcp.mddoc1,694 bytesfoundry-agent/create/references/tools/managed-harness-agent/tool-openapi.mddoc1,190 bytesfoundry-agent/create/references/tools/managed-harness-agent/tool-toolbox.mddoc2,125 bytesfoundry-agent/create/references/tools/managed-harness-agent/tool-web-search.mddoc387 bytesfoundry-agent/create/references/tools/managed-harness-agent/tool-work-iq.mddoc1,329 bytesfoundry-agent/create/references/tools/prompt-agent/agent-tools.mddoc4,573 bytesfoundry-agent/create/references/tools/prompt-agent/tool-a2a.mddoc675 bytesfoundry-agent/create/references/tools/prompt-agent/tool-azure-ai-search.mddoc3,423 bytesfoundry-agent/create/references/tools/prompt-agent/tool-bing-grounding.mddoc2,869 bytesfoundry-agent/create/references/tools/prompt-agent/tool-code-interpreter.mddoc1,075 bytesfoundry-agent/create/references/tools/prompt-agent/tool-fabric-iq.mddoc1,933 bytesfoundry-agent/create/references/tools/prompt-agent/tool-file-search.mddoc2,699 bytesfoundry-agent/create/references/tools/prompt-agent/tool-function-calling.mddoc842 bytesfoundry-agent/create/references/tools/prompt-agent/tool-mcp.mddoc3,452 bytesfoundry-agent/create/references/tools/prompt-agent/tool-memory.mddoc4,888 bytesfoundry-agent/create/references/tools/prompt-agent/tool-openapi.mddoc1,528 bytesfoundry-agent/create/references/tools/prompt-agent/tool-web-search.mddoc3,703 bytesfoundry-agent/create/references/tools/prompt-agent/tool-work-iq.mddoc1,745 bytesfoundry-agent/create/references/use-toolbox-in-hosted-agent.mddoc10,630 bytesfoundry-agent/create/references/voice-agent-common.mddoc1,618 bytesfoundry-agent/create/references/voice-agent-hosted-bridge.mddoc8,345 bytesfoundry-agent/create/references/voice-agent-prompt-yaml.mddoc3,951 bytesfoundry-agent/create/references/voice-agent-settings.mddoc5,978 bytesfoundry-agent/create/references/voice-agent-smoke-test.mddoc8,010 bytesfoundry-agent/create/scripts/check-copilot-app-entry.ps1runs5,586 bytesfoundry-agent/create/scripts/check-copilot-app-entry.shruns4,295 bytesfoundry-agent/create/scripts/resolve-project-id.ps1runs5,952 bytesfoundry-agent/create/scripts/resolve-project-id.shruns9,243 bytesfoundry-agent/create/scripts/smoke-test-voice.ps1runs2,713 bytesfoundry-agent/create/scripts/smoke-test-voice.shruns966 bytesfoundry-agent/create/scripts/smoke_test_voice.pyruns14,876 bytesfoundry-agent/create/scripts/verify-environment.ps1runs8,397 bytesfoundry-agent/create/scripts/verify-environment.shruns6,630 bytesfoundry-agent/deploy/deploy.mddoc26,301 bytesfoundry-agent/deploy/references/container-deploy.mddoc2,140 bytesfoundry-agent/deploy/references/voice-deploy.mddoc2,261 bytesfoundry-agent/eval-datasets/eval-datasets.mddoc11,462 bytesfoundry-agent/eval-datasets/references/dataset-comparison.mddoc4,836 bytesfoundry-agent/eval-datasets/references/dataset-curation.mddoc4,167 bytesfoundry-agent/eval-datasets/references/dataset-organization.mddoc4,777 bytesfoundry-agent/eval-datasets/references/dataset-versioning.mddoc7,490 bytesfoundry-agent/eval-datasets/references/eval-lineage.mddoc4,090 bytesfoundry-agent/eval-datasets/references/eval-regression.mddoc7,023 bytesfoundry-agent/eval-datasets/references/eval-trending.mddoc4,921 bytesfoundry-agent/eval-datasets/references/generate-seed-dataset.mddoc8,893 bytesfoundry-agent/eval-datasets/references/trace-to-dataset.mddoc17,416 bytesfoundry-agent/insights/insights.mddoc4,655 bytesfoundry-agent/insights/references/tool-contract.mddoc3,479 bytesfoundry-agent/invocations-ws/invocations-ws.mddoc10,649 bytesfoundry-agent/invocations-ws/references/invocations-ws-protocol.mddoc7,943 bytesfoundry-agent/invoke/invoke.mddoc12,051 bytesfoundry-agent/invoke/references/file-operations.mddoc2,883 bytesfoundry-agent/invoke/references/invocations-protocol.mddoc3,516 bytesfoundry-agent/invoke/references/session-management.mddoc3,660 bytesfoundry-agent/observe/observe.mddoc15,636 bytesfoundry-agent/observe/references/analyze-results.mddoc6,462 bytesfoundry-agent/observe/references/cicd-monitoring.mddoc3,701 bytesfoundry-agent/observe/references/compare-iterate.mddoc3,351 bytesfoundry-agent/observe/references/continuous-eval.mddoc15,492 bytesfoundry-agent/observe/references/deploy-and-setup.mddoc5,662 bytesfoundry-agent/observe/references/evaluate-step.mddoc8,745 bytesfoundry-agent/observe/references/evaluation-suite-generation.mddoc12,582 bytesfoundry-agent/observe/references/optimize-deploy.mddoc1,579 bytesfoundry-agent/routine/references/azure-yaml.mddoc2,661 bytesfoundry-agent/routine/references/cli-crud.mddoc6,149 bytesfoundry-agent/routine/routine.mddoc8,151 bytesfoundry-agent/toolbox/references/mcp-protocol.mddoc3,326 bytesfoundry-agent/toolbox/references/test-endpoint.mddoc6,592 bytesfoundry-agent/toolbox/references/tool-a2a.mddoc2,263 bytesfoundry-agent/toolbox/references/tool-azure-ai-search.mddoc7,147 bytesfoundry-agent/toolbox/references/tool-browser-automation.mddoc3,548 bytesfoundry-agent/toolbox/references/tool-code-interpreter.mddoc3,582 bytesfoundry-agent/toolbox/references/tool-fabric-iq.mddoc4,475 bytesfoundry-agent/toolbox/references/tool-file-search.mddoc4,176 bytesfoundry-agent/toolbox/references/tool-mcp-agent-identity.mddoc8,030 bytesfoundry-agent/toolbox/references/tool-mcp-custom-oauth-azure-starter.mddoc4,126 bytesfoundry-agent/toolbox/references/tool-mcp-custom-oauth.mddoc8,058 bytesfoundry-agent/toolbox/references/tool-mcp-key-auth.mddoc4,338 bytesfoundry-agent/toolbox/references/tool-mcp-managed-oauth.mddoc6,473 bytesfoundry-agent/toolbox/references/tool-mcp-noauth.mddoc3,947 bytesfoundry-agent/toolbox/references/tool-mcp-user-entra-token.mddoc5,275 bytesfoundry-agent/toolbox/references/tool-openapi.mddoc6,299 bytesfoundry-agent/toolbox/references/tool-tool-search.mddoc6,015 bytesfoundry-agent/toolbox/references/tool-web-search.mddoc3,186 bytesfoundry-agent/toolbox/references/tool-work-iq.mddoc7,754 bytesfoundry-agent/toolbox/references/toolbox-azd.mddoc6,291 bytesfoundry-agent/toolbox/scripts/get-catalog-inputs.ps1runs13,030 bytesfoundry-agent/toolbox/scripts/get-catalog-inputs.shruns13,291 bytesfoundry-agent/toolbox/toolbox.mddoc7,942 bytesfoundry-agent/trace/references/analyze-failures.mddoc4,013 bytesfoundry-agent/trace/references/analyze-latency.mddoc3,880 bytesfoundry-agent/trace/references/conversation-detail.mddoc3,785 bytesfoundry-agent/trace/references/eval-correlation.mddoc2,555 bytesfoundry-agent/trace/references/kql-templates.mddoc10,839 bytesfoundry-agent/trace/references/search-traces.mddoc6,925 bytesfoundry-agent/trace/trace.mddoc6,696 bytesfoundry-agent/troubleshoot/troubleshoot.mddoc8,911 bytesfoundry-agent/validate/references/default-rules.yamlasset18,540 bytesfoundry-agent/validate/references/report-schema.jsonasset3,406 bytesfoundry-agent/validate/references/report-template.md.tplasset2,876 bytesfoundry-agent/validate/references/rules-schema.jsonasset2,554 bytesfoundry-agent/validate/validate.mddoc7,536 bytesproject/connections.mddoc3,203 bytesproject/create/create-foundry-project.mddoc8,586 bytesquota/quota.mddoc9,189 bytesquota/references/capacity-planning.mddoc8,375 bytesquota/references/error-resolution.mddoc5,013 bytesquota/references/optimization.mddoc7,818 bytesquota/references/ptu-guide.mddoc6,332 bytesquota/references/troubleshooting.mddoc7,521 bytesquota/references/workflows.mddoc7,036 bytesrbac/rbac.mddoc7,269 bytesreferences/agent-metadata-contract.mddoc8,866 bytesreferences/auth-best-practices.mddoc6,669 bytesreferences/standard-agent-setup.mddoc4,290 bytesresource/create/create-foundry-resource.mddoc6,204 bytesresource/create/references/patterns.mddoc4,007 bytesresource/create/references/troubleshooting.mddoc2,470 bytesresource/create/references/workflows.mddoc6,859 bytesresource/private-network/private-network.mddoc6,448 bytesresource/private-network/references/custom-template-adaptation.mddoc1,630 bytesresource/private-network/references/deploy.mddoc3,759 bytesresource/private-network/references/end-to-end-test.mddoc4,197 bytesresource/private-network/references/intake.mddoc6,700 bytesresource/private-network/references/post-deployment-validation.mddoc3,739 bytesresource/private-network/references/scaffold.mddoc1,773 bytesresource/private-network/references/template-index.mddoc1,590 bytesresource/private-network/references/vpn-dns-setup.bicepasset4,564 bytesresource/private-network/references/vpn-dns-setup.mddoc6,531 bytesscripts/check-and-setup-dependencies.ps1runs1,276 bytesscripts/check-and-setup-dependencies.shruns845 bytes
Read SKILL.md
# Microsoft Foundry Skill
This skill helps developers work with Microsoft Foundry resources, covering model discovery and deployment, complete dev lifecycle of AI agent, evaluation workflows, and troubleshooting.
## Pre-Execution Requirements
Follow each applicable subsection below before starting its corresponding action or workflow.
### Dependency Check and Setup
**MANDATORY:** As the first step after this skill loads, run the dependency check and setup script below from this skill's root and wait for it to finish before continuing. The script checks first and installs only missing dependencies; it does not reinstall dependencies that are already available.
**You MUST complete this check before reading or entering any sub-skill, workflow, or workflow-specific reference.**
finetuning
When your agent uses it
Fine-tune models on Microsoft Foundry using SFT (supervised), DPO (preference), or RFT (reinforcement with graders). Covers dataset preparation, training job submission, deployment, and evaluation. USE FOR: fine-tune, SFT, DPO, RFT, training data, grader, distillation, fine-tuned model, training job, large file upload, calibrate grader, deploy fine-tuned model, evaluate fine-tuned model. DO NOT USE FOR: general model deployment without fine-tuning (use deploy-model), agent creation (use agents), prompt optimization without training (use prompt-optimizer).
What it loads into context
Frontmatter
160 tokensAlways available to the agent
SKILL.md
1,378 tokensWhen the skill is activated
Reference documents
14,643 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Use
- Workflows
- References
- Scripts
- Rules
- Quick Reference
- Error Handling
Scripts executed separately
scripts/calibrate_grader.pyscripts/check_training.pyscripts/cleanup.pyscripts/common.pyscripts/convert_dataset.pyscripts/deploy_model.pyscripts/evaluate_model.pyscripts/generate_distillation_data.pyscripts/monitor_training.pyscripts/score_dataset.pyscripts/submit_training.pyscripts/validate/__init__.pyscripts/validate/data_stats.pyscripts/validate/validate_dpo.pyscripts/validate/validate_rft.pyscripts/validate/validate_sft.py
Files
SKILL.mdcore5,509 bytesreferences/agentic-rft.mddoc3,234 bytesreferences/dataset-formats.mddoc3,740 bytesreferences/deployment.mddoc3,503 bytesreferences/evaluation.mddoc5,924 bytesreferences/grader-design.mddoc3,437 bytesreferences/hyperparameters.mddoc3,233 bytesreferences/large-file-uploads.mddoc927 bytesreferences/platform-gotchas.mddoc2,069 bytesreferences/reward-hacking.mddoc2,945 bytesreferences/training-curves.mddoc4,183 bytesreferences/training-types.mddoc3,161 bytesreferences/vision-fine-tuning.mddoc4,205 bytesscripts/calibrate_grader.pyruns9,493 bytesscripts/check_training.pyruns7,987 bytesscripts/cleanup.pyruns9,687 bytesscripts/common.pyruns7,808 bytesscripts/convert_dataset.pyruns10,936 bytesscripts/deploy_model.pyruns9,618 bytesscripts/evaluate_model.pyruns11,690 bytesscripts/generate_distillation_data.pyruns10,299 bytesscripts/monitor_training.pyruns5,866 bytesscripts/score_dataset.pyruns7,873 bytesscripts/submit_training.pyruns11,070 bytesscripts/validate/__init__.pyruns305 bytesscripts/validate/data_stats.pyruns6,331 bytesscripts/validate/validate_dpo.pyruns3,807 bytesscripts/validate/validate_rft.pyruns8,799 bytesscripts/validate/validate_sft.pyruns4,573 bytesworkflows/dataset-creation.mddoc3,161 bytesworkflows/diagnose-poor-results.mddoc2,401 bytesworkflows/full-pipeline.mddoc3,167 bytesworkflows/iterative-training.mddoc3,178 bytesworkflows/quickstart.mddoc4,600 bytes
Read SKILL.md
# Fine-Tuning on Microsoft Foundry
Fine-tune models using SFT (supervised), DPO (preference), or RFT (reinforcement with graders). Covers dataset prep, training, deployment, and evaluation.
## When to Use
Use this sub-skill when the user asks about:
- Fine-tuning a model (SFT, DPO, or RFT)
- Preparing, validating, or formatting training data
- Submitting, monitoring, or diagnosing training jobs
- Calibrating graders or pass thresholds for RFT
- Deploying or evaluating a fine-tuned model
- Choosing between training types (SFT vs DPO vs RFT)
- Distillation, synthetic data generation, or dataset quality scoringdeploy-model
When your agent uses it
Unified Azure OpenAI model deployment skill with intelligent intent-based routing. Handles quick preset deployments, fully customized deployments (version/SKU/capacity/RAI policy), and capacity discovery across regions and projects. USE FOR: deploy model, deploy gpt, create deployment, model deployment, deploy openai model, set up model, provision model, find capacity, check model availability, where can I deploy, best region for model, capacity analysis. DO NOT USE FOR: listing existing deployments (use foundry_models_deployments_list MCP tool), deleting deployments, agent creation (use agent/create), project creation (use project/create).
What it loads into context
Frontmatter
156 tokensAlways available to the agent
SKILL.md
1,714 tokensWhen the skill is activated
Reference documents
11,383 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Quick Reference
- Intent Detection
- Project Selection (All Modes)
- Pre-Deployment Validation (All Modes)
- Prerequisites
- Sub-Skills
Scripts executed separately
scripts/generate_deployment_url.ps1scripts/generate_deployment_url.sh
Files
../../foundry-agent/create/create-hosted.mddoc34,649 bytesSKILL.mdcore7,301 bytesSKILL.mdcore7,301 bytesSKILL.mdcore7,301 bytesTEST_PROMPTS.mddoc3,367 bytesscripts/generate_deployment_url.ps1runs2,371 bytesscripts/generate_deployment_url.shruns2,687 bytes../../quota/quota.mddoc9,189 bytes
Read SKILL.md
# Deploy Model
> **Scope — read this first.** This skill creates model deployments **out-of-band** via Azure CLI / MCP / portal. For azd-managed Foundry projects (those scaffolded from `azd ai agent init`), declare deployments in `azure.yaml services.ai-project.deployments[]` instead — `azd ai agent init` writes the entry from the sample manifest and `azd provision` creates the deployment through Bicep. See [foundry-agent/create/create-hosted.md](../../foundry-agent/create/create-hosted.md) for the Golden Path. Use this skill only for: (a) Foundry projects not managed by an azd project, (b) ad-hoc deployments outside the azd lifecycle.
Unified entry point for all Azure OpenAI model deployment workflows. Analyzes user intent and routes to the appropriate deployment mode.
## Quick Reference
| Mode | When to Use | Sub-Skill |
|------|-------------|-----------|
| **Preset** | Quick deployment, no customization needed | [preset/SKILL.md](preset/SKILL.md) |
| **Customize** | Full control: version, SKU, capacity, RAI policy | [customize/SKILL.md](customize/SKILL.md) |
| **Capacity Discovery** | Find where you can deploy with specific capacity | [capacity/SKILL.md](capacity/SKILL.md) |
capacity
When your agent uses it
Discovers available Azure OpenAI model capacity across regions and projects. Analyzes quota limits, compares availability, and recommends optimal deployment locations based on capacity requirements. USE FOR: find capacity, check quota, where can I deploy, capacity discovery, best region for capacity, multi-project capacity search, quota analysis, model availability, region comparison, check TPM availability. DO NOT USE FOR: actual deployment (hand off to preset or customize after discovery), quota increase requests (direct user to Azure Portal), listing existing deployments.
What it loads into context
Frontmatter
131 tokensAlways available to the agent
SKILL.md
1,617 tokensWhen the skill is activated
Reference documents
5,185 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Quick Reference
- When to Use This Skill
- Scripts
- Workflow
- Error Handling
- Related Skills
Scripts executed separately
scripts/discover_and_rank.ps1scripts/discover_and_rank.shscripts/query_capacity.ps1scripts/query_capacity.sh
Files
SKILL.mdcore7,011 bytesSKILL.mdcore7,011 bytesSKILL.mdcore7,011 bytesSKILL.mdcore7,011 bytesSKILL.mdcore7,011 bytesSKILL.mdcore7,011 bytesscripts/discover_and_rank.ps1runs4,677 bytesscripts/discover_and_rank.shruns4,641 bytesscripts/query_capacity.ps1runs3,030 bytesscripts/query_capacity.shruns2,942 bytes../customize/SKILL.mddoc8,988 bytes../preset/SKILL.mddoc4,960 bytes../../../quota/quota.mddoc9,189 bytes
Read SKILL.md
# Capacity Discovery
Finds available Azure OpenAI model capacity across all accessible regions and projects. Recommends the best deployment location based on capacity requirements.
## Quick Reference
| Property | Description |
|----------|-------------|
| **Purpose** | Find where you can deploy a model with sufficient capacity |
| **Scope** | All regions and projects the user has access to |
| **Output** | Ranked table of regions/projects with available capacity |
| **Action** | Read-only analysis — does NOT deploy. Hands off to preset or customize |
| **Authentication** | Azure CLI (`az login`) |
customize
When your agent uses it
Interactive guided deployment flow for Azure OpenAI models with full customization control. Step-by-step selection of model version, SKU (GlobalStandard/Standard/ProvisionedManaged), capacity, RAI policy (content filter), and advanced options (dynamic quota, priority processing, spillover). USE FOR: custom deployment, customize model deployment, choose version, select SKU, set capacity, configure content filter, RAI policy, deployment options, detailed deployment, advanced deployment, PTU deployment, provisioned throughput. DO NOT USE FOR: quick deployment to optimal region (use preset).
What it loads into context
Frontmatter
142 tokensAlways available to the agent
SKILL.md
1,947 tokensWhen the skill is activated
Reference documents
7,538 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Quick Reference
- When to Use This Skill
- Prerequisites
- Workflow Overview
- Phase Summaries
- Error Handling
- Selection Guides & Advanced Topics
- Related Skills
- Notes
Files
EXAMPLES.mddoc4,402 bytesSKILL.mdcore8,988 bytesSKILL.mdcore8,988 bytesreferences/customize-guides.mddoc3,487 bytesreferences/customize-workflow.mddoc13,403 bytes../../../quota/quota.mddoc9,189 bytes
Read SKILL.md
# Customize Model Deployment
Interactive guided workflow for deploying Azure OpenAI models with full customization control over version, SKU, capacity, content filtering, and advanced options.
## Quick Reference
| Property | Description |
|----------|-------------|
| **Flow** | Interactive step-by-step guided deployment |
| **Customization** | Version, SKU, Capacity, RAI Policy, Advanced Options |
| **SKU Support** | GlobalStandard, Standard, ProvisionedManaged, DataZoneStandard |
| **Best For** | Precise control over deployment configuration |
| **Authentication** | Azure CLI (`az login`) |
| **Tools** | Azure CLI, MCP tools (optional) |preset
When your agent uses it
Intelligently deploys Azure OpenAI models to optimal regions by analyzing capacity across all available regions. Automatically checks current region first and shows alternatives if needed. USE FOR: quick deployment, optimal region, best region, automatic region selection, fast setup, multi-region capacity check, high availability deployment, deploy to best location. DO NOT USE FOR: custom SKU selection (use customize), specific version selection (use customize), custom capacity configuration (use customize), PTU deployments (use customize).
What it loads into context
Frontmatter
126 tokensAlways available to the agent
SKILL.md
1,072 tokensWhen the skill is activated
Reference documents
10,085 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- What This Skill Does
- Prerequisites
- Quick Workflow
- Deployment Phases
- Error Handling
- Advanced Usage
- Notes
- Related Skills
Files
EXAMPLES.mddoc2,989 bytesSKILL.mdcore4,960 bytesSKILL.mdcore4,960 bytesreferences/preset-workflow.mddoc22,492 bytesreferences/workflow.mddoc5,763 bytes../../../quota/quota.mddoc9,189 bytes
Read SKILL.md
# Deploy Model to Optimal Region
Automates intelligent Azure OpenAI model deployment by checking capacity across regions and deploying to the best available option.
## What This Skill Does
1. Verifies Azure authentication and project scope
2. Checks capacity in current project's region
3. If no capacity: analyzes all regions and shows available alternatives
4. Filters projects by selected region
5. Supports creating new projects if needed
6. Deploys model with GlobalStandard SKU
7. Monitors deployment progress
python-appservice-deploy
When your agent uses it
Deploy Python (Flask/Django/FastAPI) code to Azure App Service Linux. WHEN: "Flask App Service", "Django App Service", "FastAPI App Service", "deploy Python to App Service". DO NOT USE FOR: Container Apps, Functions, non-Python, Terraform/Bicep/IaC, full infra — use azure-prepare.
What it loads into context
Frontmatter
108 tokensAlways available to the agent
SKILL.md
804 tokensWhen the skill is activated
Reference documents
8,922 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Workflow
- Error Handling
Scripts executed separately
scripts/generate-app-name.ps1scripts/generate-app-name.shscripts/retry-az-create.ps1scripts/retry-az-create.sh
Files
SKILL.mdcore2,787 bytesreferences/create-app.mddoc6,202 bytesreferences/deploy-azcli.mddoc4,800 bytesreferences/deploy-azd.mddoc2,372 bytesreferences/detect.mddoc3,733 bytesreferences/errors.mddoc3,855 bytesreferences/post-deploy-message.mddoc4,488 bytesreferences/startup-commands.mddoc4,421 bytesreferences/transient-retry.mddoc2,365 bytesscripts/generate-app-name.ps1runs1,744 bytesscripts/generate-app-name.shruns1,844 bytesscripts/retry-az-create.ps1runs2,201 bytesscripts/retry-az-create.shruns1,936 bytes
Read SKILL.md
# Python on Azure App Service — Code Deploy
Deploys Python (Flask, Django, FastAPI, generic) code to Azure App Service Linux (P0v3, Python 3.14). Creates RG + Plan + Web App if missing. Hand off to `azure-prepare` for VNet, Key Vault, databases, or IaC.
**MCP tools used**: `mcp_azure_mcp_subscription_list`, `mcp_azure_mcp_group_list`, `mcp_azure_mcp_appservice`, `mcp_azure_mcp_azd` (when `azure.yaml` is present).
## Workflow
1. **Resolve context — smart defaults, minimal prompts.** Only the app name is interactive; RG (`<app>-rg`), Plan (`<app>-plan`), region (current `az` default or `eastus2`), subscription are derived. [create-app.md](references/create-app.md) §1.
2. **Detect framework** (advisory, never blocks). [detect.md](references/detect.md).
3. **Choose path** — `azure.yaml` host: appservice → [deploy-azd.md](references/deploy-azd.md); else [deploy-azcli.md](references/deploy-azcli.md).
4. **Ensure RG → Plan (`P0v3 --is-linux`) → Web App (`--runtime "PYTHON:3.14"`)** exist. On transient ARM errors, follow [transient-retry.md](references/transient-retry.md). [create-app.md](references/create-app.md).
5. **Set startup** — Flask/Django: none (Oryx auto-detects). FastAPI: always `python -m uvicorn main:app --host 0.0.0.0`. Other: warn. [startup-commands.md](references/startup-commands.md).
6. **Set `SCM_DO_BUILD_DURING_DEPLOYMENT=true`**.Skills included
- airunway-aks-setup
- appinsights-instrumentation
- azure-ai
- azure-aigateway
- azure-app-onboard
- azure-app-onboard-prereq
- azure-cloud-migrate
- azure-compliance
- azure-compute
- azure-deploy
- azure-diagnostics
- azure-enterprise-infra-planner
- azure-kubernetes
- azure-kubernetes-app-deploy
- azure-kubernetes-automatic-readiness
- azure-kusto
- azure-messaging
- azure-prepare
- azure-quotas
- azure-reliability
- azure-resource-lookup
- azure-resource-visualizer
- azure-storage
- azure-upgrade
- azure-validate
- discover-azure-skills
- entra-agent-id
- entra-app-registration
- microsoft-foundry
- finetuning
- deploy-model
- capacity
- customize
- preset
- python-appservice-deploy
Repository facts
- License
- MIT
- Created
- Feb 26, 2026
- Last pushed
- Nov 5, 2026
- Forks
- 266
- Open issues
- 6
- Project activity
- Active
Rank over the last 12 weeks
Now #617 · best #459 · down 93 in 30 days
- #606 on Oct 31
- #607 on Nov 1
- #611 on Nov 2
- #615 on Nov 3
- #616 on Nov 4
- #617 since Nov 5
74 earlier periods
- #452 on Aug 2
- #458 on Aug 7
- #459 on Aug 8
- #472 on Aug 10
- #470 on Aug 11
- #465 on Aug 12
- #476 on Aug 13
- #471 on Aug 14
- #459 on Aug 15
- #465 on Aug 16
- #469 on Aug 17
- #478 on Aug 18
- #476 from Aug 19 to Aug 20
- #473 on Aug 21
- #459 on Aug 22
- #478 on Aug 23
- #483 on Aug 25
- #474 on Aug 26
- #486 on Aug 27
- #483 on Aug 28
- #476 on Aug 29
- #466 on Aug 30
- #489 on Aug 31
- #494 from Sep 1 to Sep 2
- #497 on Sep 3
- #483 on Sep 4
- #482 on Sep 5
- #491 on Sep 6
- #495 on Sep 7
- #509 on Sep 8
- #498 on Sep 9
- #502 on Sep 10
- #499 on Sep 11
- #495 on Sep 12
- #494 on Sep 13
- #509 on Sep 14
- #503 on Sep 15
- #515 on Sep 16
- #511 on Sep 17
- #497 on Sep 19
- #509 on Sep 20
- #510 on Sep 21
- #518 on Sep 22
- #512 on Sep 23
- #501 on Sep 24
- #498 on Sep 25
- #496 on Sep 26
- #516 on Sep 28
- #531 on Sep 29
- #519 on Sep 30
- #513 from Oct 1 to Oct 2
- #500 on Oct 3
- #501 on Oct 4
- #508 on Oct 5
- #524 from Oct 6 to Oct 7
- #539 on Oct 8
- #538 on Oct 9
- #526 on Oct 11
- #536 on Oct 12
- #538 on Oct 13
- #542 on Oct 14
- #537 on Oct 15
- #539 on Oct 16
- #534 from Oct 17 to Oct 18
- #551 on Oct 19
- #556 on Oct 20
- #562 on Oct 21
- #552 on Oct 22
- #544 on Oct 23
- #537 on Oct 24
- #593 on Oct 25
- #598 on Oct 28
- #601 on Oct 29
- #605 on Oct 30
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 5, 2026
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 120 notes
.claude-plugin/plugin.json:1Analysis incomplete: Referenced file expansion limit reached.github/plugins/aks-skills/hooks/claude-hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.github/plugins/aks-skills/hooks/claude-hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.github/plugins/azure-advisor/hooks/claude-hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.github/plugins/azure-advisor/hooks/claude-hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.github/plugins/azure-cost/hooks/claude-hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.github/plugins/azure-cost/hooks/claude-hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.github/plugins/azure-kusto-graph-skills/hooks/claude-hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.github/plugins/azure-kusto-graph-skills/hooks/claude-hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.github/plugins/azure-local-skills/.claude-plugin/plugin.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.github/plugins/azure-local-skills/hooks/claude-hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.github/plugins/azure-local-skills/hooks/claude-hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.github/plugins/azure-skills/hooks/claude-hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.github/plugins/azure-skills/hooks/claude-hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/github-actions/deploy.yml:1Analysis incomplete: Referenced executable target unavailable; not analyzed.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/k8s/pdb.yaml:1Analysis incomplete: Referenced executable target unavailable; not analyzed.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/references/constraint-spec-v1.yaml:1Analysis incomplete: Referenced executable target unavailable; not analyzed.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/references/constraint-spec-v1.yaml:1Analysis incomplete: Referenced executable target unavailable; not analyzed.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/references/constraint-spec-v1.yaml:1Analysis incomplete: Referenced executable target unavailable; not analyzed.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/references/constraint-spec-v1.yaml:1Analysis incomplete: Referenced executable target unavailable; not analyzed
- 91 dangerous shell commandsin 49 files: skills/azure-deploy/references/recipes/azd/sql-managed-identity.md:16 skills/azure-cloud-migrate/references/services/container-apps/fargate-deployment-guide.md:113 skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/rust.Dockerfile:30 and 46 more
- 7,014 network referencesin 935 files: skills/microsoft-foundry/foundry-agent/create/references/foundry-tool-catalog.md:44 microsoft-foundry/quota/quota.md:50 .github/plugins/azure-local-skills/skills/azure-local/references/docs-map.md:7 and 932 more
- 8 obfuscation signalsin 7 files: skills/azure-cloud-migrate/references/services/container-apps/deployment-guide.md:111 .github/plugins/aks-skills/skills/azure-search-nav/references/Invoke-PortalSearchNav.ps1:150 .github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/container-apps/deployment-guide.md:111 and 4 more
- 16 instruction override signalsin 8 files: skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/workflow.md:228 .github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/workflow.md:228 .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/deploy/deploy.md:227 and 5 more
- 278 executable scriptsin 218 files: skills/azure-app-onboard/deploy/references/deploy-schemas.ts:1 skills/appinsights-instrumentation/scripts/appinsights.ps1:1 skills/azure-ai/scripts/analyze-speech-sdk-log.mjs:1 and 215 more
- 806 references to secretsin 205 files: skills/microsoft-foundry/finetuning/scripts/common.py:17 skills/microsoft-foundry/finetuning/scripts/evaluate_model.py:30 skills/microsoft-foundry/finetuning/scripts/submit_training.py:68 and 202 more
- No requests to vote in Hot
Show all 8,217 signals by file
.claude-plugin/marketplace.json
- Network accessline 3
"owner": { "name": "Microsoft", "url": "https://www.microsoft.com" - Network accessline 4
"name": "Microsoft", "url": "https://www.microsoft.com" }, - Network accessline 5
"url": "https://www.microsoft.com" - Network accessline 10
"description": "Microsoft Azure MCP and Skills integration for cloud resource management, deployments, and Azure services. Manage your Azure infrastructure, monitor applications, and deploy resources directly from your development environme - Network accessline 11
"source": "./.github/plugins/azure-skills", "homepage": "https://github.com/microsoft/azure-skills", "author": { - Network accessline 12
"homepage": "https://github.com/microsoft/azure-skills", - Network accessline 13
"author": { "name": "Microsoft", "url": "https://www.microsoft.com" - Network accessline 14
"name": "Microsoft", "url": "https://www.microsoft.com" }, - Network accessline 15
"url": "https://www.microsoft.com" - Network accessline 16
}, "repository": "https://github.com/microsoft/github-copilot-for-azure" }, - Network accessline 17
"repository": "https://github.com/microsoft/github-copilot-for-azure" - Network accessline 21
"description": "Kusto graph analysis, IRQL security hunting pipelines, and graph visualization skills for Azure Data Explorer.", "source": "./.github/plugins/azure-kusto-graph-skills", "homepage": "https://github.com/microsoft/a - Network accessline 22
"source": "./.github/plugins/azure-kusto-graph-skills", "homepage": "https://github.com/microsoft/azure-skills", "author": { - Network accessline 23
"homepage": "https://github.com/microsoft/azure-skills", - Network accessline 24
"author": { "name": "Microsoft", "url": "https://www.microsoft.com" - Network accessline 25
"name": "Microsoft", "url": "https://www.microsoft.com" }, - Network accessline 26
"url": "https://www.microsoft.com" - Network accessline 27
}, "repository": "https://github.com/microsoft/github-copilot-for-azure" }, - Network accessline 28
"repository": "https://github.com/microsoft/github-copilot-for-azure" - Network accessline 34
"author": { "name": "Microsoft", "url": "https://www.microsoft.com" - Network accessline 35
"name": "Microsoft", "url": "https://www.microsoft.com" }, - Network accessline 36
"url": "https://www.microsoft.com" - Network accessline 37
}, "homepage": "https://github.com/microsoft/azure-skills", "repository": "https://github.com/microsoft/github-copilot-for-azure" - Network accessline 38
"homepage": "https://github.com/microsoft/azure-skills", - Network accessline 39
"repository": "https://github.com/microsoft/github-copilot-for-azure" - Network accessline 45
"author": { "name": "Microsoft", "url": "https://www.microsoft.com" - Network accessline 46
"name": "Microsoft", "url": "https://www.microsoft.com" }, - Network accessline 47
"url": "https://www.microsoft.com" - Network accessline 48
}, "homepage": "https://github.com/microsoft/azure-skills", "repository": "https://github.com/microsoft/github-copilot-for-azure" - Network accessline 49
"homepage": "https://github.com/microsoft/azure-skills", - Network accessline 50
"repository": "https://github.com/microsoft/github-copilot-for-azure" - Network accessline 56
"author": { "name": "Microsoft", "url": "https://www.microsoft.com" - Network accessline 57
"name": "Microsoft", "url": "https://www.microsoft.com" }, - Network accessline 58
"url": "https://www.microsoft.com" - Network accessline 59
}, "homepage": "https://github.com/microsoft/azure-skills", "repository": "https://github.com/microsoft/github-copilot-for-azure" - Network accessline 60
"homepage": "https://github.com/microsoft/azure-skills", - Network accessline 61
"repository": "https://github.com/microsoft/github-copilot-for-azure" - Network accessline 67
"author": { "name": "Microsoft", "url": "https://www.microsoft.com" - Network accessline 68
"name": "Microsoft", "url": "https://www.microsoft.com" }, - Network accessline 69
"url": "https://www.microsoft.com" - Network accessline 70
}, "homepage": "https://github.com/microsoft/azure-skills", "repository": "https://github.com/microsoft/github-copilot-for-azure" - Network accessline 71
"homepage": "https://github.com/microsoft/azure-skills", - Network accessline 72
"repository": "https://github.com/microsoft/github-copilot-for-azure" - Network accessline 78
"author": { "name": "Microsoft", "url": "https://www.microsoft.com" - Network accessline 79
"name": "Microsoft", "url": "https://www.microsoft.com" }, - Network accessline 80
"url": "https://www.microsoft.com" - Network accessline 81
}, "homepage": "https://github.com/microsoft/azure-skills", "repository": "https://github.com/microsoft/github-copilot-for-azure" - Network accessline 82
"homepage": "https://github.com/microsoft/azure-skills", - Network accessline 83
"repository": "https://github.com/microsoft/github-copilot-for-azure"
.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "Microsoft", "url": "https://www.microsoft.com" - Network accessline 6
"name": "Microsoft", "url": "https://www.microsoft.com" }, - Network accessline 7
"url": "https://www.microsoft.com" - Network accessline 8
}, "homepage": "https://github.com/microsoft/azure-skills", "repository": "https://github.com/microsoft/azure-skills", - Network accessline 9
"homepage": "https://github.com/microsoft/azure-skills", - Network accessline 10
"repository": "https://github.com/microsoft/azure-skills",
.github/plugins/aks-skills/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "Microsoft", "url": "https://www.microsoft.com" - Network accessline 6
"name": "Microsoft", "url": "https://www.microsoft.com" }, - Network accessline 7
"url": "https://www.microsoft.com" - Network accessline 8
}, "homepage": "https://github.com/microsoft/github-copilot-for-azure", "repository": "https://github.com/microsoft/GitHub-Copilot-for-Azure", - Network accessline 9
"homepage": "https://github.com/microsoft/github-copilot-for-azure", - Network accessline 10
"repository": "https://github.com/microsoft/GitHub-Copilot-for-Azure",
.github/plugins/aks-skills/skills/aks-gpu-inference/references/gpu-cost-and-scaling.md
.github/plugins/aks-skills/skills/aks-gpu-inference/references/gpu-observability.md
- Network accessline 48
Sources: [managed exporter port](https://learn.microsoft.com/azure/aks/aks-managed-gpu-nodes), - Network accessline 49
[managed exporter port](https://learn.microsoft.com/azure/aks/aks-managed-gpu-nodes), - Network accessline 50
[GPU observability](https://learn.microsoft.com/azure/aks/best-practices-gpu-observability), - Network accessline 51
[PyTorch CUDA OOM](https://docs.pytorch.org/docs/2.14/generated/torch.cuda.OutOfMemoryError.html).
.github/plugins/aks-skills/skills/aks-gpu-inference/references/gpu-scheduling.md
- Network accessline 52
Sources: [AKS-managed GPU node pools](https://learn.microsoft.com/azure/aks/aks-managed-gpu-nodes), - Network accessline 53
[AKS-managed GPU node pools](https://learn.microsoft.com/azure/aks/aks-managed-gpu-nodes), - Network accessline 54
[self-managed NVIDIA GPUs](https://learn.microsoft.com/azure/aks/use-nvidia-gpu).
.github/plugins/aks-skills/skills/aks-gpu-inference/references/kaito-workspaces.md
.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md
- Network accessline 13
| Signature | Cause | Verify, then documented fix | Microsoft Learn | |---|---|---|---| | `VMExtensionError_OutboundConnFail`, `ERR_OUTBOUND_CONN_FAIL`, or exit **50** | CSE cannot reach endpoints needed for node packages | Test `mcr.micros - Network accessline 14
|---|---|---|---| | `VMExtensionError_OutboundConnFail`, `ERR_OUTBOUND_CONN_FAIL`, or exit **50** | CSE cannot reach endpoints needed for node packages | Test `mcr.microsoft.com:443`; inspect firewall, proxy, NSG, UDR, and AKS egress rules; - Network accessline 15
| `VMExtensionError_OutboundConnFail`, `ERR_OUTBOUND_CONN_FAIL`, or exit **50** | CSE cannot reach endpoints needed for node packages | Test `mcr.microsoft.com:443`; inspect firewall, proxy, NSG, UDR, and AKS egress rules; correct the block - Network accessline 16
| `VMExtensionError_K8SAPIServerConnFail`, `ERR_K8S_API_SERVER_CONN_FAIL`, or exit **51** | Node cannot reach the API server on TCP 443 | Test the API FQDN on 443; inspect NSG, UDR, firewall/proxy, authorized IPs, private endpoint, and TLS - Network accessline 17
| `VMExtensionError_K8SAPIServerDNSLookupFail`, `ERR_K8S_API_SERVER_DNS_LOOKUP_FAIL`, or exit **52** | Node cannot resolve the API-server FQDN | Resolve the FQDN and inspect DNS port 53, forwarders, and private-zone records/links; correct D - Network accessline 21
| Signature | Cause | Verify, then documented fix | Microsoft Learn | |---|---|---|---| | `VMCannotFitEphemeralOSDisk` | Requested ephemeral OS disk exceeds the SKU cache/temp capacity | Compare disk size with SKU storage; choose a fitting - Network accessline 22
|---|---|---|---| | `VMCannotFitEphemeralOSDisk` | Requested ephemeral OS disk exceeds the SKU cache/temp capacity | Compare disk size with SKU storage; choose a fitting SKU, smaller disk, or managed disk. Type and size require a new pool | - Network accessline 23
| `VMCannotFitEphemeralOSDisk` | Requested ephemeral OS disk exceeds the SKU cache/temp capacity | Compare disk size with SKU storage; choose a fitting SKU, smaller disk, or managed disk. Type and size require a new pool | [Ephemeral OS dis - Network accessline 24
| AKS node-pool `SkuNotAvailable` naming size, location, and zone | SKU is unavailable for that subscription and placement; Spot capacity can also cause it | Inspect `az vm list-skus`; choose another size, zone, or region, or request SKU ac - Network accessline 25
| AKS `ZonalAllocationFailed` stating insufficient capacity in a zone | Requested placement lacks capacity; a proximity placement group can constrain it | Check PPG association; use another SKU, zone, region, or pool. For upgrades, consider - Network accessline 26
| AKS `OverconstrainedAllocationRequest` listing constraints | The named SKU, networking, zone, disk, or PPG combination cannot allocate | Read the listed constraints; relax only a named constraint or choose another placement | [AKS allocat - Network accessline 27
| AKS `AllocationFailed`: `The VM allocation failed due to an internal error` | Internal allocation error | Confirm the failed operation and full message read-only; only after approval, retry later or deploy elsewhere. Do not recast it as q - Network accessline 28
| AKS/backing VMSS `AllocationFailed` stating insufficient regional capacity | Requested regional placement lacks VM capacity | Confirm the full message; retry later or use another SKU, zone, region, or pool | [VMSS allocation failures](htt - Network accessline 32
| Signature | Cause | Verify, then documented fix | Microsoft Learn | |---|---|---|---| | `NodeImageVersion ... is not accepted` and says only current or `latest` is allowed | Snapshot/rollback-pinned pool requested another image | Compare - Network accessline 33
|---|---|---|---| | `NodeImageVersion ... is not accepted` and says only current or `latest` is allowed | Snapshot/rollback-pinned pool requested another image | Compare current and requested images; run a node-image-only upgrade without `- - Network accessline 34
| `NodeImageVersion ... is not accepted` and says only current or `latest` is allowed | Snapshot/rollback-pinned pool requested another image | Compare current and requested images; run a node-image-only upgrade without `--snapshot-id` to u - Network accessline 35
| `NodePoolMcVersionIncompatible` | Pool is over two minor versions behind, or newer than the control plane | Read both versions and available upgrades; only after approval, upgrade within two minors without exceeding the control plane | [N - Network accessline 36
| `K8sVersionNotSupported` during AKS upgrade | Target version is unsupported in the region | Read supported versions and choose one offered in that region | [AKS upgrade blocked](https://learn.microsoft.com/troubleshoot/azure/azure-kuberne - Network accessline 37
| `OperationNotAllowed` stating the requested upgrade is unavailable | Requested path skips a required minor version | Read available upgrades and upgrade through supported minor versions | [AKS upgrade blocked](https://learn.microsoft.com/ - Network accessline 41
| Signature | Cause | Verify, then documented fix | Microsoft Learn | |---|---|---|---| | AKS create/deploy `LinkedAuthorizationFailed` naming a linked scope and action | Deployment identity lacks that action on the linked resource | Read t - Network accessline 42
|---|---|---|---| | AKS create/deploy `LinkedAuthorizationFailed` naming a linked scope and action | Deployment identity lacks that action on the linked resource | Read the identity, action, scope, and assignments; grant the required role a - Network accessline 43
| AKS create/deploy `LinkedAuthorizationFailed` naming a linked scope and action | Deployment identity lacks that action on the linked resource | Read the identity, action, scope, and assignments; grant the required role at the linked scope - Network accessline 44
| Network-isolated AKS `OrasPullUnauthorizedVMExtensionError` / CSE exit **212** | Kubelet identity lacks bootstrap ACR pull access or VM binding | Inspect logs, identity binding, and ACR roles; assign `AcrPull` or the ABAC repository-reade - Network accessline 45
| AKS pod image pull `401 Unauthorized` / `failed to authorize` from ACR | Kubelet identity, service principal, or pull secret lacks registry authorization | Inspect pod events and `az aks check-acr`; correct the applicable ACR role or cred
.github/plugins/aks-skills/skills/aks-network-capture/references/capture-authorization.md
.github/plugins/aks-skills/skills/aks-network-capture/scripts/collect-azure-network-info.ps1
- Executable scriptline 1
Executable file
.github/plugins/aks-skills/skills/aks-network-capture/scripts/collect-azure-network-info.sh
- Executable scriptline 1
#!/usr/bin/env bash
.github/plugins/aks-skills/skills/aks-network-capture/scripts/create-capture.ps1
- Executable scriptline 1
Executable file
.github/plugins/aks-skills/skills/aks-network-capture/scripts/create-capture.sh
- Executable scriptline 1
#!/usr/bin/env bash - Access to secretsline 280
[Credential-related source omitted] - Access to secretsline 281
[Credential-related source omitted] - Access to secretsline 304
[Credential-related source omitted] - Access to secretsline 310
[Credential-related source omitted] - Access to secretsline 312
[Credential-related source omitted] - Access to secretsline 318
[Credential-related source omitted] - Access to secretsline 341
[Credential-related source omitted] - Access to secretsline 349
[Credential-related source omitted] - Access to secretsline 367
[Credential-related source omitted] - Access to secretsline 369
[Credential-related source omitted] - Access to secretsline 370
[Credential-related source omitted]
.github/plugins/aks-skills/skills/aks-network-capture/scripts/generate-test-traffic.ps1
- Executable scriptline 1
Executable file - Network accessline 110
while [ "$(date +%s)" -lt "$end" ]; do case "$traffic_type" in http) wget -q -O /dev/null -T 5 "http://$url_host:$port/" && echo "http ok" || echo "http fail" ;; - Network accessline 111
case "$traffic_type" in http) wget -q -O /dev/null -T 5 "http://$url_host:$port/" && echo "http ok" || echo "http fail" ;; https) wget -q -O /dev/null -T 5 --no-check-certificate "https://$url_host:$port/" && echo "https ok" || ech - Network accessline 112
http) wget -q -O /dev/null -T 5 "http://$url_host:$port/" && echo "http ok" || echo "http fail" ;; - Network accessline 113
https) wget -q -O /dev/null -T 5 --no-check-certificate "https://$url_host:$port/" && echo "https ok" || echo "https fail" ;; - Network accessline 114
dns) nslookup "$target" >/dev/null 2>&1 && echo "dns ok" || echo "dns fail" ;; tcp) nc -z -w 5 "$target" "$port" && echo "tcp ok" || echo "tcp fail" ;; ping) ping -c 1 -W 5 "$target" >/dev/null 2>&1 && echo "ping ok" || echo "p - Network accessline 115
tcp) nc -z -w 5 "$target" "$port" && echo "tcp ok" || echo "tcp fail" ;;
.github/plugins/aks-skills/skills/aks-network-capture/scripts/generate-test-traffic.sh
- Executable scriptline 1
#!/usr/bin/env bash - Network accessline 147
while [ "$(date +%s)" -lt "$end" ]; do case "$traffic_type" in http) wget -q -O /dev/null -T 5 "http://$url_host:$port/" && echo "http ok" || echo "http fail" ;; - Network accessline 148
case "$traffic_type" in http) wget -q -O /dev/null -T 5 "http://$url_host:$port/" && echo "http ok" || echo "http fail" ;; https) wget -q -O /dev/null -T 5 --no-check-certificate "https://$url_host:$port/" && echo "https ok" || ech - Network accessline 149
http) wget -q -O /dev/null -T 5 "http://$url_host:$port/" && echo "http ok" || echo "http fail" ;; - Network accessline 150
https) wget -q -O /dev/null -T 5 --no-check-certificate "https://$url_host:$port/" && echo "https ok" || echo "https fail" ;; - Network accessline 151
dns) nslookup "$target" >/dev/null 2>&1 && echo "dns ok" || echo "dns fail" ;; tcp) nc -z -w 5 "$target" "$port" && echo "tcp ok" || echo "tcp fail" ;; ping) ping -c 1 -W 5 "$target" >/dev/null 2>&1 && echo "ping ok" || echo "p - Network accessline 152
tcp) nc -z -w 5 "$target" "$port" && echo "tcp ok" || echo "tcp fail" ;;
.github/plugins/aks-skills/skills/aks-network-capture/scripts/retrieve-captures.ps1
.github/plugins/aks-skills/skills/aks-network-capture/scripts/retrieve-captures.sh
- Executable scriptline 1
#!/usr/bin/env bash - Access to secretsline 80
[Credential-related source omitted] - Dangerous shell operationline 243
kubectl exec -n "$NAMESPACE" "$TEMP_POD_NAME" -c retrieve -- sh -c 'rm -f "$1/$2" "$1/$3" && rmdir "$1"' sh - Dangerous shell operationline 244
'rm -f "$1/$2" "$1/$3" && rmdir "$1"' sh \
.github/plugins/aks-skills/skills/aks-network-capture/scripts/run-capture.sh
.github/plugins/aks-skills/skills/aks-network-capture/scripts/setup-capture-configmap.ps1
- Executable scriptline 1
Executable file
.github/plugins/aks-skills/skills/aks-network-capture/scripts/setup-capture-configmap.sh
- Executable scriptline 1
#!/usr/bin/env bash
.github/plugins/aks-skills/skills/aks-troubleshooting/SKILL.md
- Network accessline 108
Microsoft's AKS troubleshooting hub: https://learn.microsoft.com/troubleshoot/azure/azure-kubernetes/welcome-azure-kubernetes
.github/plugins/aks-skills/skills/aks-troubleshooting/load-balancer-and-ingress.md
- Network accessline 91
Sources: [AKS service health-probe modes](https://learn.microsoft.com/troubleshoot/azure/azure-kubernetes/availability-performance/cluster-service-health-probe-mode-issues) - Network accessline 92
and [AKS SNAT exhaustion](https://learn.microsoft.com/troubleshoot/azure/azure-kubernetes/connectivity/snat-port-exhaustion). - Network accessline 127
Sources: [Application Gateway backend health](https://learn.microsoft.com/azure/application-gateway/application-gateway-backend-health) - Network accessline 128
and [AGIC connectivity troubleshooting](https://learn.microsoft.com/troubleshoot/azure/azure-kubernetes/load-bal-ingress-c/troubleshoot-app-gateway-ingress-controller-connectivity-issues).
.github/plugins/aks-skills/skills/aks-troubleshooting/networking.md
- Network accessline 3
For CNI-specific issues, check CNI pod health and review [AKS networking concepts](https://learn.microsoft.com/azure/aks/concepts-network). - Network accessline 223
Sources: [LocalDNS troubleshooting](https://learn.microsoft.com/troubleshoot/azure/azure-kubernetes/connectivity/dns/troubleshoot-localdns), - Network accessline 224
[LocalDNS configuration](https://learn.microsoft.com/azure/aks/localdns-custom), - Network accessline 225
and [CoreDNS troubleshooting](https://learn.microsoft.com/azure/aks/coredns-troubleshoot).
.github/plugins/aks-skills/skills/aks-troubleshooting/node-issues.md
- Network accessline 201
Sources: [AKS `QuotaExceeded` troubleshooting](https://learn.microsoft.com/en-us/troubleshoot/azure/azure-kubernetes/create-upgrade-delete/quota-exceeded-during-creation-upgrade), [VM-family vCPU quota requests](https://learn.microsoft.com/ - Network accessline 242
See [AKS resource reservations](https://learn.microsoft.com/azure/aks/concepts-clusters-workloads#resource-reservations) for allocatable math.
.github/plugins/aks-skills/skills/aks-troubleshooting/references/api-server-webhooks-tunnel.md
- Network accessline 113
Sources: [API server and etcd troubleshooting](https://learn.microsoft.com/troubleshoot/azure/azure-kubernetes/create-upgrade-delete/troubleshoot-apiserver-etcd), - Network accessline 114
[tunnel connectivity](https://learn.microsoft.com/troubleshoot/azure/azure-kubernetes/connectivity/tunnel-connectivity-issues), - Network accessline 115
[admission-controller triage](https://learn.microsoft.com/azure/architecture/operator-guides/aks/aks-triage-controllers), - Network accessline 116
[Deployment Safeguards](https://learn.microsoft.com/azure/aks/deployment-safeguards), - Network accessline 117
and [AKS support policies](https://learn.microsoft.com/azure/aks/support-policies).
.github/plugins/aks-skills/skills/aks-troubleshooting/references/auto-upgrade-evidence.md
- Network accessline 42
Sources: [Auto-upgrade cluster](https://learn.microsoft.com/azure/aks/auto-upgrade-cluster), - Network accessline 43
[Auto-upgrade node OS image](https://learn.microsoft.com/azure/aks/auto-upgrade-node-os-image), - Network accessline 44
[Planned maintenance](https://learn.microsoft.com/azure/aks/planned-maintenance).
.github/plugins/aks-skills/skills/aks-troubleshooting/references/azure-network-path.md
- Network accessline 160
Sources: [AKS outbound types](https://learn.microsoft.com/azure/aks/egress-outboundtype), - Network accessline 161
[Network Watcher next hop](https://learn.microsoft.com/azure/network-watcher/diagnose-vm-network-routing-problem-cli), - Network accessline 162
[IP flow verify](https://learn.microsoft.com/azure/network-watcher/diagnose-vm-network-traffic-filtering-problem-cli), - Network accessline 163
[private endpoint DNS](https://learn.microsoft.com/azure/private-link/private-endpoint-dns), - Network accessline 164
and [VNet peering](https://learn.microsoft.com/azure/virtual-network/virtual-network-peering-overview).
.github/plugins/aks-skills/skills/aks-troubleshooting/references/structured-input-modes.md
- Network accessline 81
Sources: [Monitor AKS — resource logs](https://learn.microsoft.com/azure/aks/monitor-aks#resource-logs), - Network accessline 82
[AKS monitoring data reference](https://learn.microsoft.com/azure/aks/monitor-aks-reference), - Network accessline 83
[AKSAudit](https://learn.microsoft.com/azure/azure-monitor/reference/tables/aksaudit), - Network accessline 84
[AKSControlPlane](https://learn.microsoft.com/azure/azure-monitor/reference/tables/akscontrolplane).
.github/plugins/aks-skills/skills/aks-troubleshooting/references/symptom-map.md
- Network accessline 132
kubectl get endpoints -n <ns> # Are endpoints populated? kubectl get pods -n <ns> -l <svc-selector> # Do pods match the selector? kubectl exec <client-pod> -n <ns> -- curl -v <svc>:<port>/healthz - Network accessline 133
kubectl get pods -n <ns> -l <svc-selector> # Do pods match the selector? kubectl exec <client-pod> -n <ns> -- curl -v <svc>:<port>/healthz kubectl get networkpolicies -n <ns> # Network policy blocking traffic? - Network accessline 134
kubectl exec <client-pod> -n <ns> -- curl -v <svc>:<port>/healthz - Network accessline 220
FQDN=$(az aks show -g <rg> -n <cluster> --query fqdn -o tsv) nslookup "$FQDN" # DNS resolution of API server curl -k -Iv "https://$FQDN" # TCP + TLS connectivity - Network accessline 221
nslookup "$FQDN" # DNS resolution of API server curl -k -Iv "https://$FQDN" # TCP + TLS connectivity kubectl version --client # Must be within ±1 minor of every reachable API server - Network accessline 222
curl -k -Iv "https://$FQDN" # TCP + TLS connectivity - Network accessline 288
az network nat gateway list -g "$NODE_RG" -o table # Reproduce the reported destination from the affected pod using an existing client kubectl exec <pod> -n <ns> -- curl -sv --connect-timeout <seconds> https://<reported-host>/ - Network accessline 290
kubectl exec <pod> -n <ns> -- curl -sv --connect-timeout <seconds> https://<reported-host>/
.github/plugins/aks-skills/skills/aks-troubleshooting/scripts/cluster-snapshot.sh
- Executable scriptline 1
#!/bin/sh - Network accessline 20
command -v az >/dev/null 2>&1 || { echo "Azure CLI (az) is required. Install it from https://aka.ms/installazurecli and retry." >&2 - Network accessline 21
echo "Azure CLI (az) is required. Install it from https://aka.ms/installazurecli and retry." >&2 - Network accessline 23
} command -v kubectl >/dev/null 2>&1 || { echo "kubectl is required. Install it from https://kubernetes.io/docs/tasks/tools/ and retry." >&2 - Network accessline 24
command -v kubectl >/dev/null 2>&1 || { echo "kubectl is required. Install it from https://kubernetes.io/docs/tasks/tools/ and retry." >&2 exit 2 - Network accessline 25
echo "kubectl is required. Install it from https://kubernetes.io/docs/tasks/tools/ and retry." >&2 - Network accessline 27
} command -v jq >/dev/null 2>&1 || { echo "jq is required. Install it from https://jqlang.github.io/jq/download/ and retry." >&2 - Network accessline 28
command -v jq >/dev/null 2>&1 || { echo "jq is required. Install it from https://jqlang.github.io/jq/download/ and retry." >&2 exit 2 - Network accessline 29
echo "jq is required. Install it from https://jqlang.github.io/jq/download/ and retry." >&2
.github/plugins/aks-skills/skills/aks-troubleshooting/scripts/pod-deep-dive.sh
- Executable scriptline 1
#!/bin/sh - Network accessline 24
command -v az >/dev/null 2>&1 || { echo "Azure CLI (az) is required. Install it from https://aka.ms/installazurecli and retry." >&2 - Network accessline 25
echo "Azure CLI (az) is required. Install it from https://aka.ms/installazurecli and retry." >&2 - Network accessline 27
} command -v kubectl >/dev/null 2>&1 || { echo "kubectl is required. Install it from https://kubernetes.io/docs/tasks/tools/ and retry." >&2 - Network accessline 28
command -v kubectl >/dev/null 2>&1 || { echo "kubectl is required. Install it from https://kubernetes.io/docs/tasks/tools/ and retry." >&2 exit 2 - Network accessline 29
echo "kubectl is required. Install it from https://kubernetes.io/docs/tasks/tools/ and retry." >&2 - Network accessline 31
} command -v jq >/dev/null 2>&1 || { echo "jq is required. Install it from https://jqlang.github.io/jq/download/ and retry." >&2 - Network accessline 32
command -v jq >/dev/null 2>&1 || { echo "jq is required. Install it from https://jqlang.github.io/jq/download/ and retry." >&2 exit 2 - Network accessline 33
echo "jq is required. Install it from https://jqlang.github.io/jq/download/ and retry." >&2
.github/plugins/aks-skills/skills/aks-troubleshooting/spot-and-zone-issues.md
- Network accessline 64
Use `Premium_ZRS` or `StandardSSD_ZRS` in custom StorageClasses to reduce zonal PVC conflicts. See [AKS storage best practices](https://learn.microsoft.com/azure/aks/operator-best-practices-storage).
.github/plugins/aks-skills/skills/azure-search-nav/SKILL.md
.github/plugins/aks-skills/skills/azure-search-nav/references/Invoke-PortalSearchNav.ps1
- Executable scriptline 1
Executable file - Network accessline 11
3. POSTs a semantic search to the aks-search-direct-mid endpoint. 4. Extracts the menu id(s) from the response and rebuilds the portal link against https://portal.azure.com. - Network accessline 13
against https://portal.azure.com. - Network accessline 61
$ApiUrl = 'https://PCNX-AI-etc5bra3fscchrew.b02.azurefd.net/aks-search-direct-mid' - Network accessline 62
$TokenResourceUrl = 'https://management.azure.com/' - Network accessline 108
$prefix = if ($AppTenantId) { "https://portal.azure.com/#@$AppTenantId" } else { 'https://portal.azure.com' } - Possible obfuscationline 150
$claims = [System.Text.Encoding]::UTF8.GetString([Convert]::FromBase64String($payloadSeg)) | ConvertFrom-Json
.github/plugins/aks-skills/skills/azure-search-nav/references/README.md
- Network accessline 5
The `azurefd.net` endpoint this script calls fronts the **PCNX Copilot Infrastructure** service, owned by the **Azure Kubernetes Service (AKS) team**. It receives the signed-in user's ARM-audience (`https://management.azure.com/`) - Network accessline 6
Infrastructure** service, owned by the **Azure Kubernetes Service (AKS) team**. It receives the signed-in user's ARM-audience (`https://management.azure.com/`) bearer token as the `Authorization` header, along with an `App-Tenant-Id` - Network accessline 7
It receives the signed-in user's ARM-audience (`https://management.azure.com/`) - Network accessline 22
./references/Invoke-PortalSearchNav.ps1 ` -ResourceUrl 'https://portal.azure.com/#@<tenant>/resource/subscriptions/<subscription-id>/resourceGroups/<rg>/providers/Microsoft.ContainerService/managedClusters/<cluster>/overview' ` - Network accessline 23
-ResourceUrl 'https://portal.azure.com/#@<tenant>/resource/subscriptions/<subscription-id>/resourceGroups/<rg>/providers/Microsoft.ContainerService/managedClusters/<cluster>/overview' ` - Network accessline 54
Headers: `Accept`, `User-Data-Boundary: Global`, `Authorization`, `App-Tenant-Id`. 5. **Extract** — Recursively scans the response for `menuId` / `bladeName` / `blade` properties. 6. **Build link** — Rebuilds the link against `https://porta - Network accessline 56
6. **Build link** — Rebuilds the link against `https://portal.azure.com`, appending each discovered `menuId` as the trailing blade segment.
.github/plugins/azure-advisor/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "Microsoft", "url": "https://www.microsoft.com" - Network accessline 6
"name": "Microsoft", "url": "https://www.microsoft.com" }, - Network accessline 7
"url": "https://www.microsoft.com" - Network accessline 8
}, "homepage": "https://github.com/microsoft/github-copilot-for-azure", "repository": "https://github.com/microsoft/GitHub-Copilot-for-Azure", - Network accessline 9
"homepage": "https://github.com/microsoft/github-copilot-for-azure", - Network accessline 10
"repository": "https://github.com/microsoft/GitHub-Copilot-for-Azure",
.github/plugins/azure-cost/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "Microsoft", "url": "https://www.microsoft.com" - Network accessline 6
"name": "Microsoft", "url": "https://www.microsoft.com" }, - Network accessline 7
"url": "https://www.microsoft.com" - Network accessline 8
}, "homepage": "https://github.com/microsoft/github-copilot-for-azure", "repository": "https://github.com/microsoft/GitHub-Copilot-for-Azure", - Network accessline 9
"homepage": "https://github.com/microsoft/github-copilot-for-azure", - Network accessline 10
"repository": "https://github.com/microsoft/GitHub-Copilot-for-Azure",
.github/plugins/azure-cost/.mcp.json
.github/plugins/azure-cost/skills/cost-optimization/references/report-template.md
- Network accessline 56
https://portal.azure.com/#@<TENANT_ID>/resource/subscriptions/<SUBSCRIPTION_ID>/resourceGroups/<RESOURCE_GROUP>/providers/<RESOURCE_PROVIDER>/<RESOURCE_TYPE>/<RESOURCE_NAME>/overview
.github/plugins/azure-kusto-graph-skills/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "Microsoft", "url": "https://www.microsoft.com" - Network accessline 6
"name": "Microsoft", "url": "https://www.microsoft.com" }, - Network accessline 7
"url": "https://www.microsoft.com" - Network accessline 8
}, "homepage": "https://github.com/microsoft/github-copilot-for-azure", "repository": "https://github.com/microsoft/GitHub-Copilot-for-Azure", - Network accessline 9
"homepage": "https://github.com/microsoft/github-copilot-for-azure", - Network accessline 10
"repository": "https://github.com/microsoft/GitHub-Copilot-for-Azure",
.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-graph/references/EXAMPLES.md
.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-graph/references/KUSTO_EXPLORER_LAUNCH.md
.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql-graph/SKILL.md
- Network accessline 49
- **Cluster**: `https://kc7001.eastus.kusto.windows.net` - Network accessline 136
Use icons from `https://raw.githubusercontent.com/benc-uk/icon-collection/master/azure-icons/`: - Network accessline 207
let auth_mapping = '{"node_types":[{"type":"SrcIp","id":"SrcIp","key":"ClientIp","props":["ClientIp"],"defaults":{},"defIcon":"https://raw.githubusercontent.com/benc-uk/icon-collection/master/azure-icons/Public-IP-Addresses-(Classic).svg"}, - Network accessline 224
let mail_mapping = '{"node_types":[{"type":"EmailMessage","id":"Message","key":"Subject","props":["EnvTime","Subject","Verdict"],"defaults":{},"defIcon":"https://raw.githubusercontent.com/benc-uk/icon-collection/master/azure-icons/Media-Fil - Network accessline 239
let suspicious_domain_mapping = '{"node_types":[{"type":"IP","id":"IP","key":"ClientIp","props":["ClientIp"],"defaults":{},"defIcon":"https://raw.githubusercontent.com/benc-uk/icon-collection/master/azure-icons/Public-IP-Addresses-(Classic) - Network accessline 256
let proc_mapping = '{"node_types":[{"type":"Process","id":"Proc","key":"ProcessName","props":["ProcessName","ProcessCommandLine","ProcessHash"],"defaults":{},"defIcon":"https://raw.githubusercontent.com/benc-uk/icon-collection/master/azure-
.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql-graph/references/EXAMPLES.md
.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql-graph/references/KUSTO_EXPLORER_LAUNCH.md
.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql/SKILL.md
.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql/references/EXAMPLES.md
.github/plugins/azure-kusto-graph-skills/skills/azure-kusto-irql/references/KUSTO_EXPLORER_LAUNCH.md
.github/plugins/azure-local-skills/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "Microsoft", "url": "https://www.microsoft.com" - Network accessline 6
"name": "Microsoft", "url": "https://www.microsoft.com" }, - Network accessline 7
"url": "https://www.microsoft.com" - Network accessline 8
}, "homepage": "https://github.com/microsoft/github-copilot-for-azure", "repository": "https://github.com/microsoft/GitHub-Copilot-for-Azure", - Network accessline 9
"homepage": "https://github.com/microsoft/github-copilot-for-azure", - Network accessline 10
"repository": "https://github.com/microsoft/GitHub-Copilot-for-Azure",
.github/plugins/azure-local-skills/skills/azure-local-multi-rack/references/docs-map.md
- Network accessline 5
`https://learn.microsoft.com/azure/azure-local/multi-rack/` - Network accessline 73
| Need | Full path | | --- | --- | | AKS on multi-rack architecture | `https://learn.microsoft.com/azure/aks/aksarc/multi-rack/cluster-architecture` | - Network accessline 74
| --- | --- | | AKS on multi-rack architecture | `https://learn.microsoft.com/azure/aks/aksarc/multi-rack/cluster-architecture` | | Choosing a deployment scale | `https://learn.microsoft.com/azure/azure-local/scalability-deployments` | - Network accessline 75
| AKS on multi-rack architecture | `https://learn.microsoft.com/azure/aks/aksarc/multi-rack/cluster-architecture` | - Network accessline 76
| Choosing a deployment scale | `https://learn.microsoft.com/azure/azure-local/scalability-deployments` |
.github/plugins/azure-local-skills/skills/azure-local/references/docs-map.md
- Network accessline 7
| Area | Microsoft Learn path | | --- | --- | | Azure Local landing page | `https://learn.microsoft.com/azure/azure-local/` | - Network accessline 8
| --- | --- | | Azure Local landing page | `https://learn.microsoft.com/azure/azure-local/` | | What is Azure Local | `https://learn.microsoft.com/azure/azure-local/overview` | - Network accessline 9
| Azure Local landing page | `https://learn.microsoft.com/azure/azure-local/` | - Network accessline 10
| What is Azure Local | `https://learn.microsoft.com/azure/azure-local/overview` | - Network accessline 11
| Scalability and deployments (choose a scale) | `https://learn.microsoft.com/azure/azure-local/scalability-deployments` | - Network accessline 12
| Release information | `https://learn.microsoft.com/azure/azure-local/release-information-23h2` | - Network accessline 13
| Known issues | `https://learn.microsoft.com/azure/azure-local/known-issues` | - Network accessline 17
| Need | Microsoft Learn path | | --- | --- | | System requirements | `https://learn.microsoft.com/azure/azure-local/concepts/system-requirements-23h2` | - Network accessline 18
| --- | --- | | System requirements | `https://learn.microsoft.com/azure/azure-local/concepts/system-requirements-23h2` | | Physical network requirements | `https://learn.microsoft.com/azure/azure-local/concepts/physical-network-requirement - Network accessline 19
| System requirements | `https://learn.microsoft.com/azure/azure-local/concepts/system-requirements-23h2` | - Network accessline 20
| Physical network requirements | `https://learn.microsoft.com/azure/azure-local/concepts/physical-network-requirements` | - Network accessline 21
| Host network requirements | `https://learn.microsoft.com/azure/azure-local/concepts/host-network-requirements` | - Network accessline 22
| Firewall requirements | `https://learn.microsoft.com/azure/azure-local/concepts/firewall-requirements` | - Network accessline 23
| Network reference patterns | `https://learn.microsoft.com/azure/azure-local/plan/network-patterns-overview` | - Network accessline 24
| Choose network pattern | `https://learn.microsoft.com/azure/azure-local/plan/choose-network-pattern` | - Network accessline 25
| Deployment introduction | `https://learn.microsoft.com/azure/azure-local/deploy/deployment-introduction` | - Network accessline 26
| Deployment prerequisites | `https://learn.microsoft.com/azure/azure-local/deploy/deployment-prerequisites` | - Network accessline 27
| Prepare Active Directory | `https://learn.microsoft.com/azure/azure-local/deploy/deployment-prep-active-directory` | - Network accessline 28
| Install OS | `https://learn.microsoft.com/azure/azure-local/deploy/deployment-install-os` | - Network accessline 29
| Simplified machine provisioning | `https://learn.microsoft.com/azure/azure-local/deploy/simplified-machine-provisioning` | - Network accessline 30
| Subscription permissions | `https://learn.microsoft.com/azure/azure-local/deploy/deployment-arc-register-server-permissions` | - Network accessline 31
| Register without Arc gateway | `https://learn.microsoft.com/azure/azure-local/deploy/deployment-without-azure-arc-gateway` | - Network accessline 32
| Register with Arc gateway | `https://learn.microsoft.com/azure/azure-local/deploy/deployment-with-azure-arc-gateway` | - Network accessline 33
| Deploy via portal | `https://learn.microsoft.com/azure/azure-local/deploy/deploy-via-portal` | - Network accessline 34
| Deploy via ARM template | `https://learn.microsoft.com/azure/azure-local/deploy/deployment-azure-resource-manager-template` | - Network accessline 40
| Need | Microsoft Learn path | | --- | --- | | Rack aware cluster overview | `https://learn.microsoft.com/azure/azure-local/concepts/rack-aware-cluster-overview` | - Network accessline 41
| --- | --- | | Rack aware cluster overview | `https://learn.microsoft.com/azure/azure-local/concepts/rack-aware-cluster-overview` | | Requirements and supported configurations | `https://learn.microsoft.com/azure/azure-local/concepts/rack- - Network accessline 42
| Rack aware cluster overview | `https://learn.microsoft.com/azure/azure-local/concepts/rack-aware-cluster-overview` | - Network accessline 43
| Requirements and supported configurations | `https://learn.microsoft.com/azure/azure-local/concepts/rack-aware-cluster-requirements` | - Network accessline 44
| Network reference patterns | `https://learn.microsoft.com/azure/azure-local/concepts/rack-aware-cluster-reference-architecture` | - Network accessline 45
| Prepare deployment | `https://learn.microsoft.com/azure/azure-local/deploy/rack-aware-cluster-deploy-prep` | - Network accessline 46
| Deploy via portal | `https://learn.microsoft.com/azure/azure-local/deploy/rack-aware-cluster-deploy-portal` | - Network accessline 47
| Deploy via ARM template | `https://learn.microsoft.com/azure/azure-local/deploy/rack-aware-cluster-deployment-via-template` | - Network accessline 51
| Need | Microsoft Learn path | | --- | --- | | About updates | `https://learn.microsoft.com/azure/azure-local/update/about-updates-23h2` | - Network accessline 52
| --- | --- | | About updates | `https://learn.microsoft.com/azure/azure-local/update/about-updates-23h2` | | Update phases | `https://learn.microsoft.com/azure/azure-local/update/update-phases-23h2` | - Network accessline 53
| About updates | `https://learn.microsoft.com/azure/azure-local/update/about-updates-23h2` | - Network accessline 54
| Update phases | `https://learn.microsoft.com/azure/azure-local/update/update-phases-23h2` | - Network accessline 55
| Update via PowerShell | `https://learn.microsoft.com/azure/azure-local/update/update-via-powershell-23h2` | - Network accessline 56
| Limited connectivity updates | `https://learn.microsoft.com/azure/azure-local/update/import-discover-updates-offline-23h2` | - Network accessline 57
| Update via Azure portal | `https://learn.microsoft.com/azure/azure-local/update/azure-update-manager-23h2` | - Network accessline 58
| Update best practices | `https://learn.microsoft.com/azure/azure-local/update/update-best-practices` | - Network accessline 59
| Troubleshoot updates | `https://learn.microsoft.com/azure/azure-local/update/update-troubleshooting-23h2` | - Network accessline 60
| About upgrades | `https://learn.microsoft.com/azure/azure-local/upgrade/about-upgrades-23h2` | - Network accessline 61
| Upgrade troubleshooting | `https://learn.microsoft.com/azure/azure-local/upgrade/troubleshoot-upgrade-to-23h2` | - Network accessline 65
| Need | Microsoft Learn path | | --- | --- | | Azure Local VM management overview | `https://learn.microsoft.com/azure/azure-local/manage/azure-arc-vm-management-overview` | - Network accessline 66
| --- | --- | | Azure Local VM management overview | `https://learn.microsoft.com/azure/azure-local/manage/azure-arc-vm-management-overview` | | VM management prerequisites | `https://learn.microsoft.com/azure/azure-local/manage/azure-arc-v - Network accessline 67
| Azure Local VM management overview | `https://learn.microsoft.com/azure/azure-local/manage/azure-arc-vm-management-overview` | - Network accessline 68
| VM management prerequisites | `https://learn.microsoft.com/azure/azure-local/manage/azure-arc-vm-management-prerequisites` | - Network accessline 69
| Assign VM RBAC roles | `https://learn.microsoft.com/azure/azure-local/manage/assign-vm-rbac-roles` | - Network accessline 70
| Create storage path | `https://learn.microsoft.com/azure/azure-local/manage/create-storage-path` | - Network accessline 71
| Create logical networks | `https://learn.microsoft.com/azure/azure-local/manage/create-logical-networks` | - Network accessline 72
| Create network interfaces | `https://learn.microsoft.com/azure/azure-local/manage/create-network-interfaces` | - Network accessline 73
| Create Arc VMs | `https://learn.microsoft.com/azure/azure-local/manage/create-arc-virtual-machines` | - Network accessline 74
| Manage Arc VMs | `https://learn.microsoft.com/azure/azure-local/manage/manage-arc-virtual-machines` | - Network accessline 75
| Troubleshoot Arc VMs | `https://learn.microsoft.com/azure/azure-local/manage/troubleshoot-arc-enabled-vms` | - Network accessline 76
| AKS on Azure Local | `https://learn.microsoft.com/azure/aks/hybrid/aks-create-clusters-portal?toc=/azure/azure-local/toc.json&bc=/azure/azure-local/breadcrumb/toc.json` | - Network accessline 77
| SQL Server on Azure Local | `https://learn.microsoft.com/azure/azure-local/deploy/sql-server-23h2` | - Network accessline 78
| Disaster recovery overview | `https://learn.microsoft.com/azure/azure-local/manage/disaster-recovery-overview` | - Network accessline 82
| Need | Microsoft Learn path | | --- | --- | | Security features | `https://learn.microsoft.com/azure/azure-local/concepts/security-features` | - Network accessline 83
| --- | --- | | Security features | `https://learn.microsoft.com/azure/azure-local/concepts/security-features` | | Security book | `https://learn.microsoft.com/azure/azure-local/security-book/overview` | - Network accessline 84
| Security features | `https://learn.microsoft.com/azure/azure-local/concepts/security-features` | - Network accessline 85
| Security book | `https://learn.microsoft.com/azure/azure-local/security-book/overview` | - Network accessline 86
| Private endpoints | `https://learn.microsoft.com/azure/azure-local/deploy/about-private-endpoints` | - Network accessline 87
| SDN overview | `https://learn.microsoft.com/azure/azure-local/concepts/sdn-overview` | - Network accessline 88
| Enable SDN integration | `https://learn.microsoft.com/azure/azure-local/deploy/enable-sdn-integration` | - Network accessline 89
| Network security groups | `https://learn.microsoft.com/azure/azure-local/manage/create-network-security-groups` | - Network accessline 90
| Manage NSGs | `https://learn.microsoft.com/azure/azure-local/manage/manage-network-security-groups` | - Network accessline 91
| SDN troubleshooting | `https://learn.microsoft.com/azure/azure-local/manage/sdn-troubleshooting` | - Network accessline 92
| External storage | `https://learn.microsoft.com/azure/azure-local/deploy/enable-external-storage` |
.github/plugins/azure-skills/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "Microsoft", "url": "https://www.microsoft.com" - Network accessline 6
"name": "Microsoft", "url": "https://www.microsoft.com" }, - Network accessline 7
"url": "https://www.microsoft.com" - Network accessline 8
}, "homepage": "https://github.com/microsoft/azure-skills", "repository": "https://github.com/microsoft/azure-skills", - Network accessline 9
"homepage": "https://github.com/microsoft/azure-skills", - Network accessline 10
"repository": "https://github.com/microsoft/azure-skills",
.github/plugins/azure-skills/skills/airunway-aks-setup/references/steps/step-5-deploy.md
.github/plugins/azure-skills/skills/airunway-aks-setup/references/steps/step-6-summary.md
- Network accessline 22
echo "Endpoint not yet available — model may still be starting" else curl -X POST "${ENDPOINT}/v1/chat/completions" \ - Network accessline 23
else curl -X POST "${ENDPOINT}/v1/chat/completions" \ -H "Content-Type: application/json" \ - Network accessline 24
curl -X POST "${ENDPOINT}/v1/chat/completions" \ - Network accessline 30
> **If the endpoint is a cluster-internal URL** (e.g., `http://svc-name.namespace:port`), set up port-forwarding first: - Network accessline 35
> > kubectl port-forward svc/<service-name> 8080:${SERVICE_PORT} -n <namespace> & > # Then use http://localhost:8080 as the endpoint - Network accessline 36
> kubectl port-forward svc/<service-name> 8080:${SERVICE_PORT} -n <namespace> & > # Then use http://localhost:8080 as the endpoint > ``` - Network accessline 37
> # Then use http://localhost:8080 as the endpoint
.github/plugins/azure-skills/skills/appinsights-instrumentation/references/auto.md
- Network accessline 3
Use Azure Portal to auto-instrument a webapp hosted in Azure App Service for App Insights without making any code changes. Only the following types of app can be auto-instrumented. See [supported environments and resource providers](https:/ - Network accessline 10
https://portal.azure.com/#resource/subscriptions/{subscription_id}/resourceGroups/{resource_group_name}/providers/Microsoft.Web/sites/{app_service_name}/monitoringSettings
.github/plugins/azure-skills/skills/appinsights-instrumentation/references/container-apps.md
.github/plugins/azure-skills/skills/appinsights-instrumentation/scripts/appinsights.ps1
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/azure-ai/SKILL.md
- Network accessline 71
- AI Search indexing and queries -> [Azure AI Search documentation](https://learn.microsoft.com/azure/search/search-what-is-azure-search) - Network accessline 72
- Speech transcription patterns -> [Azure AI Speech documentation](https://learn.microsoft.com/azure/ai-services/speech-service/overview)
.github/plugins/azure-skills/skills/azure-ai/references/auth-best-practices.md
- Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme)
.github/plugins/azure-skills/skills/azure-ai/references/sdk/azure-ai-transcription-py.md
.github/plugins/azure-skills/skills/azure-ai/references/sdk/azure-ai-translation-ts.md
- Access to secretsline 14
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-ai/references/speech/azure-checks.md
- Network accessline 7
The plugin configures Azure MCP, not a Speech log-analysis MCP. The local analyzer provides that function. Candidate command families below were checked in [Azure MCP source](https://github.com/microsoft/mcp/tree/bc89c9e5e2f774db19d9bc391b1 - Network accessline 8
analyzer provides that function. Candidate command families below were checked in [Azure MCP source](https://github.com/microsoft/mcp/tree/bc89c9e5e2f774db19d9bc391b16f2920384ddfd/tools); installed versions and host names can differ. Do not - Network accessline 9
in [Azure MCP source](https://github.com/microsoft/mcp/tree/bc89c9e5e2f774db19d9bc391b16f2920384ddfd/tools);
.github/plugins/azure-skills/skills/azure-ai/references/speech/collection.md
- Network accessline 3
Confirm SDK language/version and host first. Use the [logging APIs by language and platform](logging-apis.md), or the matching tab in the official [Speech SDK logging](https://learn.microsoft.com/azure/ai-services/speech-service/how-to-use- - Network accessline 4
[logging APIs by language and platform](logging-apis.md), or the matching tab in the official [Speech SDK logging](https://learn.microsoft.com/azure/ai-services/speech-service/how-to-use-logging) article, for exact APIs. Do not install or u - Network accessline 5
the official [Speech SDK logging](https://learn.microsoft.com/azure/ai-services/speech-service/how-to-use-logging) - Network accessline 50
JavaScript has a separate implementation/log format: [JavaScript SDK](https://github.com/microsoft/cognitive-services-speech-sdk-js). - Network accessline 51
[JavaScript SDK](https://github.com/microsoft/cognitive-services-speech-sdk-js). - Network accessline 66
API/event availability varies by binding. Use [Speech samples](https://github.com/Azure-Samples/cognitive-services-speech-sdk) - Network accessline 67
[Speech samples](https://github.com/Azure-Samples/cognitive-services-speech-sdk) - Network accessline 71
Do not confuse local diagnostics with [service-side audio/content logging](https://learn.microsoft.com/azure/ai-services/speech-service/logging-audio-transcription). - Network accessline 72
[service-side audio/content logging](https://learn.microsoft.com/azure/ai-services/speech-service/logging-audio-transcription).
.github/plugins/azure-skills/skills/azure-ai/references/speech/interpretation.md
- Network accessline 36
Final recognition records retain numeric `reasonCode`, not a guessed cause. For the reviewed version, [ResultReason](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/public/cxx_api/speechap - Network accessline 37
For the reviewed version, [ResultReason](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/public/cxx_api/speechapi_cxx_enums.h) - Network accessline 59
SDK latency properties are reported as SDK metrics, not microphone-to-display or playback latency. Use matching API definitions before deriving a breakdown: [TTS latency](https://learn.microsoft.com/azure/ai-services/speech-service/how-to-l - Network accessline 61
[TTS latency](https://learn.microsoft.com/azure/ai-services/speech-service/how-to-lower-speech-synthesis-latency).
.github/plugins/azure-skills/skills/azure-ai/references/speech/logging-apis.md
.github/plugins/azure-skills/skills/azure-ai/references/speech/source-contract.md
- Network accessline 6
| Rule | Public source | |---|---| | Source/binary/extension limits | [README](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/README.md) | - Network accessline 7
|---|---| | Source/binary/extension limits | [README](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/README.md) | | Property IDs to logged names | [property_id_2_name_map.h](https://github.com/m - Network accessline 8
| Source/binary/extension limits | [README](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/README.md) | - Network accessline 9
| Property IDs to logged names | [property_id_2_name_map.h](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/common/include/property_id_2_name_map.h) | - Network accessline 10
| Property writes | [property_bag_impl.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/common/property_bag_impl.cpp) | - Network accessline 11
| Context construction and pre-send trace | [usp_reco_engine_adapter.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/sr/usp_reco_engine_adapter.cpp#L1300-L1345) | - Network accessline 12
| Feature serialization | [context builders](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/sr/usp_reco_engine_adapter.cpp#L2265-L3120) | - Network accessline 13
| Session creation/events | [audio_stream_session.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/sr/audio_stream_session.cpp) | - Network accessline 14
| Connection header | [usp_connection.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/usp/usp_connection.cpp#L636-L643) | - Network accessline 15
| STT result/phrase IDs | [recognition_result.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/sr/recognition_result.cpp) | - Network accessline 16
| TTS result/request IDs | [synthesis_result.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/tts/synthesis_result.cpp) | - Network accessline 17
| Synthesis start/done traces | [synthesizer.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/tts/synthesizer.cpp) | - Network accessline 18
| Relative trace clock/thread marker | [trace_message.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/logging/trace_message.cpp) | - Network accessline 19
| C++ collection API | [speechapi_cxx_file_logger.h](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/public/cxx_api/speechapi_cxx_file_logger.h) |
.github/plugins/azure-skills/skills/azure-ai/scripts/analyze-speech-sdk-log.mjs
- Executable scriptline 1
#!/usr/bin/env node
.github/plugins/azure-skills/skills/azure-ai/scripts/analyze-speech-sdk-log.ps1
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/azure-ai/scripts/analyze-speech-sdk-log.sh
- Executable scriptline 1
#!/usr/bin/env bash
.github/plugins/azure-skills/skills/azure-aigateway/SKILL.md
- Network accessline 15
> **To deploy APIM**, use the **azure-prepare** skill. See [APIM deployment guide](https://learn.microsoft.com/azure/api-management/get-started-create-service-instance). - Network accessline 63
curl -X POST "${GATEWAY_URL}/openai/deployments/<deployment>/chat/completions?api-version=2024-02-01" \ - Network accessline 121
- [**Configuration Patterns**](references/patterns.md) - Step-by-step patterns - [**Troubleshooting**](references/troubleshooting.md) - Common issues - [AI-Gateway Samples](https://github.com/Azure-Samples/AI-Gateway) - Network accessline 122
- [**Troubleshooting**](references/troubleshooting.md) - Common issues - [AI-Gateway Samples](https://github.com/Azure-Samples/AI-Gateway) - [GenAI Gateway Docs](https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities) - Network accessline 123
- [AI-Gateway Samples](https://github.com/Azure-Samples/AI-Gateway) - Network accessline 124
- [GenAI Gateway Docs](https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities)
.github/plugins/azure-skills/skills/azure-aigateway/references/auth-best-practices.md
- Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme)
.github/plugins/azure-skills/skills/azure-aigateway/references/patterns.md
- Network accessline 13
- APIM instance deployed (use **azure-prepare** skill to deploy APIM — see [APIM deployment guide](https://learn.microsoft.com/azure/api-management/get-started-create-service-instance)) - Network accessline 65
az apim api import --service-name <apim-name> --resource-group <rg> --api-id azure-openai-api --path "openai" --specification-format OpenApi --specification-url "https://raw.githubusercontent.com/Azure/azure-rest-api-specs - Network accessline 69
--path "openai" \ --specification-format OpenApi \ --specification-url "https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/cognitiveservices/data-plane/AzureOpenAI/inference/stable/2024-02-01/inference.json" - Network accessline 70
--specification-format OpenApi \ --specification-url "https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/cognitiveservices/data-plane/AzureOpenAI/inference/stable/2024-02-01/inference.json" \ --service-url " - Network accessline 71
--specification-url "https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/cognitiveservices/data-plane/AzureOpenAI/inference/stable/2024-02-01/inference.json" \ - Network accessline 81
<base /> <set-backend-service backend-id="openai-backend" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 82
<set-backend-service backend-id="openai-backend" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> </inbound> - Network accessline 83
<authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 116
<set-variable name="backendUrl" value="@{ var backends = new [] { "https://aoai-eastus.openai.azure.com", - Network accessline 117
var backends = new [] { "https://aoai-eastus.openai.azure.com", "https://aoai-westus.openai.azure.com" - Network accessline 118
"https://aoai-eastus.openai.azure.com", - Network accessline 119
"https://aoai-westus.openai.azure.com" - Network accessline 124
}" /> <set-backend-service base-url="@((string)context.Variables["backendUrl"] + "/openai")" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 125
<set-backend-service base-url="@((string)context.Variables["backendUrl"] + "/openai")" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> </inbound> - Network accessline 126
<authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 134
<set-variable name="backendUrl" value="@{ var backends = new [] { "https://aoai-eastus.openai.azure.com", - Network accessline 135
var backends = new [] { "https://aoai-eastus.openai.azure.com", "https://aoai-westus.openai.azure.com" - Network accessline 136
"https://aoai-eastus.openai.azure.com", - Network accessline 137
"https://aoai-westus.openai.azure.com" - Network accessline 177
<base /> <set-backend-service backend-id="openai-backend" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 178
<set-backend-service backend-id="openai-backend" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> </inbound> - Network accessline 179
<authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 216
<set-backend-service backend-id="openai-backend" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 217
<authentication-managed-identity resource="https://cognitiveservices.azure.com" />
.github/plugins/azure-skills/skills/azure-aigateway/references/policies.md
- Network accessline 231
<!-- 1. Authentication --> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 232
<authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 309
- [GenAI Gateway Capabilities](https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities) - Network accessline 310
- [APIM Policy Reference](https://learn.microsoft.com/azure/api-management/api-management-policies) - Network accessline 311
- [AI-Gateway Samples](https://github.com/Azure-Samples/AI-Gateway)
.github/plugins/azure-skills/skills/azure-aigateway/references/sdk/azure-mgmt-apimanagement-py.md
- Access to secretsline 17
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-aigateway/references/troubleshooting.md
- Network accessline 17
| Managed identity not enabled on APIM | `az apim update --name <apim> --resource-group <rg> --set identity.type=SystemAssigned` | | Missing RBAC role | `az role assignment create --assignee <apim-principal-id> --role "Cognitive Services Us - Network accessline 18
| Missing RBAC role | `az role assignment create --assignee <apim-principal-id> --role "Cognitive Services User" --scope <aoai-resource-id>` | | Wrong auth resource | Ensure `resource="https://cognitiveservices.azure.com"` (not the endpoint - Network accessline 19
| Wrong auth resource | Ensure `resource="https://cognitiveservices.azure.com"` (not the endpoint URL) | - Network accessline 94
# Check cache-related headers in response curl -v -X POST "${GATEWAY_URL}/openai/deployments/<deployment>/chat/completions?api-version=2024-02-01" \ - Network accessline 95
curl -v -X POST "${GATEWAY_URL}/openai/deployments/<deployment>/chat/completions?api-version=2024-02-01" \ - Network accessline 212
# Send request with tracing curl -X POST "${GATEWAY_URL}/..." \ - Network accessline 213
curl -X POST "${GATEWAY_URL}/..." \ - Network accessline 256
# 3. Test endpoint curl -s -o /dev/null -w "%{http_code}" "${GATEWAY_URL}/openai/deployments/<deployment>/chat/completions?api-version=2024-02-01" \ - Network accessline 257
curl -s -o /dev/null -w "%{http_code}" "${GATEWAY_URL}/openai/deployments/<deployment>/chat/completions?api-version=2024-02-01" \ - Network accessline 268
- [APIM Diagnostics](https://learn.microsoft.com/azure/api-management/diagnose-solve-problems) - Network accessline 269
- [AI Gateway Monitoring](https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities#monitoring-and-analytics) - Network accessline 270
- [APIM Error Handling](https://learn.microsoft.com/azure/api-management/api-management-error-handling-policies)
.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/dependency-compatibility.md
- Network accessline 12
**PHP:** the runtime is the PHP version of the image (`FROM php:`, or any image that embeds PHP); `require.php` is a constraint, not the runtime. A floating minor tag tracks the latest patch. WARN `W-PHP-EOL` (PHP2Shell, critical RCE — [adv
.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/prereq-schemas.ts
- Executable scriptline 1
Executable file - Network accessline 64
buildRequirements?: BuildRequirements; /** Detected health endpoint path (e.g., "/health", "/api/v1/health/"). * Used by scaffold for Azure health probe config and deploy for curl health check. - Network accessline 65
/** Detected health endpoint path (e.g., "/health", "/api/v1/health/"). * Used by scaffold for Azure health probe config and deploy for curl health check. * null if no health endpoint found (triggers W-HEALTH warning). */ - Network accessline 66
* Used by scaffold for Azure health probe config and deploy for curl health check.
.github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/session-schemas.ts
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/SKILL.md
- Network accessline 47
| 4 | **Deploy approval gate** | Present cost + resource summary per `deploy-checklist.md` § Deploy approval gate format. | — | — | | 5b | **Write deploy-result.json skeleton** | ⛔ Read [`deploy-schemas.ts`](references/deploy-schemas.ts), w - Network accessline 48
| 5b | **Write deploy-result.json skeleton** | ⛔ Read [`deploy-schemas.ts`](references/deploy-schemas.ts), write skeleton (`status: "in-progress"`). Must exist BEFORE first `az` command. | `deploy-result.json` | ⛔ **You MUST read [`deploy-s - Network accessline 49
| 6 | **Execute deployment** | ⛔ **BEFORE `az deployment sub create`:** Generate portal link — `$dn="{deploymentName}"; $r="/subscriptions/{subId}/providers/Microsoft.Resources/deployments/$dn"; $l="https://portal.azure.com/#view/Microsoft_
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/blocked-patterns.md
- Dangerous shell operationline 7
| `rm -rf` (any path outside a fresh temp dir) | ⛔ Block | Prevents accidental deletion of IaC, app code, or session artifacts — especially `infra/`, `.azure/`, `.copilot-azure/`. |
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/code-deployment-appservice.md
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/code-deployment-container-apps.md
- Network accessline 25
| Step | Command | Notes | |------|---------|-------| | 1. Build image | `az acr build --subscription {subscriptionId} -r {acrName} -t {appName}:latest . --no-logs` | Builds from workspace root. If `buildRequirements.hasBuildKitSyntax`, use - Network accessline 26
|------|---------|-------| | 1. Build image | `az acr build --subscription {subscriptionId} -r {acrName} -t {appName}:latest . --no-logs` | Builds from workspace root. If `buildRequirements.hasBuildKitSyntax`, use `-f Dockerfile.azure` (see - Network accessline 27
| 1. Build image | `az acr build --subscription {subscriptionId} -r {acrName} -t {appName}:latest . --no-logs` | Builds from workspace root. If `buildRequirements.hasBuildKitSyntax`, use `-f Dockerfile.azure` (see BuildKit handling below).
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/code-deployment-swa.md
- Access to secretsline 24
[Credential-related source omitted] - Network accessline 52
- **Hostname** — `swa deploy` produces no ARM endpoint output, so fetch it: `$swaHost = az staticwebapp show -n {swa} -g {rg} --query defaultHostname -o tsv` - `endpoints[]` — `[{ name, url: "https://$swaHost", healthStatus: "healthy" }]` ( - Network accessline 53
- `endpoints[]` — `[{ name, url: "https://$swaHost", healthStatus: "healthy" }]` (HTTP GET `https://$swaHost/` → 2xx confirms healthy)
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/deploy-checklist-template.md
- Network accessline 55
- ACR build failures count toward healing counter - Windows: append `--no-logs` to `az acr build` to avoid UnicodeEncodeError - ⛔ After the revision is ready, run an explicit live HTTP probe against the ingress FQDN (`curl -sSfL`/`iwr` on ` - Network accessline 57
- ⛔ After the revision is ready, run an explicit live HTTP probe against the ingress FQDN (`curl -sSfL`/`iwr` on `*.azurecontainerapps.io`) — this call IS the health check; capture the result into `deploy-result.json.endpoints[].healthStatu - Access to secretsline 65
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/deploy-schemas.ts
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/health-check-patterns.md
- Network accessline 22
If the first health check returns **301 or 302**: 1. Read the `Location` header: `curl -sI "https://{fqdn}{probePath}" | Select-String "^location:" -CaseSensitive:$false` - Network accessline 23
1. Read the `Location` header: `curl -sI "https://{fqdn}{probePath}" | Select-String "^location:" -CaseSensitive:$false` - Network accessline 54
|---------|---------------| | Container Apps | `latestReadyRevisionName` not empty + HTTP on ingress FQDN | | App Service | HTTP GET `https://{name}.azurewebsites.net/` + `/health` | - Network accessline 55
| Container Apps | `latestReadyRevisionName` not empty + HTTP on ingress FQDN | | App Service | HTTP GET `https://{name}.azurewebsites.net/` + `/health` | | Static Web Apps | HTTP GET `https://{defaultHostname}/` → 2xx = `healthy` (hostname - Network accessline 56
| App Service | HTTP GET `https://{name}.azurewebsites.net/` + `/health` | - Network accessline 57
| Static Web Apps | HTTP GET `https://{defaultHostname}/` → 2xx = `healthy` (hostname: `az staticwebapp show -n {swa} -g {rg} --query defaultHostname -o tsv`) | - Network accessline 64
> ⛔ **Container Apps — run an explicit live HTTP probe (the pipeline status is NOT sufficient).** After `latestReadyRevisionName` is set, run an observable request against the ingress FQDN and capture the result into `deploy-result.json.end - Network accessline 65
> ```powershell > iwr "https://{ingressFqdn}/{probePath}" -UseBasicParsing # PowerShell > curl -sSfL "https://{ingressFqdn}/{probePath}" # bash - Network accessline 66
> iwr "https://{ingressFqdn}/{probePath}" -UseBasicParsing # PowerShell - Network accessline 67
> curl -sSfL "https://{ingressFqdn}/{probePath}" # bash - Network accessline 76
{ "name": "api", "url": "https://myapp-ca-dev-a1b2.azurecontainerapps.io", - Network accessline 77
"name": "api", "url": "https://myapp-ca-dev-a1b2.azurecontainerapps.io", "healthStatus": "healthy" // healthy | degraded | unreachable | unknown - Network accessline 78
"url": "https://myapp-ca-dev-a1b2.azurecontainerapps.io",
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/mcp-tools.md
- Network accessline 5
> **Troubleshooting:** If a tool call fails with unknown parameter or missing command errors, consult the official docs: <https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tools/>
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/portal-links.md
- Network accessline 11
$deploymentName = "app-onboard-deploy-$("{sessionId}".Substring(0,8))" $resId = "/subscriptions/{subscriptionId}/providers/Microsoft.Resources/deployments/$deploymentName" $link = "https://portal.azure.com/#view/HubsExtension/DeploymentDeta - Network accessline 12
$resId = "/subscriptions/{subscriptionId}/providers/Microsoft.Resources/deployments/$deploymentName" $link = "https://portal.azure.com/#view/HubsExtension/DeploymentDetailsBlade/~/overview/id/$($resId.Replace('/', '%2F'))" Write-Output "LIN - Network accessline 13
$link = "https://portal.azure.com/#view/HubsExtension/DeploymentDetailsBlade/~/overview/id/$($resId.Replace('/', '%2F'))" - Network accessline 27
$resId = "/subscriptions/{subscriptionId}/resourceGroups/{rg}/providers/Microsoft.Resources/deployments/$deploymentName" $link = "https://portal.azure.com/#view/HubsExtension/DeploymentDetailsBlade/~/overview/id/$($resId.Replace('/', '%2F') - Network accessline 28
$link = "https://portal.azure.com/#view/HubsExtension/DeploymentDetailsBlade/~/overview/id/$($resId.Replace('/', '%2F'))" - Network accessline 33
For Terraform (no single ARM deployment): `https://portal.azure.com/#@{tenantId}/resource/subscriptions/{subscriptionId}/resourceGroups/{resourceGroup}/activitylog` - Network accessline 51
⚠<U+FE0F> Previous deployment link is stale — use this one: https://portal.azure.com/.../{newDeploymentName} - Network accessline 52
https://portal.azure.com/.../{newDeploymentName}
.github/plugins/azure-skills/skills/azure-app-onboard/deploy/references/preflight-checks.md
- Network accessline 17
- Success → proceed. Active subscription + tenant confirmed. - Failure → `ENVIRONMENT_BLOCKING`. Suggest `az login` (plain, no scope). - ⛔ NEVER suggest `az login --scope https://graph.microsoft.com/.default` — Graph scope is irrelevant for - Network accessline 19
- ⛔ NEVER suggest `az login --scope https://graph.microsoft.com/.default` — Graph scope is irrelevant for ARM deployments.
.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/mcp-tools.md
- Network accessline 5
> **Troubleshooting:** If a tool call fails with unknown parameter or missing command errors, consult the official docs: <https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tools/>
.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/naming-patterns.md
- Network accessline 5
> **Reference:** [Azure naming conventions](https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-best-practices/resource-naming) — link, don't duplicate. Check docs for updates.
.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/prepare-schemas.ts
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/pricing-guide-services.md
- Network accessline 197
**Not in the Retail Prices API.** Fixed pricing — query [azure.microsoft.com/pricing/details/app-service/static](https://azure.microsoft.com/en-us/pricing/details/app-service/static/):
.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/pricing-guide.md
- Network accessline 66
When `pricing_get` returns empty: (1) Check `armSkuName` populated/case-sensitive? (2) HTTP fallback: `https://prices.azure.com/api/retail/prices?$filter={filter}`. (3) After 2 failures, use [pricing-guide-services.md](pricing-guide-service
.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/service-mapping.md
- Network accessline 23
**AKS vs Container Apps:** Use Container Apps when scale-to-zero is needed, no K8s expertise is required, KEDA-driven event processing fits, or serverless GPU inference does not require Kubernetes control. Use AKS when the workload requires
.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/sku-quota-validation.md
- Network accessline 35
$sub = '{subscriptionId}'; $sku = '{sku}' @('{userRegion}','{alt1}','{alt2}','{alt3}') | ForEach-Object { $limit = az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/Microsoft.Web/locations/$_/providers/ - Network accessline 36
@('{userRegion}','{alt1}','{alt2}','{alt3}') | ForEach-Object { $limit = az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/Microsoft.Web/locations/$_/providers/Microsoft.Quota/quotas/$sku?api-version=20 - Network accessline 37
$limit = az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/Microsoft.Web/locations/$_/providers/Microsoft.Quota/quotas/$sku?api-version=2023-02-01" --query "properties.limit.value" -o tsv 2>$null - Network accessline 38
$used = az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/Microsoft.Web/locations/$_/providers/Microsoft.Quota/usages/$sku?api-version=2023-02-01" --query "properties.usages.value" -o tsv 2>$null - Network accessline 48
az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/Microsoft.App/locations/{region}/usages?api-version=2024-03-01" --query "value[?name.value=='ManagedEnvironmentCount'].{used:currentValue, limit:limit}" - - Network accessline 86
$sub = '{subscriptionId}'; $provider = 'Microsoft.DBforPostgreSQL'; $apiVer = '2022-12-01' @('{userRegion}','{alt1}','{alt2}','{alt3}') | ForEach-Object { $result = az rest --method get --url "https://management.azure.com/subscriptions/$s - Network accessline 87
@('{userRegion}','{alt1}','{alt2}','{alt3}') | ForEach-Object { $result = az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/$provider/locations/$_/capabilities?api-version=$apiVer" --query "value[0].sup - Network accessline 88
$result = az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/$provider/locations/$_/capabilities?api-version=$apiVer" --query "value[0].supportedFlexibleServerEditions[0].name" -o tsv 2>$null
.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/subagent-pricing.md
- Network accessline 42
- ⛔ **Do NOT invoke ANY skills** — no `{"skill": "azure-validate"}`, `{"skill": "azure-prepare"}`, or any other skill call. You are a pricing subagent only. Use direct HTTP to `https://prices.azure.com/api/retail/prices` for price queries ( - Network accessline 45
- ⛔ For services with empty `armSkuName` (Container Apps, Functions Consumption, ACR, Storage, Cosmos, Key Vault): use `filter`/`meterName` matching — a `sku` filter returns `[]` - ⛔ **Monthly multiplier = each meter's `unitOfMeasure`** (`1 - Network accessline 46
- ⛔ **Monthly multiplier = each meter's `unitOfMeasure`** (`1 Hour`→×730, `1/Day`→×30 [ACR/registry, SQL DTU], `1 GB/Month`→×GB, `1 Second`→usage) — NEVER blanket ×730; applying ×730 to a `1/Day` meter overstates ~24× - ⛔ Use direct HTTP to - Network accessline 47
- ⛔ Use direct HTTP to `https://prices.azure.com/api/retail/prices` for all price lookups. Do NOT use `mcp_azure_mcp_pricing` — it was already tried inline and failed.
.github/plugins/azure-skills/skills/azure-app-onboard/prepare/references/validation-rubric.md
- Network accessline 8
|-----------|---------------| | **Goal Alignment** | Every `context.json.intent` field reflected in service/SKU choice. No orphaned services (every service maps to a component or supporting role). `overrides[]` honored. | | **WAF Alignment* - Network accessline 9
| **Goal Alignment** | Every `context.json.intent` field reflected in service/SKU choice. No orphaned services (every service maps to a component or supporting role). `overrides[]` honored. | | **WAF Alignment** | **Cost:** SKU matches budg - Network accessline 10
| **WAF Alignment** | **Cost:** SKU matches budget; alternatives document cost tradeoffs. **Reliability:** Production plans include zone-redundant SKUs, GRS storage. **Security:** Managed identity + Key Vault; private endpoints where budget - Network accessline 22
- [Azure Well-Architected Framework](https://learn.microsoft.com/en-us/azure/well-architected/) — pillar definitions and tradeoff guidance - Network accessline 23
- [WAF Service Guides](https://learn.microsoft.com/en-us/azure/well-architected/service-guides/) — per-service WAF alignment checklists
.github/plugins/azure-skills/skills/azure-app-onboard/references/handoff-protocol.md
- Network accessline 12
> 📁 Resource Group: {context.json.azure.resourceGroup} > 🌍 Region: {context.json.azure.region} > 🔗 Portal: https://portal.azure.com/#@/resource/subscriptions/{subId}/resourceGroups/{rgName}/overview - Network accessline 13
> 🌍 Region: {context.json.azure.region} > 🔗 Portal: https://portal.azure.com/#@/resource/subscriptions/{subId}/resourceGroups/{rgName}/overview > ``` - Network accessline 14
> 🔗 Portal: https://portal.azure.com/#@/resource/subscriptions/{subId}/resourceGroups/{rgName}/overview
.github/plugins/azure-skills/skills/azure-app-onboard/references/iac-resources.md
- Network accessline 7
| Resource | URL | Use When | |----------|-----|----------| | Bicep Documentation | https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/ | Syntax, file structure, deployment scopes, install | - Network accessline 8
|----------|-----|----------| | Bicep Documentation | https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/ | Syntax, file structure, deployment scopes, install | | Azure Resource Reference | https://learn.microsoft.com/en-u - Network accessline 9
| Bicep Documentation | https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/ | Syntax, file structure, deployment scopes, install | - Network accessline 10
| Azure Resource Reference | https://learn.microsoft.com/en-us/azure/templates/ | Resource properties, API versions, schema per type | - Network accessline 14
| Resource | URL | Use When | |----------|-----|----------| | Terraform Registry — azurerm | https://registry.terraform.io/providers/hashicorp/azurerm/latest | Resource type properties, argument reference, import blocks | - Network accessline 15
|----------|-----|----------| | Terraform Registry — azurerm | https://registry.terraform.io/providers/hashicorp/azurerm/latest | Resource type properties, argument reference, import blocks | | Terraform Registry — azapi | https://registry. - Network accessline 16
| Terraform Registry — azurerm | https://registry.terraform.io/providers/hashicorp/azurerm/latest | Resource type properties, argument reference, import blocks | - Network accessline 17
| Terraform Registry — azapi | https://registry.terraform.io/providers/azure/azapi/latest | Preview resources not yet in azurerm; maps to ARM REST APIs | - Network accessline 34
| Resource | URL | Use When | |----------|-----|----------| | Common ARM Deployment Errors | https://learn.microsoft.com/en-us/azure/azure-resource-manager/troubleshooting/common-deployment-errors | `InvalidTemplateDeployment`, `SkuNotAvail - Network accessline 35
|----------|-----|----------| | Common ARM Deployment Errors | https://learn.microsoft.com/en-us/azure/azure-resource-manager/troubleshooting/common-deployment-errors | `InvalidTemplateDeployment`, `SkuNotAvailable`, `QuotaExceeded`, any AR - Network accessline 36
| Common ARM Deployment Errors | https://learn.microsoft.com/en-us/azure/azure-resource-manager/troubleshooting/common-deployment-errors | `InvalidTemplateDeployment`, `SkuNotAvailable`, `QuotaExceeded`, any ARM error code | - Network accessline 37
| App Service Troubleshooting | https://learn.microsoft.com/en-us/troubleshoot/azure/app-service/ | Startup crashes, Kudu/Oryx build failures, health probe issues | - Network accessline 38
| App Service Zip Deploy Guide | https://learn.microsoft.com/en-us/azure/app-service/deploy-zip | Zip deploy, SCM_DO_BUILD_DURING_DEPLOYMENT, Kudu publish API | | Container Apps Troubleshooting | https://learn.microsoft.com/en-us/azure/cont - Network accessline 39
| Container Apps Troubleshooting | https://learn.microsoft.com/en-us/azure/container-apps/troubleshooting | Revision failures, ingress errors, secret resolution, image pull failures | - Network accessline 40
| Quota Increase Portal | https://portal.azure.com/#blade/Microsoft_Azure_Capacity/QuotaMenuBlade/myQuotas | Direct link for quota increase requests |
.github/plugins/azure-skills/skills/azure-app-onboard/references/mcp-tool-reference.md
- Network accessline 5
> **Troubleshooting:** If a tool call fails with unknown parameter or missing command errors, consult the official docs for current parameter names and allowed values: <https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tool - Network accessline 28
> **Additional global params** (not commonly needed by AppOnboard): `authentication-method` (credential\|key\|connectionString), `max-retries` (default 3), `retry-delay` (default 2s), `retry-delay-maximum` (default 10s), `retry-mode` (fixed
.github/plugins/azure-skills/skills/azure-app-onboard/references/session-schemas.ts
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/bicep-container-apps.md
- Network accessline 116
> ❌ **WRONG — `environment().suffixes.keyvaultDns` produces double-dot URL:** > `keyVaultUrl: 'https://${kvName}${environment().suffixes.keyvaultDns}/secrets/...'` - Network accessline 117
> `keyVaultUrl: 'https://${kvName}${environment().suffixes.keyvaultDns}/secrets/...'` - Network accessline 133
// ⛔ Do NOT replace vault.azure.net with environment().suffixes.keyvaultDns — it adds a leading dot → double-dot URL #disable-next-line no-hardcoded-env-urls keyVaultUrl: 'https://${keyVault.name}.vault.azure.net/secrets - Network accessline 134
#disable-next-line no-hardcoded-env-urls keyVaultUrl: 'https://${keyVault.name}.vault.azure.net/secrets/db-connection-string' identity: 'system' // Uses the CA's system-assigned managed identity - Network accessline 135
keyVaultUrl: 'https://${keyVault.name}.vault.azure.net/secrets/db-connection-string' - Network accessline 188
Container Apps in the same environment communicate via internal DNS: `http://{container-app-name}`. Set via env vars: - Network accessline 191
env: [ { name: 'API_URL', value: 'http://${apiContainerApp.name}' } - Network accessline 192
{ name: 'API_URL', value: 'http://${apiContainerApp.name}' } - Network accessline 193
{ name: 'WORKER_URL', value: 'http://${workerContainerApp.name}' }
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/bicep-patterns-security.md
- Network accessline 20
> **Source:** Adapted from Azure security best practices. See [Azure security baseline](https://learn.microsoft.com/en-us/security/benchmark/azure/overview) for updates. - Access to secretsline 77
[Credential-related source omitted] - Network accessline 79
> **Container Apps exception:** Phase 1 of two-phase deployment uses `secrets: []` — NO secrets at all (not plaintext, not KV). KV `secretRef` entries are activated in Phase 2 after RBAC propagates. See [bicep-container-apps.md](../../scaff - Network accessline 80
> > ⛔ **Container Apps KV URL — do NOT use `environment().suffixes.keyvaultDns`.** That function returns `.vault.azure.net` (WITH leading dot) → double-dot URL → `ContainerAppSecretKeyVaultUrlInvalid`. Use `'https://${kvName}.vault.azure.ne - Network accessline 81
> ⛔ **Container Apps KV URL — do NOT use `environment().suffixes.keyvaultDns`.** That function returns `.vault.azure.net` (WITH leading dot) → double-dot URL → `ContainerAppSecretKeyVaultUrlInvalid`. Use `'https://${kvName}.vault.azure.net/
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/bicep-patterns.md
- Network accessline 5
> **Source:** Adapted from Azure Bicep best practices. See [Bicep best practices](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/best-practices) for updates. - Network accessline 76
{ "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", - Network accessline 77
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#",
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/dockerfile-generation.md
- Network accessline 60
1. Dockerfile MUST include `ARG NEXT_PUBLIC_API_URL` before the `RUN npm run build` step 2. Deploy phase passes `--build-arg NEXT_PUBLIC_API_URL=https://{api-fqdn}` to `az acr build` - Network accessline 61
2. Deploy phase passes `--build-arg NEXT_PUBLIC_API_URL=https://{api-fqdn}` to `az acr build` - Network accessline 63
Detect from `.env*` files containing `NEXT_PUBLIC_*` pointing to another service (e.g., `NEXT_PUBLIC_API_URL=http://localhost:3001`).
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/env-var-secrets.md
- Network accessline 12
> **Pitfalls:** `CORS_ORIGINS=["*"]` → invalid for strict validators (use actual URLs). `DATABASE_URL=changethis` → use KV ref. JSON array env vars need Bicep variable escaping: > ```bicep > var corsOrigins = '["https://${containerApp.prope - Network accessline 13
> ```bicep > var corsOrigins = '["https://${containerApp.properties.configuration.ingress.fqdn}"]' > { name: 'CORS_ORIGINS', value: corsOrigins } - Network accessline 14
> var corsOrigins = '["https://${containerApp.properties.configuration.ingress.fqdn}"]' - Network accessline 35
{ name: 'db-connection-string' keyVaultUrl: 'https://${keyVault.name}.vault.azure.net/secrets/db-connection-string' - Network accessline 36
name: 'db-connection-string' keyVaultUrl: 'https://${keyVault.name}.vault.azure.net/secrets/db-connection-string' identity: 'system' - Network accessline 37
keyVaultUrl: 'https://${keyVault.name}.vault.azure.net/secrets/db-connection-string' - Access to secretsline 56
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/iac-generation-rules.md
- Network accessline 61
⛔ Read [`bicep-patterns-security.md`](bicep-patterns-security.md) (or `terraform-patterns.md` § Security Defaults) and verify ALL security patterns from Step 5. If deployment includes compute with MI ↔ resource RBAC, ⛔ read [rbac-roles.md](
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/mcp-tools.md
- Network accessline 5
> **Troubleshooting:** If a tool call fails with unknown parameter or missing command errors, consult the official docs: <https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tools/>
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/scaffold-schemas.ts
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/self-review-checklist.md
- Network accessline 112
Per-pillar spot check against [Azure Well-Architected Framework](https://learn.microsoft.com/en-us/azure/well-architected/).
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/terraform-patterns.md
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/references/waf-checklist.md
- Network accessline 5
> **Reference:** [Azure Well-Architected Framework](https://learn.microsoft.com/en-us/azure/well-architected/) — link, don't duplicate. See [WAF Service Guides](https://learn.microsoft.com/en-us/azure/well-architected/service-guides/) for p
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/scripts/scaffold-conformance.ps1
- Executable scriptline 1
#!/usr/bin/env pwsh
.github/plugins/azure-skills/skills/azure-app-onboard/scaffold/scripts/scaffold-conformance.sh
- Executable scriptline 1
#!/usr/bin/env bash
.github/plugins/azure-skills/skills/azure-cloud-migrate/SKILL.md
- Network accessline 21
6. Destructive actions require `ask_user` — [functions global-rules](references/services/functions/global-rules.md) | [app-service global-rules](references/services/app-service/global-rules.md) 7. **Report progress to user** — During long-r - Network accessline 23
8. **Audit service discovery in app code** — Kubernetes DNS names (e.g., `http://order-service:3001`) do not resolve in Container Apps. During assessment, scan source code for hardcoded hostnames/ports in HTTP clients and flag them for env-
.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/app-service/app-engine-to-app-service.md
- Network accessline 180
- [GCP to Azure services comparison](https://learn.microsoft.com/en-us/azure/architecture/gcp-professional/) - Network accessline 181
- [App Service overview](https://learn.microsoft.com/en-us/azure/app-service/overview) - Network accessline 182
- [Cosmos DB migration options](https://learn.microsoft.com/en-us/azure/cosmos-db/migration-choices) - Network accessline 183
- [App Service deployment slots](https://learn.microsoft.com/en-us/azure/app-service/deploy-staging-slots)
.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/app-service/beanstalk-to-app-service.md
- Network accessline 165
- [AWS to Azure services comparison](https://learn.microsoft.com/en-us/azure/architecture/aws-professional/) - Network accessline 166
- [App Service overview](https://learn.microsoft.com/en-us/azure/app-service/overview) - Network accessline 167
- [App Service autoscale](https://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-get-started) - Network accessline 168
- [Azure Database Migration Service](https://learn.microsoft.com/en-us/azure/dms/dms-overview)
.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/app-service/code-migration.md
.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/app-service/global-rules.md
- Network accessline 25
- Always use `mcp_azure_mcp_get_azure_bestpractices` tool before generating Azure code - Prefer managed identity over connection strings or API keys - **Always use the latest supported runtime stack** — see the App Service [language overvie - Network accessline 26
- Prefer managed identity over connection strings or API keys - **Always use the latest supported runtime stack** — see the App Service [language overview](https://learn.microsoft.com/azure/app-service/overview-supported-languages) for the - Network accessline 27
- **Always use the latest supported runtime stack** — see the App Service [language overview](https://learn.microsoft.com/azure/app-service/overview-supported-languages) for the supported stacks page per language
.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/app-service/heroku-to-app-service.md
- Network accessline 32
| Heroku Dyno Type | App Service Plan | Notes | |-------------------|------------------|-------| | Free / Eco | Free (F1) | Dev/test only — F1 has shared compute with quota limits (CPU minutes), not equivalent to Heroku's 60 min/day cap. Se - Network accessline 33
|-------------------|------------------|-------| | Free / Eco | Free (F1) | Dev/test only — F1 has shared compute with quota limits (CPU minutes), not equivalent to Heroku's 60 min/day cap. See [App Service Free SKU limits](https://learn.mi - Network accessline 34
| Free / Eco | Free (F1) | Dev/test only — F1 has shared compute with quota limits (CPU minutes), not equivalent to Heroku's 60 min/day cap. See [App Service Free SKU limits](https://learn.microsoft.com/azure/app-service/overview-hosting-pl - Access to secretsline 87
[Credential-related source omitted] - Network accessline 158
- [Heroku to Azure migration guide](https://learn.microsoft.com/en-us/azure/app-service/overview) - Network accessline 159
- [App Service deployment slots](https://learn.microsoft.com/en-us/azure/app-service/deploy-staging-slots) - Network accessline 160
- [GitHub Actions for App Service](https://learn.microsoft.com/en-us/azure/app-service/deploy-github-actions) - Network accessline 161
- [App Service managed identity](https://learn.microsoft.com/en-us/azure/app-service/overview-managed-identity)
.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/container-apps/cloudrun-deployment-guide.md
- Access to secretsline 56
[Credential-related source omitted] - Access to secretsline 57
[Credential-related source omitted] - Access to secretsline 80
[Credential-related source omitted] - Access to secretsline 81
[Credential-related source omitted] - Network accessline 193
FQDN=$(az containerapp show --name <app-name> -g "$RG" --query properties.configuration.ingress.fqdn -o tsv) curl -I "https://$FQDN/health" - Network accessline 194
curl -I "https://$FQDN/health" - Network accessline 201
$app = az containerapp show --name <app-name> -g $RG | ConvertFrom-Json Invoke-WebRequest -Uri "https://$($app.properties.configuration.ingress.fqdn)/health" - Network accessline 202
Invoke-WebRequest -Uri "https://$($app.properties.configuration.ingress.fqdn)/health"
.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/container-apps/deployment-guide.md
- Access to secretsline 65
[Credential-related source omitted] - Access to secretsline 74
[Credential-related source omitted] - Access to secretsline 75
[Credential-related source omitted] - Possible obfuscationline 111
$decodedSecretValue = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($secretValue)) - Network accessline 127
> ⚠<U+FE0F> **Warning: Service Discovery Changes** — In Kubernetes, pods reach other services by short DNS name (e.g., `http://order-service:3001`). In Container Apps, internal services use HTTPS FQDNs (e.g., `https://order-service.internal.<env-d - Network accessline 157
# Get app FQDN and test FQDN=$(az containerapp show --name my-app --resource-group myapp-rg --query properties.configuration.ingress.fqdn -o tsv) echo "App URL: https://$FQDN" - Network accessline 158
FQDN=$(az containerapp show --name my-app --resource-group myapp-rg --query properties.configuration.ingress.fqdn -o tsv) echo "App URL: https://$FQDN" curl https://$FQDN/health - Network accessline 159
echo "App URL: https://$FQDN" - Network accessline 160
curl https://$FQDN/health - Network accessline 167
$FQDN = az containerapp show --name my-app --resource-group myapp-rg --query properties.configuration.ingress.fqdn -o tsv Write-Host "App URL: https://$FQDN" - Network accessline 168
Write-Host "App URL: https://$FQDN" - Network accessline 169
Invoke-WebRequest -Uri "https://$FQDN/health" -Method Head - Network accessline 185
| SecretRef not found | `--env-vars KEY=secretref:name` requires `--secrets name=value` (or keyvaultref) in the **same** `az containerapp create` command | | ARM deployment locks | If a Bicep deployment is stuck with Container Apps InProgre - Network accessline 187
| Service-to-service timeout | Kubernetes DNS names (`http://svc:port`) don't work in ACA. Ensure app code reads `ORDER_SERVICE_URL` (or equivalent) env var pointing to the internal FQDN |
.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/container-apps/fargate-deployment-guide.md
- Access to secretsline 45
[Credential-related source omitted] - Access to secretsline 46
[Credential-related source omitted] - Dangerous shell operationline 113
trap 'rm -f "$secret_file"' EXIT - Dangerous shell operationline 118
rm -f "$secret_file" - Network accessline 197
set -euo pipefail FQDN=$(az containerapp show --name <app-name> -g "$RG" --query properties.configuration.ingress.fqdn -o tsv) curl -f -I "https://$FQDN/health" || { echo "Health check failed"; exit 1; } - Network accessline 198
FQDN=$(az containerapp show --name <app-name> -g "$RG" --query properties.configuration.ingress.fqdn -o tsv) curl -f -I "https://$FQDN/health" || { echo "Health check failed"; exit 1; } az containerapp logs show --name <app-name> -g "$RG" - - Network accessline 199
curl -f -I "https://$FQDN/health" || { echo "Health check failed"; exit 1; } - Network accessline 204
$ErrorActionPreference = 'Stop' $fqdn = az containerapp show --name <app-name> -g $env:RG --query properties.configuration.ingress.fqdn -o tsv Invoke-WebRequest -Uri "https://$fqdn/health" -Method Head - Network accessline 205
$fqdn = az containerapp show --name <app-name> -g $env:RG --query properties.configuration.ingress.fqdn -o tsv Invoke-WebRequest -Uri "https://$fqdn/health" -Method Head az containerapp logs show --name <app-name> -g $env:RG --tail 100 - Network accessline 206
Invoke-WebRequest -Uri "https://$fqdn/health" -Method Head
.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/container-apps/fargate-to-container-apps.md
- Network accessline 67
- [Azure Container Apps overview](https://learn.microsoft.com/azure/container-apps/overview) - Network accessline 68
- [AWS to Azure services comparison](https://learn.microsoft.com/azure/architecture/aws-professional/services) - Network accessline 69
- [Container Apps scaling](https://learn.microsoft.com/azure/container-apps/scale-app) - Network accessline 70
- [Container Apps managed identity](https://learn.microsoft.com/azure/container-apps/managed-identity)
.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/container-apps/spring-assessment-guide.md
- Network accessline 33
### Spring Boot Version Requirements - **Recommended target**: Spring Boot 3.x (requires Java 17+) - **Supported source**: Spring Boot 2.x on Java 8/11 → plan upgrade to Java 17+ and follow [Spring Boot 3.0 Migration Guide](https://github.c - Network accessline 35
- **Supported source**: Spring Boot 2.x on Java 8/11 → plan upgrade to Java 17+ and follow [Spring Boot 3.0 Migration Guide](https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-3.0-Migration-Guide) - Network accessline 37
### Spring Cloud Compatibility - Verify Spring Cloud version matches Spring Boot 3.x requirements - See [Spring Cloud versions](https://spring.io/projects/spring-cloud#overview) - Network accessline 39
- See [Spring Cloud versions](https://spring.io/projects/spring-cloud#overview)
.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/container-apps/spring-deployment-guide.md
- Access to secretsline 13
[Credential-related source omitted] - Access to secretsline 21
[Credential-related source omitted] - Access to secretsline 22
[Credential-related source omitted] - Access to secretsline 70
[Credential-related source omitted] - Access to secretsline 71
[Credential-related source omitted] - Access to secretsline 72
[Credential-related source omitted] - Access to secretsline 80
[Credential-related source omitted] - Access to secretsline 81
[Credential-related source omitted] - Access to secretsline 82
[Credential-related source omitted] - Access to secretsline 83
[Credential-related source omitted] - Dangerous shell operationline 102
trap 'shred -u "$SECRET_FILE" 2>/dev/null || rm -f "$SECRET_FILE"' EXIT - Network accessline 236
FQDN=$(az containerapp show --name spring-app --resource-group spring-rg --query properties.configuration.ingress.fqdn -o tsv) echo "Application URL: https://${FQDN}" curl "https://${FQDN}/actuator/health" - Network accessline 237
echo "Application URL: https://${FQDN}" curl "https://${FQDN}/actuator/health" az containerapp logs show --name spring-app --resource-group spring-rg --tail 50 - Network accessline 238
curl "https://${FQDN}/actuator/health" - Network accessline 244
$FQDN = az containerapp show --name spring-app --resource-group spring-rg --query properties.configuration.ingress.fqdn -o tsv Write-Host "Application URL: https://${FQDN}" - Network accessline 245
Write-Host "Application URL: https://${FQDN}" - Network accessline 246
Invoke-WebRequest "https://${FQDN}/actuator/health" - Network accessline 256
az containerapp env java-component config-server-for-spring create --environment spring-env --resource-group spring-rg --name config-server --min-replicas 1 --max-replicas 1 --configuration spring.cloud.config.server.git.uri=https: - Network accessline 257
--environment spring-env --resource-group spring-rg --name config-server \ --min-replicas 1 --max-replicas 1 \ --configuration spring.cloud.config.server.git.uri=https://github.com/your-org/config-repo - Network accessline 258
--min-replicas 1 --max-replicas 1 \ --configuration spring.cloud.config.server.git.uri=https://github.com/your-org/config-repo az containerapp update --name spring-app --resource-group spring-rg --bind config-server - Network accessline 259
--configuration spring.cloud.config.server.git.uri=https://github.com/your-org/config-repo - Network accessline 265
az containerapp env java-component config-server-for-spring create --environment spring-env --resource-group spring-rg --name config-server --min-replicas 1 --max-replicas 1 --configuration spring.cloud.config.server.git.uri=https: - Network accessline 266
--environment spring-env --resource-group spring-rg --name config-server ` --min-replicas 1 --max-replicas 1 ` --configuration spring.cloud.config.server.git.uri=https://github.com/your-org/config-repo - Network accessline 267
--min-replicas 1 --max-replicas 1 ` --configuration spring.cloud.config.server.git.uri=https://github.com/your-org/config-repo az containerapp update --name spring-app --resource-group spring-rg --bind config-server - Network accessline 268
--configuration spring.cloud.config.server.git.uri=https://github.com/your-org/config-repo
.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/functions/code-migration.md
- Network accessline 16
- Use latest programming model (v4 for JavaScript, v2 for Python) - **Always use bindings and triggers instead of SDKs** — For blob read/write, use `input.storageBlob()` / `output.storageBlob()` with `extraInputs`/`extraOutputs`. For queues - Network accessline 18
- **Always use the latest supported language runtime** — Consult [supported languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) and select the newest GA version. Do NOT default to an older LTS version whe
.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/functions/global-rules.md
- Network accessline 24
- Always use `mcp_azure_mcp_get_azure_bestpractices` tool before generating Azure code - Prefer managed identity over connection strings - **Always use the latest supported language runtime** — check [supported languages](https://learn.micr - Network accessline 25
- Prefer managed identity over connection strings - **Always use the latest supported language runtime** — check [supported languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) for the newest GA version. N - Network accessline 26
- **Always use the latest supported language runtime** — check [supported languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) for the newest GA version. Never default to older versions
.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/functions/lambda-to-functions.md
- Access to secretsline 90
[Credential-related source omitted] - Network accessline 95
- [AWS Lambda vs Azure Functions comparison](https://aka.ms/AWSLambda) - Network accessline 96
- [AWS to Azure services comparison](https://learn.microsoft.com/en-us/azure/architecture/aws-professional/) - Network accessline 97
- [Supported language runtimes](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) - Network accessline 98
- [Triggers and bindings overview](https://learn.microsoft.com/en-us/azure/azure-functions/functions-triggers-bindings) - Network accessline 99
- [Functions quickstart JS (azd)](https://github.com/Azure-Samples/functions-quickstart-javascript-azd/tree/main/infra) - Network accessline 100
- [Functions quickstart .NET Event Grid (azd)](https://github.com/Azure-Samples/functions-quickstart-dotnet-azd-eventgrid-blob/tree/main/infra) - Network accessline 172
properties: { // ARM resolves system key and handles validation at deployment time endpointUrl: 'https://${functionApp.properties.defaultHostName}/runtime/webhooks/blobs?functionName=${functionName}&code=${listKeys('${functi - Network accessline 173
// ARM resolves system key and handles validation at deployment time endpointUrl: 'https://${functionApp.properties.defaultHostName}/runtime/webhooks/blobs?functionName=${functionName}&code=${listKeys('${functionApp.id}/host/default - Network accessline 174
endpointUrl: 'https://${functionApp.properties.defaultHostName}/runtime/webhooks/blobs?functionName=${functionName}&code=${listKeys('${functionApp.id}/host/default', '2023-12-01').systemKeys.blobs_extension}'
.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/functions/runtimes/csharp.md
- Network accessline 225
> Full reference: [Azure Functions C# isolated worker guide](https://learn.microsoft.com/en-us/azure/azure-functions/dotnet-isolated-process-guide)
.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/functions/runtimes/java.md
- Network accessline 214
> Full reference: [Azure Functions Java developer guide](https://learn.microsoft.com/en-us/azure/azure-functions/functions-reference-java)
.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/functions/runtimes/javascript.md
- Network accessline 325
> Full reference: [Azure Functions JavaScript developer guide](https://learn.microsoft.com/en-us/azure/azure-functions/functions-reference-node)
.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/functions/runtimes/powershell.md
- Network accessline 221
> Full reference: [Azure Functions PowerShell developer guide](https://learn.microsoft.com/en-us/azure/azure-functions/functions-reference-powershell)
.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/functions/runtimes/python.md
.github/plugins/azure-skills/skills/azure-cloud-migrate/references/services/functions/runtimes/typescript.md
- Network accessline 119
> Full reference: [Azure Functions TypeScript developer guide](https://learn.microsoft.com/en-us/azure/azure-functions/functions-reference-node?tabs=typescript)
.github/plugins/azure-skills/skills/azure-compliance/references/auth-best-practices.md
- Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme)
.github/plugins/azure-skills/skills/azure-compliance/references/azqr-recommendations.md
- Network accessline 171
- [Azure Proactive Resiliency Library](https://aka.ms/aprl) - Network accessline 172
- [Azure Orphaned Resources](https://github.com/dolevshor/azure-orphan-resources) - Network accessline 173
- [Azure Advisor Documentation](https://learn.microsoft.com/azure/advisor/) - Network accessline 174
- [Defender for Cloud Recommendations](https://learn.microsoft.com/azure/defender-for-cloud/recommendations-reference)
.github/plugins/azure-skills/skills/azure-compliance/references/azqr-remediation-patterns.md
- Network accessline 375
- [Azure CLI Reference](https://learn.microsoft.com/cli/azure/) - Network accessline 376
- [Bicep Documentation](https://learn.microsoft.com/azure/azure-resource-manager/bicep/) - Network accessline 377
- [Azure Policy Built-in Definitions](https://learn.microsoft.com/azure/governance/policy/samples/built-in-policies)
.github/plugins/azure-skills/skills/azure-compliance/references/azure-quick-review.md
- Network accessline 154
- [Recommendation Categories](azqr-recommendations.md) - [Remediation Patterns](azqr-remediation-patterns.md) - [Azure Quick Review Documentation](https://azure.github.io/azqr/docs/) - Network accessline 155
- [Remediation Patterns](azqr-remediation-patterns.md) - [Azure Quick Review Documentation](https://azure.github.io/azqr/docs/) - [Azure Proactive Resiliency Library](https://aka.ms/aprl) - Network accessline 156
- [Azure Quick Review Documentation](https://azure.github.io/azqr/docs/) - Network accessline 157
- [Azure Proactive Resiliency Library](https://aka.ms/aprl)
.github/plugins/azure-skills/skills/azure-compliance/references/sdk/azure-keyvault-keys-ts.md
- Network accessline 12
import { KeyClient } from "@azure/keyvault-keys"; import { DefaultAzureCredential } from "@azure/identity"; const keyClient = new KeyClient(`https://${vaultName}.vault.azure.net`, new DefaultAzureCredential()); - Network accessline 14
const keyClient = new KeyClient(`https://${vaultName}.vault.azure.net`, new DefaultAzureCredential());
.github/plugins/azure-skills/skills/azure-compute/references/retail-prices-api.md
- Network accessline 3
The [Azure Retail Prices API](https://learn.microsoft.com/en-us/rest/api/cost-management/retail-prices/azure-retail-prices) is **unauthenticated** — no Azure account or subscription needed. - Network accessline 8
https://prices.azure.com/api/retail/prices - Network accessline 13
https://prices.azure.com/api/retail/prices?api-version=2023-01-01-preview - Network accessline 23
GET https://prices.azure.com/api/retail/prices?$filter=serviceName eq 'Virtual Machines' and armRegionName eq 'eastus' and armSkuName eq 'Standard_D4s_v5' and priceType eq 'Consumption' - Network accessline 27
curl -s "https://prices.azure.com/api/retail/prices?\$filter=serviceName%20eq%20'Virtual%20Machines'%20and%20armRegionName%20eq%20'eastus'%20and%20armSkuName%20eq%20'Standard_D4s_v5'%20and%20priceType%20eq%20'Consumption'" - Network accessline 31
$filter = "serviceName eq 'Virtual Machines' and armRegionName eq 'eastus' and armSkuName eq 'Standard_D4s_v5' and priceType eq 'Consumption'" $response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?`$filter=$filter" - Network accessline 32
$response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?`$filter=$filter" - Network accessline 39
GET https://prices.azure.com/api/retail/prices?$filter=serviceName eq 'Virtual Machines' and armRegionName eq 'eastus' and contains(armSkuName, 'Standard_D') and priceType eq 'Consumption' - Network accessline 43
curl -s "https://prices.azure.com/api/retail/prices?\$filter=serviceName%20eq%20'Virtual%20Machines'%20and%20armRegionName%20eq%20'eastus'%20and%20contains(armSkuName,%20'Standard_D')%20and%20priceType%20eq%20'Consumption'" - Network accessline 47
$filter = "serviceName eq 'Virtual Machines' and armRegionName eq 'eastus' and contains(armSkuName, 'Standard_D') and priceType eq 'Consumption'" $response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?`$filter=$filter" - Network accessline 48
$response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?`$filter=$filter" - Network accessline 55
GET https://prices.azure.com/api/retail/prices?$filter=serviceName eq 'Virtual Machines' and armSkuName eq 'Standard_D4s_v5' and priceType eq 'Reservation' - Network accessline 59
curl -s "https://prices.azure.com/api/retail/prices?\$filter=serviceName%20eq%20'Virtual%20Machines'%20and%20armSkuName%20eq%20'Standard_D4s_v5'%20and%20priceType%20eq%20'Reservation'" - Network accessline 63
$filter = "serviceName eq 'Virtual Machines' and armSkuName eq 'Standard_D4s_v5' and priceType eq 'Reservation'" $response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?`$filter=$filter" - Network accessline 64
$response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?`$filter=$filter" - Network accessline 72
GET https://prices.azure.com/api/retail/prices?currencyCode='EUR'&$filter=serviceName eq 'Virtual Machines' and armSkuName eq 'Standard_D4s_v5' - Network accessline 76
curl -s "https://prices.azure.com/api/retail/prices?currencyCode='EUR'&\$filter=serviceName%20eq%20'Virtual%20Machines'%20and%20armSkuName%20eq%20'Standard_D4s_v5'" - Network accessline 80
$filter = "serviceName eq 'Virtual Machines' and armSkuName eq 'Standard_D4s_v5'" $response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?currencyCode='EUR'&`$filter=$filter" - Network accessline 81
$response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?currencyCode='EUR'&`$filter=$filter" - Network accessline 119
{ "NextPageLink": "https://prices.azure.com:443/api/retail/prices?$filter=...&$skip=1000" }
.github/plugins/azure-skills/skills/azure-compute/references/vm-families.md
- Network accessline 5
> **Source**: [Azure VM sizes overview](https://learn.microsoft.com/en-us/azure/virtual-machines/sizes/overview)
.github/plugins/azure-skills/skills/azure-compute/references/vm-quotas.md
- Network accessline 91
- Invoke the **azure-quotas** skill for complete quota CLI workflows across all Azure providers - [VM Family Guide](vm-families.md) — Family-to-workload mapping - [Azure VM quotas documentation](https://learn.microsoft.com/en-us/azure/virtu - Network accessline 93
- [Azure VM quotas documentation](https://learn.microsoft.com/en-us/azure/virtual-machines/quotas)
.github/plugins/azure-skills/skills/azure-compute/references/vmss-guide.md
- Network accessline 5
> **Note:** This reference provides quick guidance but may become stale. Always verify VMSS features, limitations, and orchestration mode capabilities by fetching the latest documentation from: > - https://learn.microsoft.com/en-us/azure/vi - Network accessline 6
> - https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/overview - Network accessline 7
> - https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-autoscale-overview - Network accessline 8
> - https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/orchestration-modes-api-comparison - Network accessline 62
- Use a **cool-down period** (default 5 min) to avoid flapping - Scale out aggressively, scale in conservatively (asymmetric rules) - Monitor with [Azure Monitor autoscale diagnostics](https://learn.microsoft.com/en-us/azure/azure-monitor/a - Network accessline 64
- Monitor with [Azure Monitor autoscale diagnostics](https://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-best-practices) - Network accessline 92
- [VMSS orchestration modes](https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-orchestration-modes) - Network accessline 93
- [Autoscale best practices](https://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-best-practices) - Network accessline 94
- [VMSS networking](https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-networking) - Network accessline 95
- [VMSS Flexible portal quickstart](https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/flexible-virtual-machine-scale-sets-portal)
.github/plugins/azure-skills/skills/azure-compute/workflows/capacity-reservation/references/association-disassociation.md
- Network accessline 61
Existing VMSS can be associated using `az vmss update` similarly to VMs. Regional VMSS must be deallocated first. Zonal VMSS can be associated without deallocating, but this is currently a [Preview feature](https://learn.microsoft.com/en-us - Network accessline 104
- [Associate a VM to a Capacity Reservation Group](https://learn.microsoft.com/en-us/azure/virtual-machines/capacity-reservation-associate-vm) - Network accessline 105
- [Remove/disassociate a VM from a Capacity Reservation Group](https://learn.microsoft.com/en-us/azure/virtual-machines/capacity-reservation-remove-vm) - Network accessline 106
- [Remove/disassociate a VMSS from a Capacity Reservation Group](https://learn.microsoft.com/en-us/azure/virtual-machines/capacity-reservation-remove-virtual-machine-scale-set)
.github/plugins/azure-skills/skills/azure-compute/workflows/capacity-reservation/references/capacity-reservation-overview.md
.github/plugins/azure-skills/skills/azure-compute/workflows/essential-machine-management/essential-machine-management.md
- Network accessline 51
GET https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.ManagedOps/managedOps/default?api-version=2025-07-28-preview - Network accessline 81
For common EMM issues, refer to the official documentation: - [Troubleshoot Essential Machine Management (Preview)](https://learn.microsoft.com/en-us/azure/operations/configuration-enrollment-troubleshoot) - Network accessline 82
- [Troubleshoot Essential Machine Management (Preview)](https://learn.microsoft.com/en-us/azure/operations/configuration-enrollment-troubleshoot)
.github/plugins/azure-skills/skills/azure-compute/workflows/essential-machine-management/references/emm-enable-flow.md
- Network accessline 33
az rest --method GET --url "https://graph.microsoft.com/v1.0/me" --query id -o tsv - Network accessline 39
GET https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleAssignments?api-version=2022-04-01&$filter=assignedTo('{objectId}') - Network accessline 47
GET https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleDefinitions?api-version=2022-04-01 - Network accessline 76
GET https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleAssignments?api-version=2022-04-01&$filter=assignedTo('{uamiPrincipalId}')
.github/plugins/azure-skills/skills/azure-compute/workflows/essential-machine-management/references/emm-overview.md
.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/examples/bicep/README.md
.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/examples/bicep/main.bicep
- Access to secretsline 139
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/examples/terraform/README.md
- Access to secretsline 9
[Credential-related source omitted] - Network accessline 14
MY_IP=$(curl -s ifconfig.me)/32 # your current public IP, locked to /32 - Access to secretsline 16
[Credential-related source omitted] - Access to secretsline 17
[Credential-related source omitted] - Access to secretsline 51
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/delivery-options/github-pr.md
- Network accessline 7
1. **Repo** — accept any of: - `owner/name` (e.g., `myorg/azure-infra`) - Full URL (e.g., `https://github.com/myorg/azure-infra`) - Network accessline 8
- `owner/name` (e.g., `myorg/azure-infra`) - Full URL (e.g., `https://github.com/myorg/azure-infra`) - Local checkout path (e.g., `~/source/azure-infra`) — skips clone - Network accessline 9
- Full URL (e.g., `https://github.com/myorg/azure-infra`) - Network accessline 76
> ✅ Opened PR: https://github.com/myorg/azure-infra/pull/42
.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/delivery-options/save-local.md
- Access to secretsline 47
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/depth-probe/beginner.md
- Access to secretsline 13
[Credential-related source omitted] - Network accessline 14
- **VNet:** create new `<vm-name>-vnet` with `10.0.0.0/16` - **Subnet:** `default` with `10.0.0.0/24` - **NSG:** create new, allow SSH 22 (Linux) or RDP 3389 (Windows) from **the user's current public IP** (detect via `curl -s ifconfig.me` - Network accessline 15
- **Subnet:** `default` with `10.0.0.0/24` - **NSG:** create new, allow SSH 22 (Linux) or RDP 3389 (Windows) from **the user's current public IP** (detect via `curl -s ifconfig.me` or equivalent) — only fall back to `*` if detection fails, - Network accessline 16
- **NSG:** create new, allow SSH 22 (Linux) or RDP 3389 (Windows) from **the user's current public IP** (detect via `curl -s ifconfig.me` or equivalent) — only fall back to `*` if detection fails, and always flag the chosen source in the Pl
.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/depth-probe/networking-deep.md
- Network accessline 7
| VNet | "Existing VNet, or new?" | If existing: ask name + RG; offer to list via `network_vnet_list` MCP or `az network vnet list` | | Subnet sizing | "Subnet CIDR?" | `/24` if new | | NSG | "Inbound rules: default (SSH/RDP from your IP) o - Network accessline 8
| Subnet sizing | "Subnet CIDR?" | `/24` if new | | NSG | "Inbound rules: default (SSH/RDP from your IP) or paste a rule set?" | Restrict source to user's current public IP — fetch via `curl -s ifconfig.me` if not provided | | Public IP | " - Network accessline 9
| NSG | "Inbound rules: default (SSH/RDP from your IP) or paste a rule set?" | Restrict source to user's current public IP — fetch via `curl -s ifconfig.me` if not provided |
.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/output-adapters/az-cli.md
.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/output-adapters/bicep.md
.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/output-adapters/terraform.md
.github/plugins/azure-skills/skills/azure-compute/workflows/vm-creator/references/plan-card.md
- Access to secretsline 32
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-compute/workflows/vm-recommender/references/web-fetch-policy.md
- Network accessline 17
## What to fetch (Step 2 — VMSS) - Network accessline 20
https://learn.microsoft.com/azure/virtual-machine-scale-sets/overview - Network accessline 21
https://learn.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-autoscale-overview - Network accessline 24
## What to fetch (Step 3 — VM family) - Network accessline 27
https://learn.microsoft.com/azure/virtual-machines/sizes/<family-category>/<series-name> - Network accessline 30
Examples: - B-series: `https://learn.microsoft.com/azure/virtual-machines/sizes/general-purpose/b-family` - Network accessline 31
- B-series: `https://learn.microsoft.com/azure/virtual-machines/sizes/general-purpose/b-family` - D-series: `https://learn.microsoft.com/azure/virtual-machines/sizes/general-purpose/ddsv5-series` - GPU: `https://learn.microsoft.com/azure/vi - Network accessline 32
- D-series: `https://learn.microsoft.com/azure/virtual-machines/sizes/general-purpose/ddsv5-series` - Network accessline 33
- GPU: `https://learn.microsoft.com/azure/virtual-machines/sizes/gpu-accelerated/nc-family` - Network accessline 35
For Spot, also: `https://learn.microsoft.com/azure/virtual-machine-scale-sets/use-spot`.
.github/plugins/azure-skills/skills/azure-compute/workflows/vm-recommender/vm-recommender.md
- Network accessline 56
https://learn.microsoft.com/en-us/azure/virtual-machines/sizes/<family-category>/<series-name> - Network accessline 59
For Spot eligibility, also fetch `https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/use-spot`. If any fetch fails, follow [web-fetch-policy.md](references/web-fetch-policy.md). Same SKUs apply to single VMs and VMSS. - Network accessline 101
- Compare reservation / savings plan pricing (`priceType eq 'Reservation'` in the API) - Suggest [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) for full estimates - Network accessline 102
- Suggest [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) for full estimates - Network accessline 103
- For VMSS: [autoscale best practices](https://learn.microsoft.com/azure/azure-monitor/autoscale/autoscale-best-practices), [VMSS networking](https://learn.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-networking
.github/plugins/azure-skills/skills/azure-deploy/SKILL.md
- Network accessline 45
> **APIM / AI Gateway**: Use this skill to deploy applications whose APIM/AI gateway infrastructure was already created during **azure-prepare**. For creating or changing APIM resources, see [APIM deployment guide](https://learn.microsoft.c - Network accessline 68
| 8 | **Verify Success** — Confirm deployment completed and endpoints are accessible | [Verification](references/recipes/azd/verify.md) | | 9 | **Live Role Verification** — Query Azure to confirm provisioned RBAC roles are correct and suffi - Network accessline 70
| 10 | **Report Results** — Present deployed endpoint URLs to the user as fully-qualified `https://` links | [Verification](references/recipes/azd/verify.md) | - Network accessline 72
> **⛔ URL FORMAT RULE** > > When presenting endpoint URLs to the user, you **MUST** always use fully-qualified URLs with the `https://` scheme (e.g. `https://myapp.azurewebsites.net`, not `myapp.azurewebsites.net`). Many Azure CLI commands - Network accessline 74
> When presenting endpoint URLs to the user, you **MUST** always use fully-qualified URLs with the `https://` scheme (e.g. `https://myapp.azurewebsites.net`, not `myapp.azurewebsites.net`). Many Azure CLI commands return bare hostnames with
.github/plugins/azure-skills/skills/azure-deploy/references/auth-best-practices.md
- Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme)
.github/plugins/azure-skills/skills/azure-deploy/references/global-rules.md
- Dangerous shell operationline 13
| **Delete** | `az group delete`, `azd down`, `rm -rf`, delete resource |
.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azcli/verify.md
- Network accessline 10
curl -s https://<endpoint>/health | jq . - Network accessline 39
# Container Apps FQDN=$(az containerapp show --name <app-name> --resource-group <rg-name> --query "properties.configuration.ingress.fqdn" -o tsv) echo "https://$FQDN" - Network accessline 41
echo "https://$FQDN" - Network accessline 43
# App Service HOSTNAME=$(az webapp show --name <app-name> --resource-group <rg-name> --query "defaultHostName" -o tsv) echo "https://$HOSTNAME" - Network accessline 45
echo "https://$HOSTNAME" - Network accessline 47
# Static Web Apps HOSTNAME=$(az staticwebapp show --name <app-name> --resource-group <rg-name> --query "defaultHostname" -o tsv) echo "https://$HOSTNAME" - Network accessline 49
echo "https://$HOSTNAME" - Network accessline 54
# Container Apps $Fqdn = az containerapp show --name <app-name> --resource-group <rg-name> --query "properties.configuration.ingress.fqdn" -o tsv Write-Output "https://$Fqdn" - Network accessline 56
Write-Output "https://$Fqdn" - Network accessline 58
# App Service $Hostname = az webapp show --name <app-name> --resource-group <rg-name> --query "defaultHostName" -o tsv Write-Output "https://$Hostname" - Network accessline 60
Write-Output "https://$Hostname" - Network accessline 62
# Static Web Apps $Hostname = az staticwebapp show --name <app-name> --resource-group <rg-name> --query "defaultHostname" -o tsv Write-Output "https://$Hostname" - Network accessline 64
Write-Output "https://$Hostname" - Network accessline 67
> ⚠<U+FE0F> **These commands return bare hostnames without a scheme.** Always prepend `https://` when presenting URLs to the user. For example, report `https://myapp.azurewebsites.net`, never `myapp.azurewebsites.net`. - Network accessline 69
Present a summary including all service URLs as fully-qualified `https://` links. Do NOT end your response without including them.
.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/ef-migrations.md
- Network accessline 146
- [SQL Managed Identity Access](sql-managed-identity.md) - [Post-Deployment Guide](post-deployment.md) - [EF Core Migrations](https://learn.microsoft.com/ef/core/managing-schemas/migrations/) - Network accessline 148
- [EF Core Migrations](https://learn.microsoft.com/ef/core/managing-schemas/migrations/)
.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/functions-deploy.md
- Network accessline 73
# Check status code only (GET, don't follow redirects) curl -s -o /dev/null -w "%{http_code}" "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 74
curl -s -o /dev/null -w "%{http_code}" "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 76
# Get status code and redirect URL curl -s -o /dev/null -w "Status: %{http_code}\nRedirect: %{redirect_url}" "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 77
curl -s -o /dev/null -w "Status: %{http_code}\nRedirect: %{redirect_url}" "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 79
# Verbose output showing response headers (GET) curl -sS -D - -o /dev/null "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 80
curl -sS -D - -o /dev/null "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 86
# DO NOT use this — returns 404 even when the function works curl -I "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 87
curl -I "https://<func-name>.azurewebsites.net/api/<route>"
.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/post-deployment.md
- Dangerous shell operationline 38
eval $(azd env get-values) - Network accessline 78
# Health check curl -f "$ENDPOINT/health" || echo "Health check failed" - Network accessline 79
curl -f "$ENDPOINT/health" || echo "Health check failed" - Network accessline 81
# Test database connectivity curl -f "$ENDPOINT/api/test-db" || echo "Database connection failed" - Network accessline 82
curl -f "$ENDPOINT/api/test-db" || echo "Database connection failed"
.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/scripts/apply-migrations.ps1
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/scripts/apply-migrations.sh
- Executable scriptline 1
#!/bin/bash
.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/scripts/grant-and-migrate.ps1
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/scripts/grant-and-migrate.sh
- Executable scriptline 1
#!/bin/bash
.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/sql-managed-identity.md
.github/plugins/azure-skills/skills/azure-deploy/references/recipes/azd/verify.md
- Network accessline 14
Resource Group: rg-myapp-dev Services: api - Endpoint: https://api-xxxx.azurecontainerapps.io - Network accessline 16
api - Endpoint: https://api-xxxx.azurecontainerapps.io - Network accessline 25
# Test endpoint curl -f "$ENDPOINT/health" || curl -f "$ENDPOINT" - Network accessline 26
curl -f "$ENDPOINT/health" || curl -f "$ENDPOINT" - Network accessline 66
| Service | Endpoint | |---------|----------| | apiservice | https://apiservice.xxx.azurecontainerapps.io | - Network accessline 68
| apiservice | https://apiservice.xxx.azurecontainerapps.io | - Network accessline 70
Aspire Dashboard: https://aspire-dashboard.xxx.azurecontainerapps.io - Network accessline 73
> ⚠<U+FE0F> **Always use fully-qualified URLs with the `https://` scheme.** If a command returns a bare hostname (e.g. `myapp.azurestaticapps.net`), prepend `https://` before presenting it to the user. - Dangerous shell operationline 85
eval $(azd env get-values)
.github/plugins/azure-skills/skills/azure-deploy/references/recipes/bicep/verify.md
- Network accessline 18
curl -s https://<endpoint>/health | jq . - Network accessline 31
Present a summary including all service URLs as fully-qualified `https://` links. If a deployment output returns a bare hostname (e.g. `myapp.azurewebsites.net`), always prepend `https://`. Do NOT end your response without including them.
.github/plugins/azure-skills/skills/azure-deploy/references/recipes/cicd/verify.md
- Network accessline 16
curl -s https://<endpoint>/health | jq . - Network accessline 23
Extract endpoints from the pipeline output or query them directly via `az` CLI. Present a summary including all service URLs as fully-qualified `https://` links. If any command returns a bare hostname (e.g. `myapp.azurewebsites.net`), alway
.github/plugins/azure-skills/skills/azure-deploy/references/recipes/terraform/README.md
- Access to secretsline 18
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-deploy/references/recipes/terraform/errors.md
- Access to secretsline 10
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-deploy/references/recipes/terraform/verify.md
- Network accessline 11
curl -s https://$(terraform output -raw api_url)/health | jq . - Network accessline 30
Present a summary including all service URLs as fully-qualified `https://` links. If a Terraform output returns a bare hostname (e.g. `myapp.azurewebsites.net`), always prepend `https://`. Do NOT end your response without including them.
.github/plugins/azure-skills/skills/azure-deploy/references/region-availability.md
- Network accessline 3
> **AUTHORITATIVE SOURCE** — Consult this file BEFORE recommending any region. > > Official reference: https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table - Network accessline 5
> Official reference: https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table - Network accessline 65
> Check https://learn.microsoft.com/azure/ai-services/openai/concepts/models for current model availability.
.github/plugins/azure-skills/skills/azure-deploy/references/sdk/azd-deployment.md
.github/plugins/azure-skills/skills/azure-deploy/references/troubleshooting.md
- Network accessline 114
{ "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", - Network accessline 115
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", - Network accessline 134
**Reference:** [Use environment variables in infrastructure files](https://learn.microsoft.com/azure/developer/azure-developer-cli/manage-environment-variables?tabs=bash#use-environment-variables-in-infrastructure-files)
.github/plugins/azure-skills/skills/azure-diagnostics/references/app-service/README.md
- Network accessline 15
|---------|--------------|-----------| | High CPU / memory | Runaway process, inefficient code | Use Process Explorer via Kudu, scale up | | Deployment failure | Build error, locked files, quota | Check Kudu logs at `https://APP.scm.azurewe - Network accessline 16
| High CPU / memory | Runaway process, inefficient code | Use Process Explorer via Kudu, scale up | | Deployment failure | Build error, locked files, quota | Check Kudu logs at `https://APP.scm.azurewebsites.net/api/deployments` to look for - Network accessline 17
| Deployment failure | Build error, locked files, quota | Check Kudu logs at `https://APP.scm.azurewebsites.net/api/deployments` to look for details on build errors, locked files or lack of storage quota | - Network accessline 39
**Fix:** Scale up (`az appservice plan update -n <app-service-plan-name> -g <resource-group> --sku P1V3`) or profile the app via Kudu Process Explorer at `https://APP.scm.azurewebsites.net/ProcessExplorer/` to identify hot paths. - Network accessline 105
# Test the endpoint directly curl -s -o /dev/null -w "%{http_code}" https://APP.azurewebsites.net/health - Network accessline 106
curl -s -o /dev/null -w "%{http_code}" https://APP.azurewebsites.net/health
.github/plugins/azure-skills/skills/azure-diagnostics/references/container-apps/README.md
.github/plugins/azure-skills/skills/azure-diagnostics/references/functions/durable.md
- Network accessline 99
> **Tip:** For the Azure Storage provider, a task hub uses multiple tables, queues, and > blobs. See the [storage > providers docs](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-storage-providers#azure-storage) - Network accessline 100
> blobs. See the [storage > providers docs](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-storage-providers#azure-storage) > for the full schema before assuming an artifact is missing. - Network accessline 101
> providers docs](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-storage-providers#azure-storage)
.github/plugins/azure-skills/skills/azure-diagnostics/references/kql-queries.md
.github/plugins/azure-skills/skills/azure-diagnostics/scripts/aks-baseline.ps1
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/azure-diagnostics/scripts/aks-baseline.sh
- Executable scriptline 1
#!/usr/bin/env bash
.github/plugins/azure-skills/skills/azure-diagnostics/scripts/appservice-diagnostics.ps1
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/azure-diagnostics/scripts/appservice-diagnostics.sh
- Executable scriptline 1
#!/usr/bin/env bash
.github/plugins/azure-skills/skills/azure-diagnostics/scripts/containerapp-diagnostics.ps1
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/azure-diagnostics/scripts/containerapp-diagnostics.sh
- Executable scriptline 1
#!/usr/bin/env bash
.github/plugins/azure-skills/skills/azure-diagnostics/scripts/pod-evidence.ps1
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/azure-diagnostics/scripts/pod-evidence.sh
- Executable scriptline 1
#!/usr/bin/env bash
.github/plugins/azure-skills/skills/azure-diagnostics/scripts/run-ig.ps1
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/azure-diagnostics/scripts/run-ig.sh
- Executable scriptline 1
#!/usr/bin/env bash
.github/plugins/azure-skills/skills/azure-diagnostics/scripts/test-messaging-connectivity.ps1
- Executable scriptline 1
Executable file - Network accessline 89
function Get-HttpsResult { try { $resp = Invoke-WebRequest -Uri "https://$fqdn/" -Method Get -TimeoutSec 15 ` - Network accessline 90
try { $resp = Invoke-WebRequest -Uri "https://$fqdn/" -Method Get -TimeoutSec 15 ` -UseBasicParsing -ErrorAction Stop - Network accessline 91
$resp = Invoke-WebRequest -Uri "https://$fqdn/" -Method Get -TimeoutSec 15 `
.github/plugins/azure-skills/skills/azure-diagnostics/scripts/test-messaging-connectivity.sh
- Executable scriptline 1
#!/usr/bin/env bash - Network accessline 99
probe_tcp() { local host="$1" port="$2" if command -v nc >/dev/null 2>&1; then - Network accessline 100
local host="$1" port="$2" if command -v nc >/dev/null 2>&1; then if nc -z -w 5 "$host" "$port" >/dev/null 2>&1; then - Network accessline 101
if command -v nc >/dev/null 2>&1; then - Network accessline 102
if nc -z -w 5 "$host" "$port" >/dev/null 2>&1; then - Dangerous shell operationline 108
( exec 3<>"/dev/tcp/$host/$port" ) >/dev/null 2>&1 & - Network accessline 108
( exec 3<>"/dev/tcp/$host/$port" ) >/dev/null 2>&1 & - Network accessline 132
# ── HTTPS reachability ──────────────────────────────────────────────────────── # On success the namespace returns an Atom feed or HTTP 401 — either proves the # endpoint is reachable. A connection failure (curl exit != 0) means blocked. - Network accessline 134
# endpoint is reachable. A connection failure (curl exit != 0) means blocked. - Network accessline 135
https_result() { if ! command -v curl >/dev/null 2>&1; then - Network accessline 136
if ! command -v curl >/dev/null 2>&1; then - Network accessline 138
if probe_tcp "$FQDN" 443; then echo "reachable (TCP 443 open; curl unavailable for HTTP check)" - Network accessline 139
echo "reachable (TCP 443 open; curl unavailable for HTTP check)" - Network accessline 144
fi local code code=$(curl -s -o /dev/null -m 15 -w '%{http_code}' "https://$FQDN/" 2>/dev/null) - Network accessline 145
local code code=$(curl -s -o /dev/null -m 15 -w '%{http_code}' "https://$FQDN/" 2>/dev/null) local rc=$? - Network accessline 146
code=$(curl -s -o /dev/null -m 15 -w '%{http_code}' "https://$FQDN/" 2>/dev/null) - Network accessline 149
echo "reachable (HTTP $code)" else echo "BLOCKED (curl exit $rc)" - Network accessline 150
else echo "BLOCKED (curl exit $rc)" fi - Network accessline 151
echo "BLOCKED (curl exit $rc)"
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/aks/networking.md
- Network accessline 3
For CNI-specific issues, check CNI pod health and review [AKS networking concepts](https://learn.microsoft.com/azure/aks/concepts-network). - Network accessline 15
# This creates a temporary pod. Prefer read-only checks first. # Only use it after the user explicitly approves a mutating test. kubectl run netdebug --image=curlimages/curl -it --rm -n <ns> -- \ - Network accessline 16
# Only use it after the user explicitly approves a mutating test. kubectl run netdebug --image=curlimages/curl -it --rm -n <ns> -- \ curl -sv http://<service>.<ns>.svc.cluster.local:<port>/healthz - Network accessline 17
kubectl run netdebug --image=curlimages/curl -it --rm -n <ns> -- \ - Network accessline 18
curl -sv http://<service>.<ns>.svc.cluster.local:<port>/healthz
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/aks/node-issues.md
- Network accessline 97
See [AKS resource reservations](https://learn.microsoft.com/azure/aks/concepts-clusters-workloads#resource-reservations) for allocatable math.
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/aks/references/aks-mcp.md
- Network accessline 29
Health. Use the separate Azure MCP area that advertises the needed operation, or use the portable command flows. Never route Kubernetes commands through the AKS area. See [Azure Kubernetes Service tools for the Azure MCP Server](https://lea - Network accessline 31
AKS area. See [Azure Kubernetes Service tools for the Azure MCP Server](https://learn.microsoft.com/azure/developer/azure-mcp-server/tools/azure-kubernetes).
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/aks/spot-and-zone-issues.md
- Network accessline 64
Use `Premium_ZRS` or `StandardSSD_ZRS` in custom StorageClasses to reduce zonal PVC conflicts. See [AKS storage best practices](https://learn.microsoft.com/azure/aks/operator-best-practices-storage).
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/compute/references/cannot-connect-to-vm.md
- Network accessline 48
[Windows RDP]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-connection - Network accessline 49
[Linux SSH]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/troubleshoot-ssh-connection - Network accessline 50
[Windows VM hub]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/welcome-virtual-machines-windows - Network accessline 51
[Linux VM hub]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/welcome-virtual-machines-linux
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/compute/references/credential-auth-errors.md
- Dangerous shell operationline 16
| sudo prompt fails | Linux | Fix sudoers via Run Command or Serial Console | [SSH overview] | - Network accessline 33
[Reset RDP]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/reset-rdp - Network accessline 34
[RDP overview]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-connection - Network accessline 35
[RDP errors]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-specific-rdp-errors - Network accessline 36
[CredSSP]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/credssp-encryption-oracle-remediation - Network accessline 37
[SSH detail]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/detailed-troubleshoot-ssh-connection - Network accessline 38
[SSH overview]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/troubleshoot-ssh-connection
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/compute/references/firewall-blocking.md
- Network accessline 36
[Guest firewall]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/guest-os-firewall-blocking-inbound-traffic - Network accessline 37
[Firewall rule]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/enable-disable-firewall-rule-guest-os - Network accessline 38
[Offline firewall]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/disable-guest-os-firewall-windows - Network accessline 39
[SSH overview]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/troubleshoot-ssh-connection - Network accessline 40
[Linux repair]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/repair-linux-vm-using-azure-virtual-machine-repair-commands
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/compute/references/network-connectivity.md
- Network accessline 36
[RDP NSG]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-nsg-problem - Network accessline 37
[Traffic filter]: https://learn.microsoft.com/en-us/azure/network-watcher/diagnose-vm-network-traffic-filtering-problem - Network accessline 38
[Routing]: https://learn.microsoft.com/en-us/azure/network-watcher/diagnose-vm-network-routing-problem - Network accessline 39
[Public IP]: https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/public-ip-addresses - Network accessline 40
[RDP NIC]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-nic-disabled - Network accessline 41
[Reset NIC]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/reset-network-interface - Network accessline 42
[DHCP]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-dhcp-disabled - Network accessline 43
[SSH overview]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/troubleshoot-ssh-connection
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/compute/references/rdp-connectivity.md
- Network accessline 34
[RDP NSG]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-nsg-problem - Network accessline 35
[Guest firewall]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/guest-os-firewall-blocking-inbound-traffic - Network accessline 36
[RDP errors]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-specific-rdp-errors - Network accessline 37
[Internal]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-internal-error - Network accessline 38
[General]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-general-error - Network accessline 39
[Detailed]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/detailed-troubleshoot-rdp - Network accessline 40
[RDP overview]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-connection - Network accessline 41
[Event IDs]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/event-id-troubleshoot-vm-rdp-connecton - Network accessline 42
[RDP NIC]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-nic-disabled
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/compute/references/rdp-service-config.md
- Network accessline 7
| Symptom | Solution | Documentation - Network accessline 8
| -------------------------------------- | ---------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------- - Network accessline 9
| TermService not running | Start the service and set to Automatic | [Reset RDP service](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/reset-rdp) - Network accessline 10
| RDP port changed from 3389 | Reset port or update NSG to allow the custom port | [Detailed RDP troubleshooting](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/detailed-troubl - Network accessline 11
| RDP disabled (fDenyTSConnections = 1) | Reset RDP config via CLI or Portal | [Reset RDP service](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/reset-rdp) - Network accessline 12
| TLS/SSL certificate expired or corrupt | Delete cert and restart TermService to regenerate | [RDP internal error](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-internal - Network accessline 13
| NLA/Security Layer mismatch | Temporarily disable NLA for recovery | [RDP general error](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-general-e - Network accessline 14
| GPO overriding local RDP settings | Check `HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services` | [Detailed RDP troubleshooting](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/detailed-troubl - Network accessline 15
| RDS licensing expired | Remove RDSH role or configure license server | [Specific RDP errors](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-specific-rd
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/compute/references/ssh-connectivity.md
- Network accessline 40
[SSH overview]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/troubleshoot-ssh-connection - Network accessline 41
[SSH detail]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/detailed-troubleshoot-ssh-connection - Network accessline 42
[Debian]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/cannot-connect-debian-linux - Network accessline 43
[Ubuntu SSH]: https://documentation.ubuntu.com/release-notes/24.04/#openssh - Network accessline 44
[SELinux]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/linux-selinux-troubleshooting - Network accessline 45
[UEFI]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/azure-linux-vm-uefi-boot-failures
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/compute/references/vm-agent-not-responding.md
- Network accessline 9
| Symptom | OS | Solution | Documentation - Network accessline 10
| ---------------------------------------------------------------- | ------- | -------------------------------------------------------- | ------------------------------------------------------------------------------------------------------ - Network accessline 11
| Run Command times out | Windows | VM agent may be down — use Serial Console instead | [Serial Console — Windows](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windo - Network accessline 12
| Run Command times out | Linux | VM agent may be down — use Serial Console instead | [Serial Console — Linux](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/s - Network accessline 13
| Password reset fails via Portal/CLI | Windows | VMAccess extension can't communicate — use offline reset | [Reset password without agent](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/w - Network accessline 14
| Password/key reset fails via Portal/CLI | Linux | VMAccess extension can't communicate — use Serial Console | [Serial Console — Linux](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/ - Network accessline 15
| VM not booting (Boot Diagnostics shows BSOD/stuck) | Windows | OS-level issue — use repair VM for offline fix | [Repair Windows VM](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/repa - Network accessline 16
| VM not booting (Boot Diagnostics shows kernel panic/stuck) | Linux | Use repair VM for offline Linux disk fix | [Repair Linux VM](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/repair-l - Network accessline 17
| VMAccess extension error on domain controller | Windows | VMAccess doesn't support DCs — use Serial Console | [Serial Console — Windows](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windo
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/auth-best-practices.md
- Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme)
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/azure-eventhubs-dotnet.md
- Network accessline 3
Package: `Azure.Messaging.EventHubs` | [README](https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/eventhub/Azure.Messaging.EventHubs/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/eventhub/A - Network accessline 27
Configure via `EventHubsRetryOptions` when creating the client. See [Configuring retry thresholds sample](https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/eventhub/Azure.Messaging.EventHubs/samples). - Network accessline 31
- **Socket exhaustion**: Treat clients as singletons. Share `EventHubConnection` across clients if needed. Always call `CloseAsync` or `DisposeAsync`. - **HTTP 412/409 from storage**: Normal during checkpoint store operations — not an error - Network accessline 32
- **HTTP 412/409 from storage**: Normal during checkpoint store operations — not an error. - **Partitions closing frequently**: Expected when scaling. If persists >5 min without scaling, investigate. See [Troubleshooting Guide](https://gith - Network accessline 33
- **Partitions closing frequently**: Expected when scaling. If persists >5 min without scaling, investigate. See [Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/eventhub/Azure.Messaging.EventHubs/TROUBLESHOO
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/azure-eventhubs-java.md
- Network accessline 3
Package: `azure-messaging-eventhubs` | [README](https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/eventhubs/azure-messaging-eventhubs/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/eventhu - Network accessline 5
> ⚠<U+FE0F> **Note:** The detailed Java troubleshooting guide has moved to [Microsoft Learn](https://learn.microsoft.com/azure/developer/java/sdk/troubleshooting-messaging-event-hubs-overview). - Network accessline 29
See [Java SDK logging docs](https://learn.microsoft.com/azure/developer/java/sdk/troubleshooting-messaging-event-hubs-overview) for details.
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/azure-eventhubs-js.md
- Network accessline 3
Package: `@azure/event-hubs` | [README](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/eventhub/event-hubs/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/eventhub/event-hubs/TROUBLESHOOTING
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/azure-eventhubs-py.md
- Network accessline 3
Package: `azure-eventhub` | [README](https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/eventhub/azure-eventhub) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/eventhub/azure-eventhub/TRO
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/azure-servicebus-dotnet.md
- Network accessline 3
Package: `Azure.Messaging.ServiceBus` | [README](https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/servicebus/Azure.Messaging.ServiceBus/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/servic - Network accessline 12
| `ServiceBusException` (QuotaExceeded) | Too many concurrent receives | Reduce receivers or use batch receives | | `ServiceBusException` (MessageSizeExceeded) | Message or batch too large | Reduce payload. Premium tier supports individual - Network accessline 13
| `ServiceBusException` (MessageSizeExceeded) | Message or batch too large | Reduce payload. Premium tier supports individual messages up to 100MB. Batch limit is artificially computed on the client from the max message size sent by the ser - Network accessline 14
| `ServiceBusException` (ServiceBusy) | Request throttled | Auto-retried with 10s backoff. See [throttling docs](https://learn.microsoft.com/azure/service-bus-messaging/service-bus-throttling) |
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/azure-servicebus-java.md
- Network accessline 3
Package: `azure-messaging-servicebus` | [README](https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/servicebus/azure-messaging-servicebus/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/serv - Network accessline 30
Even with prefetch disabled in the builder, `receiveMessages` API can re-enable prefetch implicitly. See [SyncReceiveAndPrefetch](https://github.com/Azure/azure-sdk-for-java/tree/main/sdk/servicebus/azure-messaging-servicebus/docs/SyncRecei - Network accessline 45
See [Java SDK logging docs](https://learn.microsoft.com/azure/developer/java/sdk/troubleshooting-messaging-service-bus-overview) for details.
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/azure-servicebus-js.md
- Network accessline 3
Package: `@azure/service-bus` | [README](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/servicebus/service-bus/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/servicebus/service-bus/TROUBLES
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/azure-servicebus-py.md
- Network accessline 3
Package: `azure-servicebus` | [README](https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/servicebus/azure-servicebus/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/servicebus/azure-ser
.github/plugins/azure-skills/skills/azure-diagnostics/troubleshooting/messaging/service-troubleshooting.md
- Network accessline 9
1. **Verify connection string** — Get from Azure portal. For **Event Hubs (Kafka endpoint)** clients, also check `producer.config` / `consumer.config`. 2. **Check service outage** — [Azure status page](https://azure.status.microsoft/status) - Network accessline 10
2. **Check service outage** — [Azure status page](https://azure.status.microsoft/status) - Network accessline 80
- [Event Hubs troubleshooting guide](https://learn.microsoft.com/azure/event-hubs/troubleshooting-guide) - Network accessline 81
- [Service Bus troubleshooting guide](https://learn.microsoft.com/azure/service-bus-messaging/service-bus-troubleshooting-guide) - Network accessline 82
- [Event Hubs quotas and limits](https://learn.microsoft.com/azure/event-hubs/event-hubs-quotas) - Network accessline 83
- [Service Bus quotas and limits](https://learn.microsoft.com/azure/service-bus-messaging/service-bus-quotas) - Network accessline 84
- [Event Hubs AMQP troubleshooting](https://learn.microsoft.com/azure/event-hubs/event-hubs-amqp-troubleshoot) - Network accessline 85
- [Service Bus AMQP troubleshooting](https://learn.microsoft.com/azure/service-bus-messaging/service-bus-amqp-troubleshoot) - Network accessline 86
- [Event Hubs IP addresses and service tags](https://learn.microsoft.com/azure/event-hubs/troubleshooting-guide#what-ip-addresses-do-i-need-to-allow) - Network accessline 87
- [Service Bus IP addresses](https://learn.microsoft.com/azure/service-bus-messaging/service-bus-faq#what-ip-addresses-do-i-need-to-add-to-allowlist-)
.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/constraints/networking-connectivity.md
- Network accessline 8
| **Developer SKU** | Does NOT require `AzureBastionSubnet` or public IP. Deploys as shared infrastructure. Only connects to VMs in the same VNet. | | **Public IP** | Requires Standard SKU public IP with Static allocation. | | **NSG** | NSG - Network accessline 9
| **Public IP** | Requires Standard SKU public IP with Static allocation. | | **NSG** | NSG on `AzureBastionSubnet` requires mandatory inbound (HTTPS 443 from Internet, GatewayManager 443) and outbound rules (see [Bastion NSG docs](https:// - Network accessline 10
| **NSG** | NSG on `AzureBastionSubnet` requires mandatory inbound (HTTPS 443 from Internet, GatewayManager 443) and outbound rules (see [Bastion NSG docs](https://learn.microsoft.com/azure/bastion/bastion-nsg)). |
.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/constraints/networking-core.md
- Network accessline 32
|-------------|------------| | **GatewaySubnet** | NSGs are not supported on `GatewaySubnet`. Associating an NSG may cause VPN and ExpressRoute gateways to stop functioning. | | **AzureBastionSubnet** | NSG on Bastion subnet requires specif - Network accessline 33
| **GatewaySubnet** | NSGs are not supported on `GatewaySubnet`. Associating an NSG may cause VPN and ExpressRoute gateways to stop functioning. | | **AzureBastionSubnet** | NSG on Bastion subnet requires specific inbound/outbound rules (se - Network accessline 34
| **AzureBastionSubnet** | NSG on Bastion subnet requires specific inbound/outbound rules (see [Azure Bastion NSG](https://learn.microsoft.com/azure/bastion/bastion-nsg)). |
.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/ai-ml.md
- Network accessline 11
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Cognitive Services | [2025-06-01](https://learn.microsoft.com/azure/templates/micro - Network accessline 12
|----------|----------------|------------------|--------------|------------| | Cognitive Services | [2025-06-01](https://learn.microsoft.com/azure/templates/microsoft.cognitiveservices/accounts?pivots=deployment-language-bicep) | [Custom su - Network accessline 13
| Cognitive Services | [2025-06-01](https://learn.microsoft.com/azure/templates/microsoft.cognitiveservices/accounts?pivots=deployment-language-bicep) | [Custom subdomain names](https://learn.microsoft.com/azure/ai-services/cognitive-servic - Network accessline 14
| ML Workspace | [2025-06-01](https://learn.microsoft.com/azure/templates/microsoft.machinelearningservices/workspaces?pivots=deployment-language-bicep) | [ML Services](https://learn.microsoft.com/azure/templates/microsoft.machinelearningse - Network accessline 15
| AI Search | [2025-05-01](https://learn.microsoft.com/azure/templates/microsoft.search/searchservices?pivots=deployment-language-bicep) | [Service limits](https://learn.microsoft.com/azure/search/search-limits-quotas-capacity) | [Naming ru
.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/compute-apps.md
- Network accessline 15
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | App Service | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.we - Network accessline 16
|----------|----------------|------------------|--------------|------------| | App Service | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.web/sites?pivots=deployment-language-bicep) | [App Service overview](https://lea - Network accessline 17
| App Service | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.web/sites?pivots=deployment-language-bicep) | [App Service overview](https://learn.microsoft.com/azure/app-service/overview) | [Naming rules](https://learn.m - Network accessline 18
| App Service Plan | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.web/serverfarms?pivots=deployment-language-bicep) | [Plan overview](https://learn.microsoft.com/azure/app-service/overview-hosting-plans) | [Naming rule - Network accessline 19
| Container App | [2025-01-01](https://learn.microsoft.com/azure/templates/microsoft.app/containerapps?pivots=deployment-language-bicep) | [Container Apps overview](https://learn.microsoft.com/azure/container-apps/overview) | [Naming rules] - Network accessline 20
| Container Apps Environment | [2025-01-01](https://learn.microsoft.com/azure/templates/microsoft.app/managedenvironments?pivots=deployment-language-bicep) | [Environments overview](https://learn.microsoft.com/azure/container-apps/environme - Network accessline 21
| Container Registry | [2025-04-01](https://learn.microsoft.com/azure/templates/microsoft.containerregistry/registries?pivots=deployment-language-bicep) | [ACR overview](https://learn.microsoft.com/azure/container-registry/container-registr - Network accessline 22
| Function App | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.web/sites?pivots=deployment-language-bicep) | [Functions overview](https://learn.microsoft.com/azure/azure-functions/functions-overview) | [Naming rules](ht - Network accessline 23
| Static Web App | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.web/staticsites?pivots=deployment-language-bicep) | [Static Web Apps overview](https://learn.microsoft.com/azure/static-web-apps/overview) | [Naming rules
.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/compute-infra.md
- Network accessline 13
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | AKS Cluster | [2025-05-01](https://learn.microsoft.com/azure/templates/microsoft.co - Network accessline 14
|----------|----------------|------------------|--------------|------------| | AKS Cluster | [2025-05-01](https://learn.microsoft.com/azure/templates/microsoft.containerservice/managedclusters?pivots=deployment-language-bicep) | [AKS overvi - Network accessline 15
| AKS Cluster | [2025-05-01](https://learn.microsoft.com/azure/templates/microsoft.containerservice/managedclusters?pivots=deployment-language-bicep) | [AKS overview](https://learn.microsoft.com/azure/aks/intro-kubernetes) | [Naming rules]( - Network accessline 16
| Availability Set | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.compute/availabilitysets?pivots=deployment-language-bicep) | [Overview](https://learn.microsoft.com/azure/virtual-machines/availability-set-overview) | - Network accessline 17
| Managed Disk | [2025-01-02](https://learn.microsoft.com/azure/templates/microsoft.compute/disks?pivots=deployment-language-bicep) | [Managed disks overview](https://learn.microsoft.com/azure/virtual-machines/managed-disks-overview) | [Nam - Network accessline 18
| Virtual Machine | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.compute/virtualmachines?pivots=deployment-language-bicep) | [VMs overview](https://learn.microsoft.com/azure/virtual-machines/overview) | [Naming rules]( - Network accessline 19
| VM Scale Set | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.compute/virtualmachinescalesets?pivots=deployment-language-bicep) | [VMSS overview](https://learn.microsoft.com/azure/virtual-machine-scale-sets/overview) |
.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/data-analytics.md
- Network accessline 13
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Cosmos DB | [2025-04-15](https://learn.microsoft.com/azure/templates/microsoft.docu - Network accessline 14
|----------|----------------|------------------|--------------|------------| | Cosmos DB | [2025-04-15](https://learn.microsoft.com/azure/templates/microsoft.documentdb/databaseaccounts?pivots=deployment-language-bicep) | [Cosmos DB overvie - Network accessline 15
| Cosmos DB | [2025-04-15](https://learn.microsoft.com/azure/templates/microsoft.documentdb/databaseaccounts?pivots=deployment-language-bicep) | [Cosmos DB overview](https://learn.microsoft.com/azure/cosmos-db/introduction) | [Naming rules] - Network accessline 16
| Data Factory | [2018-06-01](https://learn.microsoft.com/azure/templates/microsoft.datafactory/factories?pivots=deployment-language-bicep) | [ADF overview](https://learn.microsoft.com/azure/data-factory/introduction) | [Naming rules](https - Network accessline 17
| Redis Cache | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.cache/redis?pivots=deployment-language-bicep) | [Redis overview](https://learn.microsoft.com/azure/azure-cache-for-redis/cache-overview) | [Naming rules](htt - Network accessline 18
| Storage Account | [2025-01-01](https://learn.microsoft.com/azure/templates/microsoft.storage/storageaccounts?pivots=deployment-language-bicep) | [Storage overview](https://learn.microsoft.com/azure/storage/common/storage-account-overview) - Network accessline 19
| Synapse Workspace | [2021-06-01](https://learn.microsoft.com/azure/templates/microsoft.synapse/workspaces?pivots=deployment-language-bicep) | [Synapse overview](https://learn.microsoft.com/azure/synapse-analytics/overview-what-is) | [Nami
.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/data-relational.md
- Network accessline 12
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | SQL Server | [2023-08-01](https://learn.microsoft.com/azure/templates/microsoft.sql - Network accessline 13
|----------|----------------|------------------|--------------|------------| | SQL Server | [2023-08-01](https://learn.microsoft.com/azure/templates/microsoft.sql/servers?pivots=deployment-language-bicep) | [SQL Server overview](https://lea - Network accessline 14
| SQL Server | [2023-08-01](https://learn.microsoft.com/azure/templates/microsoft.sql/servers?pivots=deployment-language-bicep) | [SQL Server overview](https://learn.microsoft.com/azure/azure-sql/database/sql-database-paas-overview) | [Nami - Network accessline 15
| SQL Database | [2023-08-01](https://learn.microsoft.com/azure/templates/microsoft.sql/servers/databases?pivots=deployment-language-bicep) | [SQL Database overview](https://learn.microsoft.com/azure/azure-sql/database/sql-database-paas-ove - Network accessline 16
| MySQL Flexible Server | [2023-12-30](https://learn.microsoft.com/azure/templates/microsoft.dbformysql/flexibleservers?pivots=deployment-language-bicep) | [MySQL overview](https://learn.microsoft.com/azure/mysql/flexible-server/overview) | - Network accessline 17
| PostgreSQL Flexible Server | [2024-08-01](https://learn.microsoft.com/azure/templates/microsoft.dbforpostgresql/flexibleservers?pivots=deployment-language-bicep) | [PostgreSQL overview](https://learn.microsoft.com/azure/postgresql/flexibl
.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/messaging.md
- Network accessline 11
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Event Grid Topic | [2025-02-15](https://learn.microsoft.com/azure/templates/microso - Network accessline 12
|----------|----------------|------------------|--------------|------------| | Event Grid Topic | [2025-02-15](https://learn.microsoft.com/azure/templates/microsoft.eventgrid/topics?pivots=deployment-language-bicep) | [Event Grid overview]( - Network accessline 13
| Event Grid Topic | [2025-02-15](https://learn.microsoft.com/azure/templates/microsoft.eventgrid/topics?pivots=deployment-language-bicep) | [Event Grid overview](https://learn.microsoft.com/azure/event-grid/overview) | [Naming rules](https - Network accessline 14
| Event Hub | [2024-01-01](https://learn.microsoft.com/azure/templates/microsoft.eventhub/namespaces?pivots=deployment-language-bicep) | [Event Hubs overview](https://learn.microsoft.com/azure/event-hubs/event-hubs-about) | [Naming rules](h - Network accessline 15
| Service Bus | [2024-01-01](https://learn.microsoft.com/azure/templates/microsoft.servicebus/namespaces?pivots=deployment-language-bicep) | [Service Bus overview](https://learn.microsoft.com/azure/service-bus-messaging/service-bus-messagin
.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/monitoring.md
- Network accessline 10
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Application Insights | [2020-02-02](https://learn.microsoft.com/azure/templates/mic - Network accessline 11
|----------|----------------|------------------|--------------|------------| | Application Insights | [2020-02-02](https://learn.microsoft.com/azure/templates/microsoft.insights/components?pivots=deployment-language-bicep) | [App Insights o - Network accessline 12
| Application Insights | [2020-02-02](https://learn.microsoft.com/azure/templates/microsoft.insights/components?pivots=deployment-language-bicep) | [App Insights overview](https://learn.microsoft.com/azure/azure-monitor/app/app-insights-ove - Network accessline 13
| Log Analytics | [2025-02-01](https://learn.microsoft.com/azure/templates/microsoft.operationalinsights/workspaces?pivots=deployment-language-bicep) | [Log Analytics overview](https://learn.microsoft.com/azure/azure-monitor/logs/log-analyt
.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/networking-connectivity.md
- Network accessline 14
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Azure Bastion | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft. - Network accessline 15
|----------|----------------|------------------|--------------|------------| | Azure Bastion | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/bastionhosts?pivots=deployment-language-bicep) | [Bastion overview](ht - Network accessline 16
| Azure Bastion | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/bastionhosts?pivots=deployment-language-bicep) | [Bastion overview](https://learn.microsoft.com/azure/bastion/bastion-overview) | [Naming rules](ht - Network accessline 17
| Azure Firewall | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/azurefirewalls?pivots=deployment-language-bicep) | [Firewall overview](https://learn.microsoft.com/azure/firewall/overview) | [Naming rules](https - Network accessline 18
| DNS Zone | [2018-05-01](https://learn.microsoft.com/azure/templates/microsoft.network/dnszones?pivots=deployment-language-bicep) | [Azure DNS overview](https://learn.microsoft.com/azure/dns/dns-overview) | [Naming rules](https://learn.mic - Network accessline 19
| VPN Gateway | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/virtualnetworkgateways?pivots=deployment-language-bicep) | [VPN Gateway overview](https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-about-vpn - Network accessline 20
| Private DNS Zone | [2024-06-01](https://learn.microsoft.com/azure/templates/microsoft.network/privatednszones?pivots=deployment-language-bicep) | [Private DNS overview](https://learn.microsoft.com/azure/dns/private-dns-overview) | [Naming - Network accessline 21
| Private Endpoint | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/privateendpoints?pivots=deployment-language-bicep) | [PE overview](https://learn.microsoft.com/azure/private-link/private-endpoint-overview) | [
.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/networking-core.md
- Network accessline 15
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Virtual Network | [2024-07-01](https://learn.microsoft.com/azure/templates/microsof - Network accessline 16
|----------|----------------|------------------|--------------|------------| | Virtual Network | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/virtualnetworks?pivots=deployment-language-bicep) | [VNet overview]( - Network accessline 17
| Virtual Network | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/virtualnetworks?pivots=deployment-language-bicep) | [VNet overview](https://learn.microsoft.com/azure/virtual-network/virtual-networks-overview) - Network accessline 18
| Subnet | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/virtualnetworks/subnets?pivots=deployment-language-bicep) | [Subnets](https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet) | [ - Network accessline 19
| NSG | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/networksecuritygroups?pivots=deployment-language-bicep) | [NSG overview](https://learn.microsoft.com/azure/virtual-network/network-security-groups-overview) - Network accessline 20
| Route Table | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/routetables?pivots=deployment-language-bicep) | [Traffic routing](https://learn.microsoft.com/azure/virtual-network/virtual-networks-udr-overview) | - Network accessline 21
| Network Interface | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/networkinterfaces?pivots=deployment-language-bicep) | [NIC overview](https://learn.microsoft.com/azure/virtual-network/virtual-network-network- - Network accessline 22
| Public IP | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/publicipaddresses?pivots=deployment-language-bicep) | [Public IP overview](https://learn.microsoft.com/azure/virtual-network/ip-services/public-ip-addr - Network accessline 23
| NAT Gateway | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/natgateways?pivots=deployment-language-bicep) | [NAT Gateway overview](https://learn.microsoft.com/azure/nat-gateway/nat-overview) | [Naming rules](h
.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/networking-traffic.md
- Network accessline 12
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | API Management | [2024-05-01](https://learn.microsoft.com/azure/templates/microsoft - Network accessline 13
|----------|----------------|------------------|--------------|------------| | API Management | [2024-05-01](https://learn.microsoft.com/azure/templates/microsoft.apimanagement/service?pivots=deployment-language-bicep) | [APIM overview](htt - Network accessline 14
| API Management | [2024-05-01](https://learn.microsoft.com/azure/templates/microsoft.apimanagement/service?pivots=deployment-language-bicep) | [APIM overview](https://learn.microsoft.com/azure/api-management/api-management-key-concepts) | - Network accessline 15
| Application Gateway | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/applicationgateways?pivots=deployment-language-bicep) | [App Gateway overview](https://learn.microsoft.com/azure/application-gateway/overview - Network accessline 16
| Front Door | [2025-06-01](https://learn.microsoft.com/azure/templates/microsoft.cdn/profiles?pivots=deployment-language-bicep) | [Front Door overview](https://learn.microsoft.com/azure/frontdoor/front-door-overview) | [Naming rules](https - Network accessline 17
| Load Balancer | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/loadbalancers?pivots=deployment-language-bicep) | [LB overview](https://learn.microsoft.com/azure/load-balancer/load-balancer-overview) | [Naming r
.github/plugins/azure-skills/skills/azure-enterprise-infra-planner/references/resources/security.md
- Network accessline 10
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Key Vault | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.keyv - Network accessline 11
|----------|----------------|------------------|--------------|------------| | Key Vault | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.keyvault/vaults?pivots=deployment-language-bicep) | [Key Vault overview](https://l - Network accessline 12
| Key Vault | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.keyvault/vaults?pivots=deployment-language-bicep) | [Key Vault overview](https://learn.microsoft.com/azure/key-vault/general/overview) | [Naming rules](https:/ - Network accessline 13
| Managed Identity | [2024-11-30](https://learn.microsoft.com/azure/templates/microsoft.managedidentity/userassignedidentities?pivots=deployment-language-bicep) | [Managed identities](https://learn.microsoft.com/entra/identity/managed-ident
.github/plugins/azure-skills/skills/azure-kubernetes/SKILL.md
- Network accessline 72
- **Azure CNI Overlay** (recommended): pod IPs from private overlay range, not VNet-routable, scales to large environments and good for most workloads - **Azure CNI (VNet-routable)**: pod IPs directly from VNet (pod subnet or node subnet), - Network accessline 74
- Docs: https://learn.microsoft.com/azure/aks/azure-cni-overlay
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/aspnet-core.md
- Network accessline 180
- **Default port:** 8080 (since .NET 8; previously 80 in .NET 7 and earlier) - **Env var override:** `ASPNETCORE_URLS=http://+:8080` or `ASPNETCORE_HTTP_PORTS=8080` - Network accessline 181
- **Env var override:** `ASPNETCORE_URLS=http://+:8080` or `ASPNETCORE_HTTP_PORTS=8080` - Network accessline 182
- **Code override:** `builder.WebHost.UseUrls("http://+:8080")` in `Program.cs`
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/django.md
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/fastapi.md
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/flask.md
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/go.md
- Network accessline 108
config.BeforeConnect = func(ctx context.Context, cfg *pgx.ConnConfig) error { token, err := cred.GetToken(ctx, policy.TokenRequestOptions{ Scopes: []string{"https://ossrdbms-aad.database.windows.net/.default"}, - Network accessline 109
token, err := cred.GetToken(ctx, policy.TokenRequestOptions{ Scopes: []string{"https://ossrdbms-aad.database.windows.net/.default"}, }) - Network accessline 110
Scopes: []string{"https://ossrdbms-aad.database.windows.net/.default"}, - Network accessline 199
The `./cmd/server` path is conventional for Go projects using the [Standard Go Project Layout](https://github.com/golang-standards/project-layout). Adjust to match the actual `main` package location.
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/phases/quick-deploy.md
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/references/detection.md
- Network accessline 32
| Source code | `app.listen(<number>)`, `.listen(<number>)`, `server.port=<number>` | `app.listen(3000)` | | `application.properties` / `application.yml` (Java) | `server.port=<number>` | `server.port=8080` | | `appsettings.json` (.NET) | ` - Network accessline 33
| `application.properties` / `application.yml` (Java) | `server.port=<number>` | `server.port=8080` | | `appsettings.json` (.NET) | `"Urls": "http://*:<number>"` | `"Urls": "http://*:8080"` | | Framework defaults | Use known defaults if not - Network accessline 34
| `appsettings.json` (.NET) | `"Urls": "http://*:<number>"` | `"Urls": "http://*:8080"` |
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/references/workload-identity.md
- Network accessline 39
Federated Credential ├── Issuer: https://oidc.prod-aks.azure.com/<tenant-id>/<cluster-id> - Network accessline 40
├── Issuer: https://oidc.prod-aks.azure.com/<tenant-id>/<cluster-id> - Network accessline 102
[Credential-related source omitted] - Network accessline 103
[Credential-related source omitted] - Network accessline 116
[Credential-related source omitted] - Network accessline 118
new TokenRequestContext(new[] { "https://ossrdbms-aad.database.windows.net/.default" })); - Network accessline 182
[Credential-related source omitted] - Network accessline 183
[Credential-related source omitted] - Access to secretsline 189
[Credential-related source omitted] - Network accessline 196
[Credential-related source omitted] - Network accessline 198
new TokenRequestContext(new[] { "https://redis.azure.com/.default" }));
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/dotnet.Dockerfile
- Network accessline 56
ENV ASPNETCORE_URLS="http://+:8080" \ - Network accessline 60
# No HEALTHCHECK: the aspnet runtime image does not include curl or wget. - Network accessline 61
# Kubernetes liveness/readiness probes (configured in deployment.yaml) handle # health checking in AKS. For local Docker usage, install wget or add # app.MapHealthChecks("/healthz") and use a custom health check binary. - Network accessline 62
# health checking in AKS. For local Docker usage, install wget or add
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/dotnet.dockerignore
- Access to secretsline 7
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/go.dockerignore
- Access to secretsline 9
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/java.Dockerfile
- Network accessline 74
# No HEALTHCHECK: the JRE Alpine image does not include wget or curl.
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/java.dockerignore
- Access to secretsline 8
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/node.dockerignore
- Access to secretsline 4
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/python.Dockerfile
- Network accessline 62
# HEALTHCHECK is omitted — Kubernetes liveness/readiness probes handle health # checks in AKS. Adding a Dockerfile HEALTHCHECK would require installing curl # in the runtime image, increasing size and attack surface.
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/python.dockerignore
- Access to secretsline 8
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/rust.Dockerfile
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/rust.dockerignore
- Access to secretsline 3
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/mermaid/summary-dashboard.md
- Network accessline 17
| Resource | Type | Name | Portal Link | |----------|------|------|-------------| | Resource Group | resourceGroups | {{RG_NAME}} | `https://portal.azure.com/...` | - Network accessline 18
|----------|------|------|-------------| | Resource Group | resourceGroups | {{RG_NAME}} | `https://portal.azure.com/...` | | AKS Cluster | managedClusters | {{AKS_NAME}} | `https://portal.azure.com/...` | - Network accessline 19
| Resource Group | resourceGroups | {{RG_NAME}} | `https://portal.azure.com/...` | - Network accessline 20
| AKS Cluster | managedClusters | {{AKS_NAME}} | `https://portal.azure.com/...` | - Network accessline 21
| Container Registry | registries | {{ACR_NAME}} | `https://portal.azure.com/...` | - Network accessline 22
| {{BACKING_SERVICE}} | {{TYPE}} | {{NAME}} | `https://portal.azure.com/...` |
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/SKILL.md
- Network accessline 18
You are an AKS Automatic compatibility assessment agent. Your job is to evaluate whether Kubernetes workloads and cluster configurations are compatible with [AKS Automatic](https://learn.microsoft.com/en-us/azure/aks/intro-aks-automatic), i - Network accessline 79
1. Discover the host's approved AKS metadata capabilities; use their host-assigned names and schemas. Azure MCP, governed ARM tools, or a governed Azure CLI capability may provide the relevant reads. A missing literal name is not proof of a - Network accessline 80
2. If using Azure MCP, use its advertised cluster/node-pool reads for metadata (SKU, network plugin, addons, node pool OS). The documented surface has no readiness-assessment operation — do not expect one ([Azure MCP AKS tools](https://lear
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/references/mcp-integration.md
- Network accessline 28
It does **not** document an AKS Automatic readiness-assessment operation, a workload assessment response schema, or an assessment polling action. Earlier versions of this skill described such an API; it does not exist. See [Azure Kubernetes - Network accessline 100
Azure SRE Agent's built-in Azure operations, diagnostics, monitoring, and `kubectl` tools use the agent's managed identity and require no connector. Prefer those built-in capabilities when they satisfy the read. See [Tools in Azure SRE Agen - Network accessline 109
See the official [plugin marketplace guidance](https://learn.microsoft.com/azure/sre-agent/plugin-marketplace#what-the-plugin-marketplace-does) and [MCP connector tutorial](https://learn.microsoft.com/azure/sre-agent/mcp-connector). - Network accessline 111
If a built-in Azure or Kubernetes read fails, check that the target resource group is in the agent's scope and that its user-assigned managed identity has the required RBAC. Do not tell an SRE Agent user to configure Azure MCP "in the edito - Network accessline 122
a prerequisite. Only if the host supports and authorizes connector setup, point to its configuration flow or the official [Azure MCP Server setup overview](https://learn.microsoft.com/azure/developer/azure-mcp-server/get-started). - Network accessline 124
[Azure MCP Server setup overview](https://learn.microsoft.com/azure/developer/azure-mcp-server/get-started). - Network accessline 140
| No Azure MCP AKS capability appears in the host catalog | Host uses another approved surface or does not expose these reads | Use approved equivalent metadata capabilities or offline validation. Suggest connector setup only where the host - Network accessline 141
| Discovered AKS capability lacks a readiness-assessment operation | Expected for the currently documented Azure MCP AKS surface | Use advertised cluster/node-pool reads, collect sanitized manifests through Kubernetes-native tools, and eval - Network accessline 142
| Azure or Kubernetes read fails in Azure SRE Agent | Agent UAMI lacks target scope or RBAC | Check managed resource groups and role assignments in [SRE Agent permissions](https://learn.microsoft.com/azure/sre-agent/permissions) |
.github/plugins/azure-skills/skills/azure-kubernetes/azure-kubernetes-automatic-readiness/references/migration-guide-summary.md
- Network accessline 17
Source: [AKS Automatic cluster SKU migration](https://learn.microsoft.com/azure/aks/automatic/aks-automatic-sku-migration). If that article changes, it wins over this summary.
.github/plugins/azure-skills/skills/azure-kubernetes/references/azure-aks-autoscaler.md
- Network accessline 68
> adds provisioning latency; use a less aggressive profile for workloads with > frequent short scale-out and scale-in cycles. See > [AKS cluster autoscaler profile settings](https://learn.microsoft.com/azure/aks/cluster-autoscaler#cluster-a - Network accessline 69
> frequent short scale-out and scale-in cycles. See > [AKS cluster autoscaler profile settings](https://learn.microsoft.com/azure/aks/cluster-autoscaler#cluster-autoscaler-profile-settings) > and [aggressive scale-down guidance](https://lea - Network accessline 70
> [AKS cluster autoscaler profile settings](https://learn.microsoft.com/azure/aks/cluster-autoscaler#cluster-autoscaler-profile-settings) - Network accessline 71
> and [aggressive scale-down guidance](https://learn.microsoft.com/azure/aks/cluster-autoscaler#configure-cluster-autoscaler-profile-for-aggressive-scale-down). - Network accessline 75
> `skip-nodes-with-system-pods=false` as a cost lever or assume every > Microsoft-managed system component can be protected by a customer-managed > PDB. See [AKS support policies](https://learn.microsoft.com/azure/aks/support-policies#manag - Network accessline 77
> PDB. See [AKS support policies](https://learn.microsoft.com/azure/aks/support-policies#managed-features-in-aks).
.github/plugins/azure-skills/skills/azure-kubernetes/references/azure-aks-spot.md
- Network accessline 115
> API, such as drains, upgrades, and cluster-autoscaler scale-down. Azure can > reclaim or delete the underlying Spot VM involuntarily, reducing availability > below the budget. See [AKS PDB guidance](https://learn.microsoft.com/azure/aks/o - Network accessline 116
> reclaim or delete the underlying Spot VM involuntarily, reducing availability > below the budget. See [AKS PDB guidance](https://learn.microsoft.com/azure/aks/operator-best-practices-scheduler#limit-disruption-impact-by-using-pod-disrupti - Network accessline 117
> below the budget. See [AKS PDB guidance](https://learn.microsoft.com/azure/aks/operator-best-practices-scheduler#limit-disruption-impact-by-using-pod-disruption-budgets-pdbs) - Network accessline 118
> and [Spot node pool limitations](https://learn.microsoft.com/azure/aks/spot-node-pool).
.github/plugins/azure-skills/skills/azure-prepare/references/apim.md
- Access to secretsline 199
[Credential-related source omitted] - Network accessline 209
- [APIM v2 Overview](https://learn.microsoft.com/azure/api-management/v2-service-tiers-overview) - Network accessline 210
- [APIM Bicep Reference](https://learn.microsoft.com/azure/templates/microsoft.apimanagement/service) - Network accessline 211
- [APIM Terraform](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/api_management) - Network accessline 212
- [GenAI Gateway Capabilities](https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities)
.github/plugins/azure-skills/skills/azure-prepare/references/architecture.md
- Network accessline 42
- Teams without Kubernetes expertise - Serverless GPU inference that does not require Kubernetes APIs, operators, or custom scheduling ([Microsoft Learn](https://learn.microsoft.com/azure/container-apps/gpu-serverless-overview)) - Network accessline 44
custom scheduling ([Microsoft Learn](https://learn.microsoft.com/azure/container-apps/gpu-serverless-overview))
.github/plugins/azure-skills/skills/azure-prepare/references/aspire.md
- Network accessline 267
| Sample | Repository | Notes | |--------|------------|-------| | orleans-voting | [dotnet/aspire-samples](https://github.com/dotnet/aspire-samples/tree/main/samples/orleans-voting) | Orleans cluster with voting app | - Network accessline 268
|--------|------------|-------| | orleans-voting | [dotnet/aspire-samples](https://github.com/dotnet/aspire-samples/tree/main/samples/orleans-voting) | Orleans cluster with voting app | | AspireYarp | [dotnet/aspire-samples](https://github. - Network accessline 269
| orleans-voting | [dotnet/aspire-samples](https://github.com/dotnet/aspire-samples/tree/main/samples/orleans-voting) | Orleans cluster with voting app | - Network accessline 270
| AspireYarp | [dotnet/aspire-samples](https://github.com/dotnet/aspire-samples/tree/main/samples/AspireYarp) | YARP reverse proxy | - Network accessline 271
| AspireWithDapr | [dotnet/aspire-samples](https://github.com/dotnet/aspire-samples/tree/main/samples/AspireWithDapr) | Dapr integration | - Network accessline 272
| eShop | [dotnet/eShop](https://github.com/dotnet/eShop) | Reference microservices app | - Network accessline 418
- [.NET Aspire Documentation](https://learn.microsoft.com/en-us/dotnet/aspire/) - Network accessline 419
- [Azure Developer CLI (azd)](https://learn.microsoft.com/en-us/azure/developer/azure-developer-cli/) - Network accessline 420
- [Aspire Samples Repository](https://github.com/dotnet/aspire-samples) - Network accessline 421
- [azd + Aspire Integration](https://learn.microsoft.com/en-us/dotnet/aspire/deployment/azure/aca-deployment-azd-in-depth)
.github/plugins/azure-skills/skills/azure-prepare/references/auth-best-practices.md
- Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme)
.github/plugins/azure-skills/skills/azure-prepare/references/azure-context.md
- Network accessline 121
- Invoke **azure-resource-lookup** skill to count existing deployments of that resource type in the selected subscription and region - Use the count to calculate: `Total After Deployment = Current Count + Planned Deployment` - Referen - Network accessline 122
- Use the count to calculate: `Total After Deployment = Current Count + Planned Deployment` - Reference [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-ser - Network accessline 123
- Reference [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) for the limit value
.github/plugins/azure-skills/skills/azure-prepare/references/functional-verification.md
- Network accessline 42
│ ├── User says yes │ │ ├── App can run locally? → Run locally, verify backend + UI │ │ ├── API-only / no UI? → Test endpoints with curl or similar - Network accessline 43
│ │ ├── App can run locally? → Run locally, verify backend + UI │ │ ├── API-only / no UI? → Test endpoints with curl or similar │ │ └── Static site? → Open in browser, verify rendering - Network accessline 44
│ │ ├── API-only / no UI? → Test endpoints with curl or similar
.github/plugins/azure-skills/skills/azure-prepare/references/global-rules.md
- Dangerous shell operationline 13
| **Delete** | `az group delete`, `azd down`, `rm -rf`, delete resource | - Dangerous shell operationline 33
- ⛔ Do NOT delete user project or workspace directories (e.g., `rm -rf <project-dir>`) even when adding features, converting, or migrating — use MODIFY mode to edit existing files instead. File deletions within a project (e.g., removing bui
.github/plugins/azure-skills/skills/azure-prepare/references/plan-template.md
- Network accessline 119
- **If quota CLI is NOT supported** (returns `BadRequest`): - Get current usage: `az graph query -q "resources | where type == '{resource-type}' and location == '{location}' | count"` (requires `az extension add --name resource-graph`) - Network accessline 120
- Get current usage: `az graph query -q "resources | where type == '{resource-type}' and location == '{location}' | count"` (requires `az extension add --name resource-graph`) - Get limit: [Azure service limits documentation](https://l - Network accessline 121
- Get limit: [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) - Network accessline 141
- **MUST use azure-quotas skill first** to check providers via quota CLI (`az quota` commands) - Microsoft.Compute, Microsoft.Network, Microsoft.App, etc. - Azure quota CLI is **ALWAYS preferred over REST API** for checking quotas - **ONLY - Network accessline 142
- Azure quota CLI is **ALWAYS preferred over REST API** for checking quotas - **ONLY for unsupported providers** (e.g., Microsoft.DocumentDB returns `BadRequest`), use fallback methods: [Azure service limits documentation](https://learn.mic - Network accessline 143
- **ONLY for unsupported providers** (e.g., Microsoft.DocumentDB returns `BadRequest`), use fallback methods: [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-
.github/plugins/azure-skills/skills/azure-prepare/references/recipes/azd/aspire.md
- Network accessline 68
.NET Aspire [external parameters](https://aspire.dev/fundamentals/external-parameters/) let apps request values from the deployment environment. Each `AddParameter()` call generates a Bicep parameter in the deployment manifest. However, azd - Network accessline 106
If the value must remain an [external parameter](https://aspire.dev/fundamentals/external-parameters/) (e.g., it varies per environment), pre-set it in the azd environment config immediately after `azd init`: - Access to secretsline 117
[Credential-related source omitted] - Network accessline 145
**Cause:** The AppHost uses `AddParameter()` as a `WithBuildArg` argument. azd cannot resolve Aspire [external parameters](https://aspire.dev/fundamentals/external-parameters/) during Docker builds, regardless of azd version. - Network accessline 224
- [.NET Aspire External Parameters](https://aspire.dev/fundamentals/external-parameters/) - Network accessline 225
- [.NET Aspire Docs](https://learn.microsoft.com/dotnet/aspire/) - Network accessline 226
- [azd + Aspire](https://learn.microsoft.com/dotnet/aspire/deployment/azure/aca-deployment-azd-in-depth) - Network accessline 227
- [Samples](https://github.com/dotnet/aspire-samples)
.github/plugins/azure-skills/skills/azure-prepare/references/recipes/azd/docker.md
- Access to secretsline 99
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-prepare/references/recipes/azd/iac-rules.md
- Network accessline 50
{ "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", - Network accessline 51
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", - Network accessline 64
> ⚠<U+FE0F> **Before generating any resource name in Bicep, check [Resource naming rules](https://learn.microsoft.com/azure/azure-resource-manager/management/resource-name-rules) for that resource type's valid characters, length limits, and unique - Network accessline 70
- [Resource abbreviations](https://learn.microsoft.com/azure/cloud-adoption-framework/ready/azure-best-practices/resource-abbreviations) — recommended prefixes per resource type
.github/plugins/azure-skills/skills/azure-prepare/references/recipes/azd/terraform.md
- Network accessline 478
- [Microsoft Docs: Use Terraform with azd](https://learn.microsoft.com/en-us/azure/developer/azure-developer-cli/use-terraform-for-azd) - Network accessline 479
- [azd-starter-terraform template](https://github.com/Azure-Samples/azd-starter-terraform) - Network accessline 480
- [Terraform Azure Provider](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs) - Network accessline 481
- [Azure CAF Naming](https://registry.terraform.io/providers/aztfmod/azurecaf/latest/docs)
.github/plugins/azure-skills/skills/azure-prepare/references/recipes/bicep/patterns.md
.github/plugins/azure-skills/skills/azure-prepare/references/region-availability.md
- Network accessline 3
> **AUTHORITATIVE SOURCE** — Consult service-specific files BEFORE recommending any region. > > Official reference: https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table - Network accessline 5
> Official reference: https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table
.github/plugins/azure-skills/skills/azure-prepare/references/research.md
- Network accessline 7
1. **Identify Components** — List all Azure services from architecture plan 2. **Load Service References** — For each service, load `services/<service>/README.md` first, then specific references as needed 3. **Check Resource Naming Rules** - Network accessline 8
2. **Load Service References** — For each service, load `services/<service>/README.md` first, then specific references as needed 3. **Check Resource Naming Rules** — For each resource type, check [resource naming rules](https://learn.micros - Network accessline 9
3. **Check Resource Naming Rules** — For each resource type, check [resource naming rules](https://learn.microsoft.com/azure/azure-resource-manager/management/resource-name-rules) for valid characters, length limits, and uniqueness scopes
.github/plugins/azure-skills/skills/azure-prepare/references/resources-limits-quotas.md
- Network accessline 59
2. Get limit from [service documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) - Network accessline 96
| Service | Hard Limits (examples) | Quota Check | Notes | |---------|------------------------|-------------|-------| | **Cosmos DB** | Item: 2MB, Partition key: 2KB, Serverless storage: 50GB | ❌ Not supported. Use Resource Graph + [docs](h - Network accessline 97
|---------|------------------------|-------------|-------| | **Cosmos DB** | Item: 2MB, Partition key: 2KB, Serverless storage: 50GB | ❌ Not supported. Use Resource Graph + [docs](https://learn.microsoft.com/en-us/azure/cosmos-db/concepts-l - Network accessline 98
| **Cosmos DB** | Item: 2MB, Partition key: 2KB, Serverless storage: 50GB | ❌ Not supported. Use Resource Graph + [docs](https://learn.microsoft.com/en-us/azure/cosmos-db/concepts-limits). Default: 50 accounts/region | Query: `az graph quer - Network accessline 158
|-------|------|--------| | "Quota exceeded" | Quota | Use azure-quotas to request increase | | "(BadRequest) Bad request" | Unsupported provider | Use [service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/man - Network accessline 159
| "Quota exceeded" | Quota | Use azure-quotas to request increase | | "(BadRequest) Bad request" | Unsupported provider | Use [service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription - Network accessline 160
| "(BadRequest) Bad request" | Unsupported provider | Use [service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) | - Network accessline 210
- **azure-quotas skill** - Complete quota checking workflow and CLI commands (invoke the **azure-quotas** skill) - [Azure subscription limits](https://learn.microsoft.com/azure/azure-resource-manager/management/azure-subscription-service-li - Network accessline 211
- [Azure subscription limits](https://learn.microsoft.com/azure/azure-resource-manager/management/azure-subscription-service-limits) - Official Microsoft documentation - Network accessline 212
- [Azure Quotas Overview](https://learn.microsoft.com/en-us/azure/quotas/quotas-overview) - Understanding quotas and limits
.github/plugins/azure-skills/skills/azure-prepare/references/runtimes/nodejs.md
- Access to secretsline 27
[Credential-related source omitted] - Access to secretsline 117
[Credential-related source omitted] - Network accessline 173
# Health check HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \ CMD wget --no-verbose --tries=1 --spider http://localhost:3000/health || exit 1 - Network accessline 174
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 CMD wget --no-verbose --tries=1 --spider http://localhost:3000/health || exit 1 - Network accessline 175
CMD wget --no-verbose --tries=1 --spider http://localhost:3000/health || exit 1 - Network accessline 209
if (req.get('x-forwarded-proto') !== 'https' && process.env.NODE_ENV === 'production') { if (!TRUSTED_HOST) return next(); return res.redirect(`https://${TRUSTED_HOST}${req.originalUrl}`); - Network accessline 210
if (!TRUSTED_HOST) return next(); return res.redirect(`https://${TRUSTED_HOST}${req.originalUrl}`); } - Network accessline 211
return res.redirect(`https://${TRUSTED_HOST}${req.originalUrl}`); - Access to secretsline 241
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-prepare/references/sdk/azd-deployment.md
.github/plugins/azure-skills/skills/azure-prepare/references/security.md
- Network accessline 268
- [Key Vault documentation](https://learn.microsoft.com/azure/key-vault/general/overview) - Network accessline 269
- [Managed identities documentation](https://learn.microsoft.com/azure/active-directory/managed-identities-azure-resources/overview) - Network accessline 270
- [Azure RBAC documentation](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 271
- [Microsoft Defender for Cloud](https://learn.microsoft.com/azure/defender-for-cloud/defender-for-cloud-introduction)
.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/sku-selection.md
- Network accessline 33
> 💡 **Tip:** Figures are representative for **Windows OS** in **Central US**, **as of 2026-04**. Prices vary by region, OS, and offer. Use the [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) for exact figures. - Network accessline 37
Cost savings can be made on Premium V3, Premium V4 and Isolated V2 plans by committing to reserved instances for 1 or 3 year terms, details can found at [https://learn.microsoft.com/azure/cost-management-billing/reservations/prepay-app-serv - Network accessline 39
Alternatively cost savings can be made using [Azure Savings plans](https://learn.microsoft.com/en-us/azure/cost-management-billing/savings-plan/).
.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/auth/README.md
- Network accessline 37
enabled: true registration: { openIdIssuer: 'https://login.microsoftonline.com/${tenant().tenantId}/v2.0' - Network accessline 38
registration: { openIdIssuer: 'https://login.microsoftonline.com/${tenant().tenantId}/v2.0' clientId: appRegistration.properties.appId - Network accessline 39
openIdIssuer: 'https://login.microsoftonline.com/${tenant().tenantId}/v2.0' - Network accessline 67
web: { redirectUris: [ 'https://${webApp.properties.defaultHostName}/.auth/login/aad/callback' - Network accessline 68
redirectUris: [ 'https://${webApp.properties.defaultHostName}/.auth/login/aad/callback' ] - Network accessline 69
'https://${webApp.properties.defaultHostName}/.auth/login/aad/callback' - Network accessline 94
- [Easy Auth overview](https://learn.microsoft.com/en-us/azure/app-service/overview-authentication-authorization) - Network accessline 95
- [Microsoft Identity Web](https://learn.microsoft.com/en-us/entra/msal/dotnet/microsoft-identity-web/) - Network accessline 96
- [Configure Entra ID auth](https://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-aad)
.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/auth/source/dotnet.md
.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/auth/source/nodejs.md
- Network accessline 19
const client = jwksClient({ jwksUri: `https://login.microsoftonline.com/${process.env.AZURE_TENANT_ID}/discovery/v2.0/keys`, - Network accessline 20
jwksUri: `https://login.microsoftonline.com/${process.env.AZURE_TENANT_ID}/discovery/v2.0/keys`, - Network accessline 46
algorithms: ["RS256"], audience: AUDIENCE, issuer: `https://login.microsoftonline.com/${process.env.AZURE_TENANT_ID}/v2.0`, - Network accessline 47
audience: AUDIENCE, issuer: `https://login.microsoftonline.com/${process.env.AZURE_TENANT_ID}/v2.0`, }, - Network accessline 48
issuer: `https://login.microsoftonline.com/${process.env.AZURE_TENANT_ID}/v2.0`,
.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/auth/source/python.md
- Access to secretsline 28
[Credential-related source omitted] - Access to secretsline 29
[Credential-related source omitted] - Network accessline 30
# Use APP_ID_URI if set (e.g., "api://<client-id>"); fall back to CLIENT_ID AUDIENCE = os.environ.get("AZURE_APP_ID_URI", CLIENT_ID) JWKS_URL = f"https://login.microsoftonline.com/{TENANT_ID}/discovery/v2.0/keys" - Access to secretsline 31
[Credential-related source omitted] - Network accessline 32
JWKS_URL = f"https://login.microsoftonline.com/{TENANT_ID}/discovery/v2.0/keys" - Network accessline 42
algorithms=["RS256"], audience=AUDIENCE, issuer=f"https://login.microsoftonline.com/{TENANT_ID}/v2.0", - Network accessline 43
audience=AUDIENCE, issuer=f"https://login.microsoftonline.com/{TENANT_ID}/v2.0", ) - Network accessline 44
issuer=f"https://login.microsoftonline.com/{TENANT_ID}/v2.0",
.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/cosmos/README.md
- Network accessline 33
| Setting | Value | Purpose | |---------|-------|---------| | `COSMOS_ENDPOINT` | `https://{account}.documents.azure.com:443/` | Cosmos account endpoint | - Network accessline 34
|---------|-------|---------| | `COSMOS_ENDPOINT` | `https://{account}.documents.azure.com:443/` | Cosmos account endpoint | | `COSMOS_DATABASE_NAME` | `app-db` | Target database | - Network accessline 35
| `COSMOS_ENDPOINT` | `https://{account}.documents.azure.com:443/` | Cosmos account endpoint | - Network accessline 87
- [Cosmos DB + App Service tutorial](https://learn.microsoft.com/en-us/azure/cosmos-db/nosql/tutorial-dotnet-web-app) - Network accessline 88
- [Passwordless Cosmos DB connections](https://learn.microsoft.com/en-us/azure/cosmos-db/nosql/how-to-dotnet-get-started) - Network accessline 89
- [Cosmos DB RBAC](https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac)
.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/cosmos/source/python.md
.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/redis/README.md
- Network accessline 84
- [Azure Cache for Redis overview](https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-overview) - Network accessline 85
- [Use Entra ID with Redis](https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-azure-active-directory-for-authentication) - Network accessline 86
- [Redis + App Service tutorial](https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-web-app-howto)
.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/redis/source/nodejs.md
.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/redis/source/python.md
- Network accessline 25
# Redis ACL auth requires both username and token as password _REDIS_USERNAME = "default" _TOKEN_SCOPE = "https://redis.azure.com/.default" - Network accessline 26
_REDIS_USERNAME = "default" _TOKEN_SCOPE = "https://redis.azure.com/.default" _TOKEN_REFRESH_MARGIN = 300 # Refresh 5 minutes before expiry - Network accessline 27
_TOKEN_SCOPE = "https://redis.azure.com/.default" - Access to secretsline 49
[Credential-related source omitted] - Access to secretsline 50
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/sql/README.md
- Network accessline 79
- [Azure SQL passwordless connections](https://learn.microsoft.com/en-us/azure/azure-sql/database/azure-sql-passwordless-migration) - Network accessline 80
- [EF Core with Azure SQL](https://learn.microsoft.com/en-us/ef/core/providers/sql-server/) - Network accessline 81
- [Tutorial: App Service with SQL](https://learn.microsoft.com/en-us/azure/app-service/tutorial-dotnetcore-sqldb-app)
.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/sql/source/nodejs.md
- Access to secretsline 96
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/recipes/sql/source/python.md
- Access to secretsline 37
[Credential-related source omitted] - Access to secretsline 44
[Credential-related source omitted] - Access to secretsline 45
[Credential-related source omitted] - Access to secretsline 46
[Credential-related source omitted] - Network accessline 61
[Credential-related source omitted] - Network accessline 62
[Credential-related source omitted] - Network accessline 63
[Credential-related source omitted] - Access to secretsline 66
[Credential-related source omitted] - Access to secretsline 140
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/selection.md
- Network accessline 7
Cross-reference with [App Service overview](https://learn.microsoft.com/en-us/azure/app-service/overview) and [official AZD gallery templates](https://azure.github.io/awesome-azd/?tags=appservice).
.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/web-api.md
- Network accessline 15
**Browse all:** [Awesome AZD App Service](https://azure.github.io/awesome-azd/?tags=appservice) - Network accessline 179
- [App Service overview](https://learn.microsoft.com/en-us/azure/app-service/overview) - Network accessline 180
- [App Service best practices](https://learn.microsoft.com/en-us/azure/app-service/app-service-best-practices) - Network accessline 181
- [Health check](https://learn.microsoft.com/en-us/azure/app-service/monitor-instances-health-check)
.github/plugins/azure-skills/skills/azure-prepare/references/services/app-service/templates/web-app.md
- Network accessline 14
**Browse all:** [Awesome AZD](https://azure.github.io/awesome-azd/?tags=appservice) - Network accessline 106
ALLOWED_HOSTS = ['.azurewebsites.net', 'localhost'] STATIC_ROOT = BASE_DIR / 'staticfiles' CSRF_TRUSTED_ORIGINS = ['https://*.azurewebsites.net'] - Network accessline 108
CSRF_TRUSTED_ORIGINS = ['https://*.azurewebsites.net'] - Network accessline 179
- [Deploy to App Service](https://learn.microsoft.com/en-us/azure/app-service/quickstart-dotnetcore) - Network accessline 180
- [Node.js on App Service](https://learn.microsoft.com/en-us/azure/app-service/quickstart-nodejs) - Network accessline 181
- [Python on App Service](https://learn.microsoft.com/en-us/azure/app-service/quickstart-python)
.github/plugins/azure-skills/skills/azure-prepare/references/services/container-apps/day2-operations.md
.github/plugins/azure-skills/skills/azure-prepare/references/services/container-apps/environment.md
- Network accessline 25
{ name: 'database-url' keyVaultUrl: 'https://myvault.vault.azure.net/secrets/database-url' - Network accessline 26
name: 'database-url' keyVaultUrl: 'https://myvault.vault.azure.net/secrets/database-url' identity: managedIdentity.id - Network accessline 27
keyVaultUrl: 'https://myvault.vault.azure.net/secrets/database-url'
.github/plugins/azure-skills/skills/azure-prepare/references/services/container-apps/terraform.md
.github/plugins/azure-skills/skills/azure-prepare/references/services/cosmos-db/sdk.md
- Access to secretsline 26
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-prepare/references/services/durable-task-scheduler/README.md
- Network accessline 28
# Start the emulator (see https://mcr.microsoft.com/v2/dts/dts-emulator/tags/list for available versions) - Network accessline 32
# Dashboard available at http://localhost:8082 - Network accessline 49
| Environment | Connection String | |-------------|-------------------| | Local Development (Emulator) | `Endpoint=http://localhost:8080;Authentication=None;TaskHub=default` | - Network accessline 50
|-------------|-------------------| | Local Development (Emulator) | `Endpoint=http://localhost:8080;Authentication=None;TaskHub=default` | | Azure (System-Assigned MI) | `Endpoint=https://<scheduler>.durabletask.io;Authentication=ManagedId - Network accessline 51
| Local Development (Emulator) | `Endpoint=http://localhost:8080;Authentication=None;TaskHub=default` | - Network accessline 72
- [JavaScript](javascript.md) — packages, setup, examples, determinism, retry, SDK - [Bicep Patterns](bicep.md) — scheduler, task hub, RBAC, CLI provisioning - [Official Documentation](https://learn.microsoft.com/azure/azure-functions/durab - Network accessline 73
- [Bicep Patterns](bicep.md) — scheduler, task hub, RBAC, CLI provisioning - [Official Documentation](https://learn.microsoft.com/azure/azure-functions/durable/durable-task-scheduler/durable-task-scheduler) - [Durable Functions Overview](ht - Network accessline 74
- [Official Documentation](https://learn.microsoft.com/azure/azure-functions/durable/durable-task-scheduler/durable-task-scheduler) - Network accessline 75
- [Durable Functions Overview](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-overview) - Network accessline 76
- [Sample Repository](https://github.com/Azure-Samples/Durable-Task-Scheduler) - Network accessline 77
- [Choosing an Orchestration Framework](https://learn.microsoft.com/azure/azure-functions/durable/durable-task-scheduler/choose-orchestration-framework)
.github/plugins/azure-skills/skills/azure-prepare/references/services/durable-task-scheduler/bicep.md
- Network accessline 65
To allow developers to view orchestration status and history in the [DTS dashboard](https://portal.azure.com), assign the same `Durable Task Data Contributor` role to the deploying user's identity. Without this, the dashboard returns **403 - Network accessline 82
> **💡 TIP**: This is the same role used for the Function App's managed identity, but assigned with `principalType: 'User'` to the developer. See the [sample repo](https://github.com/Azure-Samples/Durable-Task-Scheduler/blob/main/samples/inf - Network accessline 100
> **⚠<U+FE0F> WARNING**: Always use `scheduler.properties.endpoint` to get the scheduler URL. Do **not** construct it manually — the endpoint includes a hash suffix and region (e.g., `https://myscheduler-abc123.westus2.durabletask.io`).
.github/plugins/azure-skills/skills/azure-prepare/references/services/durable-task-scheduler/dotnet.md
- Network accessline 5
- [Durable Task Scheduler documentation](https://learn.microsoft.com/azure/durable-task-scheduler/) - Network accessline 6
- [Durable Functions .NET isolated worker guide](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-dotnet-isolated-overview) - Network accessline 20
> **💡 Finding latest versions**: Search [nuget.org](https://www.nuget.org/) for each package name to find the current stable version. Look for the `Microsoft.Azure.Functions.Worker.Extensions.DurableTask` and `Microsoft.Azure.Functions.Work - Network accessline 47
"FUNCTIONS_WORKER_RUNTIME": "dotnet-isolated", "AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 48
"AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" } - Network accessline 49
"DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 179
var connectionString = "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None";
.github/plugins/azure-skills/skills/azure-prepare/references/services/durable-task-scheduler/java.md
- Network accessline 5
- [Durable Task Scheduler documentation](https://learn.microsoft.com/azure/durable-task-scheduler/) - Network accessline 6
- [Durable Functions Java guide](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-overview?tabs=java) - Network accessline 27
> **💡 Finding latest versions**: Search [Maven Central](https://central.sonatype.com/) for `durabletask-azure-functions` (group: `com.microsoft`) to find the current stable version. - Network accessline 56
"FUNCTIONS_WORKER_RUNTIME": "java", "AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 57
"AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" } - Network accessline 58
"DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 204
public class App { public static void main(String[] args) throws Exception { String connectionString = "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None"; - Network accessline 206
String connectionString = "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None";
.github/plugins/azure-skills/skills/azure-prepare/references/services/durable-task-scheduler/javascript.md
- Network accessline 5
- [Durable Task Scheduler documentation](https://learn.microsoft.com/azure/durable-task-scheduler/) - Network accessline 6
- [Durable Functions JavaScript guide](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-overview?tabs=javascript) - Network accessline 21
> **💡 Finding latest versions**: Run `npm view durable-functions version` or check [npmjs.com/package/durable-functions](https://www.npmjs.com/package/durable-functions) for the latest stable release. - Network accessline 50
"FUNCTIONS_WORKER_RUNTIME": "node", "AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 51
"AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" } - Network accessline 52
"DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 179
const connectionString = "Endpoint=http://localhost:8080;Authentication=None;TaskHub=default";
.github/plugins/azure-skills/skills/azure-prepare/references/services/durable-task-scheduler/python.md
- Network accessline 5
- [Durable Task Scheduler documentation](https://learn.microsoft.com/azure/durable-task-scheduler/) - Network accessline 6
- [Durable Functions Python guide](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-overview?tabs=python) - Network accessline 19
> **💡 Finding latest versions**: Run `pip index versions azure-functions-durable` or check [pypi.org/project/azure-functions-durable](https://pypi.org/project/azure-functions-durable/) for the latest stable release. - Network accessline 50
"FUNCTIONS_WORKER_RUNTIME": "python", "AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 51
"AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" } - Network accessline 52
"DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 194
async def main(): with DurableTaskSchedulerWorker( host_address="http://localhost:8080", - Network accessline 195
with DurableTaskSchedulerWorker( host_address="http://localhost:8080", secure_channel=False, - Network accessline 196
host_address="http://localhost:8080", - Network accessline 205
from durabletask.azuremanaged.client import DurableTaskSchedulerClient client = DurableTaskSchedulerClient( host_address="http://localhost:8080", - Network accessline 206
client = DurableTaskSchedulerClient( host_address="http://localhost:8080", taskhub="default", - Network accessline 207
host_address="http://localhost:8080",
.github/plugins/azure-skills/skills/azure-prepare/references/services/event-grid/bicep.md
.github/plugins/azure-skills/skills/azure-prepare/references/services/event-grid/subscriptions.md
- Network accessline 11
endpointType: 'WebHook' properties: { endpointUrl: 'https://my-api.azurecontainerapps.io/webhooks/orders' - Network accessline 12
properties: { endpointUrl: 'https://my-api.azurecontainerapps.io/webhooks/orders' } - Network accessline 13
endpointUrl: 'https://my-api.azurecontainerapps.io/webhooks/orders' - Network accessline 36
endpointType: 'WebHook' properties: { endpointUrl: 'https://my-api.example.com/events' - Network accessline 37
properties: { endpointUrl: 'https://my-api.example.com/events' } - Network accessline 38
endpointUrl: 'https://my-api.example.com/events'
.github/plugins/azure-skills/skills/azure-prepare/references/services/foundry/region-availability.md
- Network accessline 15
> Check https://learn.microsoft.com/azure/ai-services/openai/concepts/models for current model availability.
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/README.md
- Network accessline 53
> Do NOT use hardcoded versions. Query for latest GA versions before generating code: > > **Primary Source:** [Azure Functions Supported Languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) - Network accessline 54
> > **Primary Source:** [Azure Functions Supported Languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) > - Network accessline 55
> **Primary Source:** [Azure Functions Supported Languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) > > Use the azure-documentation MCP tool to fetch current supported versions:
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/bicep.md
- Network accessline 86
runtime: { name: 'python' // or 'node', 'dotnet-isolated' version: '<version>' // Query latest GA: https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages - Network accessline 87
name: 'python' // or 'node', 'dotnet-isolated' version: '<version>' // Query latest GA: https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages } - Network accessline 88
version: '<version>' // Query latest GA: https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/hosting-plans.md
- Network accessline 11
| **VNet integration (outbound)** | ❌ | ✅ | ✅ | ✅ | ✅ | | **Private endpoints (inbound)** | ❌ | ✅ | ✅ | ✅ | ✅ (environment-level) | | **Deployment slots (incl. production)** | 2 | ❌ Not supported | 3 | 1-20 (tier-dependent) | Via [revisions - Network accessline 12
| **Private endpoints (inbound)** | ❌ | ✅ | ✅ | ✅ | ✅ (environment-level) | | **Deployment slots (incl. production)** | 2 | ❌ Not supported | 3 | 1-20 (tier-dependent) | Via [revisions](https://learn.microsoft.com/azure/container-apps/revis - Network accessline 13
| **Deployment slots (incl. production)** | 2 | ❌ Not supported | 3 | 1-20 (tier-dependent) | Via [revisions](https://learn.microsoft.com/azure/container-apps/revisions) | - Network accessline 71
- **Recommended default for new Functions apps.** Best for Linux workloads needing fast/large scale-out, VNet, per-function scaling, and configurable instance memory. - Limits: Linux only, **no deployment slots** (use [rolling/blue-green si - Network accessline 72
- Limits: Linux only, **no deployment slots** (use [rolling/blue-green site update strategies](https://learn.microsoft.com/azure/azure-functions/flex-consumption-site-updates) instead for zero-downtime deploys). - Network accessline 83
- Best for: consolidating Functions onto App Service Plan capacity you already run, or workloads needing the broadest App Service feature set (Hybrid Connections, custom domains, `Always On`). - Slot count depends on the underlying App Serv - Network accessline 84
- Slot count depends on the underlying App Service Plan tier (Basic = 1, Standard = 5, Premium = 20; see [App Service limits](https://learn.microsoft.com/azure/azure-resource-manager/management/azure-subscription-service-limits#azure-app-se - Network accessline 95
Switching hosting plans generally requires creating a new function app, **except**: Consumption ↔ Premium migration **on Windows** is supported in place via `az functionapp update` (see [Plan migration](https://learn.microsoft.com/azure/azu
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/README.md
- Network accessline 112
GET https://cdn.functions.azure.com/public/templates-manifest/manifest.json - Network accessline 115
> ⚠<U+FE0F> **If manifest fetch fails** (any error): > 1. Fall back to the source manifest at `https://github.com/Azure/azure-functions-templates/blob/dev/Functions.Templates/Template-Manifest/manifest.json` - Network accessline 116
> 1. Fall back to the source manifest at `https://github.com/Azure/azure-functions-templates/blob/dev/Functions.Templates/Template-Manifest/manifest.json` - Network accessline 127
| `resource` | Trigger type (see [selection.md](selection.md)) | `http`, `cosmos`, `timer`, `eventhub`, `servicebus`, `blob`, `sql`, `mcp`, `durable` | | `iac` | Infrastructure type | `bicep`, `terraform` | | `repositoryUrl` | GitHub repo w - Network accessline 128
| `iac` | Infrastructure type | `bicep`, `terraform` | | `repositoryUrl` | GitHub repo with complete project | `https://github.com/Azure-Samples/functions-quickstart-python-http-azd` | | `folderPath` | Path within repo | `.` or `src/api` | - Network accessline 129
| `repositoryUrl` | GitHub repo with complete project | `https://github.com/Azure-Samples/functions-quickstart-python-http-azd` | - Network accessline 139
GET https://github.com/{owner}/{repo}/archive/refs/heads/main.zip - Network accessline 146
1. GET https://api.github.com/repos/{owner}/{repo}/git/trees/main?recursive=1 - Network accessline 147
2. Filter tree entries where path starts with {folderPath}/ 3. For each file: GET https://raw.githubusercontent.com/{owner}/{repo}/main/{path} - Network accessline 149
GET https://raw.githubusercontent.com/{owner}/{repo}/main/{path} - Network accessline 181
**Browse all:** [Awesome AZD Functions](https://azure.github.io/awesome-azd/?tags=functions)
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/base/eval/summary.md
- Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language × trigger eval requires ~5 min of agent runtime. Full matrix (6 languages × 9 triggers) = ~4.5 hours of CI. Python is verified end-to-end; other languages are confirmed available in the [functions temp
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/blob-eventgrid/README.md
- Network accessline 28
See [Blob Storage trigger connections](https://learn.microsoft.com/en-us/azure/azure-functions/functions-bindings-storage-blob-trigger#connections) for identity-based config — refer to the **"Connections"** section on that page for managed
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/blob-eventgrid/eval/summary.md
- Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). Multi-language ev
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/composition.md
- Network accessline 47
1. FETCH MANIFEST GET https://cdn.functions.azure.com/public/templates-manifest/manifest.json - Network accessline 48
GET https://cdn.functions.azure.com/public/templates-manifest/manifest.json If fetch fails → fall back to: https://github.com/Azure/azure-functions-templates/blob/dev/Functions.Templates/Template-Manifest/manifest.json If both fail → - Network accessline 49
If fetch fails → fall back to: https://github.com/Azure/azure-functions-templates/blob/dev/Functions.Templates/Template-Manifest/manifest.json - Network accessline 224
> ⚠<U+FE0F> **ALWAYS QUERY OFFICIAL DOCUMENTATION** — Do NOT use hardcoded versions. > > **Primary Source:** [Azure Functions Supported Languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) - Network accessline 225
> > **Primary Source:** [Azure Functions Supported Languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) > - Network accessline 226
> **Primary Source:** [Azure Functions Supported Languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages)
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/cosmosdb/README.md
- Network accessline 27
See [Cosmos DB trigger connections](https://learn.microsoft.com/en-us/azure/azure-functions/functions-bindings-cosmosdb-v2-trigger#connections) for identity-based config — refer to the **"Connections"** section on that page for managed iden
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/cosmosdb/eval/summary.md
- Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). JavaScript and Po
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/durable/README.md
- Network accessline 34
The identity must have the **Durable Task Data Contributor** role on the scheduler or task hub resource. See [DTS identity auth](https://learn.microsoft.com/en-us/azure/durable-task/scheduler/durable-task-scheduler-identity) for identity-ba
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/durable/eval/summary.md
- Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). PowerShell has no
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/eventhubs/README.md
- Network accessline 21
See [Event Hubs trigger connections](https://learn.microsoft.com/en-us/azure/azure-functions/functions-bindings-event-hubs-trigger#connections) for identity-based config — refer to the **"Connections"** section on that page for managed iden
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/eventhubs/eval/summary.md
- Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). JavaScript and Po
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/mcp/README.md
- Network accessline 17
See [MCP Specification](https://modelcontextprotocol.io/) for protocol details. - Network accessline 31
See [MCP extension trigger and bindings](https://learn.microsoft.com/azure/azure-functions/functions-bindings-mcp) for extension-based servers, [Self-hosted MCP servers](https://learn.microsoft.com/en-us/azure/azure-functions/self-hosted-mc
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/mcp/eval/summary.md
- Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). JavaScript and Po
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/servicebus/README.md
- Network accessline 26
See [Service Bus trigger connections](https://learn.microsoft.com/en-us/azure/azure-functions/functions-bindings-service-bus-trigger#connections) for identity-based config — refer to the **"Connections"** section on that page for managed id
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/servicebus/eval/summary.md
- Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). Multi-language ev
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/sql/README.md
- Network accessline 45
See [SQL managed identity](https://learn.microsoft.com/en-us/azure/azure-functions/functions-identity-access-azure-sql-with-managed-identity) for identity-based config — refer to the **"Configure the function app"** section for connection s
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/sql/eval/summary.md
- Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). Java, JavaScript,
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/timer/README.md
- Network accessline 22
> Azure uses 6-part cron expressions (with seconds). See [Azure Functions timer trigger](https://learn.microsoft.com/en-us/azure/azure-functions/functions-bindings-timer#ncrontab-expressions) for full syntax reference.
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/templates/recipes/timer/eval/summary.md
- Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). Multi-language ev
.github/plugins/azure-skills/skills/azure-prepare/references/services/functions/terraform.md
- Network accessline 173
> 💡 **Example Reference:** [HashiCorp Flex Consumption Example](https://registry.terraform.io/modules/Azure/avm-res-web-site/azurerm/latest/examples/flex_consumption)
.github/plugins/azure-skills/skills/azure-prepare/references/services/key-vault/README.md
- Network accessline 39
| Variable | Value | |----------|-------| | `KEY_VAULT_URL` | `https://{vault-name}.vault.azure.net/` | - Network accessline 40
|----------|-------| | `KEY_VAULT_URL` | `https://{vault-name}.vault.azure.net/` | | `KEY_VAULT_NAME` | Vault name | - Network accessline 41
| `KEY_VAULT_URL` | `https://{vault-name}.vault.azure.net/` |
.github/plugins/azure-skills/skills/azure-prepare/references/services/key-vault/sdk.md
- Access to secretsline 29
[Credential-related source omitted] - Network accessline 59
endpointType: 'WebHook' properties: { endpointUrl: 'https://my-api.example.com/secret-rotation' - Network accessline 60
properties: { endpointUrl: 'https://my-api.example.com/secret-rotation' } - Network accessline 61
endpointUrl: 'https://my-api.example.com/secret-rotation'
.github/plugins/azure-skills/skills/azure-prepare/references/services/logic-apps/bicep.md
- Network accessline 10
state: 'Enabled' definition: { '$schema': 'https://schema.management.azure.com/providers/Microsoft.Logic/schemas/2016-06-01/workflowdefinition.json#' - Network accessline 11
definition: { '$schema': 'https://schema.management.azure.com/providers/Microsoft.Logic/schemas/2016-06-01/workflowdefinition.json#' contentVersion: '1.0.0.0' - Network accessline 12
'$schema': 'https://schema.management.azure.com/providers/Microsoft.Logic/schemas/2016-06-01/workflowdefinition.json#'
.github/plugins/azure-skills/skills/azure-prepare/references/services/logic-apps/triggers.md
.github/plugins/azure-skills/skills/azure-prepare/references/services/service-bus/patterns.md
.github/plugins/azure-skills/skills/azure-prepare/references/services/sql-database/scripts/grant-sql-access.ps1
- Executable scriptline 1
Executable file - Network accessline 109
if (-not (Get-Command sqlcmd -ErrorAction SilentlyContinue)) { Write-Error "'sqlcmd' is not installed or not on PATH." Write-Error "Install the modern go-sqlcmd from https://github.com/microsoft/go-sqlcmd and retry." - Network accessline 110
Write-Error "'sqlcmd' is not installed or not on PATH." Write-Error "Install the modern go-sqlcmd from https://github.com/microsoft/go-sqlcmd and retry." exit 1 - Network accessline 111
Write-Error "Install the modern go-sqlcmd from https://github.com/microsoft/go-sqlcmd and retry."
.github/plugins/azure-skills/skills/azure-prepare/references/services/sql-database/scripts/grant-sql-access.sh
- Executable scriptline 1
#!/usr/bin/env bash - Network accessline 103
if ! command -v sqlcmd >/dev/null 2>&1; then echo "ERROR: 'sqlcmd' is not installed or not on PATH." >&2 echo "Install the modern go-sqlcmd from https://github.com/microsoft/go-sqlcmd and retry." >&2 - Network accessline 104
echo "ERROR: 'sqlcmd' is not installed or not on PATH." >&2 echo "Install the modern go-sqlcmd from https://github.com/microsoft/go-sqlcmd and retry." >&2 exit 1 - Network accessline 105
echo "Install the modern go-sqlcmd from https://github.com/microsoft/go-sqlcmd and retry." >&2
.github/plugins/azure-skills/skills/azure-prepare/references/services/sql-database/sdk.md
.github/plugins/azure-skills/skills/azure-prepare/references/services/static-web-apps/deployment.md
.github/plugins/azure-skills/skills/azure-prepare/references/services/static-web-apps/routing.md
- Network accessline 41
"azureActiveDirectory": { "registration": { "openIdIssuer": "https://login.microsoftonline.com/{tenant-id}", - Network accessline 42
"registration": { "openIdIssuer": "https://login.microsoftonline.com/{tenant-id}", "clientIdSettingName": "AAD_CLIENT_ID", - Network accessline 43
"openIdIssuer": "https://login.microsoftonline.com/{tenant-id}", - Access to secretsline 45
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-prepare/references/services/storage/access.md
.github/plugins/azure-skills/skills/azure-quotas/SKILL.md
- Network accessline 46
| **Key Commands** | `az quota list`, `az quota show`, `az quota usage list`, `az quota usage show` | | **Complete CLI Reference** | [commands.md](./references/commands.md) | | **Azure Portal** | [My quotas](https://portal.azure.com/#blade/ - Network accessline 47
| **Complete CLI Reference** | [commands.md](./references/commands.md) | | **Azure Portal** | [My quotas](https://portal.azure.com/#blade/Microsoft_Azure_Capacity/QuotaMenuBlade/myQuotas) - Use only as fallback | | **REST API** | Microsoft. - Network accessline 48
| **Azure Portal** | [My quotas](https://portal.azure.com/#blade/Microsoft_Azure_Capacity/QuotaMenuBlade/myQuotas) - Use only as fallback | - Network accessline 53
> **⚠<U+FE0F> ALWAYS USE CLI FIRST** > > REST API and Portal can show misleading "No Limit" values — this does **not** mean unlimited capacity. It means the quota API doesn't support that resource type. Always start with `az quota` commands; fall - Network accessline 54
> > REST API and Portal can show misleading "No Limit" values — this does **not** mean unlimited capacity. It means the quota API doesn't support that resource type. Always start with `az quota` commands; fall back to [Azure service limits - Network accessline 55
> REST API and Portal can show misleading "No Limit" values — this does **not** mean unlimited capacity. It means the quota API doesn't support that resource type. Always start with `az quota` commands; fall back to [Azure service limits do - Network accessline 237
| REST API "No Limit" | Misleading — not unlimited | Use CLI instead; see warning in Quick Reference | | `ExtensionNotFound` | Quota extension not installed | `az extension add --name quota` | | `BadRequest` | Resource provider not supporte - Network accessline 238
| `ExtensionNotFound` | Quota extension not installed | `az extension add --name quota` | | `BadRequest` | Resource provider not supported by quota API | Check [service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-man - Network accessline 239
| `BadRequest` | Resource provider not supported by quota API | Check [service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) | - Network accessline 247
**Known unsupported providers:** - ❌ Microsoft.DocumentDB (Cosmos DB) - Use Portal or [Cosmos DB limits docs](https://learn.microsoft.com/en-us/azure/cosmos-db/concepts-limits) - Network accessline 248
- ❌ Microsoft.DocumentDB (Cosmos DB) - Use Portal or [Cosmos DB limits docs](https://learn.microsoft.com/en-us/azure/cosmos-db/concepts-limits) - Network accessline 262
|----------|------| | **CLI Commands Reference** | [commands.md](./references/commands.md) - Complete syntax, parameters, examples | | **Azure Quotas Overview** | [Microsoft Learn](https://learn.microsoft.com/en-us/azure/quotas/quotas-overv - Network accessline 263
| **CLI Commands Reference** | [commands.md](./references/commands.md) - Complete syntax, parameters, examples | | **Azure Quotas Overview** | [Microsoft Learn](https://learn.microsoft.com/en-us/azure/quotas/quotas-overview) | | **Service L - Network accessline 264
| **Azure Quotas Overview** | [Microsoft Learn](https://learn.microsoft.com/en-us/azure/quotas/quotas-overview) | - Network accessline 265
| **Service Limits Documentation** | [Azure subscription limits](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) | - Network accessline 266
| **Azure Portal - My Quotas** | [Portal Link](https://portal.azure.com/#blade/Microsoft_Azure_Capacity/QuotaMenuBlade/myQuotas) | - Network accessline 267
| **Request Quota Increases** | [How to request increases](https://learn.microsoft.com/en-us/azure/quotas/quickstart-increase-quota-portal) |
.github/plugins/azure-skills/skills/azure-quotas/references/commands.md
- Network accessline 18
> **Required workflow:** > 1. **FIRST:** Try `az quota list` / `az quota show` / `az quota usage show` > 2. **If CLI returns `BadRequest`:** Resource provider doesn't support quota API → use [Azure service limits docs](https://learn.microso - Network accessline 19
> 1. **FIRST:** Try `az quota list` / `az quota show` / `az quota usage show` > 2. **If CLI returns `BadRequest`:** Resource provider doesn't support quota API → use [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure- - Network accessline 20
> 2. **If CLI returns `BadRequest`:** Resource provider doesn't support quota API → use [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) - Network accessline 31
> - ❌ This is NOT unlimited capacity > - ✅ It means quota API doesn't support that resource type > - ✅ Check [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-li - Network accessline 32
> - ✅ It means quota API doesn't support that resource type > - ✅ Check [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) for actual limits > - ✅ Regiona - Network accessline 33
> - ✅ Check [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) for actual limits - Network accessline 268
**Workarounds**: - Check [Azure subscription limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) - Network accessline 269
- Check [Azure subscription limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) - Network accessline 295
> **DO NOT assume unlimited capacity. Always:** > 1. Use `az quota` CLI commands first (preferred method) > 2. If CLI returns `BadRequest`, check [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-ma - Network accessline 296
> 1. Use `az quota` CLI commands first (preferred method) > 2. If CLI returns `BadRequest`, check [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limi - Network accessline 297
> 2. If CLI returns `BadRequest`, check [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) - Network accessline 303
| Error | Cause | Solution | |-------|-------|----------| | `BadRequest` | Provider not supported by quota API | Use CLI (preferred) or check [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/managem - Network accessline 304
|-------|-------|----------| | `BadRequest` | Provider not supported by quota API | Use CLI (preferred) or check [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-servic - Network accessline 305
| `BadRequest` | Provider not supported by quota API | Use CLI (preferred) or check [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) |
.github/plugins/azure-skills/skills/azure-quotas/scripts/check-quota.ps1
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/azure-quotas/scripts/check-quota.sh
- Executable scriptline 1
#!/usr/bin/env bash
.github/plugins/azure-skills/skills/azure-reliability/references/configure-health-probes.md
- Network accessline 27
3. **Two endpoints, not one** — a fast `/health` for the load balancer, and an optional `/health/deep` for on-call diagnostics. 4. **For Container Apps, both liveness AND readiness** — liveness alone restarts the container without taking it - Network accessline 29
5. **Test the endpoint** before relying on it: `curl https://<app-url>/api/health`.
.github/plugins/azure-skills/skills/azure-reliability/references/configure-multi-region.md
- Network accessline 276
output endpoint string = 'https://${endpoint.properties.hostName}' - Access to secretsline 441
[Credential-related source omitted] - Access to secretsline 442
[Credential-related source omitted] - Access to secretsline 448
[Credential-related source omitted] - Access to secretsline 449
[Credential-related source omitted] - Access to secretsline 456
[Credential-related source omitted] - Access to secretsline 457
[Credential-related source omitted] - Access to secretsline 464
[Credential-related source omitted] - Access to secretsline 467
[Credential-related source omitted] - Access to secretsline 468
[Credential-related source omitted] - Network accessline 563
# Check Front Door endpoint is responding curl -I https://<front-door-name>-endpoint.z01.azurefd.net/api/health - Network accessline 564
curl -I https://<front-door-name>-endpoint.z01.azurefd.net/api/health
.github/plugins/azure-skills/skills/azure-reliability/references/health-probe-checks.md
- Network accessline 68
3. **Two endpoints, not one** — fast `/health` for the load balancer, optional `/health/deep` for on-call diagnostics. 4. **For Container Apps, both liveness AND readiness** — liveness alone restarts the container without taking it out of r - Network accessline 70
5. **Test the endpoint** before relying on it: `curl https://<app-url>/api/health`.
.github/plugins/azure-skills/skills/azure-reliability/references/services/app-service/reliability.md
- Network accessline 59
# Rules must be set via ARM PATCH (CLI doesn't expose autoHealRules directly) az rest --method patch \ --uri "https://management.azure.com/subscriptions/{sub}/resourceGroups/{rg}/providers/Microsoft.Web/sites/{app}/config/web?api-version= - Network accessline 60
az rest --method patch --uri "https://management.azure.com/subscriptions/{sub}/resourceGroups/{rg}/providers/Microsoft.Web/sites/{app}/config/web?api-version=2022-03-01" - Network accessline 61
--uri "https://management.azure.com/subscriptions/{sub}/resourceGroups/{rg}/providers/Microsoft.Web/sites/{app}/config/web?api-version=2022-03-01" \
.github/plugins/azure-skills/skills/azure-reliability/references/services/functions/reliability.md
- Network accessline 197
- [Reliability in Azure Functions (Microsoft Learn)](https://learn.microsoft.com/en-us/azure/reliability/reliability-functions)
.github/plugins/azure-skills/skills/azure-storage/SKILL.md
- Network accessline 82
- Blob storage patterns and lifecycle -> [Blob Storage documentation](https://learn.microsoft.com/azure/storage/blobs/storage-blobs-overview) - Network accessline 83
- File shares and Azure File Sync -> [Azure Files documentation](https://learn.microsoft.com/azure/storage/files/storage-files-introduction) - Network accessline 84
- Queue patterns and poison handling -> [Queue Storage documentation](https://learn.microsoft.com/azure/storage/queues/storage-queues-introduction)
.github/plugins/azure-skills/skills/azure-storage/references/auth-best-practices.md
- Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme)
.github/plugins/azure-skills/skills/azure-storage/references/sdk-usage.md
- Network accessline 36
service = BlobServiceClient(account_url="https://ACCOUNT.blob.core.windows.net/", credential=DefaultAzureCredential()) - Network accessline 47
const client = new BlobServiceClient("https://ACCOUNT.blob.core.windows.net/", new DefaultAzureCredential()); - Network accessline 58
var client = new BlobServiceClient(new Uri("https://ACCOUNT.blob.core.windows.net/"), new DefaultAzureCredential()); - Network accessline 70
BlobServiceClient client = new BlobServiceClientBuilder() .endpoint("https://ACCOUNT.blob.core.windows.net/") - Network accessline 71
.endpoint("https://ACCOUNT.blob.core.windows.net/") - Network accessline 90
func main() { cred, _ := azidentity.NewDefaultAzureCredential(nil) client, _ := azblob.NewClient("https://ACCOUNT.blob.core.windows.net/", cred, nil) - Network accessline 92
client, _ := azblob.NewClient("https://ACCOUNT.blob.core.windows.net/", cred, nil) - Network accessline 104
let credential = DeveloperToolsCredential::new(None)?; let blob_client = BlobClient::new( "https://ACCOUNT.blob.core.windows.net/", - Network accessline 105
let blob_client = BlobClient::new( "https://ACCOUNT.blob.core.windows.net/", "my-container", - Network accessline 106
"https://ACCOUNT.blob.core.windows.net/",
.github/plugins/azure-skills/skills/azure-storage/references/sdk/azure-storage-blob-ts.md
- Network accessline 12
import { BlobServiceClient } from "@azure/storage-blob"; import { DefaultAzureCredential } from "@azure/identity"; const client = new BlobServiceClient(`https://${accountName}.blob.core.windows.net`, new DefaultAzureCredential()); - Network accessline 14
const client = new BlobServiceClient(`https://${accountName}.blob.core.windows.net`, new DefaultAzureCredential());
.github/plugins/azure-skills/skills/azure-storage/references/sdk/azure-storage-file-share-ts.md
- Network accessline 12
import { ShareServiceClient } from "@azure/storage-file-share"; import { DefaultAzureCredential } from "@azure/identity"; const client = new ShareServiceClient(`https://${accountName}.file.core.windows.net`, new DefaultAzureCredential()); - Network accessline 14
const client = new ShareServiceClient(`https://${accountName}.file.core.windows.net`, new DefaultAzureCredential());
.github/plugins/azure-skills/skills/azure-storage/references/sdk/azure-storage-queue-ts.md
- Network accessline 12
import { QueueServiceClient } from "@azure/storage-queue"; import { DefaultAzureCredential } from "@azure/identity"; const client = new QueueServiceClient(`https://${accountName}.queue.core.windows.net`, new DefaultAzureCredential()); - Network accessline 14
const client = new QueueServiceClient(`https://${accountName}.queue.core.windows.net`, new DefaultAzureCredential());
.github/plugins/azure-skills/skills/azure-upgrade/SKILL.md
- Network accessline 91
- [Automation Scripts](references/services/functions/consumption-to-flex/windows/automation.md) - **Redis** - [Redis (ACR or ACRE) to AMR Migration](references/services/redis/redis-to-amr.md) — routes to dedicated [amr-migration-skill](ht - Network accessline 92
- **Redis** - [Redis (ACR or ACRE) to AMR Migration](references/services/redis/redis-to-amr.md) — routes to dedicated [amr-migration-skill](https://github.com/AzureManagedRedis/amr-migration-skill) (ACR/OSS) or [acre-to-amr-migration-skil - Network accessline 93
- [Redis (ACR or ACRE) to AMR Migration](references/services/redis/redis-to-amr.md) — routes to dedicated [amr-migration-skill](https://github.com/AzureManagedRedis/amr-migration-skill) (ACR/OSS) or [acre-to-amr-migration-skill](https://git
.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/INSTRUCTION.md
- Network accessline 102
- If azure-sdk-bom is used, ensure the BOM version exactly matches the resolved latest stable version recorded in the plan's `Guidelines` section as `TARGET_AZURE_SDK_BOM_VERSION` and there are **NO** explicit version dependencies for Azure - Network accessline 103
E.g. Instead of `implementation 'com.azure.resourcemanager:azure-resourcemanager:2.60.0'`, we should use `implementation 'com.azure.resourcemanager:azure-resourcemanager'`. For Azure libraries in azure-sdk-bom, check https://raw.githubuse - Network accessline 104
For Azure libraries in azure-sdk-bom, check https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/boms/azure-sdk-bom/pom.xml. - Network accessline 115
- [Migrate to `com.azure.resourcemanager.**` from `com.microsoft.azure.management.**`](https://aka.ms/java-track2-migration-guide) - Network accessline 116
- [Migrate to com.azure:azure-messaging-servicebus from com.microsoft.azure:azure-servicebus](https://aka.ms/azsdk/java/migrate/sb) - Network accessline 117
- [Migrate to azure-messaging-eventhubs from azure-eventhubs and azure-eventhubs-eph](https://aka.ms/azsdk/java/migrate/eh) - Network accessline 118
- [Migrate to `azure-messaging-eventgrid` from `microsoft-azure-eventgrid`](https://aka.ms/azsdk/java/migrate/eg) - Network accessline 119
- [Storage Blob Service SDK Migration Guide from 8.x to 12.x](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/storage/azure-storage-blob/migrationGuides/V8_V12.md) - Network accessline 120
- [Storage Blob Service SDK Migration Guide from 10.x/11.x to 12.x](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/storage/azure-storage-blob/migrationGuides/V10_V12.md) - Network accessline 121
- [Storage Queue Service SDK Migration Guide from 8.x to 12.x](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/storage/azure-storage-queue/migrationGuides/V8_V12.md) - Network accessline 122
- [Storage File Share Service SDK Migration Guide from 8.x to 12.x](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/storage/azure-storage-file-share/migrationGuides/V8_V12.md) - Network accessline 123
- [Migrate to azure-security-keyvault-secrets from azure-keyvault](https://aka.ms/azsdk/java/migrate/kv-secrets) - Network accessline 124
- [Migrate to azure-security-keyvault-keys from azure-keyvault](https://aka.ms/azsdk/java/migrate/kv-keys) - Network accessline 125
- [Migrate to azure-security-keyvault-certificates from azure-keyvault](https://aka.ms/azsdk/java/migrate/kv-cert) - Network accessline 126
- [Migrate to `Azure-Compute-Batch` from `Microsoft-Azure-Batch`](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/batch/azure-compute-batch/MigrationGuide.md) - Network accessline 127
- [Migrate to `azure-ai-documentintelligence` from `azure-ai-formrecognizer`](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/documentintelligence/azure-ai-documentintelligence/MIGRATION_GUIDE.md) - Network accessline 128
- [Migrate to `azure-ai-formrecognizer 4.0.0-beta.1 - above` from `azure-ai-formrecognizer 3.1.x - lower`](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/formrecognizer/azure-ai-formrecognizer/migration-guide.md) - Network accessline 129
- [Migration Guide from Azure OpenAI Java SDK to OpenAI Java SDK](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/openai/azure-ai-openai-stainless/MIGRATION.md) - Network accessline 130
- [Migrate to azure-monitor-query from azure-loganalytics and azure-applicationinsights-query](https://aka.ms/azsdk/java/migrate/monitorquery)
.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/bom-migration/bom-gradle-settings.md
- Network accessline 3
Some projects define version catalogs programmatically in `settings.gradle` / `settings.gradle.kts` instead of using a TOML file. OpenRewrite does not support this either ([openrewrite/rewrite#4852](https://github.com/openrewrite/rewrite/is
.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/bom-migration/bom-gradle-toml.md
- Network accessline 3
OpenRewrite does not yet support TOML version catalogs ([openrewrite/rewrite#4400](https://github.com/openrewrite/rewrite/issues/4400)). Handle manually.
.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/bom-migration/bom-gradle.md
- Network accessline 24
Under the hood (OpenRewrite recipes): - **Add BOM**: `AddPlatformDependency` ([docs](https://docs.openrewrite.org/recipes/gradle/addplatformdependency)) - Network accessline 25
- **Add BOM**: `AddPlatformDependency` ([docs](https://docs.openrewrite.org/recipes/gradle/addplatformdependency)) - Network accessline 26
- **Upgrade BOM**: `UpgradeDependencyVersion` ([docs](https://docs.openrewrite.org/recipes/gradle/upgradedependencyversion)) - Network accessline 27
- **Remove redundant versions**: `RemoveRedundantDependencyVersions` ([docs](https://docs.openrewrite.org/recipes/gradle/removeredundantdependencyversions)) - Network accessline 84
For every Azure dependency whose group starts with `com.azure` and is managed by the BOM (verify against `https://repo1.maven.org/maven2/com/azure/azure-sdk-bom/{bom_version}/azure-sdk-bom-{bom_version}.pom`), strip the version coordinate.
.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/bom-migration/bom-maven.md
- Network accessline 24
Under the hood (OpenRewrite recipes): - **Add BOM**: `AddManagedDependency` ([docs](https://docs.openrewrite.org/recipes/maven/addmanageddependency)) - Network accessline 25
- **Add BOM**: `AddManagedDependency` ([docs](https://docs.openrewrite.org/recipes/maven/addmanageddependency)) - Network accessline 26
- **Upgrade BOM**: `UpgradeDependencyVersion` ([docs](https://docs.openrewrite.org/recipes/maven/upgradedependencyversion)) - Network accessline 27
- **Remove redundant versions**: `RemoveRedundantDependencyVersions` ([docs](https://docs.openrewrite.org/recipes/maven/removeredundantdependencyversions)) - Network accessline 85
For every `<dependency>` whose `<groupId>` starts with `com.azure` (e.g. `com.azure`, `com.azure.resourcemanager`, `com.azure.spring`), check whether the BOM manages it (see the BOM POM at `https://repo1.maven.org/maven2/com/azure/azure-sdk
.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/bom-migration/bom-migration.md
- Network accessline 39
If Python is not available or the `--get-latest-version` command fails, fetch `https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/boms/azure-sdk-bom/pom.xml` directly and use the `<version>` value declared in that BOM `pom. - Network accessline 57
> 💡 **Tip:** To check which artifacts are managed by the BOM, fetch > `https://repo1.maven.org/maven2/com/azure/azure-sdk-bom/{bom_version}/azure-sdk-bom-{bom_version}.pom` - Network accessline 58
> `https://repo1.maven.org/maven2/com/azure/azure-sdk-bom/{bom_version}/azure-sdk-bom-{bom_version}.pom`
.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/package-specific/com.microsoft.azure.eventprocessorhost.md
- Network accessline 16
Replace usage of `InMemoryCheckpointManager` / `InMemoryLeaseManager` with [BlobCheckpointStore](https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/eventhubs/azure-messaging-eventhubs-checkpointstore-blob/src/main/java/com/azure/mess
.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/package-specific/com.microsoft.azure.management.md
- Access to secretsline 61
[Credential-related source omitted]
.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/scripts/upgrade_bom.py
- Executable scriptline 1
#!/usr/bin/env python3 - Network accessline 43
GROUP_ID = "com.azure" ARTIFACT_ID = "azure-sdk-bom" BOM_POM_URL = "https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/boms/azure-sdk-bom/pom.xml" - Network accessline 44
ARTIFACT_ID = "azure-sdk-bom" BOM_POM_URL = "https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/boms/azure-sdk-bom/pom.xml" POM_NAMESPACE = {"m": "http://maven.apache.org/POM/4.0.0"} - Network accessline 45
BOM_POM_URL = "https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/boms/azure-sdk-bom/pom.xml" - Network accessline 46
POM_NAMESPACE = {"m": "http://maven.apache.org/POM/4.0.0"} - Network accessline 80
def _get_latest_bom_version() -> str: try: with urllib.request.urlopen(BOM_POM_URL, timeout=HTTP_TIMEOUT_SECONDS) as response: - Network accessline 81
try: with urllib.request.urlopen(BOM_POM_URL, timeout=HTTP_TIMEOUT_SECONDS) as response: pom_xml = response.read() - Network accessline 82
with urllib.request.urlopen(BOM_POM_URL, timeout=HTTP_TIMEOUT_SECONDS) as response: - Network accessline 167
except ET.ParseError: return False ns = {"m": "http://maven.apache.org/POM/4.0.0"} - Network accessline 168
return False ns = {"m": "http://maven.apache.org/POM/4.0.0"} for dep in tree.findall(".//m:dependencyManagement/m:dependencies/m:dependency", ns): - Network accessline 169
ns = {"m": "http://maven.apache.org/POM/4.0.0"}
.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/templates/PLAN_TEMPLATE.md
- Network accessline 198
- **Fluent API Changes** - **Challenge**: Method names and builder patterns differ between legacy and modern Azure Resource Manager. - **Strategy**: Follow the migration guide at https://aka.ms/java-track2-migration-guide for meth - Network accessline 199
- **Challenge**: Method names and builder patterns differ between legacy and modern Azure Resource Manager. - **Strategy**: Follow the migration guide at https://aka.ms/java-track2-migration-guide for method-level mappings. --> - Network accessline 200
- **Strategy**: Follow the migration guide at https://aka.ms/java-track2-migration-guide for method-level mappings.
.github/plugins/azure-skills/skills/azure-upgrade/references/languages/java/templates/SUMMARY_TEMPLATE.md
- Network accessline 111
- **Fluent API Changes** - **Issue**: Method names differ between legacy Azure.management and modern azure-resourcemanager. - **Resolution**: Followed migration guide at https://aka.ms/java-track2-migration-guide - Network accessline 112
- **Issue**: Method names differ between legacy Azure.management and modern azure-resourcemanager. - **Resolution**: Followed migration guide at https://aka.ms/java-track2-migration-guide - **Files Changed**: ResourceProvisioner.jav - Network accessline 113
- **Resolution**: Followed migration guide at https://aka.ms/java-track2-migration-guide
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/linux/automation.md
- Network accessline 4
> All scripts use `bash` syntax compatible with Azure Cloud Shell. For PowerShell, adapt accordingly. > > **Source docs**: [Linux migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migration/migrate-plan-consumption-to - Network accessline 6
> **Source docs**: [Linux migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migration/migrate-plan-consumption-to-flex?pivots=platform-linux) - Network accessline 89
If this returns output, determine whether the source app actually uses those certificates. Plan to re-add used certificates after migration with the documented [site-scoped certificate process](https://learn.microsoft.com/en-us/azure/azure- - Network accessline 209
if [[ "$runFromPackage" =~ ^https:// ]]; then echo "Downloading the remote deployment package..." curl --fail --location --silent --show-error --output "$UPGRADE_DIR/source-package.zip" "$runFromPackage" - Network accessline 210
echo "Downloading the remote deployment package..." curl --fail --location --silent --show-error --output "$UPGRADE_DIR/source-package.zip" "$runFromPackage" echo "Downloaded the remote deployment package without displaying - Network accessline 211
curl --fail --location --silent --show-error --output "$UPGRADE_DIR/source-package.zip" "$runFromPackage" - Network accessline 352
- [Build and deploy with Azure Pipelines](https://learn.microsoft.com/en-us/azure/azure-functions/functions-how-to-azure-devops) - Network accessline 353
- [Build and deploy with GitHub Actions](https://learn.microsoft.com/en-us/azure/azure-functions/functions-how-to-github-actions) - Network accessline 363
If `func` is unavailable or the reported major version is not `4`, stop and provide the [Core Tools installation guidance](https://learn.microsoft.com/en-us/azure/azure-functions/functions-run-local#install-the-azure-functions-core-tools). - Network accessline 401
HTTP_STATUS=$(curl -s -o /dev/null -w "%{http_code}" "https://$DEFAULT_HOST") - Network accessline 418
# Test an HTTP trigger function curl -s -o /dev/null -w "%{http_code}" "https://$DEFAULT_HOST/api/<FUNCTION_NAME>" - Network accessline 419
curl -s -o /dev/null -w "%{http_code}" "https://$DEFAULT_HOST/api/<FUNCTION_NAME>"
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/linux/workflow.md
- Network accessline 4
> **Target**: Azure Functions Flex Consumption Plan (FC1/FlexConsumption) > **Platform**: Linux → Linux. For a Windows Consumption source, use the [Windows workflow](../windows/workflow.md). > **Docs**: [Linux migration guide](https://learn - Network accessline 6
> **Docs**: [Linux migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migration/migrate-plan-consumption-to-flex?pivots=platform-linux) - Network accessline 139
1. **Smoke test** — Get the app’s default hostname via `az functionapp show --query defaultHostName -o tsv`, then hit that URL and confirm it returns a non-error response (HTTP 2xx/4xx, not connection refused or 503). This is the minimum ba - Network accessline 140
2. Verify the app is running on Flex Consumption (`az functionapp show --query sku`) 3. Test HTTP trigger endpoints (e.g. `curl https://<DEFAULT_HOST>/api/<FUNCTION_NAME>`) 4. Capture and compare performance benchmarks - Network accessline 141
3. Test HTTP trigger endpoints (e.g. `curl https://<DEFAULT_HOST>/api/<FUNCTION_NAME>`) - Network accessline 225
- [Flex Consumption plan overview](https://learn.microsoft.com/en-us/azure/azure-functions/flex-consumption-plan) - Network accessline 226
- [How to use the Flex Consumption plan](https://learn.microsoft.com/en-us/azure/azure-functions/flex-consumption-how-to) - Network accessline 227
- [Azure CLI flex-migration commands](https://learn.microsoft.com/en-us/cli/azure/functionapp/flex-migration) (Linux only) - Network accessline 228
- [Flex Consumption IaC samples](https://github.com/Azure-Samples/azure-functions-flex-consumption-samples/tree/main/IaC) - Network accessline 229
- [Flex Consumption plan deprecations](https://learn.microsoft.com/en-us/azure/azure-functions/functions-app-settings#flex-consumption-plan-deprecations)
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation.md
- Network accessline 12
> Replace `<PLACEHOLDERS>` (e.g. `<APP_NAME>`, `<RESOURCE_GROUP>`) with literal values before running each command. Each `az` command is a single line for cross-shell safety; conditional steps are described in prose between code blocks. > > - Network accessline 13
> > **Source docs**: [Windows migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migration/migrate-plan-consumption-to-flex?pivots=platform-windows) > - Network accessline 14
> **Source docs**: [Windows migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migration/migrate-plan-consumption-to-flex?pivots=platform-windows)
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/app-creation.md
- Network accessline 69
If either account prohibits Shared Key access, or policy requires identity-based storage, **do not run the `az functionapp create` command below**. Its basic flow configures host storage with a connection string; deployment-storage identity - Network accessline 80
1. Load and reconcile the saved progress using [Migration Progress](../progress-tracking.md). Keep Step 4b blocked while checking the target. If the progress file is missing, stop and ask for its location rather than guessing prior work. If - Network accessline 81
2. Require a full `Microsoft.Web/sites` resource ID, not a slot, and reject the source app itself. Resolve the target read-only. Require the source and target to be in the active subscription because subsequent migration commands assume tha - Network accessline 82
3. Verify managed identity configuration and effective role assignments for **both** [host storage](https://learn.microsoft.com/en-us/azure/azure-functions/manage-connections?pivots=functions-auth-identity&tabs=host) and [deployment storage - Network accessline 104
> 💡 This command matches the basic Flex Consumption create flow documented in [Create a Flex Consumption app (MS Learn)](https://learn.microsoft.com/en-us/azure/azure-functions/flex-consumption-how-to?tabs=azure-cli%2Cazure-cli-publish&pivo - Network accessline 112
This is a post-create hardening pass that mirrors the optional pattern documented in [Configure deployment settings (MS Learn)](https://learn.microsoft.com/en-us/azure/azure-functions/flex-consumption-how-to?tabs=azure-cli%2Cazure-cli-publi - Network accessline 150
> 💡 **Deployment storage is separate**: The commands above configure only runtime `AzureWebJobsStorage`. To also move the One Deploy package container off the connection string, follow [Configure deployment settings](https://learn.microsoft
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/app-settings.md
- Network accessline 17
> Before reading values, compare mapped source names case-insensitively. If two source names map to the same target name, stop and use `ask_user`; never silently choose between them. An existing target name is not a collision: after the use - Network accessline 18
> > Surface this once as a **post-migration follow-up** (do not block 4c on it): connection strings or keys for **Azure services** (Storage, Service Bus, Event Hubs, Cosmos DB, Key Vault) can be replaced with [identity-based connections](ht - Network accessline 19
> Surface this once as a **post-migration follow-up** (do not block 4c on it): connection strings or keys for **Azure services** (Storage, Service Bus, Event Hubs, Cosmos DB, Key Vault) can be replaced with [identity-based connections](http - Network accessline 102
} $body = @{ properties = $merged } | ConvertTo-Json -Compress -Depth 10 $accessToken = az account get-access-token --resource https://management.azure.com/ --query accessToken -o tsv - Network accessline 103
$body = @{ properties = $merged } | ConvertTo-Json -Compress -Depth 10 $accessToken = az account get-access-token --resource https://management.azure.com/ --query accessToken -o tsv if ($LASTEXITCODE -ne 0 -or [string]::IsNullOrWhit - Network accessline 104
$accessToken = az account get-access-token --resource https://management.azure.com/ --query accessToken -o tsv - Network accessline 106
$secureToken = ConvertTo-SecureString ($accessToken.Trim()) -AsPlainText -Force $accessToken = $null $uri = "https://management.azure.com$base/<RESOURCE_GROUP>/providers/Microsoft.Web/sites/<NEW_APP_NAME>/config/appsettings?api-vers - Network accessline 107
$accessToken = $null $uri = "https://management.azure.com$base/<RESOURCE_GROUP>/providers/Microsoft.Web/sites/<NEW_APP_NAME>/config/appsettings?api-version=$api" Invoke-RestMethod -Method Patch -Uri $uri -Authentication Bearer -Toke - Network accessline 108
$uri = "https://management.azure.com$base/<RESOURCE_GROUP>/providers/Microsoft.Web/sites/<NEW_APP_NAME>/config/appsettings?api-version=$api"
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/built-in-authentication.md
- Network accessline 15
For each enabled provider, identify the target callback URI required by that provider. Easy Auth callback URIs generally use `https://<TARGET_HOSTNAME>/.auth/login/<PROVIDER>/callback`, but verify the exact URI against the provider-specific
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/code-deployment.md
- Network accessline 72
- [Build and deploy with Azure Pipelines](https://learn.microsoft.com/en-us/azure/azure-functions/functions-how-to-azure-devops) - Network accessline 73
- [Build and deploy with GitHub Actions](https://learn.microsoft.com/en-us/azure/azure-functions/functions-how-to-github-actions) - Network accessline 83
If `func` is unavailable or the reported major version is not `4`, stop and provide the [Core Tools installation guidance](https://learn.microsoft.com/en-us/azure/azure-functions/functions-run-local#install-the-azure-functions-core-tools).
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/deployment-package.md
- Network accessline 13
runFromPackage=$(az functionapp config appsettings list --name <APP_NAME> --resource-group <RESOURCE_GROUP> --query "[?name=='WEBSITE_RUN_FROM_PACKAGE'].value | [0]" -o tsv) if [[ "$runFromPackage" =~ ^https:// ]]; then curl --fail --lo - Network accessline 14
if [[ "$runFromPackage" =~ ^https:// ]]; then curl --fail --location --silent --show-error --output "$UPGRADE_DIR/source-package.zip" "$runFromPackage" echo "Downloaded the remote deployment package without displaying its URL." - Network accessline 15
curl --fail --location --silent --show-error --output "$UPGRADE_DIR/source-package.zip" "$runFromPackage" - Dangerous shell operationline 84
rm <UPGRADE_DIR>/packagename.txt
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/discovery-and-assessment.md
- Network accessline 99
If this returns output, determine which certificates the source app actually uses. Record whether each used certificate is private or public and confirm the target can fit within the Flex Consumption limit of three private and three public - Network accessline 113
For all Blob triggers, inspect the planned target inbound configuration (or the existing target's public network access, private endpoints, and main-site access restrictions). Event Grid push delivery [can't deliver through private endpoint
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/networking-and-storage.md
- Network accessline 25
Adding a hostname binding does not update its DNS record or move traffic to the target. Verify domain ownership as described in [Migrate an active DNS name](https://learn.microsoft.com/en-us/azure/app-service/manage-custom-dns-migrate-domai
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/trigger-safety-and-monitoring.md
- Network accessline 7
> HTTP triggers are intentionally left enabled — they don't pull from a queue, so the new app cannot "steal" HTTP traffic. Clients must be redirected to the new hostname explicitly, which gives you the same safety as disabling. > > Referenc - Network accessline 8
> > Reference: [Disable functions in Azure Functions](https://learn.microsoft.com/en-us/azure/azure-functions/disable-function). > - Network accessline 9
> Reference: [Disable functions in Azure Functions](https://learn.microsoft.com/en-us/azure/azure-functions/disable-function). - Network accessline 149
If Step 2e identified certificates used by the source app, re-add only those certificates using the documented [site-scoped certificate process](https://learn.microsoft.com/en-us/azure/azure-functions/flex-consumption-how-to#configure-site-
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/validation-and-cutover.md
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/workflow.md
- Network accessline 4
> **Target**: Azure Functions Flex Consumption Plan (FC1/FlexConsumption) > **Platform**: Windows → Linux (Flex Consumption is Linux-based) > **Docs**: [Windows migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migrat - Network accessline 6
> **Docs**: [Windows migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migration/migrate-plan-consumption-to-flex?pivots=platform-windows) - Network accessline 39
- **Deployment model**: Windows Consumption uses Azure Files (SMB share via `WEBSITE_CONTENTAZUREFILECONNECTIONSTRING`/`WEBSITE_CONTENTSHARE`); Flex uses blob-based One Deploy (immutable zip packages in Azure Blob Storage). - **`az function - Network accessline 41
- **Elastic Premium alternative**: Apps with hard Windows dependencies that cannot be removed can migrate to [Elastic Premium on Windows](https://learn.microsoft.com/en-us/azure/azure-functions/functions-premium-plan) instead of Flex Consum - Network accessline 77
| Azure Government | ❌ Not available | Cannot migrate yet | | MSDeploy / FTP / Kudu git deploy | ❌ Not supported | Switch to `az functionapp deploy` or `func azure functionapp publish` | | PowerShell managed dependencies | ❌ Not supported | - Network accessline 79
| PowerShell managed dependencies | ❌ Not supported | Package all required modules in the app-root `Modules` folder before deployment; verify Linux compatibility. `requirements.psd1` alone doesn't install modules on Flex Consumption. See [P - Network accessline 90
| PowerShell Windows-only modules (WMI, registry, COM) | `requirements.psd1` module imports | Replace with cross-platform alternatives or remove | | Windows certificate store access | Code review | Migrate to file-based certificate loading - Network accessline 91
| Windows certificate store access | Code review | Migrate to file-based certificate loading | | Unsupported language runtime version | Site config | Upgrade to a [supported version](https://learn.microsoft.com/en-us/azure/azure-functions/s - Network accessline 92
| Unsupported language runtime version | Site config | Upgrade to a [supported version](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) | - Network accessline 95
> 💡 **Elastic Premium escape hatch**: Apps with hard Windows dependencies that cannot be removed can migrate to [Elastic Premium on Windows](https://learn.microsoft.com/en-us/azure/azure-functions/functions-premium-plan) as an alternative. - Network accessline 110
> 💡 Constraints (from the underlying [MS Learn create flow](https://learn.microsoft.com/en-us/azure/azure-functions/flex-consumption-how-to?tabs=azure-cli%2Cazure-cli-publish&pivots=programming-language-csharp#create-a-flex-consumption-app) - Network accessline 225
1. **Smoke test** — Get the app's default hostname via `az functionapp show --query defaultHostName -o tsv`, then hit that URL and confirm it returns a non-error response (HTTP 2xx/4xx, not connection refused or 503). If an intentional acce - Network accessline 226
2. Verify the app is running on Flex Consumption (`az functionapp show --query sku`) 3. Test HTTP trigger endpoints (e.g. `curl https://<DEFAULT_HOST>/api/<FUNCTION_NAME>`) 4. **Per-function validation and cutover for event-driven triggers* - Network accessline 227
3. Test HTTP trigger endpoints (e.g. `curl https://<DEFAULT_HOST>/api/<FUNCTION_NAME>`) - Instruction override signalline 228
4. **Per-function validation and cutover for event-driven triggers** — either validate the target against isolated test resources without changing the source, or use a production cutover transaction. For production, obtain function-specific - Instruction override signalline 244
> ✅ **Recommended safety net**: When the user approves [Step 4j](automation/trigger-safety-and-monitoring.md#4j-choose-the-pre-deployment-state-of-non-http-functions), non-HTTP functions are disabled before deployment. Phase 6 then uses iso
.github/plugins/azure-skills/skills/azure-upgrade/references/services/redis/redis-to-amr.md
- Network accessline 10
| Source SKU | ARM Resource Type | CLI / PowerShell | Dedicated Skill | Repo | |---|---|---|---|---| | **ACR / OSS Redis** — Basic, Standard, Premium (C0–C6, P1–P5) | `Microsoft.Cache/redis` | `az redis`, `*-AzRedisCache` | `amr-migration-s - Network accessline 11
|---|---|---|---|---| | **ACR / OSS Redis** — Basic, Standard, Premium (C0–C6, P1–P5) | `Microsoft.Cache/redis` | `az redis`, `*-AzRedisCache` | `amr-migration-skill` | https://github.com/AzureManagedRedis/amr-migration-skill | | **ACRE** — - Network accessline 12
| **ACR / OSS Redis** — Basic, Standard, Premium (C0–C6, P1–P5) | `Microsoft.Cache/redis` | `az redis`, `*-AzRedisCache` | `amr-migration-skill` | https://github.com/AzureManagedRedis/amr-migration-skill | - Network accessline 13
| **ACRE** — Enterprise (`Enterprise_E*`), Enterprise Flash (`EnterpriseFlash_F*`) | `Microsoft.Cache/redisEnterprise` | `az redisenterprise`, `*-AzRedisEnterprise*` | `acre-to-amr-migration-skill` | https://github.com/AzureManagedRedis/acr - Network accessline 48
- IaC template migration for ARM, Bicep, and Terraform with worked before/after examples - Feature comparison and retirement FAQ - **Retirement deadlines this skill addresses**: ACR Basic/Standard/Premium tiers are being retired — for the c - Network accessline 50
- **Retirement deadlines this skill addresses**: ACR Basic/Standard/Premium tiers are being retired — for the current retirement and creation-block dates, see the [official ACR retirement announcement](https://learn.microsoft.com/en-us/azur - Network accessline 60
- Reusable polling scripts (`Poll-MigrationStatus.ps1`, `poll-migration-status.sh`) - Post-migration ACRE resource cleanup - **Retirement deadline this skill addresses**: ACRE / Enterprise Flash are being retired — for the current retiremen - Network accessline 62
- **Retirement deadline this skill addresses**: ACRE / Enterprise Flash are being retired — for the current retirement date, see the [official ACR retirement announcement](https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache- - Network accessline 98
- AMR Migration Skill (ACR → AMR): https://github.com/AzureManagedRedis/amr-migration-skill - Network accessline 99
- ACRE → AMR Migration Skill: https://github.com/AzureManagedRedis/acre-to-amr-migration-skill - Network accessline 100
- Azure Managed Redis docs: https://learn.microsoft.com/en-us/azure/redis/managed-redis/ - Network accessline 101
- ACR retirement announcement: https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-retired-tiers - Network accessline 102
- Entra ID auth for AMR: https://learn.microsoft.com/en-us/azure/redis/managed-redis/managed-redis-entra-for-access-control-configuration
.github/plugins/azure-skills/skills/azure-validate/references/global-rules.md
- Dangerous shell operationline 13
| **Delete** | `az group delete`, `azd down`, `rm -rf`, delete resource |
.github/plugins/azure-skills/skills/azure-validate/references/recipes/azd/scripts/set-aspire-aca-env.ps1
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/azure-validate/references/recipes/azd/scripts/set-aspire-aca-env.sh
- Executable scriptline 1
#!/usr/bin/env bash
.github/plugins/azure-skills/skills/azure-validate/references/recipes/scripts/validate-deployment.ps1
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/azure-validate/references/recipes/scripts/validate-deployment.sh
- Executable scriptline 1
#!/usr/bin/env bash
.github/plugins/azure-skills/skills/azure-validate/references/recipes/terraform/README.md
- Network accessline 59
- Terraform: see https://developer.hashicorp.com/terraform/install
.github/plugins/azure-skills/skills/azure-validate/references/recipes/terraform/errors.md
- Network accessline 28
site_config { cors { allowed_origins = ["https://${azurerm_linux_web_app.frontend.default_hostname}"] - Network accessline 29
cors { allowed_origins = ["https://${azurerm_linux_web_app.frontend.default_hostname}"] } - Network accessline 30
allowed_origins = ["https://${azurerm_linux_web_app.frontend.default_hostname}"] - Network accessline 36
resource "azurerm_linux_web_app" "frontend" { app_settings = { API_URL = "https://${azurerm_linux_web_app.api.default_hostname}" - Network accessline 37
app_settings = { API_URL = "https://${azurerm_linux_web_app.api.default_hostname}" } - Network accessline 38
API_URL = "https://${azurerm_linux_web_app.api.default_hostname}" - Network accessline 64
> ⚠<U+FE0F> **Warning:** If using `["*"]` as a temporary bootstrap value, you **must** set `frontend_origin` to the actual URL (e.g., `https://app-web-*.azurewebsites.net`) and re-run `terraform apply` in the same deployment session before reporti
.github/plugins/azure-skills/skills/azure-validate/references/recipes/terraform/scripts/validate-terraform.ps1
- Executable scriptline 1
Executable file - Network accessline 50
Add-Result "Terraform installed" "PASS" } else { Add-Result "Terraform installed" "FAIL" "terraform not found on PATH. Install: https://developer.hashicorp.com/terraform/install" - Network accessline 51
} else { Add-Result "Terraform installed" "FAIL" "terraform not found on PATH. Install: https://developer.hashicorp.com/terraform/install" } - Network accessline 52
Add-Result "Terraform installed" "FAIL" "terraform not found on PATH. Install: https://developer.hashicorp.com/terraform/install"
.github/plugins/azure-skills/skills/azure-validate/references/recipes/terraform/scripts/validate-terraform.sh
- Executable scriptline 1
#!/usr/bin/env bash - Network accessline 50
record "Terraform installed" "PASS" else record "Terraform installed" "FAIL" "terraform not found on PATH. Install: https://developer.hashicorp.com/terraform/install" - Network accessline 51
else record "Terraform installed" "FAIL" "terraform not found on PATH. Install: https://developer.hashicorp.com/terraform/install" fi - Network accessline 52
record "Terraform installed" "FAIL" "terraform not found on PATH. Install: https://developer.hashicorp.com/terraform/install" - Dangerous shell operationline 102
rm -f "$tmp"
.github/plugins/azure-skills/skills/azure-validate/references/region-availability.md
- Network accessline 3
> **AUTHORITATIVE SOURCE** — Consult this file BEFORE recommending any region. > > Official reference: https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table - Network accessline 5
> Official reference: https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table - Network accessline 53
> Check https://learn.microsoft.com/azure/ai-services/openai/concepts/models for current model availability.
.github/plugins/azure-skills/skills/azure-validate/references/scripts/scan-aspire-functions-secrets.ps1
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/azure-validate/references/scripts/scan-aspire-functions-secrets.sh
- Executable scriptline 1
#!/usr/bin/env bash
.github/plugins/azure-skills/skills/azure-validate/references/scripts/workflow.ps1
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/azure-validate/references/scripts/workflow.sh
- Executable scriptline 1
#!/usr/bin/env bash
.github/plugins/azure-skills/skills/discover-azure-skills/SKILL.md
- Network accessline 14
List Azure plugin directories from the GitHub Contents API: https://api.github.com/repos/microsoft/azure-skills/contents/.github/plugins?ref=main - Network accessline 20
For each plugin, list their skills from the GitHub Contents API: https://api.github.com/repos/microsoft/azure-skills/contents/.github/plugins/{plugin-dirname}/skills?ref=main - Network accessline 26
Eliminate the skills that obviously aren't relevant by their names. Then for each remaining skill, read their description from the API: https://raw.githubusercontent.com/microsoft/azure-skills/main/.github/plugins/{plugin-dirname}/skills/{s - Network accessline 32
For each relevant skill, discover their plugin name by reading the `plugin.json` from the GitHub Contents API: https://raw.githubusercontent.com/microsoft/azure-skills/main/.github/plugins/{plugin-dirname}/.plugin/plugin.json
.github/plugins/azure-skills/skills/discover-azure-skills/references/install/other.md
- Network accessline 6
npx skills@1.7.4 add https://github.com/microsoft/azure-skills/tree/main/.github/plugins/{plugin-dirname}/skills/{skill-name}
.github/plugins/azure-skills/skills/entra-agent-id/SKILL.md
- Network accessline 17
|----------|-------| | Service | Microsoft Entra Agent ID | | API | Microsoft Graph (`https://graph.microsoft.com/v1.0`) | - Network accessline 18
| Service | Microsoft Entra Agent ID | | API | Microsoft Graph (`https://graph.microsoft.com/v1.0`) | | Required role | Agent Identity Developer, Agent Identity Administrator, or Application Administrator | - Network accessline 19
| API | Microsoft Graph (`https://graph.microsoft.com/v1.0`) | - Access to secretsline 112
[Credential-related source omitted] - Access to secretsline 113
[Credential-related source omitted] - Network accessline 114
[Credential-related source omitted] - Access to secretsline 114
[Credential-related source omitted] - Network accessline 116
[Credential-related source omitted] - Network accessline 118
GRAPH = "https://graph.microsoft.com/v1.0" - Network accessline 142
"displayName": "My Agent Blueprint", "sponsors@odata.bind": [ f"https://graph.microsoft.com/v1.0/users/{user_id}" - Network accessline 143
"sponsors@odata.bind": [ f"https://graph.microsoft.com/v1.0/users/{user_id}" ], - Network accessline 144
f"https://graph.microsoft.com/v1.0/users/{user_id}" - Network accessline 145
], } resp = requests.post( - Network accessline 146
} resp = requests.post( f"{GRAPH}/applications/microsoft.graph.agentIdentityBlueprint", - Network accessline 147
resp = requests.post( - Network accessline 164
sp_body = {"appId": app_id} resp = requests.post( - Network accessline 165
resp = requests.post( - Network accessline 181
"agentIdentityBlueprintId": app_id, "sponsors@odata.bind": [ f"https://graph.microsoft.com/v1.0/users/{user_id}" - Network accessline 182
"sponsors@odata.bind": [ f"https://graph.microsoft.com/v1.0/users/{user_id}" ], - Network accessline 183
f"https://graph.microsoft.com/v1.0/users/{user_id}" - Network accessline 184
], } resp = requests.post( - Network accessline 185
} resp = requests.post( f"{GRAPH}/servicePrincipals/microsoft.graph.agentIdentity", - Network accessline 186
resp = requests.post( - Network accessline 224
graph_sp = requests.get( - Network accessline 231
requests.post( - Network accessline 249
requests.post( - Network accessline 286
Base URL: `https://graph.microsoft.com/v1.0`. - Network accessline 351
| Resource | URL | |----------|-----| | Agent ID Setup Guide | https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-setup-instructions | - Network accessline 352
|----------|-----| | Agent ID Setup Guide | https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-setup-instructions | | AI-Guided Setup | https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-ai- - Network accessline 353
| Agent ID Setup Guide | https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-setup-instructions | - Network accessline 354
| AI-Guided Setup | https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-ai-guided-setup | - Network accessline 355
| Microsoft Entra SDK for AgentID | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/overview | - Network accessline 356
| Microsoft.Identity.Web.AgentIdentities (.NET) | https://github.com/AzureAD/microsoft-identity-web/blob/master/src/Microsoft.Identity.Web.AgentIdentities/README.AgentIdentities.md |
.github/plugins/azure-skills/skills/entra-agent-id/references/known-limitations.md
- Network accessline 3
Source: [Microsoft Entra Agent ID — known issues and gaps](https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/preview-known-issues) - Network accessline 51
27. **Copilot Studio** — only custom engine agents are supported; Agent IDs are used for channel auth only (not connectors or tools). 28. **MSAL complexity** — Agent ID scenarios require managing Federated Identity Credentials manually. For - Network accessline 52
28. **MSAL complexity** — Agent ID scenarios require managing Federated Identity Credentials manually. For .NET use [Microsoft.Identity.Web.AgentIdentities](https://github.com/AzureAD/microsoft-identity-web/blob/master/src/Microsoft.Identit - Network accessline 56
Report unlisted issues via [aka.ms/agentidfeedback](https://aka.ms/agentidfeedback).
.github/plugins/azure-skills/skills/entra-agent-id/references/oauth2-token-flow.md
- Network accessline 3
Source: [Agent ID Setup Instructions](https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-setup-instructions) - Network accessline 21
requests.patch( - Network accessline 33
fic_body = { "name": "my-fic-name", "issuer": f"https://login.microsoftonline.com/{tenant_id}/v2.0", - Network accessline 34
"name": "my-fic-name", "issuer": f"https://login.microsoftonline.com/{tenant_id}/v2.0", "subject": mi_principal_id, # The MI's object ID (principalId), NOT client ID - Network accessline 35
"issuer": f"https://login.microsoftonline.com/{tenant_id}/v2.0", - Network accessline 37
"audiences": ["api://AzureADTokenExchange"], } requests.post( - Network accessline 38
} requests.post( f"{GRAPH}/applications/{blueprint_obj_id}" - Network accessline 39
requests.post( - Network accessline 62
jwks_client = PyJWKClient( f"https://login.microsoftonline.com/{tenant_id}/discovery/v2.0/keys" - Network accessline 63
f"https://login.microsoftonline.com/{tenant_id}/discovery/v2.0/keys" - Network accessline 70
algorithms=["RS256"], audience=f"api://{blueprint_app_id}", issuer=f"https://sts.windows.net/{tenant_id}/", - Network accessline 71
audience=f"api://{blueprint_app_id}", issuer=f"https://sts.windows.net/{tenant_id}/", ) - Network accessline 72
issuer=f"https://sts.windows.net/{tenant_id}/", - Network accessline 79
- **`subject`** is the MI's `principalId` (object ID), not its client ID. - **`audiences`** must be `["api://AzureADTokenExchange"]` — not your API audience. - **FIC `issuer`**: `https://login.microsoftonline.com/{tenant}/v2.0`. - Network accessline 80
- **`audiences`** must be `["api://AzureADTokenExchange"]` — not your API audience. - **FIC `issuer`**: `https://login.microsoftonline.com/{tenant}/v2.0`. - **Token `issuer`** for validation: `https://sts.windows.net/{tenant}/` (different d - Network accessline 81
- **FIC `issuer`**: `https://login.microsoftonline.com/{tenant}/v2.0`. - Network accessline 82
- **Token `issuer`** for validation: `https://sts.windows.net/{tenant}/` (different domain, trailing slash). - Network accessline 100
$credential = Invoke-MgGraphRequest -Method POST ` -Uri "https://graph.microsoft.com/v1.0/applications/<BLUEPRINT_OBJECT_ID>/addPassword" ` - Network accessline 101
-Uri "https://graph.microsoft.com/v1.0/applications/<BLUEPRINT_OBJECT_ID>/addPassword" ` - Network accessline 111
resp = requests.post(
.github/plugins/azure-skills/skills/entra-agent-id/references/obo-blueprint-setup.md
- Network accessline 39
}, } requests.patch( - Network accessline 40
} requests.patch( f"{GRAPH}/applications/{blueprint_obj_id}", - Network accessline 41
requests.patch( - Network accessline 63
requests.post( - Network accessline 82
tenant_id=tenant_id, client_id=client_app_id, # Your client app, NOT the Blueprint redirect_uri="http://localhost:8400", - Network accessline 83
client_id=client_app_id, # Your client app, NOT the Blueprint redirect_uri="http://localhost:8400", ) - Network accessline 84
redirect_uri="http://localhost:8400", - Network accessline 89
> If the user token targets `https://graph.microsoft.com` instead of the Blueprint, the OBO exchange returns `AADSTS50013: Assertion failed signature validation`.
.github/plugins/azure-skills/skills/entra-agent-id/references/runtime-token-exchange.md
- Network accessline 3
Source: [Agent ID Setup Instructions](https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-setup-instructions) - Network accessline 8
Step 1: Blueprint credentials + fmi_path → Parent token (aud: api://AzureADTokenExchange) Step 2: Parent token as client_assertion → Graph token (aud: https://graph.microsoft.com) - Network accessline 9
Step 2: Parent token as client_assertion → Graph token (aud: https://graph.microsoft.com) - Network accessline 19
TOKEN_URL = "https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token" - Access to secretsline 31
[Credential-related source omitted] - Network accessline 34
} data = urllib.parse.urlencode(params).encode("utf-8") req = urllib.request.Request( - Network accessline 35
data = urllib.parse.urlencode(params).encode("utf-8") req = urllib.request.Request( TOKEN_URL.format(tenant=tenant_id), data=data, - Network accessline 36
req = urllib.request.Request( - Network accessline 38
headers={"Content-Type": "application/x-www-form-urlencoded"}, ) with urllib.request.urlopen(req, timeout=10) as resp: - Network accessline 39
) with urllib.request.urlopen(req, timeout=10) as resp: return json.loads(resp.read())["access_token"] - Network accessline 40
with urllib.request.urlopen(req, timeout=10) as resp: - Access to secretsline 41
[Credential-related source omitted] - Network accessline 47
|-------|-------| | `aud` | `api://AzureADTokenExchange` | | `iss` | `https://login.microsoftonline.com/{tenant}/v2.0` | - Network accessline 48
| `aud` | `api://AzureADTokenExchange` | | `iss` | `https://login.microsoftonline.com/{tenant}/v2.0` | | `sub` | Blueprint SP object ID | - Network accessline 49
| `iss` | `https://login.microsoftonline.com/{tenant}/v2.0` | - Access to secretsline 58
[Credential-related source omitted] - Network accessline 86
"client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer", "client_assertion": parent_token, "scope": "https://graph.microsoft.com/.default", - Network accessline 87
"client_assertion": parent_token, "scope": "https://graph.microsoft.com/.default", } - Network accessline 88
"scope": "https://graph.microsoft.com/.default", } data = urllib.parse.urlencode(params).encode("utf-8") - Network accessline 89
} data = urllib.parse.urlencode(params).encode("utf-8") req = urllib.request.Request( - Network accessline 90
data = urllib.parse.urlencode(params).encode("utf-8") req = urllib.request.Request( TOKEN_URL.format(tenant=tenant_id), data=data, - Network accessline 91
req = urllib.request.Request( - Network accessline 93
headers={"Content-Type": "application/x-www-form-urlencoded"}, ) with urllib.request.urlopen(req, timeout=10) as resp: - Network accessline 94
) with urllib.request.urlopen(req, timeout=10) as resp: return json.loads(resp.read()) - Network accessline 95
with urllib.request.urlopen(req, timeout=10) as resp: - Network accessline 115
"assertion": user_token, "requested_token_use": "on_behalf_of", "scope": "https://graph.microsoft.com/.default", - Network accessline 116
"requested_token_use": "on_behalf_of", "scope": "https://graph.microsoft.com/.default", } - Network accessline 117
"scope": "https://graph.microsoft.com/.default", } data = urllib.parse.urlencode(params).encode("utf-8") - Network accessline 118
} data = urllib.parse.urlencode(params).encode("utf-8") req = urllib.request.Request( - Network accessline 119
data = urllib.parse.urlencode(params).encode("utf-8") req = urllib.request.Request( TOKEN_URL.format(tenant=tenant_id), data=data, - Network accessline 120
req = urllib.request.Request( - Network accessline 122
headers={"Content-Type": "application/x-www-form-urlencoded"}, ) with urllib.request.urlopen(req, timeout=10) as resp: - Network accessline 123
) with urllib.request.urlopen(req, timeout=10) as resp: return json.loads(resp.read()) - Network accessline 124
with urllib.request.urlopen(req, timeout=10) as resp:
.github/plugins/azure-skills/skills/entra-agent-id/references/sdk-sidecar-deployment.md
- Network accessline 13
[Credential-related source omitted] - Access to secretsline 13
[Credential-related source omitted] - Access to secretsline 14
[Credential-related source omitted] - Network accessline 16
def get_agent_token(downstream_api: str = "Graph") -> str: url = f"{SIDECAR_URL}/AuthorizationHeaderUnauthenticated/{downstream_api}" resp = requests.get(url, params={"AgentIdentity": AGENT_APP_ID}, timeout=30) - Network accessline 17
url = f"{SIDECAR_URL}/AuthorizationHeaderUnauthenticated/{downstream_api}" resp = requests.get(url, params={"AgentIdentity": AGENT_APP_ID}, timeout=30) resp.raise_for_status() - Network accessline 18
resp = requests.get(url, params={"AgentIdentity": AGENT_APP_ID}, timeout=30) - Network accessline 22
[Credential-related source omitted] - Network accessline 23
[Credential-related source omitted] - Network accessline 24
[Credential-related source omitted] - Network accessline 32
[Credential-related source omitted] - Network accessline 33
url = f"{SIDECAR_URL}/AuthorizationHeader/{downstream_api}" resp = requests.get( url, - Network accessline 34
resp = requests.get( - Network accessline 46
const SIDECAR_URL = process.env.SIDECAR_URL ?? "http://localhost:5000"; - Network accessline 56
const res = await fetch(url.toString()); - Network accessline 71
[Credential-related source omitted] - Network accessline 72
resp = requests.get( - Network accessline 84
[Credential-related source omitted] - Network accessline 85
resp = requests.get( - Network accessline 105
- "5001:5000" environment: - AzureAd__Instance=https://login.microsoftonline.com/ - Network accessline 106
environment: - AzureAd__Instance=https://login.microsoftonline.com/ - AzureAd__TenantId=${TENANT_ID} - Network accessline 107
- AzureAd__Instance=https://login.microsoftonline.com/ - Network accessline 110
- AzureAd__ClientCredentials__0__SourceType=ClientSecret - AzureAd__ClientCredentials__0__ClientSecret=${BLUEPRINT_CLIENT_SECRET} - DownstreamApis__Graph__BaseUrl=https://graph.microsoft.com/v1.0/ - Network accessline 111
[Credential-related source omitted] - Access to secretsline 111
[Credential-related source omitted] - Network accessline 112
- DownstreamApis__Graph__BaseUrl=https://graph.microsoft.com/v1.0/ - Network accessline 113
- DownstreamApis__Graph__Scopes__0=https://graph.microsoft.com/.default - Network accessline 115
- ASPNETCORE_URLS=http://+:5000 - Network accessline 120
- "3000:3000" environment: - SIDECAR_URL=http://sidecar:5000 - Network accessline 121
environment: - SIDECAR_URL=http://sidecar:5000 - AGENT_CLIENT_ID=${AGENT_CLIENT_ID} - Network accessline 122
- SIDECAR_URL=http://sidecar:5000 - Network accessline 147
env: - name: SIDECAR_URL value: "http://localhost:5000" - Network accessline 148
- name: SIDECAR_URL value: "http://localhost:5000" - name: sidecar - Network accessline 149
value: "http://localhost:5000" - Network accessline 166
value: "SignedAssertionFilePath" - name: Kestrel__Endpoints__Http__Url value: "http://127.0.0.1:5000" - Network accessline 167
- name: Kestrel__Endpoints__Http__Url value: "http://127.0.0.1:5000" resources: - Network accessline 168
value: "http://127.0.0.1:5000" resources: requests: { memory: "128Mi", cpu: "100m" } - Network accessline 184
1. **Bind to localhost** — `Kestrel__Endpoints__Http__Url=http://127.0.0.1:5000`
.github/plugins/azure-skills/skills/entra-agent-id/references/sdk-sidecar.md
- Network accessline 5
Image: `mcr.microsoft.com/entra-sdk/auth-sidecar:1.0.0-azurelinux3.0-distroless`. See [GitHub releases](https://github.com/AzureAD/microsoft-identity-web/releases) for tags. - Network accessline 48
env: - name: AzureAd__Instance value: "https://login.microsoftonline.com/" - Network accessline 49
- name: AzureAd__Instance value: "https://login.microsoftonline.com/" - name: AzureAd__TenantId - Network accessline 50
value: "https://login.microsoftonline.com/" - Network accessline 82
- name: DownstreamApis__Graph__BaseUrl value: "https://graph.microsoft.com/v1.0/" - Network accessline 83
value: "https://graph.microsoft.com/v1.0/" - Network accessline 84
- name: DownstreamApis__Graph__Scopes__0 value: "https://graph.microsoft.com/.default" - name: DownstreamApis__Graph__RequestAppToken - Network accessline 85
value: "https://graph.microsoft.com/.default" - Network accessline 117
| Resource | URL | |----------|-----| | SDK Overview | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/overview | - Network accessline 118
|----------|-----| | SDK Overview | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/overview | | Installation | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/installation | - Network accessline 119
| SDK Overview | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/overview | - Network accessline 120
| Installation | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/installation | - Network accessline 121
| Configuration | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/configuration | - Network accessline 122
| Endpoints | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/endpoints | - Network accessline 123
| Agent Identities | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/agent-identities | - Network accessline 124
| Security | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/security | - Network accessline 125
| OpenAPI Spec | https://github.com/AzureAD/microsoft-identity-web/blob/master/src/Microsoft.Identity.Web.Sidecar/OpenAPI/Microsoft.Identity.Web.AgentID.json |
.github/plugins/azure-skills/skills/entra-app-registration/SKILL.md
- Network accessline 56
- **Web Apps**: Add redirect URIs, enable ID tokens if needed - **SPAs**: Add redirect URIs, enable implicit grant flow if necessary - **Mobile/Desktop**: Use `http://localhost` or custom URI scheme - Network accessline 57
- **SPAs**: Add redirect URIs, enable implicit grant flow if necessary - **Mobile/Desktop**: Use `http://localhost` or custom URI scheme - **Services**: No redirect URI needed for client credentials flow - Network accessline 58
- **Mobile/Desktop**: Use `http://localhost` or custom URI scheme - Network accessline 188
- [Microsoft Identity Platform Documentation](https://learn.microsoft.com/entra/identity-platform/) - Network accessline 189
- [OAuth 2.0 and OpenID Connect protocols](https://learn.microsoft.com/entra/identity-platform/v2-protocols) - Network accessline 190
- [MSAL Documentation](https://learn.microsoft.com/entra/msal/) - Network accessline 191
- [Microsoft Graph API](https://learn.microsoft.com/graph/)
.github/plugins/azure-skills/skills/entra-app-registration/references/BICEP-EXAMPLE.bicep
- Network accessline 18
@description('Redirect URIs for web application') param webRedirectUris array = [ 'https://localhost:5001/signin-oidc' - Network accessline 19
param webRedirectUris array = [ 'https://localhost:5001/signin-oidc' 'https://myapp.azurewebsites.net/signin-oidc' - Network accessline 20
'https://localhost:5001/signin-oidc' - Network accessline 21
'https://myapp.azurewebsites.net/signin-oidc' - Network accessline 24
@description('Redirect URIs for single-page application') param spaRedirectUris array = [ 'http://localhost:3000' - Network accessline 25
param spaRedirectUris array = [ 'http://localhost:3000' 'https://myapp.azurewebsites.net' - Network accessline 26
'http://localhost:3000' - Network accessline 27
'https://myapp.azurewebsites.net' - Network accessline 53
enableAccessTokenIssuance: false } homePageUrl: 'https://myapp.azurewebsites.net' - Network accessline 54
} homePageUrl: 'https://myapp.azurewebsites.net' logoutUrl: 'https://myapp.azurewebsites.net/signout-oidc' - Network accessline 55
homePageUrl: 'https://myapp.azurewebsites.net' - Network accessline 56
logoutUrl: 'https://myapp.azurewebsites.net/signout-oidc' - Network accessline 65
publicClient: { redirectUris: [ 'http://localhost' - Network accessline 66
redirectUris: [ 'http://localhost' 'myapp://auth' - Network accessline 67
'http://localhost' - Network accessline 68
'myapp://auth' 'https://login.microsoftonline.com/common/oauth2/nativeclient' ] - Network accessline 69
'https://login.microsoftonline.com/common/oauth2/nativeclient' - Network accessline 175
// Information URLs info: { marketingUrl: 'https://myapp.example.com' - Network accessline 176
info: { marketingUrl: 'https://myapp.example.com' privacyStatementUrl: 'https://myapp.example.com/privacy' - Network accessline 177
marketingUrl: 'https://myapp.example.com' - Network accessline 178
privacyStatementUrl: 'https://myapp.example.com/privacy' - Network accessline 179
supportUrl: 'https://myapp.example.com/support' - Network accessline 180
termsOfServiceUrl: 'https://myapp.example.com/terms'
.github/plugins/azure-skills/skills/entra-app-registration/references/api-permissions.md
- Network accessline 49
Examples: https://graph.microsoft.com/User.Read - Network accessline 50
https://graph.microsoft.com/User.Read - Network accessline 51
https://graph.microsoft.com/Mail.Send - Network accessline 60
https://graph.microsoft.com/.default - Network accessline 134
1. Visit https://developer.microsoft.com/graph/graph-explorer - Network accessline 140
Visit: https://learn.microsoft.com/en-us/graph/permissions-reference - Network accessline 258
[Credential-related source omitted] - Network accessline 259
[Credential-related source omitted] - Network accessline 334
**Note:** Permission IDs may change. Always verify against the official [Microsoft Graph Permissions Reference](https://learn.microsoft.com/en-us/graph/permissions-reference) for the most current values. - Network accessline 338
- [Microsoft Graph Permissions Reference](https://learn.microsoft.com/en-us/graph/permissions-reference) - Network accessline 339
- [Permission Types](https://learn.microsoft.com/en-us/entra/identity-platform/permissions-consent-overview) - Network accessline 340
- [Admin Consent Workflow](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/configure-admin-consent-workflow) - Network accessline 341
- [Consent Framework](https://learn.microsoft.com/en-us/entra/identity-platform/consent-framework)
.github/plugins/azure-skills/skills/entra-app-registration/references/auth-best-practices.md
- Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme)
.github/plugins/azure-skills/skills/entra-app-registration/references/cli-commands.md
- Network accessline 29
az ad app create \ --display-name "MyWebApp" \ --web-redirect-uris "https://myapp.com/callback" \ - Network accessline 30
--display-name "MyWebApp" \ --web-redirect-uris "https://myapp.com/callback" \ --sign-in-audience "AzureADMyOrg" - Network accessline 31
--web-redirect-uris "https://myapp.com/callback" \ - Network accessline 37
az ad app create \ --display-name "MySpaApp" \ --spa-redirect-uris "http://localhost:3000" \ - Network accessline 38
--display-name "MySpaApp" \ --spa-redirect-uris "http://localhost:3000" \ --sign-in-audience "AzureADMyOrg" - Network accessline 39
--spa-redirect-uris "http://localhost:3000" \ - Network accessline 45
az ad app create \ --display-name "MyDesktopApp" \ --public-client-redirect-uris "http://localhost" \ - Network accessline 46
--display-name "MyDesktopApp" \ --public-client-redirect-uris "http://localhost" \ --sign-in-audience "AzureADMyOrg" - Network accessline 47
--public-client-redirect-uris "http://localhost" \ - Network accessline 53
az ad app create \ --display-name "MyMultiTenantApp" \ --web-redirect-uris "https://myapp.com/callback" \ - Network accessline 54
--display-name "MyMultiTenantApp" \ --web-redirect-uris "https://myapp.com/callback" \ --sign-in-audience "AzureADMultipleOrgs" - Network accessline 55
--web-redirect-uris "https://myapp.com/callback" \ - Network accessline 116
az ad app update --id $APP_ID \ --web-redirect-uris "https://myapp.com/callback" "https://myapp.com/auth" - Network accessline 117
--web-redirect-uris "https://myapp.com/callback" "https://myapp.com/auth" - Network accessline 122
az ad app update --id $APP_ID \ --spa-redirect-uris "http://localhost:3000" "http://localhost:5000" - Network accessline 123
--spa-redirect-uris "http://localhost:3000" "http://localhost:5000" - Network accessline 128
az ad app update --id $APP_ID \ --public-client-redirect-uris "http://localhost" "myapp://auth" - Network accessline 129
--public-client-redirect-uris "http://localhost" "myapp://auth" - Network accessline 364
# Variables APP_NAME="MyApplication" REDIRECT_URI="http://localhost:3000" - Network accessline 366
REDIRECT_URI="http://localhost:3000"
.github/plugins/azure-skills/skills/entra-app-registration/references/console-app-example.md
- Network accessline 44
.Create(ClientId) .WithAuthority(AzureCloudInstance.AzurePublic, TenantId) .WithRedirectUri("http://localhost") - Network accessline 45
.WithAuthority(AzureCloudInstance.AzurePublic, TenantId) .WithRedirectUri("http://localhost") .Build(); - Network accessline 46
.WithRedirectUri("http://localhost") - Network accessline 87
var response = await httpClient.GetAsync("https://graph.microsoft.com/v1.0/me"); - Network accessline 139
CLIENT_ID = "YOUR_APPLICATION_CLIENT_ID" TENANT_ID = "YOUR_TENANT_ID" AUTHORITY = f"https://login.microsoftonline.com/{TENANT_ID}" - Network accessline 140
TENANT_ID = "YOUR_TENANT_ID" AUTHORITY = f"https://login.microsoftonline.com/{TENANT_ID}" SCOPES = ["User.Read"] - Network accessline 141
AUTHORITY = f"https://login.microsoftonline.com/{TENANT_ID}" - Access to secretsline 190
[Credential-related source omitted] - Access to secretsline 193
[Credential-related source omitted] - Network accessline 197
response = requests.get( - Network accessline 198
'https://graph.microsoft.com/v1.0/me', - Access to secretsline 226
[Credential-related source omitted] - Access to secretsline 231
[Credential-related source omitted] - Network accessline 268
auth: { clientId: "YOUR_APPLICATION_CLIENT_ID", authority: "https://login.microsoftonline.com/YOUR_TENANT_ID", - Network accessline 269
clientId: "YOUR_APPLICATION_CLIENT_ID", authority: "https://login.microsoftonline.com/YOUR_TENANT_ID", } - Network accessline 270
authority: "https://login.microsoftonline.com/YOUR_TENANT_ID", - Network accessline 280
const authCodeUrlParameters = { scopes: scopes, redirectUri: "http://localhost:3000", - Network accessline 281
scopes: scopes, redirectUri: "http://localhost:3000", }; - Network accessline 282
redirectUri: "http://localhost:3000", - Network accessline 308
auth: { clientId: "YOUR_APPLICATION_CLIENT_ID", authority: "https://login.microsoftonline.com/YOUR_TENANT_ID", - Network accessline 309
clientId: "YOUR_APPLICATION_CLIENT_ID", authority: "https://login.microsoftonline.com/YOUR_TENANT_ID", clientSecret: "YOUR_CLIENT_SECRET", // From app registration - Network accessline 310
authority: "https://login.microsoftonline.com/YOUR_TENANT_ID", - Access to secretsline 311
[Credential-related source omitted] - Network accessline 317
const clientCredentialRequest = { scopes: ["https://graph.microsoft.com/.default"], - Network accessline 318
scopes: ["https://graph.microsoft.com/.default"], - Network accessline 333
try { const response = await axios.get('https://graph.microsoft.com/v1.0/me', options); - Network accessline 334
const response = await axios.get('https://graph.microsoft.com/v1.0/me', options); - Network accessline 392
- [MSAL Libraries](https://learn.microsoft.com/entra/msal/)
.github/plugins/azure-skills/skills/entra-app-registration/references/first-app-registration.md
- Network accessline 16
- Azure subscription (free tier works) - Azure Portal access: https://portal.azure.com - Network accessline 17
- Azure Portal access: https://portal.azure.com - Network accessline 22
1. Open [Azure Portal](https://portal.azure.com) - Network accessline 58
**URI examples:** - Web app: `https://localhost:5001/signin-oidc` - Network accessline 59
- Web app: `https://localhost:5001/signin-oidc` - Network accessline 60
- SPA: `http://localhost:3000` - Network accessline 61
- Console/Desktop: `http://localhost` - Network accessline 63
**For your first app:** Select **"Public client/native"** and enter `http://localhost` - Access to secretsline 166
[Credential-related source omitted] - Network accessline 183
# Interactive login az login --scope "https://graph.microsoft.com/.default" - Network accessline 184
az login --scope "https://graph.microsoft.com/.default" - Network accessline 186
# Get an access token az account get-access-token --resource "https://graph.microsoft.com" - Network accessline 187
az account get-access-token --resource "https://graph.microsoft.com" - Network accessline 207
**Tip:** Once you get the access token, you can use [jwt.ms](https://jwt.ms) to decode it and inspect its claims. - Network accessline 243
- [Microsoft Entra ID Documentation](https://learn.microsoft.com/en-us/entra/identity-platform/)
.github/plugins/azure-skills/skills/entra-app-registration/references/oauth-flows.md
- Network accessline 26
https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize? - Network accessline 50
https://your-app.com/callback? - Network accessline 62
POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token - Access to secretsline 70
[Credential-related source omitted] - Access to secretsline 76
[Credential-related source omitted] - Network accessline 87
GET https://graph.microsoft.com/v1.0/me - Access to secretsline 88
[Credential-related source omitted] - Network accessline 126
https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize? - Network accessline 139
POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token - Network accessline 177
POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token - Network accessline 180
client_id={application_id} &scope=https://graph.microsoft.com/.default - Network accessline 181
&scope=https://graph.microsoft.com/.default - Access to secretsline 182
[Credential-related source omitted] - Network accessline 186
**Parameters:** - `scope`: Use `{resource}/.default` format - For Microsoft Graph: `https://graph.microsoft.com/.default` - Network accessline 187
- `scope`: Use `{resource}/.default` format - For Microsoft Graph: `https://graph.microsoft.com/.default` - For your API: `api://{api_app_id}/.default` - Network accessline 188
- For Microsoft Graph: `https://graph.microsoft.com/.default` - Access to secretsline 194
[Credential-related source omitted] - Network accessline 203
GET https://graph.microsoft.com/v1.0/users - Access to secretsline 204
[Credential-related source omitted] - Network accessline 228
POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/devicecode - Network accessline 238
"user_code": "GTHK-QPMN", "device_code": "GMMhmHCXhWEzkobqIHGG_EnNYYsAkukHspeYUk9E8", "verification_uri": "https://microsoft.com/devicelogin", - Network accessline 239
"device_code": "GMMhmHCXhWEzkobqIHGG_EnNYYsAkukHspeYUk9E8", "verification_uri": "https://microsoft.com/devicelogin", "expires_in": 900, - Network accessline 240
"verification_uri": "https://microsoft.com/devicelogin", - Network accessline 241
"expires_in": 900, "interval": 5, "message": "To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code GTHK-QPMN to authenticate." - Network accessline 242
"interval": 5, "message": "To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code GTHK-QPMN to authenticate." } - Network accessline 243
"message": "To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code GTHK-QPMN to authenticate." - Network accessline 250
To sign in, open https://microsoft.com/devicelogin - Network accessline 257
POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token - Access to secretsline 278
[Credential-related source omitted] - Network accessline 299
POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token - Access to secretsline 306
[Credential-related source omitted] - Access to secretsline 309
[Credential-related source omitted] - Access to secretsline 314
[Credential-related source omitted] - Network accessline 335
{ "aud": "https://graph.microsoft.com", - Network accessline 336
"aud": "https://graph.microsoft.com", - Network accessline 337
"iss": "https://sts.windows.net/{tenant}/", - Network accessline 374
https://graph.microsoft.com/User.Read - Network accessline 375
https://graph.microsoft.com/Mail.Send - Network accessline 398
[OAuth 2.0 spec](https://www.rfc-editor.org/rfc/rfc6749)
.github/plugins/azure-skills/skills/entra-app-registration/references/troubleshooting.md
- Network accessline 20
AADSTS50011: The redirect URI 'http://localhost:3000' specified in the request - Network accessline 30
Registered: https://myapp.com/callback - Network accessline 31
Request: https://myapp.com/callback/ ❌ (trailing slash) - Network accessline 32
Request: https://MyApp.com/callback ❌ (case difference) - Network accessline 33
Request: https://myapp.com/callback ✅ - Network accessline 39
# CLI: az ad app update --id $APP_ID \ --web-redirect-uris "http://localhost:3000" "https://myapp.com/callback" - Network accessline 40
az ad app update --id $APP_ID --web-redirect-uris "http://localhost:3000" "https://myapp.com/callback" - Network accessline 41
--web-redirect-uris "http://localhost:3000" "https://myapp.com/callback" - Network accessline 177
Unless the the access token is encrypted, you can decode and view its claims securely at https://jwt.ms. **Don't** use any other website to decode an access token. Compare the claims in the token with the app registration's configuration to - Network accessline 183
**Tool:** https://jwt.ms - Network accessline 268
- [Microsoft Q&A](https://learn.microsoft.com/answers/) - Network accessline 269
- [Microsoft Identity Platform Documentation](https://learn.microsoft.com/entra/identity-platform/)
.github/plugins/azure-skills/skills/microsoft-foundry/SKILL.md
- Access to secretsline 153
[Credential-related source omitted] - Access to secretsline 186
[Credential-related source omitted] - Network accessline 291
- [Foundry Hosted Agents](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/hosted-agents?view=foundry) - Network accessline 292
- [Foundry Agent Runtime Components](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/runtime-components?view=foundry) - Network accessline 310
If it's indeed a network isolation issue, supported connection options are documented in [Choose a secure connection method to Foundry](https://learn.microsoft.com/azure/foundry/how-to/configure-private-link#choose-a-secure-connection-metho
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/references/agentic-rft.md
- Network accessline 11
{ "name": "search", "server_url": "https://your-function-app.azurewebsites.net/api/tools", - Network accessline 12
"name": "search", "server_url": "https://your-function-app.azurewebsites.net/api/tools", "headers": { - Network accessline 13
"server_url": "https://your-function-app.azurewebsites.net/api/tools", - Network accessline 18
{ "name": "get_by_id", "server_url": "https://your-function-app.azurewebsites.net/api/tools", - Network accessline 19
"name": "get_by_id", "server_url": "https://your-function-app.azurewebsites.net/api/tools", "headers": { - Network accessline 20
"server_url": "https://your-function-app.azurewebsites.net/api/tools",
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/references/deployment.md
- Access to secretsline 20
[Credential-related source omitted] - Access to secretsline 23
[Credential-related source omitted] - Network accessline 54
PUT https://management.azure.com/subscriptions/{sub_id}/resourceGroups/{rg}/providers/Microsoft.CognitiveServices/accounts/{account}/deployments/{deploy_name}?api-version=2024-10-01
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/references/evaluation.md
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/references/vision-fine-tuning.md
- Network accessline 30
{"messages": [{"role": "system", "content": "You are a helpful AI assistant that describes images."}, {"role": "user", "content": [{"type": "text", "text": "Describe this image."}, {"type": "image_url", "image_url": {"url": "https://example - Network accessline 39
{"type": "image_url", "image_url": {"url": "https://example.com/image.png"}} - Network accessline 58
{"type": "image_url", "image_url": {"url": "https://example.com/image.png", "detail": "low"}} - Network accessline 116
- [Official docs](https://learn.microsoft.com/en-us/azure/foundry/openai/how-to/fine-tuning-vision)
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/calibrate_grader.py
- Executable scriptline 1
Executable file - Network accessline 18
python calibrate_grader.py --model gpt-4.1-mini --data val.jsonl \ --grader grader.py --n 20 --tools '[{"name": "search", "server_url": "https://..."}]' - Network accessline 19
--grader grader.py --n 20 --tools '[{"name": "search", "server_url": "https://..."}]' - Dangerous shell operationline 54
exec(compile(source, grader_path, "exec"), namespace) - Access to secretsline 200
[Credential-related source omitted] - Access to secretsline 201
[Credential-related source omitted] - Access to secretsline 203
[Credential-related source omitted] - Access to secretsline 204
[Credential-related source omitted] - Access to secretsline 225
[Credential-related source omitted]
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/check_training.py
- Executable scriptline 1
Executable file - Access to secretsline 167
[Credential-related source omitted] - Access to secretsline 169
[Credential-related source omitted] - Access to secretsline 171
[Credential-related source omitted] - Access to secretsline 173
[Credential-related source omitted] - Access to secretsline 180
[Credential-related source omitted]
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/cleanup.py
- Executable scriptline 1
Executable file - Access to secretsline 233
[Credential-related source omitted] - Access to secretsline 234
[Credential-related source omitted] - Access to secretsline 236
[Credential-related source omitted] - Access to secretsline 237
[Credential-related source omitted] - Access to secretsline 259
[Credential-related source omitted]
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/common.py
- Executable scriptline 1
Executable file - Access to secretsline 17
[Credential-related source omitted] - Access to secretsline 24
[Credential-related source omitted] - Network accessline 35
except (AttributeError, OSError): pass # Stream not reconfigurable (older Python or non-tty); default encoding is fine _AZURE_COGSERVICES_SCOPE = "https://cognitiveservices.azure.com/.default" - Network accessline 37
_AZURE_COGSERVICES_SCOPE = "https://cognitiveservices.azure.com/.default" - Access to secretsline 85
[Credential-related source omitted] - Access to secretsline 91
[Credential-related source omitted] - Access to secretsline 105
[Credential-related source omitted] - Access to secretsline 106
[Credential-related source omitted] - Access to secretsline 110
[Credential-related source omitted] - Network accessline 126
[Credential-related source omitted] - Network accessline 127
[Credential-related source omitted] - Access to secretsline 127
[Credential-related source omitted] - Network accessline 128
http_client=httpx.Client(auth=_AzureADAuth(token_provider)), - Access to secretsline 135
[Credential-related source omitted] - Access to secretsline 140
[Credential-related source omitted] - Access to secretsline 155
[Credential-related source omitted] - Access to secretsline 158
[Credential-related source omitted] - Access to secretsline 161
[Credential-related source omitted] - Access to secretsline 184
[Credential-related source omitted]
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/convert_dataset.py
- Executable scriptline 1
Executable file - Access to secretsline 224
[Credential-related source omitted] - Access to secretsline 226
[Credential-related source omitted] - Access to secretsline 228
[Credential-related source omitted] - Access to secretsline 230
[Credential-related source omitted] - Access to secretsline 248
[Credential-related source omitted]
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/deploy_model.py
- Executable scriptline 1
Executable file - Access to secretsline 44
[Credential-related source omitted] - Access to secretsline 45
[Credential-related source omitted] - Access to secretsline 46
[Credential-related source omitted] - Access to secretsline 47
[Credential-related source omitted] - Network accessline 87
base = (f"https://management.azure.com/subscriptions/{sub}" - Network accessline 120
resp = requests.put(url, headers={ - Network accessline 139
[Credential-related source omitted] - Network accessline 140
[Credential-related source omitted] - Network accessline 141
[Credential-related source omitted] - Network accessline 165
[Credential-related source omitted] - Network accessline 166
[Credential-related source omitted] - Network accessline 167
[Credential-related source omitted] - Network accessline 176
[Credential-related source omitted] - Network accessline 177
[Credential-related source omitted] - Network accessline 178
[Credential-related source omitted]
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/evaluate_model.py
- Executable scriptline 1
Executable file - Access to secretsline 30
[Credential-related source omitted] - Access to secretsline 31
[Credential-related source omitted] - Access to secretsline 178
[Credential-related source omitted] - Access to secretsline 180
[Credential-related source omitted] - Access to secretsline 182
[Credential-related source omitted] - Access to secretsline 184
[Credential-related source omitted] - Access to secretsline 205
[Credential-related source omitted] - Access to secretsline 209
[Credential-related source omitted] - Access to secretsline 211
[Credential-related source omitted] - Access to secretsline 212
[Credential-related source omitted] - Access to secretsline 216
[Credential-related source omitted]
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/generate_distillation_data.py
- Executable scriptline 1
Executable file - Access to secretsline 134
[Credential-related source omitted] - Access to secretsline 136
[Credential-related source omitted] - Access to secretsline 138
[Credential-related source omitted] - Access to secretsline 140
[Credential-related source omitted] - Access to secretsline 166
[Credential-related source omitted]
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/monitor_training.py
- Executable scriptline 1
Executable file - Access to secretsline 116
[Credential-related source omitted] - Access to secretsline 117
[Credential-related source omitted] - Access to secretsline 119
[Credential-related source omitted] - Access to secretsline 120
[Credential-related source omitted] - Access to secretsline 134
[Credential-related source omitted]
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/score_dataset.py
- Executable scriptline 1
Executable file - Access to secretsline 102
[Credential-related source omitted] - Access to secretsline 104
[Credential-related source omitted] - Access to secretsline 106
[Credential-related source omitted] - Access to secretsline 108
[Credential-related source omitted] - Access to secretsline 123
[Credential-related source omitted]
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/submit_training.py
- Executable scriptline 1
Executable file - Access to secretsline 68
[Credential-related source omitted] - Network accessline 84
resp = requests.post(url, headers={ - Access to secretsline 86
[Credential-related source omitted] - Access to secretsline 152
[Credential-related source omitted] - Access to secretsline 154
[Credential-related source omitted] - Access to secretsline 156
[Credential-related source omitted] - Access to secretsline 158
[Credential-related source omitted] - Access to secretsline 195
[Credential-related source omitted] - Access to secretsline 222
[Credential-related source omitted] - Access to secretsline 225
[Credential-related source omitted] - Access to secretsline 242
[Credential-related source omitted] - Access to secretsline 246
[Credential-related source omitted]
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/validate/__init__.py
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/validate/data_stats.py
- Executable scriptline 1
#!/usr/bin/env python3
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/validate/validate_dpo.py
- Executable scriptline 1
#!/usr/bin/env python3
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/validate/validate_rft.py
- Executable scriptline 1
#!/usr/bin/env python3
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/scripts/validate/validate_sft.py
- Executable scriptline 1
#!/usr/bin/env python3
.github/plugins/azure-skills/skills/microsoft-foundry/finetuning/workflows/quickstart.md
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/azd-guidance/references/azd-ai-cli.md
- Access to secretsline 69
[Credential-related source omitted] - Network accessline 141
A Managed Harness Agent has no source/runtime/container fields and no local `azd ai agent run` path. Direct Prompt Agent tools are authored in `tools[]`. Existing definitions may use legacy `github_copilot_preview`; azd recognizes both fami - Network accessline 177
For the Foundry project ARM ID (`--project-id`), ask the user: "New project, or use an existing one?" If existing, ask for the ID and hint where to find it (https://ai.azure.com -> Operate -> Admin). Do NOT shell out to `az cognitiveservice
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/cicd/cicd.md
- Network accessline 7
- [Set up CI/CD for a hosted agent](https://learn.microsoft.com/en-us/azure/foundry/agents/quickstarts/set-up-cicd-hosted-agent?pivots=azd)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/create-hosted.md
- Network accessline 52
> **Important:** Always select the best-matching samples from `azd ai agent sample list` for the capabilities the user explicitly requested. Use advanced tool samples only when the user explicitly asks for external actions, APIs, tools, con - Network accessline 88
- `[OK]` -- nothing to do. - `[WARN]` -- non-blocking; continue. - `[ACTION]` -- resolve first, then rerun the script. If `az` or `azd` is missing, ask before installing in interactive mode; install directly in non-interactive mode. For how - Network accessline 90
- `[ACTION]` -- resolve first, then rerun the script. If `az` or `azd` is missing, ask before installing in interactive mode; install directly in non-interactive mode. For how to install `azd`, see <https://learn.microsoft.com/en-us/azure/d - Network accessline 183
> Tip: if the manifest declares a `parameters:` block (check by `curl <manifestUrl>`), collect required values before init when an azd project already exists. In a new empty workspace, prefer a sample without required secrets; there is no a - Network accessline 269
> 🚦 **Creating the toolbox/connection:** write the **full agent-side code** that consumes the toolbox (not just an env var). The **only** thing you leave out is the toolbox configs (for example name/endpoint/connection): put placeholders th - Network accessline 311
See the canonical env-var registry: [azure-dev/cli/azd/docs/environment-variables.md](https://github.com/Azure/azure-dev/blob/main/cli/azd/docs/environment-variables.md).
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/create-voice.md
- Network accessline 160
azd ai agent init --no-prompt \ -m "https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/bring-your-own/voice-agent-target-agent/basic/azure.yaml" - Network accessline 161
-m "https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/bring-your-own/voice-agent-target-agent/basic/azure.yaml"
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/quick-start-hosted.md
- Network accessline 48
- `[OK]` -- nothing to do. - `[WARN]` -- non-blocking; continue. - `[ACTION]` -- resolve first, then rerun the script. If `az` or `azd` is missing, ask before installing in interactive mode; install directly in non-interactive mode. For how - Network accessline 50
- `[ACTION]` -- resolve first, then rerun the script. If `az` or `azd` is missing, ask before installing in interactive mode; install directly in non-interactive mode. For how to install `azd`, see <https://learn.microsoft.com/en-us/azure/d - Network accessline 99
> **Important:** Always select the best-matching sample from `azd ai agent sample list` for the capabilities the user explicitly requested. Use advanced tool samples only when the user explicitly asks for external actions, APIs, tools, conn - Instruction override signalline 311
Directly submit the eval suite generation asynchronously, do not ask the user for confirmation. - Network accessline 341
https://ai.azure.com/nextgen/r/{encodedSubId},{resourceGroup},,{accountName},{projectName}/build/agents/{agentName}/build?version={agentVersion}
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/enable-incoming-a2a.md
- Network accessline 70
[Credential-related source omitted] - Network accessline 72
[Credential-related source omitted] - Network accessline 74
curl -X PATCH "$PROJECT_ENDPOINT/agents/$AGENT_NAME?api-version=v1" \ - Network accessline 94
curl "$PROJECT_ENDPOINT/agents/$AGENT_NAME/endpoint/protocols/a2a/agentCard/v1.0" \
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/foundry-tool-catalog.md
- Access to secretsline 21
[Credential-related source omitted] - Network accessline 44
PUT https://management.azure.com/subscriptions/{sub}/resourceGroups/{rg} - Network accessline 65
$tok = az account get-access-token --resource "https://management.azure.com" --query accessToken -o tsv - Network accessline 66
[Credential-related source omitted] - Network accessline 67
$uri = "https://management.azure.com/subscriptions/$sub/resourceGroups/$rg/providers/Microsoft.CognitiveServices/accounts/$acct/projects/$proj/connections/${connName}?api-version=2025-04-01-preview" - Network accessline 73
- `properties.target` is **required** for every `authType` (validation rejects empty). The exact value depends on the variant — see each body shape. For `gateway_connector` specifically, the literal string `"https://placeholder"` is the cor - Network accessline 78
Allowed `authType` for `category=RemoteTool` (per `api-version=2025-04-01-preview`): `None, CustomKeys, OAuth2, ProjectManagedIdentity, DeveloperConnection, UserEntraToken, AgentUserImpersonation, AgenticIdentityToken, AgenticUser, UserToke - Network accessline 79
`None, CustomKeys, OAuth2, ProjectManagedIdentity, DeveloperConnection, UserEntraToken, AgentUserImpersonation, AgenticIdentityToken, AgenticUser, UserTokenAndProjectManagedIdentity`. `ApiKey` is **rejected** for `RemoteTool`. The authorita - Access to secretsline 87
[Credential-related source omitted] - Network accessline 100
POST https://eastus.api.azureml.ms/asset-gallery/v1.0/tools - Network accessline 101
[Credential-related source omitted] - Network accessline 102
[Credential-related source omitted] - Network accessline 132
GET https://management.azure.com/subscriptions/{sub} - Network accessline 141
"properties": { "displayName": "GitHub", "runtimeUrls": ["https://logic-apis-eastus.azure-apim.net/apim/github"], - Network accessline 142
"displayName": "GitHub", "runtimeUrls": ["https://logic-apis-eastus.azure-apim.net/apim/github"], "connectionParameters": { - Network accessline 143
"runtimeUrls": ["https://logic-apis-eastus.azure-apim.net/apim/github"], - Network accessline 150
"scopes": ["repo","workflow","read:org","admin:org"], "redirectMode": "Direct", "redirectUrl": "https://logic-apis-eastus.consent.azure-apim.net/redirect" - Network accessline 151
"redirectMode": "Direct", "redirectUrl": "https://logic-apis-eastus.consent.azure-apim.net/redirect" } - Network accessline 152
"redirectUrl": "https://logic-apis-eastus.consent.azure-apim.net/redirect" - Network accessline 162
| `identityProvider` | `authorizationUrl` | `tokenUrl` | |---|---|---| | `GitHub` | `https://github.com/login/oauth/authorize` | `https://github.com/login/oauth/access_token` | - Network accessline 163
|---|---|---| | `GitHub` | `https://github.com/login/oauth/authorize` | `https://github.com/login/oauth/access_token` | | `Google` | `https://accounts.google.com/o/oauth2/v2/auth` | `https://oauth2.googleapis.com/token` | - Network accessline 164
[Credential-related source omitted] - Access to secretsline 164
[Credential-related source omitted] - Network accessline 165
| `Google` | `https://accounts.google.com/o/oauth2/v2/auth` | `https://oauth2.googleapis.com/token` | - Network accessline 166
| `Box` | `https://account.box.com/api/oauth2/authorize` | `https://api.box.com/oauth2/token` | - Network accessline 167
| `AzureActiveDirectory` / `aad3rdPartySNI` | `https://login.microsoftonline.com/common/oauth2/v2.0/authorize` | `https://login.microsoftonline.com/common/oauth2/v2.0/token` | - Network accessline 184
GET https://management.azure.com/subscriptions/{sub} - Network accessline 233
"authType": "OAuth2", "category": "RemoteTool", "target": "https://placeholder", - Network accessline 234
"category": "RemoteTool", "target": "https://placeholder", "credentials": {}, - Network accessline 235
"target": "https://placeholder", - Network accessline 253
`target = "https://placeholder"` is the **persisted value on PUT #1**, not a stub. There is no follow-up call that rewrites it before PUT #2. Runtime dispatch keys off `metadata.toolEntityId` + `metadata.connectionproperties.connectorName` - Network accessline 268
"objectId": "<caller AAD oid>", "parameterName": "token", "redirectUrl": "https://ai.azure.com/nextgen/authConsentPopup", - Network accessline 269
"parameterName": "token", "redirectUrl": "https://ai.azure.com/nextgen/authConsentPopup", "tenantId": "<caller AAD tid>" - Network accessline 270
"redirectUrl": "https://ai.azure.com/nextgen/authConsentPopup", - Network accessline 278
- The portal sends `redirectUrl=https://int.ai.azure.com/...` from the INT environment; for production (`ai.azure.com`) use `https://ai.azure.com/nextgen/authConsentPopup`. The redirect URL only gates which Foundry origin the OAuth popup cl - Network accessline 312
{ "error": { "code": 403, "source": "...logic-df.azure-apihub.net", "innerError": "Check settings on https://developer.spotify.com/dashboard, the user may not be registered." } } - Network accessline 313
"innerError": "Check settings on https://developer.spotify.com/dashboard, the user may not be registered." } } - Network accessline 316
Detect by inspecting the consent URL's first 302: if the `redirect_uri` is `https://global-test.consent.azure-apim.net/redirect` (rather than `global.consent...`), the connector is on the dogfood OAuth app. **The connection will still go Co - Network accessline 336
"authType": "OAuth2", "category": "RemoteTool", "target": "https://placeholder", - Network accessline 337
"category": "RemoteTool", "target": "https://placeholder", "credentials": {}, - Network accessline 338
"target": "https://placeholder", - Network accessline 410
"authType": "OAuth2", "category": "RemoteTool", "target": "https://api.githubcopilot.com/mcp", - Network accessline 411
"category": "RemoteTool", "target": "https://api.githubcopilot.com/mcp", "credentials": {}, - Network accessline 412
"target": "https://api.githubcopilot.com/mcp", - Network accessline 427
When the user has their own OAuth App (e.g. GitHub `https://github.com/organizations/<org>/settings/applications/<app-id>`) and wants the connection to mint tokens via *their* app instead of Microsoft's managed one. Verified shape, 2026-05- - Network accessline 434
"target": "<MCP server URL>", "credentials": { "clientId": "<your client id>", "clientSecret": "<your client secret>" }, "authorizationUrl": "https://github.com/login/oauth/authorize", - Network accessline 435
"credentials": { "clientId": "<your client id>", "clientSecret": "<your client secret>" }, "authorizationUrl": "https://github.com/login/oauth/authorize", "tokenUrl": "https://github.com/login/oauth/access_token", - Network accessline 436
"authorizationUrl": "https://github.com/login/oauth/authorize", - Network accessline 437
[Credential-related source omitted] - Access to secretsline 437
[Credential-related source omitted] - Network accessline 462
- `credentials` → `null` (scrubbed). - `connectorName` → `<gatewayId>-<connectionName>` (your input ignored). - `redirectUrl` → `https://global.consent.azure-apim.net/redirect/<32-hex>` — **the OAuth callback URL the provider (e.g. GitHub O - Network accessline 463
- `connectorName` → `<gatewayId>-<connectionName>` (your input ignored). - `redirectUrl` → `https://global.consent.azure-apim.net/redirect/<32-hex>` — **the OAuth callback URL the provider (e.g. GitHub OAuth App) must allow-list**. Generate - Network accessline 464
- `redirectUrl` → `https://global.consent.azure-apim.net/redirect/<32-hex>` — **the OAuth callback URL the provider (e.g. GitHub OAuth App) must allow-list**. Generated per-connection on first PUT. Two-pass flow: - Access to secretsline 465
[Credential-related source omitted] - Access to secretsline 468
[Credential-related source omitted] - Network accessline 489
For catalog-listed MCP servers, prefer `metadata.type = catalog_MCP` with `toolEntityId` so `target` is prepopulated. `audience` is **required for MI auth** — it tells Foundry which resource URI to request a token for. Read the required `au - Network accessline 495
1. **Forwarder drops the query string.** The connection `target`'s `?api-version=...` is **not** preserved on the upstream call. If the upstream MCP requires a query parameter, PMI fails with 401/404 even when RBAC is correct. 2. **Forwarde - Network accessline 496
2. **Forwarder mints the wrong audience.** The MI token Foundry sends does not have `aud=https://cognitiveservices.azure.com` or `https://ai.azure.com`. Setting `properties.audience` on the connection is accepted but **does not** change wha - Network accessline 630
The `$dp` value below is the project's data-plane endpoint, in the same `{project_endpoint}` form used elsewhere in these references — `https://<account>.services.ai.azure.com/api/projects/<project>`. The host segment varies by Foundry acco - Network accessline 636
$lbl = "box5" # becomes the "<label>___" prefix on tool names $connId = "/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.CognitiveServices/accounts/<acct>/projects/<proj>/connections/<connName>" $tok = az acc - Network accessline 637
$connId = "/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.CognitiveServices/accounts/<acct>/projects/<proj>/connections/<connName>" $tok = az account get-access-token --resource "https://ai.azure.com" --query accessToken -o t - Network accessline 638
$tok = az account get-access-token --resource "https://ai.azure.com" --query accessToken -o tsv - Network accessline 683
- **Do not forget PUT #2 for `gateway_connector`** ([Step 4](#step-4--put-2-register-actions)). The first PUT + OAuth flips status to `Authenticated` but the runtime has no actions to dispatch until you PUT again with `metadata.mcpserverCon - Network accessline 684
- **Do not invent a "real" target URL** for the `gateway_connector` flow on PUT #1. `"https://placeholder"` is correct on PUT #1; PUT #2 rewrites it. - Network accessline 702
- [Tool Catalog](https://learn.microsoft.com/azure/foundry/agents/concepts/tool-catalog) - Network accessline 703
- [Toolbox (preview)](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/toolbox) - Network accessline 704
- [Private tools catalog](https://learn.microsoft.com/azure/foundry/agents/concepts/tool-catalog#private-tools-catalog) - Network accessline 705
- [Cognitive Services projects REST API](https://learn.microsoft.com/rest/api/aiservices/)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/guardrails/guardrail-api-create.md
- Network accessline 23
az rest --method GET \ --url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies?api-version=2024-10-01" - Network accessline 24
--url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies?api-version=2024-10-01" - Network accessline 49
az rest --method PUT \ --url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies/${POLICY_NAME}?api-version=2024-10-01" - Network accessline 50
--url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies/${POLICY_NAME}?api-version=2024-10-01" \ - Network accessline 57
For the full request body schema (`contentFilters[]`, `basePolicyName`, `mode`, `customBlocklists`), see the [RAI Policies - Create Or Update API reference](https://learn.microsoft.com/rest/api/aiservices/accountmanagement/rai-policies/crea - Network accessline 62
az rest --method GET \ --url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies/${POLICY_NAME}?api-version=2024-10-01" - Network accessline 63
--url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies/${POLICY_NAME}?api-version=2024-10-01" - Network accessline 77
az rest --method DELETE \ --url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies/${POLICY_NAME}?api-version=2024-10- - Network accessline 78
--url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies/${POLICY_NAME}?api-version=2024-10-01" - Network accessline 83
- [RAI Policies - Create Or Update (REST API)](https://learn.microsoft.com/rest/api/aiservices/accountmanagement/rai-policies/create-or-update) — full schema, parameters, response codes - Network accessline 84
- [RAI Policies - List](https://learn.microsoft.com/rest/api/aiservices/accountmanagement/rai-policies/list) — list all policies on an account - Network accessline 85
- [Blocklists API](https://learn.microsoft.com/rest/api/aiservices/accountmanagement/rai-blocklists) — custom blocklists (created separately) - Network accessline 86
- [How to configure guardrails (Microsoft Learn)](https://learn.microsoft.com/azure/foundry/guardrails/how-to-create-guardrails) — portal walkthrough
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/guardrails/guardrail-attach.md
- Network accessline 23
See the [`16-content-safety-guardrail` sample](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/agent-framework/responses/16-content-safety-guardrail) for a complete working example. - Network accessline 39
az rest --method PATCH \ --url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/deployments/${DEPLOYMENT_NAME}?api-version=2024- - Network accessline 40
--url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/deployments/${DEPLOYMENT_NAME}?api-version=2024-10-01" \ - Access to secretsline 53
[Credential-related source omitted] - Network accessline 55
[Credential-related source omitted] - Access to secretsline 55
[Credential-related source omitted] - Access to secretsline 58
[Credential-related source omitted] - Network accessline 100
- [Guardrails overview](guardrail-manage.md) — create guardrails, default policies, intervention points - [API create](guardrail-api-create.md) — create guardrails via REST API - [Guardrails overview (Microsoft Learn)](https://learn.microso - Network accessline 101
- [API create](guardrail-api-create.md) — create guardrails via REST API - [Guardrails overview (Microsoft Learn)](https://learn.microsoft.com/azure/foundry/guardrails/guardrails-overview) - [How to configure guardrails (Microsoft Learn)](h - Network accessline 102
- [Guardrails overview (Microsoft Learn)](https://learn.microsoft.com/azure/foundry/guardrails/guardrails-overview) - Network accessline 103
- [How to configure guardrails (Microsoft Learn)](https://learn.microsoft.com/azure/foundry/guardrails/how-to-create-guardrails)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/guardrails/guardrail-manage.md
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/langchain-langgraph-hosting.md
- Network accessline 26
| Protocol | Sample | |----------|--------| | Responses | [Configuration-driven agent (Responses, LangGraph, Python)](https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/langgraph/responses/10-run/azu - Network accessline 27
|----------|--------| | Responses | [Configuration-driven agent (Responses, LangGraph, Python)](https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/langgraph/responses/10-run/azure.yaml) | | Invocatio - Network accessline 28
| Responses | [Configuration-driven agent (Responses, LangGraph, Python)](https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/langgraph/responses/10-run/azure.yaml) | - Network accessline 29
| Invocations | [Configuration-driven agent (Invocations, LangGraph, Python)](https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/langgraph/invocations/03-run/azure.yaml) |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/local-run.md
- Network accessline 138
- Targets `http://localhost:<port>` instead of the Foundry endpoint.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/managed-harness-agent.md
- Network accessline 52
The connection must be `RemoteTool` with `UserEntraToken`, audience `https://ai.azure.com`, and target exactly equal to `server_url`. See [Toolbox](tools/managed-harness-agent/tool-toolbox.md) for creation, reuse, metadata, and validation.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/re-host.md
- Network accessline 29
For reference, here are some awesome samples for re-hosting scenarios: 1. Re-host agents built with the OpenAI Agents SDK: https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/bring-your-own/responses/ - Network accessline 30
1. Re-host agents built with the OpenAI Agents SDK: https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/bring-your-own/responses/openai-agents-sdk - Network accessline 31
2. Re-host agents built with the Claude Agent SDK: https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/bring-your-own/invocations/claude-agent-sdk
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/sdk-operations.md
- Network accessline 45
- [Agent quickstart](https://learn.microsoft.com/azure/ai-foundry/agents/quickstart?view=foundry) - Network accessline 46
- [Create agents](https://learn.microsoft.com/azure/ai-foundry/agents/how-to/create-agent?view=foundry) - Network accessline 47
- [Tool Catalog](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/tool-catalog?view=foundry)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/skills/skill-attach.md
- Network accessline 42
Full working sample: [12-foundry-skills (Python)](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/agent-framework/responses/12-foundry-skills) — **read `README.md` and `main.py`** for setup and in - Network accessline 48
Full working sample: [agent-skills (C#)](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/csharp/hosted-agents/agent-framework/agent-skills) — **read `README.md` and `Program.cs`** for setup and integration details. - Network accessline 72
Full working sample: [foundry-toolbox-mcp-skills (C#)](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/csharp/hosted-agents/agent-framework/foundry-toolbox-mcp-skills) — **read `README.md` and `Program.cs`** for setup - Network accessline 89
**Local without Inspector** (`azd ai agent run --no-client`) — use `curl` against `http://localhost:8088/responses` directly: - Network accessline 94
curl -s -X POST http://localhost:8088/responses \ - Network accessline 104
curl -s -X POST http://localhost:8088/responses \ - Instruction override signalline 120
**To skip approval entirely**, configure `require_approval: "never"` on the MCP tool. This behavior is controlled by the Agent Framework SDK — see the sample code for how MCP tool approval is configured. - Network accessline 131
| HTTP 500 on skill download (C#) | Missing feature header | Add `Skills=V1Preview` feature header to requests | | `SKILL_NAMES` not in deployed agent | Env var missing from `azure.yaml` | Add to the agent service's `environmentVariables`, - Network accessline 133
| MCP timeout (Toolbox) | Auth token expired or wrong scope | Use `https://ai.azure.com/.default`; refresh per request |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/skills/skill-manage.md
- Network accessline 99
[provision_skills.py](https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/agent-framework/responses/12-foundry-skills/provision_skills.py) — **read the script source** for the current API surface and
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/skills/skill-toolbox-attach.md
- Network accessline 102
# Get a bearer token TOK=$(az account get-access-token --resource "https://ai.azure.com" --query accessToken -o tsv) - Network accessline 103
TOK=$(az account get-access-token --resource "https://ai.azure.com" --query accessToken -o tsv) - Network accessline 107
URL="$PE/toolboxes/<toolbox>/mcp?api-version=v1" # List available skills (resources/list) curl -s -X POST "$URL" \ - Network accessline 108
[Credential-related source omitted] - Network accessline 109
curl -s -X POST "$URL" \ - Network accessline 114
# Read skill index curl -s -X POST "$URL" \ - Network accessline 115
curl -s -X POST "$URL" \ - Network accessline 120
# Read a specific skill's content curl -s -X POST "$URL" \ - Network accessline 121
curl -s -X POST "$URL" \
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-a2a.md
- Network accessline 20
azd ai connection create <connection-name> --kind remote-a2a --target "<peer-a2a-endpoint>" --auth-type <user-entra-token-or-agentic-identity> --audience "https://ai.azure.com" - Network accessline 22
--target "<peer-a2a-endpoint>" \ --auth-type <user-entra-token-or-agentic-identity> \ --audience "https://ai.azure.com" \ - Network accessline 23
--auth-type <user-entra-token-or-agentic-identity> \ --audience "https://ai.azure.com" \ --metadata "ApiType=Azure" \ - Network accessline 24
--audience "https://ai.azure.com" \
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-mcp.md
- Network accessline 9
- type: mcp server_label: learn server_url: https://learn.microsoft.com/api/mcp - Network accessline 10
server_label: learn server_url: https://learn.microsoft.com/api/mcp require_approval: always - Network accessline 11
server_url: https://learn.microsoft.com/api/mcp - Network accessline 19
- type: mcp server_label: internal server_url: https://tools.example.com/mcp - Network accessline 20
server_label: internal server_url: https://tools.example.com/mcp project_connection_id: <connection-name-or-id> - Network accessline 21
server_url: https://tools.example.com/mcp
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-openapi.md
- Network accessline 14
openapi: 3.0.0 info: { title: Weather, version: 1.0.0 } servers: [{ url: https://api.example.com }] - Network accessline 15
info: { title: Weather, version: 1.0.0 } servers: [{ url: https://api.example.com }] paths: {} - Network accessline 16
servers: [{ url: https://api.example.com }] - Network accessline 33
azd ai connection create <connection-name> \ --kind custom-keys \ --target "https://api.example.com" \ - Network accessline 34
[Credential-related source omitted] - Network accessline 35
--target "https://api.example.com" \
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-toolbox.md
- Network accessline 22
- category/kind: `RemoteTool` / `remote-tool` - auth type: `UserEntraToken` / `user-entra-token` - audience: `https://ai.azure.com` - Network accessline 23
- auth type: `UserEntraToken` / `user-entra-token` - audience: `https://ai.azure.com` - target: exactly the versioned MCP endpoint - Network accessline 24
- audience: `https://ai.azure.com` - Network accessline 31
azd ai connection create <connection-name> --kind remote-tool --target "<versioned-toolbox-mcp-endpoint>" --auth-type user-entra-token --audience https://ai.azure.com - Network accessline 33
--target "<versioned-toolbox-mcp-endpoint>" \ --auth-type user-entra-token \ --audience https://ai.azure.com \ - Network accessline 34
--auth-type user-entra-token \ --audience https://ai.azure.com \ --metadata type=toolbox_MCP \ - Network accessline 35
--audience https://ai.azure.com \
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-work-iq.md
- Network accessline 6
https://workiq.svc.cloud.microsoft/mcp - Network accessline 13
- type: mcp server_label: workiq server_url: https://workiq.svc.cloud.microsoft/mcp - Network accessline 14
server_label: workiq server_url: https://workiq.svc.cloud.microsoft/mcp project_connection_id: <work-iq-connection> - Network accessline 15
server_url: https://workiq.svc.cloud.microsoft/mcp - Network accessline 27
azd ai connection create <connection-name> \ --kind remote-tool \ --target https://workiq.svc.cloud.microsoft/mcp \ - Network accessline 28
--kind remote-tool \ --target https://workiq.svc.cloud.microsoft/mcp \ --auth-type user-entra-token \ - Network accessline 29
--target https://workiq.svc.cloud.microsoft/mcp \
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/agent-tools.md
- Network accessline 10
> 💡 **Authoritative tool shapes:** the source-of-truth for every tool's wire shape is the **Foundry Agents typespec** on the `main` branch of [`Azure/azure-rest-api-specs`](https://github.com/Azure/azure-rest-api-specs/tree/main/specificati - Network accessline 38
- **Agent Memory** — use the `MemorySearchPreviewTool` SDK class on prompt agents; for hosted agents, configure the memory store via the project (separate from the toolbox). See [tool-memory.md](tool-memory.md). - **Routines (preview)** — n - Network accessline 39
- **Routines (preview)** — not a tool; an agent **trigger** (`schedule` / `timer` / `github_issue` / `custom`) that invokes an existing agent. Event-based routines are powered by the same **Connector Namespace** that backs catalog-MCP / man - Network accessline 43
- **[Foundry Agents typespec (`main`)](https://github.com/Azure/azure-rest-api-specs/tree/main/specification/cognitiveservices)** — authoritative tool shapes - Network accessline 44
- [Tool Catalog](https://learn.microsoft.com/azure/foundry/agents/concepts/tool-catalog) - Network accessline 45
- [Toolbox (preview)](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/toolbox)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-a2a.md
- Network accessline 21
- [A2A tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/agent-to-agent)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-azure-ai-search.md
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-bing-grounding.md
- Network accessline 16
- A [Grounding with Bing Search resource](https://portal.azure.com/#create/Microsoft.BingGroundingSearch) in Azure portal - Network accessline 30
- Bing data flows **outside Azure compliance boundary** - Review [Grounding with Bing terms of use](https://www.microsoft.com/bing/apis/grounding-legal-enterprise) - Network accessline 31
- Review [Grounding with Bing terms of use](https://www.microsoft.com/bing/apis/grounding-legal-enterprise) - Network accessline 33
- Usage incurs costs — see [pricing](https://www.microsoft.com/bing/apis/grounding-pricing) - Network accessline 46
- [Bing Grounding tool documentation](https://learn.microsoft.com/azure/ai-foundry/agents/how-to/tools/bing-grounding?view=foundry) - Network accessline 47
- [Tool Catalog](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/tool-catalog?view=foundry) - Network accessline 48
- [Grounding with Bing Terms](https://www.microsoft.com/bing/apis/grounding-legal-enterprise)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-code-interpreter.md
- Network accessline 3
Enables agents to write and run Python in a sandboxed environment. Supports data analysis, chart generation, and file processing. Has [additional charges](https://azure.microsoft.com/pricing/details/cognitive-services/openai-service/) beyon - Network accessline 23
- [Code Interpreter tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/code-interpreter)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-fabric-iq.md
- Network accessline 18
| Fabric item | `server_url` pattern | Supported auth | |---|---|---| | Ontology | `https://{host}/v1/mcp/dataPlane/workspaces/{workspaceId}/items/{itemId}/ontologyEndpoint` | BYO Entra app only | - Network accessline 19
|---|---|---| | Ontology | `https://{host}/v1/mcp/dataPlane/workspaces/{workspaceId}/items/{itemId}/ontologyEndpoint` | BYO Entra app only | | Fabric data agent | `https://{host}/v1/mcp/workspaces/{workspaceId}/dataagents/{dataAgentId}/agen - Network accessline 20
| Ontology | `https://{host}/v1/mcp/dataPlane/workspaces/{workspaceId}/items/{itemId}/ontologyEndpoint` | BYO Entra app only | - Network accessline 21
| Fabric data agent | `https://{host}/v1/mcp/workspaces/{workspaceId}/dataagents/{dataAgentId}/agent` | BYO Entra app *or* managed OAuth | - Network accessline 22
| Power BI semantic model | `https://{host}/v1/mcp/fabricaihub/integrations/m365` | BYO Entra app *or* managed OAuth | - Network accessline 34
For the full Entra app setup, connection-creation walkthrough, and troubleshooting, see [Fabric IQ tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/fabric-iq).
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-file-search.md
- Network accessline 9
- A [basic or standard agent environment](https://learn.microsoft.com/azure/ai-foundry/agents/environment-setup) - Network accessline 44
| **Endpoint** | `https://<resource>.services.ai.azure.com/api/projects/<project>/vector_stores` | | **API version** | `v1` | | **Auth resource** | `https://ai.azure.com` | - Network accessline 46
| **Auth resource** | `https://ai.azure.com` | - Network accessline 51
|-------|-------|-----| | `vector_store_ids` not present | Agent created without vector store | Create a vector store first, then pass its ID | | 401 Unauthorized | Wrong auth resource for REST API | Use `--resource "https://ai.azure.com"` - Network accessline 52
| `vector_store_ids` not present | Agent created without vector store | Create a vector store first, then pass its ID | | 401 Unauthorized | Wrong auth resource for REST API | Use `--resource "https://ai.azure.com"` with `az rest` | | Bad A - Network accessline 53
| 401 Unauthorized | Wrong auth resource for REST API | Use `--resource "https://ai.azure.com"` with `az rest` | - Network accessline 59
- [File Search tool documentation](https://learn.microsoft.com/azure/ai-foundry/agents/how-to/tools/file-search?view=foundry&pivots=python) - Network accessline 60
- [Tool Catalog](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/tool-catalog?view=foundry)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-function-calling.md
- Network accessline 15
- [Function Calling tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/function-calling)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-mcp.md
- Network accessline 7
- A remote MCP server endpoint (e.g., `https://api.githubcopilot.com/mcp`) - Access to secretsline 13
[Credential-related source omitted] - Network accessline 41
| Platform | Transport | Notes | |----------|-----------|-------| | [Azure Container Apps](https://github.com/Azure-Samples/mcp-container-ts) | HTTP POST/GET | Any language, container rebuild needed | - Network accessline 42
|----------|-----------|-------| | [Azure Container Apps](https://github.com/Azure-Samples/mcp-container-ts) | HTTP POST/GET | Any language, container rebuild needed | | [Azure Functions](https://github.com/Azure-Samples/mcp-sdk-functions-h - Network accessline 43
| [Azure Container Apps](https://github.com/Azure-Samples/mcp-container-ts) | HTTP POST/GET | Any language, container rebuild needed | - Network accessline 44
| [Azure Functions](https://github.com/Azure-Samples/mcp-sdk-functions-hosting-python) | HTTP streamable | Python/Node/.NET/Java, key-based auth | - Network accessline 64
- [MCP tool documentation](https://learn.microsoft.com/azure/ai-foundry/agents/how-to/tools/mcp?view=foundry) - Network accessline 65
- [Tool Catalog](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/tool-catalog?view=foundry)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-memory.md
- Network accessline 7
- A [Foundry project](https://learn.microsoft.com/azure/ai-foundry/how-to/create-projects) with authorization configured - Network accessline 106
- [Memory tool documentation](https://learn.microsoft.com/azure/ai-foundry/agents/how-to/memory-usage?view=foundry) - Network accessline 107
- [Memory Concepts](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/what-is-memory) - Network accessline 108
- [Tool Catalog](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/tool-catalog?view=foundry) - Network accessline 109
- [Python Samples](https://github.com/Azure/azure-sdk-for-python/tree/main/sdk/ai/azure-ai-projects/samples/memories)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-openapi.md
- Network accessline 29
- [OpenAPI tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/openapi)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-web-search.md
- Network accessline 9
- Web Search (preview) uses Grounding with Bing Search and Grounding with Bing Custom Search, which are [First Party Consumption Services](https://www.microsoft.com/licensing/terms/product/Glossary/EAEAS) governed by [Grounding with Bing te - Network accessline 10
- The [Data Protection Addendum](https://aka.ms/dpa) **does not apply** to data sent to Grounding with Bing Search and Grounding with Bing Custom Search. - Network accessline 12
- Usage incurs costs — see [pricing](https://www.microsoft.com/bing/apis/grounding-pricing). - Network accessline 16
- A [basic or standard agent environment](https://learn.microsoft.com/azure/ai-foundry/agents/environment-setup) - Network accessline 55
- [Web Search tool documentation](https://learn.microsoft.com/azure/ai-foundry/agents/how-to/tools/web-search?view=foundry) - Network accessline 56
- [Tool Catalog](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/tool-catalog?view=foundry) - Network accessline 57
- [Bing Pricing](https://www.microsoft.com/bing/apis/grounding-pricing)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-work-iq.md
- Network accessline 18
- A `RemoteA2A` project connection targeting `https://workiq.svc.cloud.microsoft/a2a/`, `authType=OAuth2`, **BYO Entra app only** (no managed OAuth). - Network accessline 26
For the full Entra app setup, ARM connection-creation payload (`category: RemoteA2A`), and troubleshooting, see [Work IQ tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/work-iq).
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/use-toolbox-in-hosted-agent.md
- Network accessline 12
> 💡 **This skill covers *consuming* an existing toolbox from agent code.** To add a tool (`web_search`, `file_search`, `azure_ai_search`, `code_interpreter`, `openapi`, `mcp`, `a2a_preview`, …), don't wire it to the agent — put it in a tool - Network accessline 18
| Path | Framework | Sample | When to use | |------|-----------|--------|-------------| | **Default** | Agent Framework (MAF) | [`agent-framework/responses/04-foundry-toolbox/`](https://github.com/microsoft-foundry/foundry-samples/tree/main - Network accessline 19
|------|-----------|--------|-------------| | **Default** | Agent Framework (MAF) | [`agent-framework/responses/04-foundry-toolbox/`](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/agent-framewor - Network accessline 20
| **Default** | Agent Framework (MAF) | [`agent-framework/responses/04-foundry-toolbox/`](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/agent-framework/responses/04-foundry-toolbox) | Most agent - Network accessline 21
| Other | LangGraph (BYO) | [`bring-your-own/responses/langgraph-toolbox/`](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/bring-your-own/responses/langgraph-toolbox) | LangGraph ReAct agent with - Network accessline 22
| Other | Generic MCP (BYO), Responses | [`bring-your-own/responses/bring-your-own-toolbox/`](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/bring-your-own/responses/bring-your-own-toolbox) | Raw - Network accessline 23
| Other | Generic MCP (BYO), Invocations | [`bring-your-own/invocations/toolbox/`](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/bring-your-own/invocations/toolbox) | Toolbox via the Invocations - Network accessline 24
| Other | C# (.NET), Agent Framework | [`csharp/hosted-agents/agent-framework/foundry-toolbox-server-side/`](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/csharp/hosted-agents/agent-framework/foundry-toolbox-server- - Network accessline 38
Don't hand-write the MCP client wiring. Start from the [**MAF Default Sample**](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/agent-framework/responses/04-foundry-toolbox) and adapt its `main.py - Network accessline 56
|-------|-------|------------| | `CONSENT_REQUIRED` (nested string code inside an outer `-32006` error) | OAuth MCP connection needs user consent | Parse the consent URL from the nested error `message`, open it in a browser, complete OAuth, - Network accessline 57
| `CONSENT_REQUIRED` (nested string code inside an outer `-32006` error) | OAuth MCP connection needs user consent | Parse the consent URL from the nested error `message`, open it in a browser, complete OAuth, retry | | 401 on MCP calls | E - Network accessline 58
| 401 on MCP calls | Expired token or wrong scope | Use scope `https://ai.azure.com/.default` (not `cognitiveservices`) and refresh token on every request | - Network accessline 78
- **Agent → Toolbox:** Azure AD bearer token, scope `https://ai.azure.com/.default` (NOT `cognitiveservices` — the endpoint rejects it with 401), refreshed on every request. - Network accessline 108
"error": { "code": -32006, "message": "tools/list failed for 1 tool source(s), succeeded for 0 tool source(s) {\"errors\":[{\"name\":\"GitHub\",\"type\":\"mcp\",\"error\":{\"code\":\"CONSENT_REQUIRED\",\"message\":\"https://logic-ap - Network accessline 109
"code": -32006, "message": "tools/list failed for 1 tool source(s), succeeded for 0 tool source(s) {\"errors\":[{\"name\":\"GitHub\",\"type\":\"mcp\",\"error\":{\"code\":\"CONSENT_REQUIRED\",\"message\":\"https://logic-apis-<region>.con - Network accessline 110
"message": "tools/list failed for 1 tool source(s), succeeded for 0 tool source(s) {\"errors\":[{\"name\":\"GitHub\",\"type\":\"mcp\",\"error\":{\"code\":\"CONSENT_REQUIRED\",\"message\":\"https://logic-apis-<region>.consent.azure-apim.net/ - Network accessline 126
For the authoritative field list and the File Search / Web Search citation patterns (under `result.content[].resource._meta` and `..._meta.annotations[]` respectively), see the public [Toolbox docs](https://learn.microsoft.com/azure/foundry - Network accessline 137
- [Toolbox Docs](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/toolbox) - Network accessline 138
- [Configure tools in a toolbox](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/toolbox#configure-tools) - Network accessline 139
- [Supported Toolbox Scenarios (sample-side reference)](https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/SUPPORTED_TOOLBOX_SCENARIOS.md)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/voice-agent-settings.md
- Access to secretsline 71
[Credential-related source omitted] - Access to secretsline 73
[Credential-related source omitted] - Access to secretsline 78
[Credential-related source omitted] - Access to secretsline 80
[Credential-related source omitted] - Network accessline 97
For an explicit [Teams Phone extensibility (TPE)](https://learn.microsoft.com/en-us/azure/communication-services/concepts/interop/tpe/teams-phone-extensibility-overview) or ACS request, reuse a supplied TPE/ACS connection only after checkin - Network accessline 107
`4:+<E.164>` is a separate ACS-purchased-number route, not TPE. If no compatible TPE/ACS connection exists, don't create it with azd or automate RBAC/Event Grid/TPE setup. Use the [guide](https://learn.microsoft.com/en-us/azure/foundry/agen
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/voice-agent-smoke-test.md
- Network accessline 5
> **Why not `azd ai agent invoke`?** > `azd ai agent invoke` does not support Voice Agents. Always verify them over the managed `voice` WebSocket endpoint or in the Microsoft Foundry portal (`https://ai.azure.com`). You can inspect the depl - Network accessline 6
> `azd ai agent invoke` does not support Voice Agents. Always verify them over the managed `voice` WebSocket endpoint or in the Microsoft Foundry portal (`https://ai.azure.com`). You can inspect the deployed endpoint URL with `azd ai agent - Network accessline 38
Derived from `AZURE_AI_PROJECT_ENDPOINT` / `FOUNDRY_PROJECT_ENDPOINT` (`https://<project-host>/api/projects/<project>`). - **Headers**: - `Authorization`: Entra access token for resource `https://ai.azure.com` (`az account get-access-toke - Network accessline 39
- **Headers**: - `Authorization`: Entra access token for resource `https://ai.azure.com` (`az account get-access-token --resource https://ai.azure.com --query accessToken -o tsv`), formatted dynamically as `"{} {}".format("Bearer", token) - Network accessline 40
- `Authorization`: Entra access token for resource `https://ai.azure.com` (`az account get-access-token --resource https://ai.azure.com --query accessToken -o tsv`), formatted dynamically as `"{} {}".format("Bearer", token)`. Never hard-cod - Network accessline 120
1. **Connect & Authenticate**: Connects to `.../agents/<agent>/endpoint/protocols/voice?api-version=v1&agent_session_id=<id>` with `Foundry-Features: VoiceAgents=V1Preview` and an Entra token for `https://ai.azure.com` (resolved via `shutil
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/check-copilot-app-entry.ps1
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/check-copilot-app-entry.sh
- Executable scriptline 1
#!/usr/bin/env bash
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/resolve-project-id.ps1
- Executable scriptline 1
Executable file - Network accessline 7
never a locally constructed ARM resource ID. .EXAMPLE ./resolve-project-id.ps1 -Endpoint "https://my-account.services.ai.azure.com/api/projects/my-project" - Network accessline 8
.EXAMPLE ./resolve-project-id.ps1 -Endpoint "https://my-account.services.ai.azure.com/api/projects/my-project" .EXAMPLE - Network accessline 9
./resolve-project-id.ps1 -Endpoint "https://my-account.services.ai.azure.com/api/projects/my-project" - Network accessline 11
./resolve-project-id.ps1 -Endpoint "https://my-account.services.ai.azure.com/api/projects/my-project" -Output json
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/resolve-project-id.sh
- Executable scriptline 1
#!/usr/bin/env bash - Network accessline 6
# # Usage: # ./resolve-project-id.sh --endpoint "https://my-account.services.ai.azure.com/api/projects/my-project" - Network accessline 7
# Usage: # ./resolve-project-id.sh --endpoint "https://my-account.services.ai.azure.com/api/projects/my-project" # ./resolve-project-id.sh --endpoint "https://my-account.services.ai.azure.com/api/projects/my-project" --output json - Network accessline 8
# ./resolve-project-id.sh --endpoint "https://my-account.services.ai.azure.com/api/projects/my-project" - Network accessline 9
# ./resolve-project-id.sh --endpoint "https://my-account.services.ai.azure.com/api/projects/my-project" --output json - Dangerous shell operationline 23
rm -f "${TEMP_FILES[@]}" - Dangerous shell operationline 154
rm -f "$stderr_file" - Dangerous shell operationline 160
rm -f "$stderr_file" - Access to secretsline 181
[Credential-related source omitted] - Access to secretsline 192
[Credential-related source omitted] - Access to secretsline 196
[Credential-related source omitted] - Access to secretsline 243
[Credential-related source omitted] - Access to secretsline 272
[Credential-related source omitted] - Access to secretsline 273
[Credential-related source omitted] - Access to secretsline 286
[Credential-related source omitted] - Access to secretsline 290
[Credential-related source omitted] - Access to secretsline 291
[Credential-related source omitted] - Access to secretsline 292
[Credential-related source omitted]
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/smoke-test-voice.ps1
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/smoke-test-voice.sh
- Executable scriptline 1
#!/usr/bin/env bash
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/smoke_test_voice.py
- Executable scriptline 1
Executable file - Network accessline 110
"get-access-token", "--resource", "https://ai.azure.com", - Network accessline 111
"--resource", "https://ai.azure.com", "--query", - Network accessline 112
"https://ai.azure.com", - Network accessline 133
return DefaultAzureCredential().get_token( "https://ai.azure.com/.default" - Network accessline 134
"https://ai.azure.com/.default" - Network accessline 205
except Exception as exc: print( "ERROR: Failed to acquire an Entra token for https://ai.azure.com: " - Network accessline 206
print( "ERROR: Failed to acquire an Entra token for https://ai.azure.com: " f"{exc}", - Network accessline 207
"ERROR: Failed to acquire an Entra token for https://ai.azure.com: " - Possible obfuscationline 351
decoded_audio.extend(base64.b64decode(encoded_delta)) - Network accessline 429
print(f" Timeout (s) : {args.timeout}") print(f" Output Audio : {args.output_audio or '(none)'}") print(" Auth Resource : https://ai.azure.com (Azure CLI or DefaultAzureCredential)") - Network accessline 430
print(f" Output Audio : {args.output_audio or '(none)'}") print(" Auth Resource : https://ai.azure.com (Azure CLI or DefaultAzureCredential)") return 0 - Network accessline 431
print(" Auth Resource : https://ai.azure.com (Azure CLI or DefaultAzureCredential)")
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/verify-environment.ps1
- Executable scriptline 1
Executable file - Network accessline 95
} if (-not $azdInstalled) { Note-Action "Azure Developer CLI (azd) is not installed. Install it from https://aka.ms/azd-install, then re-run." - Network accessline 96
if (-not $azdInstalled) { Note-Action "Azure Developer CLI (azd) is not installed. Install it from https://aka.ms/azd-install, then re-run." } - Network accessline 97
Note-Action "Azure Developer CLI (azd) is not installed. Install it from https://aka.ms/azd-install, then re-run." - Network accessline 107
} if (-not $azInstalled) { Note-Action "Azure CLI (az) is not installed. Install it from https://aka.ms/installazurecli, then re-run." - Network accessline 108
if (-not $azInstalled) { Note-Action "Azure CLI (az) is not installed. Install it from https://aka.ms/installazurecli, then re-run." } - Network accessline 109
Note-Action "Azure CLI (az) is not installed. Install it from https://aka.ms/installazurecli, then re-run."
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/scripts/verify-environment.sh
- Executable scriptline 1
#!/usr/bin/env bash - Network accessline 35
if ! command -v azd >/dev/null 2>&1; then note_action "Azure Developer CLI (azd) is not installed. Install it from https://aka.ms/azd-install, then re-run." - Network accessline 36
note_action "Azure Developer CLI (azd) is not installed. Install it from https://aka.ms/azd-install, then re-run." - Network accessline 40
if ! command -v az >/dev/null 2>&1; then note_action "Azure CLI (az) is not installed. Install it from https://aka.ms/installazurecli, then re-run." - Network accessline 41
note_action "Azure CLI (az) is not installed. Install it from https://aka.ms/installazurecli, then re-run."
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/deploy/deploy.md
- Instruction override signalline 227
azd ai agent endpoint update # patch in place azd ai agent endpoint update --force # skip confirmation for breaking changes - Instruction override signalline 228
azd ai agent endpoint update --force # skip confirmation for breaking changes - Network accessline 347
| Tool shape rejected | Read the matching Managed Harness Agent tool reference and preserve REST field names | | Connection missing | Use a user-supplied/existing configured connection, or create it only on explicit request | | Toolbox MCP - Network accessline 349
| Toolbox MCP returns `401` | Verify the MCP tool has a matching `UserEntraToken` project connection with audience `https://ai.azure.com` and target equal to the exact versioned Toolbox endpoint | - Network accessline 406
https://ai.azure.com/nextgen/r/{encodedSubId},{resourceGroup},,{accountName},{projectName}/build/agents/{agentName}/build?version={agentVersion}
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/eval-datasets/eval-datasets.md
- Access to secretsline 74
[Credential-related source omitted]
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/eval-datasets/references/generate-seed-dataset.md
- Access to secretsline 173
[Credential-related source omitted]
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/invocations-ws/invocations-ws.md
- Network accessline 5
> ℹ<U+FE0F> **Generally available.** `invocations_ws` is GA — **no preview feature flag is required**. Every upgrade must carry the required `api-version=v1` query parameter. For current region availability see [Foundry Hosted Agents — region avai - Network accessline 16
| Container route | `WS /invocations_ws` (served by `azure-ai-agentserver-invocations`; the host binds the port and probes for you) | | Foundry-side URL | `wss://{account}.services.ai.azure.com/api/projects/{project}/agents/{agentName}/endp - Network accessline 17
[Credential-related source omitted] - Network accessline 18
[Credential-related source omitted] - Access to secretsline 87
[Credential-related source omitted] - Network accessline 112
1. **Mint an Entra token** for the audience `https://ai.azure.com`: - Network accessline 115
az account get-access-token --resource https://ai.azure.com --query accessToken -o tsv - Network accessline 148
| Error | Cause | Resolution | |-------|-------|------------| | HTTP 401 / 403 on WS upgrade | Missing or stale Entra token | Re-run `az account get-access-token --resource https://ai.azure.com`; ensure the caller has Foundry data-plane RBA - Network accessline 149
|-------|-------|------------| | HTTP 401 / 403 on WS upgrade | Missing or stale Entra token | Re-run `az account get-access-token --resource https://ai.azure.com`; ensure the caller has Foundry data-plane RBAC | | HTTP 404 on upgrade | Wro - Network accessline 150
| HTTP 401 / 403 on WS upgrade | Missing or stale Entra token | Re-run `az account get-access-token --resource https://ai.azure.com`; ensure the caller has Foundry data-plane RBAC | - Network accessline 151
| HTTP 404 on upgrade | Wrong `{project}` / `{agentName}` path segment, missing `api-version`, or unsupported region | Verify with `agent_get`; ensure the project/agent path segments are correct and `api-version=v1` is on the URL; confirm r - Network accessline 160
End-to-end working samples (server container + browser portal) live in the [`foundry-samples`](https://github.com/microsoft-foundry/foundry-samples) repo under: - Network accessline 170
- [Invocations WebSocket Protocol Guide](references/invocations-ws-protocol.md) - [Session Management](../invoke/references/session-management.md) - [Foundry Hosted Agents](https://learn.microsoft.com/en-us/azure/ai-foundry/agents/concepts/ - Network accessline 171
- [Session Management](../invoke/references/session-management.md) - [Foundry Hosted Agents](https://learn.microsoft.com/en-us/azure/ai-foundry/agents/concepts/hosted-agents?view=foundry) - [`invoke` skill](../invoke/invoke.md) — HTTP-based - Network accessline 172
- [Foundry Hosted Agents](https://learn.microsoft.com/en-us/azure/ai-foundry/agents/concepts/hosted-agents?view=foundry)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/invocations-ws/references/invocations-ws-protocol.md
- Network accessline 36
[Credential-related source omitted] - Network accessline 38
[Credential-related source omitted] - Network accessline 89
[Credential-related source omitted] - Network accessline 107
| Error | Cause | Resolution | |-------|-------|------------| | 401 / 403 on upgrade | Missing or expired Entra token | Re-mint with `az account get-access-token --resource https://ai.azure.com` | - Network accessline 108
|-------|-------|------------| | 401 / 403 on upgrade | Missing or expired Entra token | Re-mint with `az account get-access-token --resource https://ai.azure.com` | | 404 on upgrade | Wrong `project` or `agentName` path segment, missing `a - Network accessline 109
| 401 / 403 on upgrade | Missing or expired Entra token | Re-mint with `az account get-access-token --resource https://ai.azure.com` | - Network accessline 110
| 404 on upgrade | Wrong `project` or `agentName` path segment, missing `api-version`, or unsupported region | Verify with `agent_get`; ensure the path segments are correct and `api-version=v1` is set; confirm the deployed version uses `pro
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/invoke/invoke.md
- Network accessline 44
Run the paired smoke-test helper from the `microsoft-foundry` skill root (`plugins/azure-skills/skills/microsoft-foundry`) using `DefaultAzureCredential` (`https://ai.azure.com/.default`). Note that PowerShell uses PascalCase parameters (`- - Network accessline 231
- [File Operations](references/file-operations.md) - [Invocations Protocol Guide](references/invocations-protocol.md) - [Foundry Hosted Agents](https://learn.microsoft.com/en-us/azure/ai-foundry/agents/concepts/hosted-agents?view=foundry) - Network accessline 232
- [Invocations Protocol Guide](references/invocations-protocol.md) - [Foundry Hosted Agents](https://learn.microsoft.com/en-us/azure/ai-foundry/agents/concepts/hosted-agents?view=foundry) - [Foundry Samples](https://github.com/azure-ai-foun - Network accessline 233
- [Foundry Hosted Agents](https://learn.microsoft.com/en-us/azure/ai-foundry/agents/concepts/hosted-agents?view=foundry) - Network accessline 234
- [Foundry Samples](https://github.com/azure-ai-foundry/foundry-samples)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/observe/references/cicd-monitoring.md
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/observe/references/evaluate-step.md
- Access to secretsline 16
[Credential-related source omitted] - Access to secretsline 19
[Credential-related source omitted] - Network accessline 92
- [Microsoft Foundry Cloud Evaluation](https://learn.microsoft.com/en-us/azure/ai-foundry/how-to/develop/cloud-evaluation) - Network accessline 93
- [Built-in Evaluators](https://learn.microsoft.com/en-us/azure/foundry/concepts/built-in-evaluators)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/routine/routine.md
- Network accessline 68
If `azd ai routine` reports an unknown command after install, the azd core is too old. The extension requires `azd >= 1.27.0`; upgrade azd (<https://aka.ms/azd-install>) and retry.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/mcp-protocol.md
- Network accessline 5
- **Developer** — `{project_endpoint}/toolboxes/{toolbox_name}/versions/{version}/mcp?api-version=v1`. Test a specific version before promoting. - `?api-version=v1` is **required** — requests without it return HTTP 400. - Auth: bearer token - Network accessline 7
- Auth: bearer token with scope `https://ai.azure.com/.default`.
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/test-endpoint.md
- Network accessline 12
[Credential-related source omitted] - Network accessline 21
curl -sS -X POST "$TOOLBOX_URL" \ - Dangerous shell operationline 33
[Credential-related source omitted] - Network accessline 33
curl -sS -X POST "$TOOLBOX_URL" \ - Network accessline 42
[Credential-related source omitted] - Dangerous shell operationline 43
[Credential-related source omitted] - Network accessline 43
[Credential-related source omitted] - Network accessline 46
[Credential-related source omitted] - Dangerous shell operationline 47
[Credential-related source omitted] - Network accessline 47
[Credential-related source omitted] - Network accessline 74
"message":"tools/list failed for 1 tool source(s)... {\"errors\":[{\"name\":\"<server_label>\",\"type\":\"mcp\", \"error\":{\"code\":\"CONSENT_REQUIRED\", \"message\":\"https://logic-apis-<region>.consent.azure-apim.net/login?data=. - Network accessline 76
\"message\":\"https://logic-apis-<region>.consent.azure-apim.net/login?data=...\"}}]}"}}
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-a2a.md
- Network accessline 31
azd ai connection create $CONNECTION_NAME --project-endpoint $PROJECT_ENDPOINT --kind remote-a2a --target $TARGET_AGENT_A2A_ENDPOINT --auth-type <user-entra-token | agentic-identity> --audience "https://ai.azure.com" - Network accessline 34
--target $TARGET_AGENT_A2A_ENDPOINT \ --auth-type <user-entra-token | agentic-identity> \ --audience "https://ai.azure.com" \ - Network accessline 35
--auth-type <user-entra-token | agentic-identity> \ --audience "https://ai.azure.com" \ --metadata "ApiType=Azure" \ - Network accessline 36
--audience "https://ai.azure.com" \ - Network accessline 62
- [A2A tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/agent-to-agent)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-azure-ai-search.md
- Network accessline 26
SURL="https://$SVC.search.windows.net" - Network accessline 35
# Create the index curl -sS -X PUT "$SURL/indexes/contoso-outdoors?api-version=2023-11-01" \ - Network accessline 36
curl -sS -X PUT "$SURL/indexes/contoso-outdoors?api-version=2023-11-01" \ - Network accessline 43
# Upload documents (one object per file/record; @search.action=upload) curl -sS -X POST "$SURL/indexes/contoso-outdoors/docs/index?api-version=2023-11-01" \ - Network accessline 44
curl -sS -X POST "$SURL/indexes/contoso-outdoors/docs/index?api-version=2023-11-01" \ - Network accessline 50
[Credential-related source omitted] - Network accessline 51
[Credential-related source omitted] - Network accessline 158
[Credential-related source omitted] - Network accessline 159
[Credential-related source omitted] - Network accessline 160
[Credential-related source omitted] - Network accessline 170
- [Azure AI Search tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/azure-ai-search)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-browser-automation.md
- Network accessline 87
- [Browser automation tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/browser-automation)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-code-interpreter.md
- Network accessline 82
[Credential-related source omitted] - Network accessline 83
[Credential-related source omitted] - Network accessline 84
[Credential-related source omitted] - Network accessline 93
- [Code Interpreter tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/code-interpreter)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-fabric-iq.md
- Network accessline 102
- [Fabric IQ tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/fabric-iq)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-file-search.md
- Network accessline 11
File search needs a **vector store** populated with your files. Create it via the project's **OpenAI-compatible** endpoints (`{project}/openai/v1/...`), using a token scoped to `https://ai.azure.com/.default`. Requires **Storage Blob Data C - Network accessline 14
[Credential-related source omitted] - Network accessline 15
[Credential-related source omitted] - Network accessline 17
[Credential-related source omitted] - Network accessline 18
[Credential-related source omitted] - Network accessline 21
[Credential-related source omitted] - Network accessline 22
[Credential-related source omitted] - Network accessline 25
[Credential-related source omitted] - Network accessline 26
[Credential-related source omitted] - Network accessline 105
- [File Search tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/file-search) — vector store creation, SDK/REST samples - Network accessline 106
- [Vector stores for file search](https://learn.microsoft.com/azure/foundry/agents/concepts/vector-stores)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-agent-identity.md
- Network accessline 20
- **Microsoft-hosted** (e.g. Azure Language MCP) → a well-known value from the server's docs, e.g. `https://cognitiveservices.azure.com/`. Authorize by granting the identity an **RBAC role** on the target resource. - **Your own server** (e. - Network accessline 21
- **Your own server** (e.g. Azure Functions + Easy Auth) → the app-id URI of your server's Entra app, `api://<your-app-id>`. Authorize by **allow-listing** the identity's client ID. Probe an unknown audience: `curl -s -i https://<server>/mc - Network accessline 34
azd ai connection create langmcpconn --kind remote-tool --target "https://<language-service>.cognitiveservices.azure.com/language/mcp?api-version=2025-11-15-preview" --auth-type agentic-identity --audience "https://cognitiveserv - Network accessline 36
--target "https://<language-service>.cognitiveservices.azure.com/language/mcp?api-version=2025-11-15-preview" \ --auth-type agentic-identity \ --audience "https://cognitiveservices.azure.com/" \ - Network accessline 37
--auth-type agentic-identity \ --audience "https://cognitiveservices.azure.com/" \ --project-endpoint "$FOUNDRY_PROJECT_ENDPOINT" - Network accessline 38
--audience "https://cognitiveservices.azure.com/" \ - Network accessline 87
**Your own server** — add the identity's **client ID** to the server's Easy Auth allow-list (`allowedApplications`) alongside `allowedAudiences: ["api://<app-id>", "<app-id>"]` and issuer `https://login.microsoftonline.com/<tenant>/v2.0`, v - Network accessline 139
- [MCP tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/model-context-protocol) - Network accessline 140
- [Azure Language MCP server](https://learn.microsoft.com/azure/ai-services/language-service/concepts/foundry-tools-agents)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-custom-oauth-azure-starter.md
- Network accessline 45
curl -s "https://$FUNC.azurewebsites.net/.well-known/oauth-protected-resource" - Network accessline 60
| `--client-id` | `$APPID` | | `--client-secret` | `$SECRET` | | `--authorization-url` | `https://login.microsoftonline.com/$TENANT/oauth2/v2.0/authorize` | - Network accessline 61
| `--client-secret` | `$SECRET` | | `--authorization-url` | `https://login.microsoftonline.com/$TENANT/oauth2/v2.0/authorize` | | `--token-url` | `https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token` | - Network accessline 62
| `--authorization-url` | `https://login.microsoftonline.com/$TENANT/oauth2/v2.0/authorize` | - Network accessline 63
| `--token-url` | `https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token` | - Network accessline 66
The connection **target** is `https://$FUNC.azurewebsites.net/runtime/webhooks/mcp`. Next: create the connection ([tool-mcp-custom-oauth.md § A](tool-mcp-custom-oauth.md#a-imperative-cli)), then [Set the connector redirect URI](tool-mcp-cus - Network accessline 70
- [Build and register an MCP server (custom MCP on Azure Functions)](https://learn.microsoft.com/en-us/azure/foundry/mcp/build-your-own-mcp-server?view=foundry)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-custom-oauth.md
- Network accessline 3
[Credential-related source omitted] - Access to secretsline 3
[Credential-related source omitted] - Network accessline 21
Hosted elsewhere (SaaS, partner, or your own non-Azure host). Register an OAuth app with **that provider's** identity system and supply all five inputs. Example: a **GitHub OAuth App**. 1. Create the app at **[github.com/settings/applicatio - Network accessline 22
1. Create the app at **[github.com/settings/applications/new](https://github.com/settings/applications/new)**. Use any name/homepage URL; set **Authorization callback URL** to a placeholder — replace it after the connection exists ([Set the - Network accessline 28
| `--client-id` | **Client ID** | | `--client-secret` | the generated **client secret** | | `--authorization-url` | `https://github.com/login/oauth/authorize` | - Network accessline 29
| `--client-secret` | the generated **client secret** | | `--authorization-url` | `https://github.com/login/oauth/authorize` | | `--token-url` | `https://github.com/login/oauth/access_token` | - Network accessline 30
| `--authorization-url` | `https://github.com/login/oauth/authorize` | - Network accessline 31
[Credential-related source omitted] - Access to secretsline 31
[Credential-related source omitted] - Network accessline 92
az rest --method get --query "properties.redirectUrl" -o tsv \ --url "https://management.azure.com/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.CognitiveServices/accounts/<account>/projects/<project>/connections/private-mcp - Network accessline 93
--url "https://management.azure.com/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.CognitiveServices/accounts/<account>/projects/<project>/connections/private-mcp-oauth?api-version=2025-06-01" - Network accessline 94
# => https://global.consent.azure-apim.net/redirect/<connector-guid> - Network accessline 148
- [Build and register an MCP server (custom MCP on Azure Functions)](https://learn.microsoft.com/en-us/azure/foundry/mcp/build-your-own-mcp-server?view=foundry) - Network accessline 149
- [MCP tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/mcp)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-key-auth.md
- Network accessline 17
# 1. Create the static-key connection (the key lives on the connection) azd ai connection create github-mcp-conn \ --kind remote-tool --target https://api.githubcopilot.com/mcp \ - Network accessline 18
azd ai connection create github-mcp-conn --kind remote-tool --target https://api.githubcopilot.com/mcp - Network accessline 19
--kind remote-tool --target https://api.githubcopilot.com/mcp \ - Network accessline 103
- [GitHub MCP server](https://github.com/github/github-mcp-server) — the static-key example used above - Network accessline 104
- [MCP tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/mcp)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-managed-oauth.md
- Access to secretsline 3
[Credential-related source omitted] - Access to secretsline 5
[Credential-related source omitted] - Access to secretsline 9
[Credential-related source omitted] - Network accessline 35
azd ai connection create github-mcp-managed \ --kind remote-tool \ --target https://api.githubcopilot.com/mcp \ - Network accessline 36
--kind remote-tool \ --target https://api.githubcopilot.com/mcp \ --auth-type oauth2 \ - Network accessline 37
--target https://api.githubcopilot.com/mcp \ - Network accessline 98
|---|---| | `tools/list` returns zero after consent | Wrong `--target` (not the MCP server URL), or the connector needs the `gateway_connector` two-PUT flow instead — see [foundry-tool-catalog.md](../../create/references/foundry-tool-catalo - Network accessline 99
| `tools/list` returns zero after consent | Wrong `--target` (not the MCP server URL), or the connector needs the `gateway_connector` two-PUT flow instead — see [foundry-tool-catalog.md](../../create/references/foundry-tool-catalog.md). | | - Network accessline 100
| `invalid_payload: unsupported authType` | API version drift — re-check allowed `authType` for `RemoteTool` in the [projects REST API](https://learn.microsoft.com/rest/api/aiservices/). | - Network accessline 106
- [MCP tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/mcp)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-noauth.md
- Network accessline 17
# 1. Create the no-auth connection azd ai connection create learn-mcp-conn \ --kind remote-tool --target https://learn.microsoft.com/api/mcp \ - Network accessline 18
azd ai connection create learn-mcp-conn --kind remote-tool --target https://learn.microsoft.com/api/mcp - Network accessline 19
--kind remote-tool --target https://learn.microsoft.com/api/mcp \ - Network accessline 67
- type: mcp server_label: learn_mcp server_url: https://learn.microsoft.com/api/mcp - Network accessline 68
server_label: learn_mcp server_url: https://learn.microsoft.com/api/mcp require_approval: never - Network accessline 69
server_url: https://learn.microsoft.com/api/mcp - Network accessline 102
- [Microsoft Learn MCP server](https://learn.microsoft.com/training/support/mcp) — the public example used above - Network accessline 103
- [MCP tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/mcp)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-user-entra-token.md
- Network accessline 116
- [tool-work-iq.md](tool-work-iq.md) — a concrete, verified user-entra-token MCP server (Microsoft 365 Work IQ) - [MCP tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/mcp) - Network accessline 117
- [MCP tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/mcp)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-openapi.md
- Network accessline 38
# 1. (API-key auth only) create the custom-keys connection; the key name must match the spec's securityScheme name azd ai connection create my-api-conn \ --kind custom-keys --target https://api.example.com \ - Network accessline 39
azd ai connection create my-api-conn --kind custom-keys --target https://api.example.com - Network accessline 40
--kind custom-keys --target https://api.example.com \ - Network accessline 52
openapi: "3.0.0" info: { title: Cat Facts, version: "1.0.0" } servers: [{ url: https://catfact.ninja }] - Network accessline 53
info: { title: Cat Facts, version: "1.0.0" } servers: [{ url: https://catfact.ninja }] paths: - Network accessline 54
servers: [{ url: https://catfact.ninja }] - Network accessline 81
openapi: "3.0.0" info: { title: My API, version: "1.0.0" } servers: [{ url: https://api.example.com }] - Network accessline 82
info: { title: My API, version: "1.0.0" } servers: [{ url: https://api.example.com }] security: [{ apiKeyHeader: [] }] - Network accessline 83
servers: [{ url: https://api.example.com }] - Network accessline 114
openapi: "3.0.0" info: { title: Cat Facts, version: "1.0.0" } servers: [{ url: https://catfact.ninja }] - Network accessline 115
info: { title: Cat Facts, version: "1.0.0" } servers: [{ url: https://catfact.ninja }] paths: - Network accessline 116
servers: [{ url: https://catfact.ninja }] - Network accessline 141
[Credential-related source omitted] - Network accessline 143
[Credential-related source omitted] - Dangerous shell operationline 145
[Credential-related source omitted] - Network accessline 145
[Credential-related source omitted] - Network accessline 153
- [OpenAPI tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/openapi)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-tool-search.md
- Network accessline 97
"type": "mcp", "server_label": "analytics", "server_url": "https://db-mcp.internal/sse", - Network accessline 98
"server_label": "analytics", "server_url": "https://db-mcp.internal/sse", "tool_configs": { - Network accessline 99
"server_url": "https://db-mcp.internal/sse", - Network accessline 118
For full fields, pinning recipes, the verify-with-`tool_search` flow, and best practices, see [Tool Search tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/tool-search).
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-web-search.md
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-work-iq.md
- Network accessline 3
Give the agent Microsoft 365 work context (mail, meetings, files, chats, and M365 agents) via the **Work IQ MCP server** at `https://workiq.svc.cloud.microsoft/mcp`. It attaches as a **remote MCP connection** and calls Work IQ as the **sign - Network accessline 5
- **Server URL:** `https://workiq.svc.cloud.microsoft/mcp` - Network accessline 31
# 1. Create the connection (Entra passthrough + Work IQ audience) azd ai connection create workiq-mcp-conn \ --kind remote-tool --target https://workiq.svc.cloud.microsoft/mcp \ - Network accessline 32
azd ai connection create workiq-mcp-conn --kind remote-tool --target https://workiq.svc.cloud.microsoft/mcp - Network accessline 33
--kind remote-tool --target https://workiq.svc.cloud.microsoft/mcp \ - Network accessline 74
# 2. Create the custom-OAuth connection (scope must include WorkIQAgent.Ask + offline_access) azd ai connection create workiq-oauth-conn \ --kind remote-tool --target https://workiq.svc.cloud.microsoft/mcp \ - Network accessline 75
azd ai connection create workiq-oauth-conn --kind remote-tool --target https://workiq.svc.cloud.microsoft/mcp - Network accessline 76
--kind remote-tool --target https://workiq.svc.cloud.microsoft/mcp \ - Network accessline 77
--auth-type oauth2 \ --client-id "$BYO" --client-secret "$SECRET" \ --authorization-url "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/authorize" \ - Network accessline 78
--client-id "$BYO" --client-secret "$SECRET" \ --authorization-url "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/authorize" \ --token-url "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token" \ - Network accessline 79
--authorization-url "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/authorize" \ - Network accessline 80
--token-url "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token" \ - Network accessline 93
ARM=".../connections/workiq-oauth-conn" # see tool-mcp-custom-oauth.md for the full ARM path REDIR=$(az rest --method get --query "properties.redirectUrl" -o tsv \ --url "https://management.azure.com$ARM?api-version=2025-06-01") - Network accessline 94
REDIR=$(az rest --method get --query "properties.redirectUrl" -o tsv --url "https://management.azure.com$ARM?api-version=2025-06-01") - Network accessline 95
--url "https://management.azure.com$ARM?api-version=2025-06-01") - Network accessline 132
[Credential-related source omitted] - Network accessline 134
[Credential-related source omitted] - Network accessline 136
[Credential-related source omitted] - Dangerous shell operationline 137
[Credential-related source omitted] - Network accessline 137
[Credential-related source omitted] - Network accessline 145
- [Work IQ tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/work-iq) - Network accessline 146
- [MCP server authentication](https://learn.microsoft.com/azure/ai-foundry/agents/how-to/mcp-authentication) — Entra identities, OAuth identity passthrough, managed vs custom OAuth
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/toolbox-azd.md
- Network accessline 88
- [toolbox.md](../toolbox.md) — concept, create flow, supported tool types, troubleshooting - [Toolbox (Configure tools)](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/toolbox#configure-tools) - Network accessline 89
- [Toolbox (Configure tools)](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/toolbox#configure-tools) - Network accessline 90
- [Tool Catalog](https://learn.microsoft.com/azure/foundry/agents/concepts/tool-catalog) - Network accessline 91
- [Foundry Toolkit (VS Code) — set up tools/toolboxes](https://code.visualstudio.com/docs/intelligentapps/tool-catalog) - Network accessline 92
- [Foundry Portal](https://ai.azure.com/)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/scripts/get-catalog-inputs.ps1
- Executable scriptline 1
Executable file - Network accessline 39
NOTE on serverUrl: remotes[].url is often null in the index (verified for github). When empty, supply the connector's documented MCP endpoint as --target (e.g. github Copilot -> https://api.githubcopilot.com/mcp). - Network accessline 41
--target (e.g. github Copilot -> https://api.githubcopilot.com/mcp). - Network accessline 61
$ErrorActionPreference = 'Stop' $gallery = 'https://eastus.api.azureml.ms/asset-gallery/v1.0/tools' - Network accessline 62
$gallery = 'https://eastus.api.azureml.ms/asset-gallery/v1.0/tools' - Network accessline 63
[Credential-related source omitted]
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/scripts/get-catalog-inputs.sh
- Executable scriptline 1
#!/usr/bin/env bash - Network accessline 45
# NOTE on serverUrl: remotes[].url is often null in the index (verified for # github). When empty, supply the connector's documented MCP endpoint as # --target (e.g. github Copilot -> https://api.githubcopilot.com/mcp). - Network accessline 47
# --target (e.g. github Copilot -> https://api.githubcopilot.com/mcp). - Network accessline 62
GALLERY="https://eastus.api.azureml.ms/asset-gallery/v1.0/tools" - Network accessline 67
[Credential-related source omitted] - Network accessline 79
body="{\"freeTextSearch\":\"*\",\"filters\":[{\"field\":\"entityContainerId\",\"operator\":\"eq\",\"values\":[\"registry-prod-bl\"]},{\"field\":\"type\",\"operator\":\"eq\",\"values\":[\"tools\"]}],\"pageSize\":100}" fi curl -sS -X POST - Network accessline 80
[Credential-related source omitted] - Network accessline 81
[Credential-related source omitted] - Access to secretsline 100
[Credential-related source omitted] - Access to secretsline 157
[Credential-related source omitted]
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/toolbox.md
- Access to secretsline 53
[Credential-related source omitted] - Network accessline 71
- **Agent Memory** — configured at the **project** level, separate from the toolbox. See [Memory docs](https://learn.microsoft.com/azure/ai-foundry/agents/how-to/memory-usage?view=foundry). - Network accessline 72
- **Routines (preview)** — an agent **trigger** (`schedule` / `timer` / `github_issue` / `custom`). See [Routines docs](https://learn.microsoft.com/azure/foundry/agents/how-to/use-routines). - Network accessline 80
**Before adding more than ~5 tools, add `{ "type": "toolbox_search_preview" }`.** This replaces the full `tools/list` with two meta-tools — `tool_search` and `call_tool` — so context cost stays flat. Full behavior: [tool-tool-search.md](ref - Network accessline 97
`?api-version=v1` is required; auth is a bearer token scoped `https://ai.azure.com/.default`. See [mcp-protocol.md § Endpoint URL details](references/mcp-protocol.md#endpoint-url-details). - Network accessline 105
- [Toolbox (how-to)](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/toolbox) - Network accessline 106
- [Tool Catalog](https://learn.microsoft.com/azure/foundry/agents/concepts/tool-catalog) - Network accessline 107
- [Foundry Toolkit (VS Code)](https://code.visualstudio.com/docs/intelligentapps/tool-catalog) - Network accessline 108
- [Foundry Portal](https://ai.azure.com/)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/trace/references/kql-templates.md
- Network accessline 218
- [GenAI Spans](https://opentelemetry.io/docs/specs/semconv/gen-ai/gen-ai-spans/) - Network accessline 219
- [GenAI Agent Spans](https://opentelemetry.io/docs/specs/semconv/gen-ai/gen-ai-agent-spans/) - Network accessline 220
- [GenAI Events](https://opentelemetry.io/docs/specs/semconv/gen-ai/gen-ai-events/) - Network accessline 221
- [GenAI Metrics](https://opentelemetry.io/docs/specs/semconv/gen-ai/gen-ai-metrics/)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/trace/trace.md
- Network accessline 19
| Related skills | `troubleshoot` (hosted-agent logs), `eval-datasets` (trace harvesting) | | Preferred query tool | `monitor_resource_log_query` (Azure MCP) - use for App Insights KQL queries | | OTel conventions | [GenAI Spans](https://op - Network accessline 20
| Preferred query tool | `monitor_resource_log_query` (Azure MCP) - use for App Insights KQL queries | | OTel conventions | [GenAI Spans](https://opentelemetry.io/docs/specs/semconv/gen-ai/gen-ai-spans/), [Agent Spans](https://opentelemetry - Network accessline 21
| OTel conventions | [GenAI Spans](https://opentelemetry.io/docs/specs/semconv/gen-ai/gen-ai-spans/), [Agent Spans](https://opentelemetry.io/docs/specs/semconv/gen-ai/gen-ai-agent-spans/) | - Access to secretsline 42
[Credential-related source omitted] - Access to secretsline 43
[Credential-related source omitted] - Access to secretsline 49
[Credential-related source omitted] - Access to secretsline 50
[Credential-related source omitted]
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/troubleshoot/troubleshoot.md
- Network accessline 37
- Triage in this exact order: 1. **Definition & deployment**: Validate the selected subtype and run `azd ai agent show --output json`. 2. **Voice WebSocket upgrade & auth**: Confirm the client connects to `wss://<project-host>/api - Network accessline 38
1. **Definition & deployment**: Validate the selected subtype and run `azd ai agent show --output json`. 2. **Voice WebSocket upgrade & auth**: Confirm the client connects to `wss://<project-host>/api/projects/<project>/agents/<voice-a - Network accessline 39
2. **Voice WebSocket upgrade & auth**: Confirm the client connects to `wss://<project-host>/api/projects/<project>/agents/<voice-agent>/endpoint/protocols/voice?api-version=v1` with `Foundry-Features: VoiceAgents=V1Preview` and an Entra tok - Network accessline 90
List the project connections to find Application Insights or Azure Monitor resources using the Azure CLI command documented at: [az cognitiveservices account connection](https://learn.microsoft.com/en-us/cli/azure/cognitiveservices/account/ - Network accessline 91
[az cognitiveservices account connection](https://learn.microsoft.com/en-us/cli/azure/cognitiveservices/account/connection?view=azure-cli-latest) - Network accessline 129
- [Foundry Hosted Agents](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/hosted-agents?view=foundry) - Network accessline 130
- [Account Connection CLI Reference](https://learn.microsoft.com/en-us/cli/azure/cognitiveservices/account/connection?view=azure-cli-latest) - Network accessline 131
- [KQL Quick Reference](https://learn.microsoft.com/azure/data-explorer/kusto/query/kql-quick-reference) - Network accessline 132
- [Foundry Samples](https://github.com/microsoft-foundry/foundry-samples)
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/validate/references/default-rules.yaml
- Network accessline 9
guidance: - title: "Agent Framework Foundry Toolbox sample" link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/agent-framework/responses/04-foundry-toolbox" - Network accessline 10
- title: "Agent Framework Foundry Toolbox sample" link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/agent-framework/responses/04-foundry-toolbox" - title: "LangGraph Foundry Too - Network accessline 11
link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/agent-framework/responses/04-foundry-toolbox" - Network accessline 12
- title: "LangGraph Foundry Toolbox sample" link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/langgraph/responses/02-langgraph-toolbox" when: Apply when the hosted agent uses an M - Network accessline 13
link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/langgraph/responses/02-langgraph-toolbox" - Network accessline 26
guidance: - title: "APIM hosted-agent solution template" link: "https://github.com/microsoft/Foundry-Agent-Solution-Templates/tree/main/apim-hosted-agent" - Network accessline 27
- title: "APIM hosted-agent solution template" link: "https://github.com/microsoft/Foundry-Agent-Solution-Templates/tree/main/apim-hosted-agent" when: Apply when repository requirements or configuration specify a model token or - Network accessline 28
link: "https://github.com/microsoft/Foundry-Agent-Solution-Templates/tree/main/apim-hosted-agent" - Network accessline 42
guidance: - title: "Configure hosted-agent telemetry" link: "https://learn.microsoft.com/azure/foundry/agents/how-to/configure-hosted-agent-telemetry" - Network accessline 43
- title: "Configure hosted-agent telemetry" link: "https://learn.microsoft.com/azure/foundry/agents/how-to/configure-hosted-agent-telemetry" - title: "Set up tracing for agents" - Network accessline 44
link: "https://learn.microsoft.com/azure/foundry/agents/how-to/configure-hosted-agent-telemetry" - Network accessline 45
- title: "Set up tracing for agents" link: "https://learn.microsoft.com/azure/foundry/observability/how-to/trace-agent-setup" when: Apply to every hosted agent configured with host azure.ai.agent. - Network accessline 46
link: "https://learn.microsoft.com/azure/foundry/observability/how-to/trace-agent-setup" - Network accessline 60
guidance: - title: "Microsoft Agent Framework SDK overview" link: "https://learn.microsoft.com/azure/foundry/how-to/develop/sdk-overview#agent-framework" - Network accessline 61
- title: "Microsoft Agent Framework SDK overview" link: "https://learn.microsoft.com/azure/foundry/how-to/develop/sdk-overview#agent-framework" - title: "Choose a hosted-agent framework" - Network accessline 62
link: "https://learn.microsoft.com/azure/foundry/how-to/develop/sdk-overview#agent-framework" - Network accessline 63
- title: "Choose a hosted-agent framework" link: "https://learn.microsoft.com/azure/foundry/agents/quickstarts/quickstart-deploy-own-code#choose-your-framework" when: Apply only when the hosted agent declares or imports Microsof - Network accessline 64
link: "https://learn.microsoft.com/azure/foundry/agents/quickstarts/quickstart-deploy-own-code#choose-your-framework" - Network accessline 77
guidance: - title: "Python hosted-agent framework samples" link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents" - Network accessline 78
- title: "Python hosted-agent framework samples" link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents" - title: ".NET hosted-agent framework samples" - Network accessline 79
link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents" - Network accessline 80
- title: ".NET hosted-agent framework samples" link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/csharp/hosted-agents" - title: "Python LangGraph hosting samples" - Network accessline 81
link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/csharp/hosted-agents" - Network accessline 82
- title: "Python LangGraph hosting samples" link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/langgraph" when: Apply to every hosted agent configured with host azure.ai.agent. - Network accessline 83
link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/langgraph" - Network accessline 96
guidance: - title: "Tool best practices for agents" link: "https://learn.microsoft.com/azure/foundry/agents/concepts/tool-best-practice" - Network accessline 97
- title: "Tool best practices for agents" link: "https://learn.microsoft.com/azure/foundry/agents/concepts/tool-best-practice" - title: "Responsible AI transparency note for agents" - Network accessline 98
link: "https://learn.microsoft.com/azure/foundry/agents/concepts/tool-best-practice" - Network accessline 99
- title: "Responsible AI transparency note for agents" link: "https://learn.microsoft.com/azure/foundry/responsible-ai/agents/transparency-note" when: Apply when the repository stores or references instructions that govern the h - Network accessline 100
link: "https://learn.microsoft.com/azure/foundry/responsible-ai/agents/transparency-note" - Network accessline 113
guidance: - title: "Azure AI Search role-based access control" link: "https://learn.microsoft.com/azure/search/search-security-rbac" - Network accessline 114
- title: "Azure AI Search role-based access control" link: "https://learn.microsoft.com/azure/search/search-security-rbac" - title: "Enterprise knowledge-agent connection configuration" - Network accessline 115
link: "https://learn.microsoft.com/azure/search/search-security-rbac" - Network accessline 116
- title: "Enterprise knowledge-agent connection configuration" link: "https://github.com/microsoft/Foundry-Agent-Solution-Templates/blob/main/enterprise-knowledge-agent/scripts/provision.py" when: >- - Network accessline 117
link: "https://github.com/microsoft/Foundry-Agent-Solution-Templates/blob/main/enterprise-knowledge-agent/scripts/provision.py" - Network accessline 131
guidance: - title: "Azure Container Registry image tagging and versioning" link: "https://learn.microsoft.com/azure/container-registry/container-registry-image-tag-version" - Network accessline 132
- title: "Azure Container Registry image tagging and versioning" link: "https://learn.microsoft.com/azure/container-registry/container-registry-image-tag-version" - title: "Private-network hosted-agent existing ACR scenario" - Network accessline 133
link: "https://learn.microsoft.com/azure/container-registry/container-registry-image-tag-version" - Network accessline 134
- title: "Private-network hosted-agent existing ACR scenario" link: "https://github.com/microsoft/Foundry-Agent-Solution-Templates/tree/main/private-network-hosted-agent/scenarios/existing-private-acr" when: >- - Network accessline 135
link: "https://github.com/microsoft/Foundry-Agent-Solution-Templates/tree/main/private-network-hosted-agent/scenarios/existing-private-acr" - Network accessline 149
guidance: - title: "Foundry hosted-agent virtual networks" link: "https://learn.microsoft.com/azure/foundry/agents/how-to/virtual-networks" - Network accessline 150
- title: "Foundry hosted-agent virtual networks" link: "https://learn.microsoft.com/azure/foundry/agents/how-to/virtual-networks" - title: "Private-network hosted-agent security boundaries" - Network accessline 151
link: "https://learn.microsoft.com/azure/foundry/agents/how-to/virtual-networks" - Network accessline 152
- title: "Private-network hosted-agent security boundaries" link: "https://github.com/microsoft/Foundry-Agent-Solution-Templates/blob/main/private-network-hosted-agent/docs/security.md" when: >- - Network accessline 153
link: "https://github.com/microsoft/Foundry-Agent-Solution-Templates/blob/main/private-network-hosted-agent/docs/security.md" - Network accessline 168
guidance: - title: "Review platform environment variables" link: "https://learn.microsoft.com/azure/foundry/agents/how-to/configure-hosted-agent-env-variables#review-platform-environment-variables" - Network accessline 169
- title: "Review platform environment variables" link: "https://learn.microsoft.com/azure/foundry/agents/how-to/configure-hosted-agent-env-variables#review-platform-environment-variables" when: Apply when hosted-agent runtime or - Network accessline 170
link: "https://learn.microsoft.com/azure/foundry/agents/how-to/configure-hosted-agent-env-variables#review-platform-environment-variables" - Network accessline 184
guidance: - title: "Hosted-agent protocol endpoints" link: "https://learn.microsoft.com/azure/foundry/agents/concepts/hosted-agent-contract#protocol-endpoints" - Network accessline 185
- title: "Hosted-agent protocol endpoints" link: "https://learn.microsoft.com/azure/foundry/agents/concepts/hosted-agent-contract#protocol-endpoints" - title: "Add a protocol adapter" - Network accessline 186
link: "https://learn.microsoft.com/azure/foundry/agents/concepts/hosted-agent-contract#protocol-endpoints" - Network accessline 187
- title: "Add a protocol adapter" link: "https://learn.microsoft.com/azure/foundry/agents/how-to/add-protocol-adapter" when: Apply when the hosted-agent service declares the Responses or Invocations protocol in azure.yaml; other - Network accessline 188
link: "https://learn.microsoft.com/azure/foundry/agents/how-to/add-protocol-adapter"
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/validate/references/report-schema.json
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/validate/references/rules-schema.json
.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.ps1
- Executable scriptline 1
Executable file - Network accessline 25
$capRaw = az rest --method GET ` --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/modelCapacities" ` - Network accessline 26
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/modelCapacities" ` - Network accessline 31
$projRaw = az rest --method GET ` --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/accounts" ` - Network accessline 32
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/accounts" `
.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.sh
- Executable scriptline 1
#!/bin/bash - Network accessline 20
CAPACITY_JSON=$(az rest --method GET \ --url "https://management.azure.com/subscriptions/${SUB_ID}/providers/Microsoft.CognitiveServices/modelCapacities" \ - Network accessline 21
--url "https://management.azure.com/subscriptions/${SUB_ID}/providers/Microsoft.CognitiveServices/modelCapacities" \ - Network accessline 26
PROJECTS_JSON=$(az rest --method GET \ --url "https://management.azure.com/subscriptions/${SUB_ID}/providers/Microsoft.CognitiveServices/accounts" \ - Network accessline 27
--url "https://management.azure.com/subscriptions/${SUB_ID}/providers/Microsoft.CognitiveServices/accounts" \
.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/capacity/scripts/query_capacity.ps1
- Executable scriptline 1
Executable file - Network accessline 40
if ($Region) { $url = "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$Region/modelCapacities" - Network accessline 41
$url = "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$Region/modelCapacities" - Network accessline 42
} else { $url = "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/modelCapacities" } - Network accessline 43
$url = "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/modelCapacities"
.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/capacity/scripts/query_capacity.sh
- Executable scriptline 1
#!/bin/bash - Network accessline 33
if [ -n "$REGION" ]; then URL="https://management.azure.com/subscriptions/${SUB_ID}/providers/Microsoft.CognitiveServices/locations/${REGION}/modelCapacities" - Network accessline 34
URL="https://management.azure.com/subscriptions/${SUB_ID}/providers/Microsoft.CognitiveServices/locations/${REGION}/modelCapacities" - Network accessline 35
else URL="https://management.azure.com/subscriptions/${SUB_ID}/providers/Microsoft.CognitiveServices/modelCapacities" fi - Network accessline 36
URL="https://management.azure.com/subscriptions/${SUB_ID}/providers/Microsoft.CognitiveServices/modelCapacities" - Network accessline 40
CAPACITY_RESULT=$(az rest --method GET --url "$URL" \
.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/customize/references/customize-workflow.md
- Network accessline 128
# Current region capacity az rest --method GET --url \ "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/locations/$PROJECT_REGION/modelCapacities?api-version=2024-10-01&modelFormat=$MODEL_ - Network accessline 129
az rest --method GET --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/locations/$PROJECT_REGION/modelCapacities?api-version=2024-10-01&modelFormat=$MODEL_FORMAT&modelName=$MODEL_NAM - Network accessline 130
"https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/locations/$PROJECT_REGION/modelCapacities?api-version=2024-10-01&modelFormat=$MODEL_FORMAT&modelName=$MODEL_NAME&modelVersion=$MODEL_VERSION" - Network accessline 148
az rest --method GET --url \ "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/modelCapacities?api-version=2024-10-01&modelFormat=$MODEL_FORMAT&modelName=$MODEL_NAME&modelVersion=$MODEL_VER - Network accessline 149
"https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/modelCapacities?api-version=2024-10-01&modelFormat=$MODEL_FORMAT&modelName=$MODEL_NAME&modelVersion=$MODEL_VERSION" - Network accessline 208
TENANT_INFO=$(az rest --method GET \ --url "https://management.azure.com/tenants?api-version=2024-11-01" \ - Network accessline 209
--url "https://management.azure.com/tenants?api-version=2024-11-01" \ - Network accessline 218
$tenantInfo = az rest --method GET ` --url "https://management.azure.com/tenants?api-version=2024-11-01" ` - Network accessline 219
--url "https://management.azure.com/tenants?api-version=2024-11-01" ` - Network accessline 339
az rest --method PUT \ --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/resourceGroups/$RESOURCE_GROUP/providers/Microsoft.CognitiveServices/accounts/$ACCOUNT_NAME/deployments/$DEPLOYMENT_NAME?api-version=2024-10-01" \ - Network accessline 340
--url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/resourceGroups/$RESOURCE_GROUP/providers/Microsoft.CognitiveServices/accounts/$ACCOUNT_NAME/deployments/$DEPLOYMENT_NAME?api-version=2024-10-01" \ - Network accessline 384
az rest --method PUT ` --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/resourceGroups/$RESOURCE_GROUP/providers/Microsoft.CognitiveServices/accounts/$ACCOUNT_NAME/deployments/${DEPLOYMENT_NAME}?api-version=2024-10-01" ` - Network accessline 385
--url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/resourceGroups/$RESOURCE_GROUP/providers/Microsoft.CognitiveServices/accounts/$ACCOUNT_NAME/deployments/${DEPLOYMENT_NAME}?api-version=2024-10-01" `
.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/preset/references/preset-workflow.md
- Network accessline 166
# Query capacity for current region CAPACITY_JSON=$(az rest --method GET \ --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/locations/$PROJECT_REGION/modelCapacities?api-version=2024 - Network accessline 167
CAPACITY_JSON=$(az rest --method GET --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/locations/$PROJECT_REGION/modelCapacities?api-version=2024-10-01&modelFormat=$MODEL_FORMAT&mode - Network accessline 168
--url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/locations/$PROJECT_REGION/modelCapacities?api-version=2024-10-01&modelFormat=$MODEL_FORMAT&modelName=$MODEL_NAME&modelVersion=$MODEL_VE - Network accessline 195
# Get capacity for all regions in subscription ALL_REGIONS_JSON=$(az rest --method GET \ --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/modelCapacities?api-version=2024-10-01&model - Network accessline 196
ALL_REGIONS_JSON=$(az rest --method GET --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/modelCapacities?api-version=2024-10-01&modelFormat=$MODEL_FORMAT&modelName=$MODEL_NAME&model - Network accessline 197
--url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/modelCapacities?api-version=2024-10-01&modelFormat=$MODEL_FORMAT&modelName=$MODEL_NAME&modelVersion=$MODEL_VERSION") - Network accessline 496
TENANT_INFO=$(az rest --method GET \ --url "https://management.azure.com/tenants?api-version=2024-11-01" \ - Network accessline 497
--url "https://management.azure.com/tenants?api-version=2024-11-01" \ - Network accessline 506
$tenantInfo = az rest --method GET ` --url "https://management.azure.com/tenants?api-version=2024-11-01" ` - Network accessline 507
--url "https://management.azure.com/tenants?api-version=2024-11-01" ` - Network accessline 520
az rest --method PUT \ --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/resourceGroups/$RESOURCE_GROUP/providers/Microsoft.CognitiveServices/accounts/$ACCOUNT_NAME/deployments/$DEPLOYMENT_NAME?api-version=2024-10-01" \ - Network accessline 521
--url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/resourceGroups/$RESOURCE_GROUP/providers/Microsoft.CognitiveServices/accounts/$ACCOUNT_NAME/deployments/$DEPLOYMENT_NAME?api-version=2024-10-01" \ - Network accessline 565
az rest --method PUT ` --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/resourceGroups/$RESOURCE_GROUP/providers/Microsoft.CognitiveServices/accounts/$ACCOUNT_NAME/deployments/${DEPLOYMENT_NAME}?api-version=2024-10-01" ` - Network accessline 566
--url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/resourceGroups/$RESOURCE_GROUP/providers/Microsoft.CognitiveServices/accounts/$ACCOUNT_NAME/deployments/${DEPLOYMENT_NAME}?api-version=2024-10-01" `
.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/preset/references/workflow.md
- Network accessline 79
CAPACITY_JSON=$(az rest --method GET \ --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/locations/$PROJECT_REGION/modelCapacities?api-version=2024-10-01&modelFormat=OpenAI&modelName= - Network accessline 80
--url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/locations/$PROJECT_REGION/modelCapacities?api-version=2024-10-01&modelFormat=OpenAI&modelName=$MODEL_NAME&modelVersion=$MODEL_VERSION") - Network accessline 92
ALL_REGIONS_JSON=$(az rest --method GET \ --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/modelCapacities?api-version=2024-10-01&modelFormat=OpenAI&modelName=$MODEL_NAME&modelVersio - Network accessline 93
--url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/modelCapacities?api-version=2024-10-01&modelFormat=OpenAI&modelName=$MODEL_NAME&modelVersion=$MODEL_VERSION")
.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/scripts/generate_deployment_url.ps1
.github/plugins/azure-skills/skills/microsoft-foundry/models/deploy-model/scripts/generate_deployment_url.sh
.github/plugins/azure-skills/skills/microsoft-foundry/project/connections.md
.github/plugins/azure-skills/skills/microsoft-foundry/project/create/create-foundry-project.md
- Broad permissionsline 1
Read, Write, Bash, AskUserQuestion - Network accessline 22
**1. Azure CLI** — `az version` → expects version output. If missing: https://aka.ms/installazurecli - Network accessline 30
If not logged in, run `az login`. If no active subscription: https://azure.microsoft.com/free/ — STOP. - Network accessline 42
**4. Azure Developer CLI** — `azd version`. If missing: https://aka.ms/azure-dev/install - Network accessline 77
mkdir "<project-name>" && cd "<project-name>" azd init -t https://github.com/Azure-Samples/azd-ai-starter-basic -e <project-name> --no-prompt - Network accessline 78
azd init -t https://github.com/Azure-Samples/azd-ai-starter-basic -e <project-name> --no-prompt - Network accessline 103
See the canonical env-var docs: [azure-dev/cli/azd/docs/environment-variables.md](https://github.com/Azure/azure-dev/blob/main/cli/azd/docs/environment-variables.md). - Network accessline 119
Capture `AZURE_AI_PROJECT_ID`, `AZURE_AI_PROJECT_ENDPOINT`, and `AZURE_RESOURCE_GROUP`. Direct user to verify at https://ai.azure.com. - Network accessline 127
- Deploy an existing agent → [foundry-agent/deploy/deploy.md](../../foundry-agent/deploy/deploy.md) - Browse model catalog → `foundry_models_list` MCP tool - Manage project → https://ai.azure.com - Network accessline 129
- Manage project → https://ai.azure.com - Network accessline 141
| Problem | Solution | |---------|----------| | `azd: command not found` | Install from https://aka.ms/azure-dev/install | - Network accessline 142
|---------|----------| | `azd: command not found` | Install from https://aka.ms/azure-dev/install | | `ERROR: Failed to authenticate` | Run `azd auth login`; verify subscription with `az account list` | - Network accessline 143
| `azd: command not found` | Install from https://aka.ms/azure-dev/install | - Network accessline 157
- [Azure Developer CLI](https://aka.ms/azure-dev/install) · [Microsoft Foundry Portal](https://ai.azure.com) · [Foundry Docs](https://learn.microsoft.com/azure/ai-foundry/) · [azd-ai-starter-basic template](https://github.com/Azure-Samples/
.github/plugins/azure-skills/skills/microsoft-foundry/quota/quota.md
- Network accessline 50
subId=$(az account show --query id -o tsv) az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 51
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" - Network accessline 52
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 71
region="eastus" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 72
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 73
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 90
az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 91
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 106
region="eastus" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 107
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 108
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 139
**Azure Portal Process:** 1. Navigate to [Azure Portal - All Resources](https://portal.azure.com/#view/HubsExtension/BrowseAll) → Filter "AI Services" → Click resource - Network accessline 140
1. Navigate to [Azure Portal - All Resources](https://portal.azure.com/#view/HubsExtension/BrowseAll) → Filter "AI Services" → Click resource - Network accessline 142
3. Click **Request quota increase** 4. Fill form: Model, Current Limit, Requested Limit, Region, **Business Justification** (required field) 5. Wait for approval: **3-5 business days typically, up to 10 business days** ([source](https://lea - Network accessline 144
5. Wait for approval: **3-5 business days typically, up to 10 business days** ([source](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/quota)) - Network accessline 185
**Official Microsoft Documentation:** - [Azure OpenAI Service Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - Official pay-per-token rates - Network accessline 186
- [Azure OpenAI Service Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - Official pay-per-token rates - Network accessline 187
- [PTU Costs and Billing](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/provisioned-throughput-onboarding) - PTU hourly rates - Network accessline 188
- [Azure OpenAI Models](https://learn.microsoft.com/en-us/azure/ai-services/openai/concepts/models) - Model capabilities and regions - Network accessline 189
- [Quota Management Guide](https://learn.microsoft.com/azure/ai-services/openai/how-to/quota) - Official quota procedures - Network accessline 190
- [Quotas and Limits](https://learn.microsoft.com/azure/ai-services/openai/quotas-limits) - Rate limits and quota details - Network accessline 192
**Calculators:** - [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) - Official pricing estimator - Network accessline 193
- [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) - Official pricing estimator
.github/plugins/azure-skills/skills/microsoft-foundry/quota/references/capacity-planning.md
- Network accessline 9
> **Official Pricing Sources:** > - [Azure OpenAI Service Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - Official pay-per-token rates - Network accessline 10
> - [Azure OpenAI Service Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - Official pay-per-token rates - Network accessline 11
> - [PTU Costs and Billing Guide](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/provisioned-throughput-onboarding) - PTU hourly rates and capacity planning - Network accessline 14
- Pay-per-token for input/output - No upfront commitment - **Rates**: See [Azure OpenAI Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - Network accessline 15
- No upfront commitment - **Rates**: See [Azure OpenAI Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - GPT-4o: ~$0.0025-$0.01/1K tokens - Network accessline 16
- **Rates**: See [Azure OpenAI Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - Network accessline 23
- Hourly billing: `$/PTU/hr × PTUs × 730 hrs/month` - Monthly commitment with Reservations discounts - **Rates**: See [PTU Billing Guide](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/provisioned-throughput-onboarding) - Network accessline 24
- Monthly commitment with Reservations discounts - **Rates**: See [PTU Billing Guide](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/provisioned-throughput-onboarding) - Use PTU calculator to determine requirements (Micros - Network accessline 25
- **Rates**: See [PTU Billing Guide](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/provisioned-throughput-onboarding) - Network accessline 53
> **Important**: Always use the official [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) and Microsoft Foundry portal PTU calculator (Microsoft Foundry → Operate → Quota → Provisioned Throughput Unit tab) for exa - Network accessline 95
> **Official Documentation:** > - [Choose the Right AI Model for Your Workload](https://learn.microsoft.com/en-us/azure/architecture/ai-ml/guide/choose-ai-model) - Microsoft Architecture Center - Network accessline 96
> - [Choose the Right AI Model for Your Workload](https://learn.microsoft.com/en-us/azure/architecture/ai-ml/guide/choose-ai-model) - Microsoft Architecture Center - Network accessline 97
> - [Azure OpenAI Models](https://learn.microsoft.com/en-us/azure/ai-services/openai/concepts/models) - Model capabilities, regions, and quotas - Network accessline 98
> - [Understanding Deployment Types](https://learn.microsoft.com/en-us/azure/ai-foundry/foundry-models/concepts/deployment-types) - Standard vs Provisioned guidance - Network accessline 100
**Model Characteristics** (from [official Azure OpenAI documentation](https://learn.microsoft.com/en-us/azure/ai-services/openai/concepts/models)): - Network accessline 110
**Deployment Type Selection** (from [official deployment types guide](https://learn.microsoft.com/en-us/azure/ai-foundry/foundry-models/concepts/deployment-types)): - Network accessline 120
**Capacity Planning Approach** (from [PTU onboarding guide](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/provisioned-throughput-onboarding)):
.github/plugins/azure-skills/skills/microsoft-foundry/quota/references/error-resolution.md
- Network accessline 9
subId=$(az account show --query id -o tsv) for region in eastus westus eastus2 westus2 swedencentral uksouth; do az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations - Network accessline 10
for region in eastus westus eastus2 westus2 swedencentral uksouth; do az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 11
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 88
subId=$(az account show --query id -o tsv) az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 89
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 118
subId=$(az account show --query id -o tsv) az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 119
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \
.github/plugins/azure-skills/skills/microsoft-foundry/quota/references/optimization.md
- Network accessline 16
region="eastus" # Change to your region az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 17
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 18
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 116
> **Official Documentation**: [Plan to manage costs for Azure OpenAI](https://learn.microsoft.com/en-us/azure/ai-services/openai/how-to/manage-costs) and [Fine-tuning cost management](https://learn.microsoft.com/en-us/azure/ai-foundry/opena - Network accessline 118
**A. Use Fine-Tuned Smaller Models** (from [Microsoft Transparency Note](https://learn.microsoft.com/en-us/azure/ai-foundry/responsible-ai/openai/transparency-note)): - Network accessline 129
**B. Remove Unused Fine-Tuned Deployments** (from [Fine-tuning cost management](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/fine-tuning-cost-management)): - Network accessline 142
**C. Batch Multiple Requests** (from [Cost optimization Q&A](https://learn.microsoft.com/en-us/answers/questions/1689253/how-to-optimize-costs-per-request-azure-openai-gpt)): - Network accessline 146
**D. Use Commitment Tiers for Predictable Costs** (from [Managing costs guide](https://learn.microsoft.com/en-us/azure/ai-services/openai/how-to/manage-costs)): - Network accessline 161
subId=$(az account show --query id -o tsv) az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 162
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 163
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \
.github/plugins/azure-skills/skills/microsoft-foundry/quota/references/ptu-guide.md
- Network accessline 62
# Calculate required PTU capacity curl -X POST "https://management.azure.com/subscriptions/<subscription-id>/providers/Microsoft.CognitiveServices/calculateModelCapacity?api-version=2024-10-01" \ - Network accessline 63
curl -X POST "https://management.azure.com/subscriptions/<subscription-id>/providers/Microsoft.CognitiveServices/calculateModelCapacity?api-version=2024-10-01" \ - Network accessline 149
- [Understanding PTU Costs](https://learn.microsoft.com/azure/ai-foundry/openai/how-to/provisioned-throughput-onboarding) - Network accessline 150
- [What Is Provisioned Throughput](https://learn.microsoft.com/azure/ai-foundry/openai/concepts/provisioned-throughput) - Network accessline 151
- [Calculate Model Capacity API](https://learn.microsoft.com/rest/api/aiservices/accountmanagement/calculate-model-capacity/calculate-model-capacity?view=rest-aiservices-accountmanagement-2024-10-01&tabs=HTTP) - Network accessline 152
- [PTU Overview](https://learn.microsoft.com/azure/ai-services/openai/concepts/provisioned-throughput)
.github/plugins/azure-skills/skills/microsoft-foundry/quota/references/troubleshooting.md
- Network accessline 27
region="eastus" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 28
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 29
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 49
region="eastus" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 50
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 51
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 128
region="eastus" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 129
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 130
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 145
1. **Check model availability:** - Review [PTU model availability by region](https://learn.microsoft.com/azure/ai-services/openai/concepts/models#provisioned-deployment-model-availability) - Network accessline 146
- Review [PTU model availability by region](https://learn.microsoft.com/azure/ai-services/openai/concepts/models#provisioned-deployment-model-availability) - Network accessline 193
subId=$(az account show --query id -o tsv) az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 194
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" - Network accessline 195
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 209
- [Quota Management Documentation](https://learn.microsoft.com/azure/ai-services/openai/how-to/quota) - Network accessline 210
- [Rate Limits Documentation](https://learn.microsoft.com/azure/ai-services/openai/quotas-limits) - Network accessline 211
- [Troubleshooting Guide](https://learn.microsoft.com/azure/ai-services/openai/troubleshooting)
.github/plugins/azure-skills/skills/microsoft-foundry/quota/references/workflows.md
- Network accessline 25
echo "=== Region: $region ===" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 26
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 27
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 68
region="eastus" # Change to your target region az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 69
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 70
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 116
echo "=== Region: $region ===" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 117
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 118
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 145
region="eastus" # Change to your region az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 146
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 147
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \
.github/plugins/azure-skills/skills/microsoft-foundry/rbac/rbac.md
- Network accessline 154
- [Microsoft Foundry RBAC Documentation](https://learn.microsoft.com/azure/ai-foundry/concepts/rbac-ai-foundry) - Network accessline 155
- [Azure Built-in Roles](https://learn.microsoft.com/azure/role-based-access-control/built-in-roles) - Network accessline 156
- [Managed Identities Overview](https://learn.microsoft.com/azure/active-directory/managed-identities-azure-resources/overview) - Network accessline 157
- [Service Principal Authentication](https://learn.microsoft.com/azure/developer/github/connect-from-azure)
.github/plugins/azure-skills/skills/microsoft-foundry/references/agent-metadata-contract.md
- Access to secretsline 11
[Credential-related source omitted] - Access to secretsline 19
[Credential-related source omitted] - Access to secretsline 44
[Credential-related source omitted] - Access to secretsline 45
[Credential-related source omitted] - Access to secretsline 46
[Credential-related source omitted] - Access to secretsline 47
[Credential-related source omitted] - Access to secretsline 48
[Credential-related source omitted] - Access to secretsline 49
[Credential-related source omitted] - Access to secretsline 50
[Credential-related source omitted] - Access to secretsline 51
[Credential-related source omitted]
.github/plugins/azure-skills/skills/microsoft-foundry/references/auth-best-practices.md
- Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 124
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 125
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 126
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 127
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 128
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 129
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 130
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme)
.github/plugins/azure-skills/skills/microsoft-foundry/references/standard-agent-setup.md
- Network accessline 3
> ⚠<U+FE0F> **Warning:** This page covers Foundry's **Standard Agent Setup** (capability host + bring-your-own Cosmos DB / Azure Storage / Azure AI Search). The default `azd ai agent` flow uses **Basic Agent Setup** and does **not** provision a `c - Network accessline 5
> **MANDATORY:** Read [Standard Agent Setup docs](https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/standard-agent-setup?view=foundry) before proceeding with standard setup. - Network accessline 37
- Standard setup always creates a **new Foundry resource and a new project**. Do not ask the user for a project endpoint — one will be provisioned as part of the deployment. - **Always use the official Bicep template:** [Standard Agent Se - Network accessline 39
[Standard Agent Setup Bicep Template](https://github.com/azure-ai-foundry/foundry-samples/blob/main/infrastructure/infrastructure-setup-bicep/43-standard-agent-setup-with-customization/main.bicep) - Network accessline 52
- [Capability Hosts — Agent Setup Types](https://learn.microsoft.com/en-us/azure/ai-foundry/agents/concepts/capability-hosts?view=foundry) - Network accessline 53
- [Standard Agent Setup](https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/standard-agent-setup?view=foundry)
.github/plugins/azure-skills/skills/microsoft-foundry/resource/create/create-foundry-resource.md
- Network accessline 52
- **Azure subscription** - Active subscription ([create free account](https://azure.microsoft.com/pricing/purchase-options/azure-account)) - Network accessline 150
- [Common Patterns](./references/patterns.md) - Quick setup patterns and command reference - [Troubleshooting](./references/troubleshooting.md) - Common errors and solutions - [Azure AI Services documentation](https://learn.microsoft.com/en - Network accessline 152
- [Azure AI Services documentation](https://learn.microsoft.com/en-us/azure/ai-services/multi-service-resource?pivots=azcli)
.github/plugins/azure-skills/skills/microsoft-foundry/resource/create/references/troubleshooting.md
- Network accessline 90
- [Create multi-service resource](https://learn.microsoft.com/en-us/azure/ai-services/multi-service-resource?pivots=azcli) - Network accessline 91
- [Azure AI Services documentation](https://learn.microsoft.com/en-us/azure/ai-services/) - Network accessline 92
- [Azure regions with AI Services](https://azure.microsoft.com/global-infrastructure/services/?products=cognitive-services)
.github/plugins/azure-skills/skills/microsoft-foundry/resource/private-network/private-network.md
- Broad permissionsline 1
Read, Write, Bash, AskUserQuestion, microsoft_docs_search, microsoft_docs_fetch - Network accessline 21
| Topic | URL | |-------|-----| | Networking options (decision) | https://learn.microsoft.com/azure/foundry/agents/concepts/networking-options | - Network accessline 22
|-------|-----| | Networking options (decision) | https://learn.microsoft.com/azure/foundry/agents/concepts/networking-options | | Network isolation | https://learn.microsoft.com/azure/foundry/how-to/configure-private-link | - Network accessline 23
| Networking options (decision) | https://learn.microsoft.com/azure/foundry/agents/concepts/networking-options | - Network accessline 24
| Network isolation | https://learn.microsoft.com/azure/foundry/how-to/configure-private-link | - Network accessline 25
| Agent Service VNet | https://learn.microsoft.com/azure/foundry/agents/how-to/virtual-networks | - Network accessline 26
| Networking deep dive (subnet/IP) | https://learn.microsoft.com/azure/foundry/agents/concepts/agents-networking-deep-dive | - Network accessline 27
| Managed VNet | https://learn.microsoft.com/azure/foundry/how-to/managed-virtual-network | - Network accessline 28
| Feature limitations | https://learn.microsoft.com/azure/foundry/how-to/configure-private-link#foundry-feature-limitations |
.github/plugins/azure-skills/skills/microsoft-foundry/resource/private-network/references/end-to-end-test.md
- Network accessline 68
for h in "${endpoints[@]}"; do ip=$(dig +short "$h" | tail -n1) nc -z -w 3 "$h" 443 >/dev/null 2>&1 && reach=yes || reach=no - Network accessline 69
ip=$(dig +short "$h" | tail -n1) nc -z -w 3 "$h" 443 >/dev/null 2>&1 && reach=yes || reach=no echo "$h -> $ip (reachable: $reach)" - Network accessline 70
nc -z -w 3 "$h" 443 >/dev/null 2>&1 && reach=yes || reach=no
.github/plugins/azure-skills/skills/microsoft-foundry/resource/private-network/references/intake.md
- Network accessline 145
> Entra ID token audience for Foundry Agents API: `https://ai.azure.com` - Network accessline 161
| Topic | URL | |-------|-----| | Networking options (decision) | https://learn.microsoft.com/azure/foundry/agents/concepts/networking-options | - Network accessline 162
|-------|-----| | Networking options (decision) | https://learn.microsoft.com/azure/foundry/agents/concepts/networking-options | | Network isolation overview | https://learn.microsoft.com/azure/foundry/how-to/configure-private-link | - Network accessline 163
| Networking options (decision) | https://learn.microsoft.com/azure/foundry/agents/concepts/networking-options | - Network accessline 164
| Network isolation overview | https://learn.microsoft.com/azure/foundry/how-to/configure-private-link | - Network accessline 165
| Agent Service private networking | https://learn.microsoft.com/azure/foundry/agents/how-to/virtual-networks | - Network accessline 166
| Networking deep dive (subnet/IP) | https://learn.microsoft.com/azure/foundry/agents/concepts/agents-networking-deep-dive | - Network accessline 167
| Managed VNet configuration | https://learn.microsoft.com/azure/foundry/how-to/managed-virtual-network | - Network accessline 168
| Agent Service FAQ — VNet | https://learn.microsoft.com/azure/foundry/agents/faq#virtual-networking | - Network accessline 169
| Supported regions & availability | https://learn.microsoft.com/azure/foundry/reference/region-support | - Network accessline 170
| NSP | https://learn.microsoft.com/azure/foundry/how-to/add-foundry-to-network-security-perimeter | - Network accessline 171
| Feature Limitations | https://learn.microsoft.com/en-us/azure/foundry/how-to/configure-private-link#foundry-feature-limitations |
.github/plugins/azure-skills/skills/microsoft-foundry/resource/private-network/references/post-deployment-validation.md
- Network accessline 54
az rest --method get \ --url "https://management.azure.com/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.CognitiveServices/accounts/<ai-account>/managedNetworks/default/outboundRules?api-version=2025-10-01-preview" \ - Network accessline 55
--url "https://management.azure.com/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.CognitiveServices/accounts/<ai-account>/managedNetworks/default/outboundRules?api-version=2025-10-01-preview" \
.github/plugins/azure-skills/skills/microsoft-foundry/resource/private-network/references/template-index.md
- Network accessline 5
**Bicep templates:** https://github.com/microsoft-foundry/foundry-samples/tree/main/infrastructure/infrastructure-setup-bicep/ - Network accessline 7
**Terraform templates:** https://github.com/microsoft-foundry/foundry-samples/tree/main/infrastructure/infrastructure-setup-terraform/ - Network accessline 9
**Deployment helpers:** https://github.com/microsoft-foundry/foundry-samples/tree/main/infrastructure/infrastructure-setup-bicep/deployment-tools/ — `preflight` (pre-deploy checks) and `cleanup` (correct capability-host/subnet teardown orde
.github/plugins/azure-skills/skills/microsoft-foundry/resource/private-network/references/vpn-dns-setup.bicep
- Network accessline 42
// The intake step (az cloud show) warns users before reaching this template. var aadAudience = 'c632b3df-fb67-4d84-bdcf-b95ad541b5c8' var aadIssuer = 'https://sts.windows.net/${aadTenantId}/' - Network accessline 43
var aadAudience = 'c632b3df-fb67-4d84-bdcf-b95ad541b5c8' var aadIssuer = 'https://sts.windows.net/${aadTenantId}/' var aadTenant = 'https://login.microsoftonline.com/${aadTenantId}/' - Network accessline 44
var aadIssuer = 'https://sts.windows.net/${aadTenantId}/' - Network accessline 45
var aadTenant = 'https://login.microsoftonline.com/${aadTenantId}/'
.github/plugins/azure-skills/skills/microsoft-foundry/resource/private-network/references/vpn-dns-setup.md
- Network accessline 130
3. Open [Azure VPN Client](https://aka.ms/azvpnclientdownload) → **Import** the modified `azurevpnconfig.xml` → **Connect**
.github/plugins/azure-skills/skills/microsoft-foundry/scripts/check-and-setup-dependencies.ps1
- Network accessline 1
$azd = Get-Command azd -ErrorAction SilentlyContinue if (-not $azd) { Write-Host "Azure Developer CLI (azd) is required. Install it from https://learn.microsoft.com/azure/developer/azure-developer-cli/install-azd, then rerun this script - Executable scriptline 1
Executable file - Network accessline 2
if (-not $azd) { Write-Host "Azure Developer CLI (azd) is required. Install it from https://learn.microsoft.com/azure/developer/azure-developer-cli/install-azd, then rerun this script." exit 1 - Network accessline 3
Write-Host "Azure Developer CLI (azd) is required. Install it from https://learn.microsoft.com/azure/developer/azure-developer-cli/install-azd, then rerun this script."
.github/plugins/azure-skills/skills/microsoft-foundry/scripts/check-and-setup-dependencies.sh
- Executable scriptline 1
#!/usr/bin/env bash - Network accessline 5
if ! command -v azd >/dev/null 2>&1; then echo "Azure Developer CLI (azd) is required. Install it from https://learn.microsoft.com/azure/developer/azure-developer-cli/install-azd, then rerun this script." >&2 - Network accessline 6
echo "Azure Developer CLI (azd) is required. Install it from https://learn.microsoft.com/azure/developer/azure-developer-cli/install-azd, then rerun this script." >&2
.github/plugins/azure-skills/skills/python-appservice-deploy/SKILL.md
- Network accessline 30
- ⛔ **SHELL SAFETY** — for `--runtime` always use `"PYTHON:3.14"` (colon). Never `"PYTHON|3.14"` (pipe is a shell operator). - ⛔ **NEVER `az webapp up`** — deprecated. Use Step 7 commands. - ✅ **URL FORMAT** — present endpoints as `https:// - Network accessline 32
- ✅ **URL FORMAT** — present endpoints as `https://...` URLs.
.github/plugins/azure-skills/skills/python-appservice-deploy/references/deploy-azcli.md
- Access to secretsline 53
[Credential-related source omitted] - Access to secretsline 55
[Credential-related source omitted] - Network accessline 95
HOST=$(az webapp show -n <app> -g <rg> --query defaultHostName -o tsv) echo "https://$HOST" - Network accessline 96
echo "https://$HOST" - Network accessline 99
$host_ = az webapp show -n <app> -g <rg> --query defaultHostName -o tsv "https://$host_" - Network accessline 100
"https://$host_"
.github/plugins/azure-skills/skills/python-appservice-deploy/references/deploy-azd.md
- Network accessline 77
Present the URL with the `https://` prefix and the post-deploy message from [post-deploy-message.md](post-deploy-message.md), then end the turn.
.github/plugins/azure-skills/skills/python-appservice-deploy/scripts/generate-app-name.ps1
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/python-appservice-deploy/scripts/generate-app-name.sh
- Executable scriptline 1
#!/usr/bin/env bash
.github/plugins/azure-skills/skills/python-appservice-deploy/scripts/retry-az-create.ps1
- Executable scriptline 1
Executable file
.github/plugins/azure-skills/skills/python-appservice-deploy/scripts/retry-az-create.sh
.github/plugins/foundry-iq-skills/.claude-plugin/plugin.json
- Network accessline 5
"author": { "name": "Microsoft", "url": "https://www.microsoft.com" - Network accessline 6
"name": "Microsoft", "url": "https://www.microsoft.com" }, - Network accessline 7
"url": "https://www.microsoft.com" - Network accessline 8
}, "homepage": "https://github.com/microsoft/github-copilot-for-azure", "repository": "https://github.com/microsoft/GitHub-Copilot-for-Azure", - Network accessline 9
"homepage": "https://github.com/microsoft/github-copilot-for-azure", - Network accessline 10
"repository": "https://github.com/microsoft/GitHub-Copilot-for-Azure",
.github/plugins/foundry-iq-skills/skills/foundry-iq/agents/connect-hosted-toolbox.md
- Network accessline 27
This recipe requires `RemoteTool` + `AgenticIdentityToken` + Search audience `https://search.azure.com/` + exact KB MCP endpoint. `CustomKeys` and - Network accessline 28
`https://search.azure.com/` + exact KB MCP endpoint. `CustomKeys` and - Network accessline 137
- [FoundryToolbox resolver](https://github.com/microsoft/agent-framework/blob/main/python/packages/foundry_hosting/agent_framework_foundry_hosting/_toolbox.py) - Network accessline 138
- [Toolbox operations and endpoints](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/toolbox) - Network accessline 139
- [Connection UI](https://learn.microsoft.com/azure/foundry/how-to/connections-add) - Network accessline 140
- [Hosted code ownership](https://learn.microsoft.com/azure/foundry/agents/concepts/hosted-agents)
.github/plugins/foundry-iq-skills/skills/foundry-iq/agents/connect-hosted.md
- Network accessline 87
azd ai connection create <connection-name> --kind remote-tool --target <exact-kb-mcp-endpoint> --auth-type agentic-identity --audience https://search.azure.com/ --output json --no-prompt
.github/plugins/foundry-iq-skills/skills/foundry-iq/agents/connect-prompt-sdk-fallback.md
- Network accessline 26
"schema_version": "1.0", "project_resource_id": "<exact project ARM ID>", "project_endpoint": "https://account.services.ai.azure.com/api/projects/project", - Network accessline 27
"project_resource_id": "<exact project ARM ID>", "project_endpoint": "https://account.services.ai.azure.com/api/projects/project", "search_resource_id": "<exact Search ARM ID>", - Network accessline 28
"project_endpoint": "https://account.services.ai.azure.com/api/projects/project", - Access to secretsline 90
[Credential-related source omitted]
.github/plugins/foundry-iq-skills/skills/foundry-iq/agents/connect.md
- Network accessline 146
- [Connect Agents to Foundry IQ knowledge bases](https://learn.microsoft.com/azure/foundry/agents/how-to/foundry-iq-connect)
.github/plugins/foundry-iq-skills/skills/foundry-iq/agents/create-missing-agent.md
- Network accessline 37
npx skills@1.7.4 add https://github.com/microsoft/azure-skills --skill microsoft-foundry - Network accessline 78
Use signed-in Azure CLI identity with Foundry v1 REST. Verify `az version` and `az account show`; authenticate only if needed. `az rest --resource https://ai.azure.com/` obtains tokens internally. Never use - Network accessline 79
Verify `az version` and `az account show`; authenticate only if needed. `az rest --resource https://ai.azure.com/` obtains tokens internally. Never use keys, ask for tokens, print tokens or enable verbose/debug credential logging. - Network accessline 80
`az rest --resource https://ai.azure.com/` obtains tokens internally. Never use - Network accessline 103
az rest --method get --url "<project-endpoint>/agents/<agent-name>?api-version=v1" --resource https://ai.azure.com/ - Network accessline 119
az rest --method post --url "<project-endpoint>/agents?api-version=v1" --resource https://ai.azure.com/ --headers "Content-Type=application/json" --body "@<body-file>" - Network accessline 134
az rest --method get --url "<project-endpoint>/agents/<agent-name>?api-version=v1" --resource https://ai.azure.com/ - Network accessline 135
az rest --method get --url "<project-endpoint>/agents/<agent-name>/versions?api-version=v1" --resource https://ai.azure.com/ - Network accessline 136
az rest --method get --url "<project-endpoint>/agents/<agent-name>/versions/<agent-version>?api-version=v1" --resource https://ai.azure.com/ - Network accessline 161
[Installation guide](https://learn.microsoft.com/azure/foundry/how-to/develop/use-microsoft-foundry-skill), - Network accessline 162
[Foundry v1 REST API](https://learn.microsoft.com/rest/api/microsoft-foundry/aiproject), - Network accessline 163
[Prompt quickstart](https://learn.microsoft.com/azure/foundry/agents/quickstarts/prompt-agent).
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_blob_observation.py
- Executable scriptline 1
Executable file
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_blob_source_read.py
- Executable scriptline 1
Executable file - Network accessline 52
if ( not isinstance(endpoint, str) or re.fullmatch(r"https://[a-z0-9][a-z0-9-]{0,62}\.services\.ai\.azure\.com/?", endpoint) is None - Network accessline 53
not isinstance(endpoint, str) or re.fullmatch(r"https://[a-z0-9][a-z0-9-]{0,62}\.services\.ai\.azure\.com/?", endpoint) is None or value.get("auth") != "system-assigned" - Network accessline 54
or re.fullmatch(r"https://[a-z0-9][a-z0-9-]{0,62}\.services\.ai\.azure\.com/?", endpoint) is None
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_bootstrap_io.py
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_cleanup_dependencies.py
- Executable scriptline 1
Executable file
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_cleanup_receipts.py
- Executable scriptline 1
Executable file
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_common.py
- Executable scriptline 1
Executable file - Network accessline 17
from datetime import datetime, timedelta, timezone from email.utils import parsedate_to_datetime from http.client import HTTPException - Network accessline 18
from email.utils import parsedate_to_datetime from http.client import HTTPException from pathlib import Path - Network accessline 19
from http.client import HTTPException - Network accessline 27
SEARCH_AUDIENCE = "https://search.azure.com" - Network accessline 28
MANAGEMENT_AUDIENCE = "https://management.azure.com"
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_document_adapters.py
- Executable scriptline 1
Executable file - Network accessline 21
MAX_DEPTH = 64 MAX_IMAGE_PIXELS = 100_000_000 CT = "http://schemas.openxmlformats.org/package/2006/content-types" - Network accessline 22
MAX_IMAGE_PIXELS = 100_000_000 CT = "http://schemas.openxmlformats.org/package/2006/content-types" W = "http://schemas.openxmlformats.org/wordprocessingml/2006/main" - Network accessline 23
CT = "http://schemas.openxmlformats.org/package/2006/content-types" - Network accessline 24
W = "http://schemas.openxmlformats.org/wordprocessingml/2006/main" - Network accessline 25
P = "http://schemas.openxmlformats.org/presentationml/2006/main" - Network accessline 26
A = "http://schemas.openxmlformats.org/drawingml/2006/main" - Network accessline 27
S = "http://schemas.openxmlformats.org/spreadsheetml/2006/main" - Possible obfuscationline 326
if data.startswith(b"\xd0\xcf\x11\xe0\xa1\xb1\x1a\xe1"):
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_document_limits.py
- Executable scriptline 1
Executable file
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_embedding.py
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_file_inventory.py
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_file_source_config.py
- Executable scriptline 1
Executable file - Network accessline 48
if ( not isinstance(value.get("endpoint"), str) or re.fullmatch(r"https://[a-z0-9][a-z0-9-]{0,62}\.services\.ai\.azure\.com/?", value["endpoint"]) is None - Network accessline 49
not isinstance(value.get("endpoint"), str) or re.fullmatch(r"https://[a-z0-9][a-z0-9-]{0,62}\.services\.ai\.azure\.com/?", value["endpoint"]) is None or not isinstance(value.get("resource_id"), str) - Network accessline 50
or re.fullmatch(r"https://[a-z0-9][a-z0-9-]{0,62}\.services\.ai\.azure\.com/?", value["endpoint"]) is None
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_indexer_observation.py
- Executable scriptline 1
Executable file
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_initial_prompt.py
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_private_json.py
- Executable scriptline 1
Executable file
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_progress.py
- Executable scriptline 1
Executable file
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_prompt_read.py
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_search_read.py
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_source_readback.py
- Executable scriptline 1
Executable file
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/blob-contracts.md
- Network accessline 14
{"schema_version":"1.0","endpoint":"https://svc.search.windows.net","name":"manuals","owner":"owner@example.com","storage_id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/Example/providers/Microsoft.Storage/storageAcc
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/blob-cu-contracts.md
- Network accessline 42
{"content_understanding":{"endpoint":"https://models.services.ai.azure.com","auth":"system-assigned","prerequisites":{"resource":"<CU capability/region readback>","configuration":"<selected processing/required deployment evidence>","identit - Network accessline 127
[Blob prerequisites](https://learn.microsoft.com/azure/search/agentic-knowledge-source-how-to-blob#prerequisites), - Network accessline 128
[GA create](https://learn.microsoft.com/rest/api/searchservice/knowledge-sources/create?view=rest-searchservice-2026-04-01), - Network accessline 129
[preview create](https://learn.microsoft.com/rest/api/searchservice/knowledge-sources/create?view=rest-searchservice-2026-08-01-preview), - Network accessline 130
[CU skill](https://learn.microsoft.com/azure/search/cognitive-search-skill-content-understanding), - Network accessline 131
[GA Swagger](https://github.com/Azure/azure-rest-api-specs/blob/main/specification/search/data-plane/Search/stable/2026-04-01/search.json), - Network accessline 132
[preview Swagger](https://github.com/Azure/azure-rest-api-specs/blob/main/specification/search/data-plane/Search/preview/2026-08-01-preview/search.json).
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/blob_inventory.py
- Executable scriptline 1
Executable file - Network accessline 21
STORAGE_AUDIENCE = "https://storage.azure.com/" - Network accessline 151
def _account(boundary: dict[str, Any], reader: _Reader) -> dict[str, Any]: response = reader.read( "GET", f"https://management.azure.com{quote(boundary['storage_id'], safe='/')}?api-version={ARM_VERSION}", arm=True, - Network accessline 152
response = reader.read( "GET", f"https://management.azure.com{quote(boundary['storage_id'], safe='/')}?api-version={ARM_VERSION}", arm=True, ) - Network accessline 153
"GET", f"https://management.azure.com{quote(boundary['storage_id'], safe='/')}?api-version={ARM_VERSION}", arm=True, - Network accessline 177
selected_endpoints = {} for kind in ("blob", "dfs") if boundary["is_adls"] else ("blob",): expected = f"https://{account}.{kind}.core.windows.net/" - Network accessline 178
for kind in ("blob", "dfs") if boundary["is_adls"] else ("blob",): expected = f"https://{account}.{kind}.core.windows.net/" if not isinstance(endpoints, dict) or endpoints.get(kind) != expected: - Network accessline 179
expected = f"https://{account}.{kind}.core.windows.net/"
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/blob_recheck.py
- Executable scriptline 1
Executable file
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/blob_source.py
- Executable scriptline 1
Executable file
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/bootstrap-contracts.md
- Network accessline 148
[Native wait](https://learn.microsoft.com/en-us/cli/azure/resource#az-resource-wait); - Network accessline 149
[location metadata](https://learn.microsoft.com/rest/api/resources/subscriptions/list-locations); - Network accessline 150
[provider GET](https://learn.microsoft.com/rest/api/resources/providers/get?view=rest-resources-2021-04-01).
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/bootstrap_azure.py
- Executable scriptline 1
Executable file - Network accessline 341
try: result = self.call(["rest", "--method", "get", "--url", "https://management.azure.com" + self.target + "?api-version=" + API], timeout) - Network accessline 342
result = self.call(["rest", "--method", "get", "--url", "https://management.azure.com" + self.target + "?api-version=" + API], timeout) except HelperFailure as exc: - Network accessline 343
"https://management.azure.com" + self.target + "?api-version=" + API], timeout) - Network accessline 381
identity = provider_id(self.request) value = self.call(["rest", "--method", "get", "--url", "https://management.azure.com" + identity + "?api-version=" + PROVIDER_API]) - Network accessline 382
value = self.call(["rest", "--method", "get", "--url", "https://management.azure.com" + identity + "?api-version=" + PROVIDER_API]) locations = search_locations(value, identity) - Network accessline 383
"https://management.azure.com" + identity + "?api-version=" + PROVIDER_API]) - Network accessline 612
body_path = private_file(session.directory, plan["operation_id"] + "." + uuid.uuid4().hex + ".body.json", body) command = ["rest", "--method", "put", "--url", "https://management.azure.com" + session.target + "?ap - Network accessline 613
command = ["rest", "--method", "put", "--url", "https://management.azure.com" + session.target + "?api-version=" + API, "--headers", "Content-Type=application/json", "x-ms-client-request-id=" + str(uuid - Network accessline 614
"https://management.azure.com" + session.target + "?api-version=" + API,
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/cleanup_plan.py
- Executable scriptline 1
Executable file
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/contracts.md
- Network accessline 69
{"operation":"ingest","endpoint":"https://svc.search.windows.net","name":"src","api_version":"2026-08-01-preview","local_root":"<root>","service_tier":"basic","extraction_mode":"minimal","owner":"o@x","cleanup_approved":false,"files":[{"pat - Access to secretsline 137
[Credential-related source omitted]
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/cu_ingestion_auth.py
- Executable scriptline 1
Executable file - Network accessline 22
re.IGNORECASE, ) ENDPOINT = re.compile(r"https://[a-z0-9][a-z0-9-]{0,62}\.services\.ai\.azure\.com/?") - Network accessline 23
) ENDPOINT = re.compile(r"https://[a-z0-9][a-z0-9-]{0,62}\.services\.ai\.azure\.com/?") UUID = re.compile(r"[0-9a-fA-F]{8}(?:-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}") - Network accessline 24
ENDPOINT = re.compile(r"https://[a-z0-9][a-z0-9-]{0,62}\.services\.ai\.azure\.com/?")
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/document-assessment.md
- Network accessline 119
Authorities: failure/conflict/uncertainty only. - [pypdf contract/license](https://pypi.org/project/pypdf/6.8.0/) - Network accessline 120
- [pypdf contract/license](https://pypi.org/project/pypdf/6.8.0/) - Network accessline 121
- [XML parser/license](https://github.com/tiran/defusedxml) - Network accessline 122
- [OOXML](https://ecma-international.org/publications-and-standards/standards/ecma-376/) - Network accessline 123
- [PNG specification](https://www.w3.org/TR/png-3/) - Network accessline 124
- [JPEG T.81](https://www.itu.int/rec/T-REC-T.81)
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/document_assess.py
- Executable scriptline 1
Executable file
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/file-upload-recovery.md
- Network accessline 134
Authorities: failure/conflict/uncertainty only. [File upload/troubleshooting](https://learn.microsoft.com/azure/search/agentic-knowledge-source-how-to-file). - Network accessline 135
[File upload/troubleshooting](https://learn.microsoft.com/azure/search/agentic-knowledge-source-how-to-file).
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/file_cu_canary.py
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/file_cu_mi.py
- Executable scriptline 1
Executable file - Network accessline 47
selected = validate_choice(choice.get("managed_identity"), choice["resource_id"]) match = SEARCH_ID.fullmatch(selected["search_resource_id"]) if endpoint.rstrip("/").casefold() != f"https://{match.group(1)}.search.windows.net".casef - Network accessline 48
match = SEARCH_ID.fullmatch(selected["search_resource_id"]) if endpoint.rstrip("/").casefold() != f"https://{match.group(1)}.search.windows.net".casefold(): raise fail("cu-mi-search-mismatch", "Search resource ID must match the - Network accessline 49
if endpoint.rstrip("/").casefold() != f"https://{match.group(1)}.search.windows.net".casefold():
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/file_ingest.py
- Executable scriptline 1
Executable file
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/file_source.py
- Executable scriptline 1
Executable file
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/file_upload.py
- Executable scriptline 1
Executable file
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/hosted_connect.py
- Executable scriptline 1
Executable file - Network accessline 31
AI_AUDIENCE = "https://ai.azure.com" - Network accessline 213
if match is None: raise fail("selection-invalid", "The resolved project resource identity is malformed.") endpoint = f"https://{match['account']}.services.ai.azure.com/api/projects/{quote(match['project'], safe='')}" - Network accessline 214
raise fail("selection-invalid", "The resolved project resource identity is malformed.") endpoint = f"https://{match['account']}.services.ai.azure.com/api/projects/{quote(match['project'], safe='')}" _prompt_read._project_identity({" - Network accessline 215
endpoint = f"https://{match['account']}.services.ai.azure.com/api/projects/{quote(match['project'], safe='')}" - Network accessline 379
or any(props.get(key) != value for key, value in { "category": "RemoteTool", "authType": "AgenticIdentityToken", "target": target, "audience": "https://search.azure.com/", - Network accessline 380
"category": "RemoteTool", "authType": "AgenticIdentityToken", "target": target, "audience": "https://search.azure.com/", }.items())): - Network accessline 381
"target": target, "audience": "https://search.azure.com/",
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/kb-contracts.md
- Network accessline 18
{"schema_version":"1.0","endpoint":"https://svc.search.windows.net","name":"docs-kb","owner":"operator@example.com","source_name":"docs-file","api_version":"2026-08-01-preview","reasoning_effort":"minimal","output_mode":"extractiveData"} - Network accessline 43
{"schema_version":"1.0","endpoint":"https://svc.search.windows.net","name":"docs-kb-synthesis","owner":"operator@example.com","source_name":"docs-file","api_version":"2026-08-01-preview","reasoning_effort":"low","output_mode":"answerSynthes - Network accessline 57
{"name":"docs-kb-synthesis","knowledgeSources":[{"name":"docs-file"}],"retrievalReasoningEffort":{"kind":"low"},"outputMode":"answerSynthesis","models":[{"kind":"azureOpenAI","azureOpenAIParameters":{"resourceUri":"https://models.services.a - Network accessline 130
Authorities: failure/conflict/uncertainty only. [preview KB wire/model fields](https://learn.microsoft.com/rest/api/searchservice/knowledge-bases/create-or-update?view=rest-searchservice-2026-08-01-preview), - Network accessline 131
[preview KB wire/model fields](https://learn.microsoft.com/rest/api/searchservice/knowledge-bases/create-or-update?view=rest-searchservice-2026-08-01-preview), - Network accessline 132
[KB creation and model access](https://learn.microsoft.com/azure/search/agentic-retrieval-how-to-create-knowledge-base).
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/knowledge_base_retrieve.py
- Executable scriptline 1
Executable file
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/model-discovery-contracts.md
- Network accessline 74
`URL`: `https://management.azure.com<path>?api-version=2024-10-01`.
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/model-discovery-scopes.md
- Network accessline 125
- [RG rules](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/resource-name-rules#microsoftresources) - Network accessline 126
- [Embedding domains](https://learn.microsoft.com/en-us/azure/search/cognitive-search-skill-azure-openai-embedding) - Network accessline 127
- [KB model consumer](https://learn.microsoft.com/en-us/azure/search/agentic-retrieval-how-to-create-knowledge-base) - Network accessline 128
- [ARM GET](https://learn.microsoft.com/rest/api/aiservices/accountmanagement/accounts/get?view=rest-aiservices-accountmanagement-2024-10-01) - Network accessline 129
- [ARM schema](https://github.com/Azure/azure-rest-api-specs/blob/main/specification/cognitiveservices/resource-manager/Microsoft.CognitiveServices/stable/2024-10-01/cognitiveservices.json) - Network accessline 130
- [CU endpoint](https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/contentunderstanding/azure-ai-contentunderstanding/README.md) - Network accessline 131
- [CLI projection](https://learn.microsoft.com/cli/azure/query-azure-cli)
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/model_discovery.py
- Executable scriptline 1
Executable file - Network accessline 19
API = "2024-10-01" HOST = "https://management.azure.com" - Network accessline 20
HOST = "https://management.azure.com" - Network accessline 35
# Public examples: https://github.com/Azure/azure-cli/blob/dev/src/azure-cli/azure/cli/command_modules/cognitiveservices/tests/latest/recordings/test_cognitiveservices_deployment.yaml - Network accessline 150
return None suffixes = "|".join(re.escape(suffix) for suffix in ENDPOINT_SUFFIXES.get(purpose, ())) if suffixes and re.fullmatch(r"https://[a-z0-9][a-z0-9-]{0,62}\.(?:" + suffixes + r")/?", value): - Network accessline 151
suffixes = "|".join(re.escape(suffix) for suffix in ENDPOINT_SUFFIXES.get(purpose, ())) if suffixes and re.fullmatch(r"https://[a-z0-9][a-z0-9-]{0,62}\.(?:" + suffixes + r")/?", value): return value.rstrip("/") - Network accessline 152
if suffixes and re.fullmatch(r"https://[a-z0-9][a-z0-9-]{0,62}\.(?:" + suffixes + r")/?", value):
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/private_artifacts.py
- Executable scriptline 1
Executable file
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/prompt_cleanup.py
- Executable scriptline 1
Executable file
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/prompt_connect.py
- Executable scriptline 1
Executable file - Network accessline 78
"target": connection["target"], "isSharedToAll": connection.get("is_shared_to_all", True), "audience": "https://search.azure.com/", - Network accessline 79
"isSharedToAll": connection.get("is_shared_to_all", True), "audience": "https://search.azure.com/", "metadata": {"ApiType": "Azure"}, - Network accessline 80
"audience": "https://search.azure.com/", - Access to secretsline 390
[Credential-related source omitted] - Access to secretsline 394
[Credential-related source omitted]
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/retrieval-verification-contracts.md
- Network accessline 38
{ "schema_version":"1.0","endpoint":"https://svc.search.windows.net", - Network accessline 39
"schema_version":"1.0","endpoint":"https://svc.search.windows.net", - Network accessline 134
Authorities: failure/conflict/uncertainty only. Checked 2026-09-14: - [Retrieve wire definitions](https://learn.microsoft.com/rest/api/searchservice/knowledge-retrieval/retrieve?view=rest-searchservice-2026-08-01-preview) - Network accessline 135
Checked 2026-09-14: - [Retrieve wire definitions](https://learn.microsoft.com/rest/api/searchservice/knowledge-retrieval/retrieve?view=rest-searchservice-2026-08-01-preview) - [GA retrieve](https://learn.microsoft.com/rest/api/searchservice - Network accessline 136
- [Retrieve wire definitions](https://learn.microsoft.com/rest/api/searchservice/knowledge-retrieval/retrieve?view=rest-searchservice-2026-08-01-preview) - Network accessline 137
- [GA retrieve](https://learn.microsoft.com/rest/api/searchservice/knowledge-retrieval/retrieve?view=rest-searchservice-2026-04-01) - Network accessline 138
- [Response and references](https://learn.microsoft.com/azure/search/agentic-retrieval-how-to-retrieve#review-the-response) - Network accessline 139
- [Synthesis citations](https://learn.microsoft.com/azure/search/agentic-retrieval-how-to-answer-synthesis) - Network accessline 140
- [File metadata and listing](https://learn.microsoft.com/azure/search/agentic-knowledge-source-how-to-file#list-and-filter-files) - Network accessline 141
- [Source configuration schema](https://learn.microsoft.com/rest/api/searchservice/knowledge-sources/create-or-update?view=rest-searchservice-2026-08-01-preview)
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/retrieval_verify.py
- Executable scriptline 1
Executable file
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/search-intake-contracts.md
- Network accessline 106
For a selected operation, scoped `az rest --method get --resource https://search.azure.com` - Network accessline 131
Authorities: failure/conflict/uncertainty only. [Service naming rules](https://learn.microsoft.com/rest/api/searchservice/naming-rules), - Network accessline 132
[Service naming rules](https://learn.microsoft.com/rest/api/searchservice/naming-rules), - Network accessline 133
[Entra and keys together](https://learn.microsoft.com/azure/search/search-security-enable-roles), - Network accessline 134
[statistics GET](https://learn.microsoft.com/rest/api/searchservice/get-service-statistics).
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/search_intake.py
- Executable scriptline 1
Executable file - Network accessline 144
try: value = reader.call(["rest", "--method", "get", "--url", "https://management.azure.com" + quote(target, safe="/") + "?api-version=" + API, - Network accessline 145
value = reader.call(["rest", "--method", "get", "--url", "https://management.azure.com" + quote(target, safe="/") + "?api-version=" + API, "--subscription", sub]) - Network accessline 146
"https://management.azure.com" + quote(target, safe="/") + "?api-version=" + API,
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/search_reconcile.py
- Executable scriptline 1
Executable file - Network accessline 90
if ( not isinstance(value.get("endpoint"), str) or re.fullmatch(r"https://[a-z0-9][a-z0-9-]{0,62}\." - Network accessline 91
not isinstance(value.get("endpoint"), str) or re.fullmatch(r"https://[a-z0-9][a-z0-9-]{0,62}\." r"(?:openai\.azure\.com|services\.ai\.azure\.com|cognitiveservices\.azure\.com)/?", - Network accessline 92
or re.fullmatch(r"https://[a-z0-9][a-z0-9-]{0,62}\." - Access to secretsline 884
[Credential-related source omitted]
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/source_vector.py
- Executable scriptline 1
Executable file
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/throttle-recovery.md
- Network accessline 74
[RFC 9110 section 10.2.3](https://www.rfc-editor.org/rfc/rfc9110.html#name-retry-after) - Network accessline 75
defines `Retry-After = HTTP-date / delay-seconds`; `delay-seconds = 1*DIGIT` is a nonnegative integer measured from receipt of the response. [RFC 6585 section 4](https://www.rfc-editor.org/rfc/rfc6585.html#section-4) - Network accessline 76
is a nonnegative integer measured from receipt of the response. [RFC 6585 section 4](https://www.rfc-editor.org/rfc/rfc6585.html#section-4) says 429 may include Retry-After; limiting may apply per resource, server or - Network accessline 77
[RFC 6585 section 4](https://www.rfc-editor.org/rfc/rfc6585.html#section-4)
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/vector-contracts.md
- Network accessline 21
{"endpoint":"https://models.openai.azure.com","deployment":"embed","model":"text-embedding-3-large","dimensions":"service-managed","model_version":"deployment-managed","auth":"system-assigned","prerequisites":{"deployment":"<fresh selected - Network accessline 141
- [Preview schema](https://learn.microsoft.com/rest/api/searchservice/knowledge-sources/create?view=rest-searchservice-2026-08-01-preview) and [GA schema](https://learn.microsoft.com/rest/api/searchservice/knowledge-sources/create?view=rest - Network accessline 142
- [Vectorizer parameters/dimensions/auth](https://learn.microsoft.com/azure/search/vector-search-vectorizer-azure-open-ai) - Network accessline 143
- [Search POST](https://learn.microsoft.com/rest/api/searchservice/documents/search-post?view=rest-searchservice-2026-04-01)
.github/plugins/foundry-iq-skills/skills/foundry-iq/knowledge-bases/create.md
- Network accessline 162
- [Preview](https://learn.microsoft.com/rest/api/searchservice/knowledge-bases/create-or-update?view=rest-searchservice-2026-08-01-preview) - Network accessline 163
- [Reasoning/models](https://learn.microsoft.com/azure/search/agentic-retrieval-how-to-set-retrieval-reasoning-effort)
.github/plugins/foundry-iq-skills/skills/foundry-iq/knowledge-bases/retrieve.md
- Network accessline 48
Inspect source `ingestionPermissionOptions` in ingestion parameters; unknown posture blocks. Permission-enabled retrieval requires per-request `x-ms-query-source-authorization`, audience `https://search.azure.com/.default`, - Network accessline 49
posture blocks. Permission-enabled retrieval requires per-request `x-ms-query-source-authorization`, audience `https://search.azure.com/.default`, separate from service auth. Forward only the verified same signed-in user's - Network accessline 50
`x-ms-query-source-authorization`, audience `https://search.azure.com/.default`, - Network accessline 167
- [Retrieve using a knowledge base](https://learn.microsoft.com/azure/search/agentic-retrieval-how-to-retrieve)
.github/plugins/foundry-iq-skills/skills/foundry-iq/knowledge-sources/create-azure-blob.md
- Network accessline 71
need approved preview. Permission retrieval forwards the caller's Entra token per-request through `x-ms-query-source-authorization`, scoped to `https://search.azure.com/.default`; never persist it. - Network accessline 73
`https://search.azure.com/.default`; never persist it. - Network accessline 169
[Official Blob procedure](https://learn.microsoft.com/azure/search/agentic-knowledge-source-how-to-blob). - Network accessline 170
[ADLS HEAD](https://learn.microsoft.com/rest/api/storageservices/datalakestoragegen2/path/get-properties).
.github/plugins/foundry-iq-skills/skills/foundry-iq/knowledge-sources/create-file.md
- Network accessline 84
{"schema_version":"1.0","endpoint":"https://svc.search.windows.net","name":"manuals","owner":"team","local_root":"C:\\docs","paths":["guide.txt"],"service_tier":"basic","extraction_mode":"minimal","vectorization":"none","rbac":{"assignments - Network accessline 171
- [File source](https://learn.microsoft.com/azure/search/agentic-knowledge-source-how-to-file)
.github/plugins/foundry-iq-skills/skills/foundry-iq/lifecycle/cleanup.md
- Network accessline 160
Authorities: failure/conflict/uncertainty only. [Source cascade/in-use](https://learn.microsoft.com/azure/search/agentic-knowledge-source-how-to-blob#delete-a-knowledge-source), - Network accessline 161
[Source cascade/in-use](https://learn.microsoft.com/azure/search/agentic-knowledge-source-how-to-blob#delete-a-knowledge-source), - Network accessline 162
[paged KB inventory](https://learn.microsoft.com/rest/api/searchservice/knowledge-bases/list), - Network accessline 163
[paged agents and draft versions](https://learn.microsoft.com/python/api/azure-ai-projects/azure.ai.projects.operations.agentsoperations).
.github/plugins/foundry-iq-skills/skills/foundry-iq/references/blob-binding-evidence.md
- Network accessline 134
Authorities: failure/conflict/uncertainty only. [Blob source/generated pipeline](https://learn.microsoft.com/azure/search/agentic-knowledge-source-how-to-blob), - Network accessline 135
[Blob source/generated pipeline](https://learn.microsoft.com/azure/search/agentic-knowledge-source-how-to-blob), - Network accessline 136
[datasource GET identity/credentials](https://learn.microsoft.com/rest/api/searchservice/data-sources/get?view=rest-searchservice-2026-04-01).
.github/plugins/foundry-iq-skills/skills/foundry-iq/references/blob-indexer-observation.md
- Network accessline 120
Authorities: failure/conflict/uncertainty only. On uncertainty, consult [indexer scheduling](https://learn.microsoft.com/azure/search/search-howto-schedule-indexers) - Network accessline 121
On uncertainty, consult [indexer scheduling](https://learn.microsoft.com/azure/search/search-howto-schedule-indexers) - Network accessline 122
for documented duration bounds, and the [Blob generated pipeline](https://learn.microsoft.com/azure/search/agentic-knowledge-source-how-to-blob) for generated resources/status. Neither proves a particular unread generated - Network accessline 123
[Blob generated pipeline](https://learn.microsoft.com/azure/search/agentic-knowledge-source-how-to-blob)
.github/plugins/foundry-iq-skills/skills/foundry-iq/references/blob-ingestion-progress.md
- Network accessline 110
Authorities: failure/conflict/uncertainty only. [Official Blob guide](https://learn.microsoft.com/en-us/azure/search/agentic-knowledge-source-how-to-blob?tabs=2026-08-01-preview&pivots=csharp), - Network accessline 111
[Official Blob guide](https://learn.microsoft.com/en-us/azure/search/agentic-knowledge-source-how-to-blob?tabs=2026-08-01-preview&pivots=csharp), - Network accessline 112
updated 2026-09-02, source commit `78d82fc1240820245ee4143df9f5296641986171`. [Indexer status](https://learn.microsoft.com/azure/search/search-monitor-indexers). Public documentation inspection is not live ingestion evidence. - Network accessline 113
[Indexer status](https://learn.microsoft.com/azure/search/search-monitor-indexers).
.github/plugins/foundry-iq-skills/skills/foundry-iq/references/blob-readiness-recheck.md
.github/plugins/foundry-iq-skills/skills/foundry-iq/references/bootstrap-azure.md
- Network accessline 50
Let `R=/subscriptions/<sub>/resourceGroups/<group>`, `A=R/providers/Microsoft.CognitiveServices/accounts/<account>`. `https://management.azure.com<ID>?api-version=<version>`. - Network accessline 51
`A=R/providers/Microsoft.CognitiveServices/accounts/<account>`. `https://management.azure.com<ID>?api-version=<version>`. GET immediately before each absent-resource PUT; existing means reuse/replan, - Network accessline 52
`https://management.azure.com<ID>?api-version=<version>`. - Network accessline 111
`Storage Blob Data Reader` on approved Storage scope. No unnecessary roles. For Search, bounded propagation waits use fresh CLI Entra auth: `az rest --method get --url "<search-endpoint>/knowledgesources?api-version=2026-08-01-preview" --re - Network accessline 112
For Search, bounded propagation waits use fresh CLI Entra auth: `az rest --method get --url "<search-endpoint>/knowledgesources?api-version=2026-08-01-preview" --resource https://search.azure.com/`. Require `disableLocalAuth == true`; no `a - Network accessline 113
`az rest --method get --url "<search-endpoint>/knowledgesources?api-version=2026-08-01-preview" --resource https://search.azure.com/`. - Network accessline 136
Authorities: failure/conflict/uncertainty only. [Search Storage identity](https://learn.microsoft.com/azure/search/search-howto-managed-identities-storage); - Network accessline 137
[Search Storage identity](https://learn.microsoft.com/azure/search/search-howto-managed-identities-storage); - Network accessline 138
[Blob RBAC](https://learn.microsoft.com/azure/storage/blobs/assign-azure-role-data-access).
.github/plugins/foundry-iq-skills/skills/foundry-iq/references/cu-ingestion.md
- Network accessline 67
analysis probe. Verify through approved ingestion, not by a new billable preflight. [File auth](standard-cu.md) GETs `https://management.azure.com<cu-resource-id>?api-version=2024-10-01` - Network accessline 68
[File auth](standard-cu.md) GETs `https://management.azure.com<cu-resource-id>?api-version=2024-10-01` and matches resource ID, `kind: AIServices`, `properties.provisioningState: Succeeded`, - Network accessline 69
`https://management.azure.com<cu-resource-id>?api-version=2024-10-01` - Network accessline 121
[CU account PUT](https://learn.microsoft.com/rest/api/aiservices/accountmanagement/accounts/create?view=rest-aiservices-accountmanagement-2024-10-01), - Network accessline 122
[CU skill and supported regions](https://learn.microsoft.com/azure/search/cognitive-search-skill-content-understanding), - Network accessline 123
[File standard](https://learn.microsoft.com/azure/search/agentic-knowledge-source-how-to-file#configure-standard-extraction), - Network accessline 124
[Blob prerequisites](https://learn.microsoft.com/azure/search/agentic-knowledge-source-how-to-blob#prerequisites).
.github/plugins/foundry-iq-skills/skills/foundry-iq/references/file-cu-canary.md
.github/plugins/foundry-iq-skills/skills/foundry-iq/references/intent-routing.md
.github/plugins/foundry-iq-skills/skills/foundry-iq/references/platform-interfaces.md
- Network accessline 6
| Resource group prerequisite | ARM `2022-09-01` | | AI account | ARM `2025-06-01`; File CU GET/listKeys `2024-10-01` | | Search data plane | Entra audience `https://search.azure.com/.default` | - Network accessline 7
| AI account | ARM `2025-06-01`; File CU GET/listKeys `2024-10-01` | | Search data plane | Entra audience `https://search.azure.com/.default` | | File knowledge source and file operations | `2026-08-01-preview` | - Network accessline 8
| Search data plane | Entra audience `https://search.azure.com/.default` | - Network accessline 10
| Blob knowledge source | GA `2026-04-01`; preview for selected preview features | | ADLS Gen2 knowledge source | This helper uses `2026-08-01-preview` | | Existing Blob validation | Entra audience `https://storage.azure.com/.default`; Blob - Network accessline 11
| ADLS Gen2 knowledge source | This helper uses `2026-08-01-preview` | | Existing Blob validation | Entra audience `https://storage.azure.com/.default`; Blob `x-ms-version: 2025-11-05` | | Existing Prompt Agent connection | authenticated Fo - Network accessline 12
| Existing Blob validation | Entra audience `https://storage.azure.com/.default`; Blob `x-ms-version: 2025-11-05` | - Network accessline 57
Require the approved ID, `RemoteTool`, `AgenticIdentityToken`, KB MCP target and `https://search.azure.com/` audience. Compare other protected fields when needed. - Network accessline 58
`https://search.azure.com/` audience. Compare other protected fields when needed. - Network accessline 113
[File](https://learn.microsoft.com/azure/search/agentic-knowledge-source-how-to-file#file-support-and-limits), - Network accessline 114
[Blob indexer](https://learn.microsoft.com/azure/search/search-how-to-index-azure-blob-storage#supported-document-formats), - Network accessline 115
[CU skill](https://learn.microsoft.com/azure/search/cognitive-search-skill-content-understanding#supported-file-formats). - Network accessline 116
Schemas: [RG](https://github.com/Azure/azure-rest-api-specs/blob/main/specification/resources/resource-manager/Microsoft.Resources/resources/stable/2022-09-01/resources.json), - Network accessline 117
[AI ARM](https://github.com/Azure/azure-rest-api-specs/blob/main/specification/cognitiveservices/resource-manager/Microsoft.CognitiveServices/stable/2025-06-01/cognitiveservices.json). - Network accessline 118
[Scope](https://learn.microsoft.com/azure/governance/policy/concepts/scope) - Network accessline 119
and [assignments](https://learn.microsoft.com/azure/governance/policy/concepts/assignment-structure).
.github/plugins/foundry-iq-skills/skills/foundry-iq/references/resource-intake.md
- Network accessline 49
Accept `https://example.blob.core.windows.net/documents` as intake: - Network accessline 54
Also accept `https://example.dfs.core.windows.net/documents/onboarding`: - Network accessline 128
[Filtered ARM resources](https://learn.microsoft.com/rest/api/resources/resources/list). - Network accessline 129
[Blob resource URIs](https://learn.microsoft.com/rest/api/storageservices/naming-and-referencing-containers--blobs--and-metadata). - Network accessline 130
[ADLS filesystem/path](https://learn.microsoft.com/rest/api/storageservices/datalakestoragegen2/path/get-properties).
.github/plugins/foundry-iq-skills/skills/foundry-iq/references/standard-cu.md
- Network accessline 32
{"endpoint":"https://cu.services.ai.azure.com","resource_id":"<CU ARM ID>","auth":"system-assigned","managed_identity":{"search_resource_id":"<Search ARM ID>","role_assignment_id":"<CU ARM ID>/providers/Microsoft.Authorization/roleAssignmen - Access to secretsline 69
[Credential-related source omitted] - Network accessline 128
[File documentation](https://learn.microsoft.com/azure/search/agentic-knowledge-source-how-to-file), - Network accessline 129
[CU account listKeys](https://learn.microsoft.com/en-us/rest/api/aiservices/accountmanagement/accounts/list-keys?view=rest-aiservices-accountmanagement-2024-10-01).
.github/plugins/foundry-iq-skills/skills/foundry-iq/troubleshooting/diagnose.md
- Network accessline 11
automate single-source File, Blob, and ADLS Gen2 KBs. For unsupported sources or connectors (e.g. Web, OneLake, SharePoint, SQL) as well as multi-source KB creation/reconfiguration, inform the user of this boundary, provide the Azure AI Sea - Network accessline 12
SharePoint, SQL) as well as multi-source KB creation/reconfiguration, inform the user of this boundary, provide the Azure AI Search public documentation pointer (https://learn.microsoft.com/azure/search/), and release workflow control back - Network accessline 13
the Azure AI Search public documentation pointer (https://learn.microsoft.com/azure/search/), and release workflow - Network accessline 149
- [Azure AI Search documentation](https://learn.microsoft.com/azure/search/) - Network accessline 150
- [Troubleshoot agentic retrieval](https://learn.microsoft.com/azure/search/search-agentic-retrieval-how-to-troubleshoot)
skills/airunway-aks-setup/references/steps/step-5-deploy.md
skills/airunway-aks-setup/references/steps/step-6-summary.md
- Network accessline 22
echo "Endpoint not yet available — model may still be starting" else curl -X POST "${ENDPOINT}/v1/chat/completions" \ - Network accessline 23
else curl -X POST "${ENDPOINT}/v1/chat/completions" \ -H "Content-Type: application/json" \ - Network accessline 24
curl -X POST "${ENDPOINT}/v1/chat/completions" \ - Network accessline 30
> **If the endpoint is a cluster-internal URL** (e.g., `http://svc-name.namespace:port`), set up port-forwarding first: - Network accessline 35
> > kubectl port-forward svc/<service-name> 8080:${SERVICE_PORT} -n <namespace> & > # Then use http://localhost:8080 as the endpoint - Network accessline 36
> kubectl port-forward svc/<service-name> 8080:${SERVICE_PORT} -n <namespace> & > # Then use http://localhost:8080 as the endpoint > ``` - Network accessline 37
> # Then use http://localhost:8080 as the endpoint
skills/appinsights-instrumentation/references/auto.md
- Network accessline 3
Use Azure Portal to auto-instrument a webapp hosted in Azure App Service for App Insights without making any code changes. Only the following types of app can be auto-instrumented. See [supported environments and resource providers](https:/ - Network accessline 3
Use Azure Portal to auto-instrument a webapp hosted in Azure App Service for App Insights without making any code changes. Only the following types of app can be auto-instrumented. See [supported environments and resource providers](https:/ - Network accessline 10
https://portal.azure.com/#resource/subscriptions/{subscription_id}/resourceGroups/{resource_group_name}/providers/Microsoft.Web/sites/{app_service_name}/monitoringSettings - Network accessline 10
https://portal.azure.com/#resource/subscriptions/{subscription_id}/resourceGroups/{resource_group_name}/providers/Microsoft.Web/sites/{app_service_name}/monitoringSettings
skills/appinsights-instrumentation/references/container-apps.md
skills/appinsights-instrumentation/scripts/appinsights.ps1
skills/azure-ai/SKILL.md
- Network accessline 71
- AI Search indexing and queries -> [Azure AI Search documentation](https://learn.microsoft.com/azure/search/search-what-is-azure-search) - Network accessline 71
- AI Search indexing and queries -> [Azure AI Search documentation](https://learn.microsoft.com/azure/search/search-what-is-azure-search) - Network accessline 72
- Speech transcription patterns -> [Azure AI Speech documentation](https://learn.microsoft.com/azure/ai-services/speech-service/overview) - Network accessline 72
- Speech transcription patterns -> [Azure AI Speech documentation](https://learn.microsoft.com/azure/ai-services/speech-service/overview)
skills/azure-ai/references/auth-best-practices.md
- Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme)
skills/azure-ai/references/sdk/azure-ai-transcription-py.md
skills/azure-ai/references/sdk/azure-ai-translation-ts.md
skills/azure-ai/references/speech/azure-checks.md
- Network accessline 7
The plugin configures Azure MCP, not a Speech log-analysis MCP. The local analyzer provides that function. Candidate command families below were checked in [Azure MCP source](https://github.com/microsoft/mcp/tree/bc89c9e5e2f774db19d9bc391b1 - Network accessline 7
The plugin configures Azure MCP, not a Speech log-analysis MCP. The local analyzer provides that function. Candidate command families below were checked in [Azure MCP source](https://github.com/microsoft/mcp/tree/bc89c9e5e2f774db19d9bc391b1 - Network accessline 8
analyzer provides that function. Candidate command families below were checked in [Azure MCP source](https://github.com/microsoft/mcp/tree/bc89c9e5e2f774db19d9bc391b16f2920384ddfd/tools); installed versions and host names can differ. Do not - Network accessline 8
analyzer provides that function. Candidate command families below were checked in [Azure MCP source](https://github.com/microsoft/mcp/tree/bc89c9e5e2f774db19d9bc391b16f2920384ddfd/tools); installed versions and host names can differ. Do not - Network accessline 9
in [Azure MCP source](https://github.com/microsoft/mcp/tree/bc89c9e5e2f774db19d9bc391b16f2920384ddfd/tools); - Network accessline 9
in [Azure MCP source](https://github.com/microsoft/mcp/tree/bc89c9e5e2f774db19d9bc391b16f2920384ddfd/tools);
skills/azure-ai/references/speech/collection.md
- Network accessline 3
Confirm SDK language/version and host first. Use the [logging APIs by language and platform](logging-apis.md), or the matching tab in the official [Speech SDK logging](https://learn.microsoft.com/azure/ai-services/speech-service/how-to-use- - Network accessline 3
Confirm SDK language/version and host first. Use the [logging APIs by language and platform](logging-apis.md), or the matching tab in the official [Speech SDK logging](https://learn.microsoft.com/azure/ai-services/speech-service/how-to-use- - Network accessline 4
[logging APIs by language and platform](logging-apis.md), or the matching tab in the official [Speech SDK logging](https://learn.microsoft.com/azure/ai-services/speech-service/how-to-use-logging) article, for exact APIs. Do not install or u - Network accessline 4
[logging APIs by language and platform](logging-apis.md), or the matching tab in the official [Speech SDK logging](https://learn.microsoft.com/azure/ai-services/speech-service/how-to-use-logging) article, for exact APIs. Do not install or u - Network accessline 5
the official [Speech SDK logging](https://learn.microsoft.com/azure/ai-services/speech-service/how-to-use-logging) - Network accessline 5
the official [Speech SDK logging](https://learn.microsoft.com/azure/ai-services/speech-service/how-to-use-logging) - Network accessline 50
JavaScript has a separate implementation/log format: [JavaScript SDK](https://github.com/microsoft/cognitive-services-speech-sdk-js). - Network accessline 50
JavaScript has a separate implementation/log format: [JavaScript SDK](https://github.com/microsoft/cognitive-services-speech-sdk-js). - Network accessline 51
[JavaScript SDK](https://github.com/microsoft/cognitive-services-speech-sdk-js). - Network accessline 51
[JavaScript SDK](https://github.com/microsoft/cognitive-services-speech-sdk-js). - Network accessline 66
API/event availability varies by binding. Use [Speech samples](https://github.com/Azure-Samples/cognitive-services-speech-sdk) - Network accessline 66
API/event availability varies by binding. Use [Speech samples](https://github.com/Azure-Samples/cognitive-services-speech-sdk) - Network accessline 67
[Speech samples](https://github.com/Azure-Samples/cognitive-services-speech-sdk) - Network accessline 67
[Speech samples](https://github.com/Azure-Samples/cognitive-services-speech-sdk) - Network accessline 71
Do not confuse local diagnostics with [service-side audio/content logging](https://learn.microsoft.com/azure/ai-services/speech-service/logging-audio-transcription). - Network accessline 71
Do not confuse local diagnostics with [service-side audio/content logging](https://learn.microsoft.com/azure/ai-services/speech-service/logging-audio-transcription). - Network accessline 72
[service-side audio/content logging](https://learn.microsoft.com/azure/ai-services/speech-service/logging-audio-transcription). - Network accessline 72
[service-side audio/content logging](https://learn.microsoft.com/azure/ai-services/speech-service/logging-audio-transcription).
skills/azure-ai/references/speech/interpretation.md
- Network accessline 36
Final recognition records retain numeric `reasonCode`, not a guessed cause. For the reviewed version, [ResultReason](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/public/cxx_api/speechap - Network accessline 36
Final recognition records retain numeric `reasonCode`, not a guessed cause. For the reviewed version, [ResultReason](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/public/cxx_api/speechap - Network accessline 37
For the reviewed version, [ResultReason](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/public/cxx_api/speechapi_cxx_enums.h) - Network accessline 37
For the reviewed version, [ResultReason](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/public/cxx_api/speechapi_cxx_enums.h) - Network accessline 59
SDK latency properties are reported as SDK metrics, not microphone-to-display or playback latency. Use matching API definitions before deriving a breakdown: [TTS latency](https://learn.microsoft.com/azure/ai-services/speech-service/how-to-l - Network accessline 59
SDK latency properties are reported as SDK metrics, not microphone-to-display or playback latency. Use matching API definitions before deriving a breakdown: [TTS latency](https://learn.microsoft.com/azure/ai-services/speech-service/how-to-l - Network accessline 61
[TTS latency](https://learn.microsoft.com/azure/ai-services/speech-service/how-to-lower-speech-synthesis-latency). - Network accessline 61
[TTS latency](https://learn.microsoft.com/azure/ai-services/speech-service/how-to-lower-speech-synthesis-latency).
skills/azure-ai/references/speech/logging-apis.md
- Network accessline 3
Copied from the official [Enable logging in the Speech SDK](https://learn.microsoft.com/azure/ai-services/speech-service/how-to-use-logging) - Network accessline 3
Copied from the official [Enable logging in the Speech SDK](https://learn.microsoft.com/azure/ai-services/speech-service/how-to-use-logging) - Network accessline 4
[Enable logging in the Speech SDK](https://learn.microsoft.com/azure/ai-services/speech-service/how-to-use-logging) - Network accessline 4
[Enable logging in the Speech SDK](https://learn.microsoft.com/azure/ai-services/speech-service/how-to-use-logging)
skills/azure-ai/references/speech/source-contract.md
- Network accessline 6
| Rule | Public source | |---|---| | Source/binary/extension limits | [README](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/README.md) | - Network accessline 6
| Rule | Public source | |---|---| | Source/binary/extension limits | [README](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/README.md) | - Network accessline 7
|---|---| | Source/binary/extension limits | [README](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/README.md) | | Property IDs to logged names | [property_id_2_name_map.h](https://github.com/m - Network accessline 7
|---|---| | Source/binary/extension limits | [README](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/README.md) | | Property IDs to logged names | [property_id_2_name_map.h](https://github.com/m - Network accessline 8
| Source/binary/extension limits | [README](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/README.md) | - Network accessline 8
| Source/binary/extension limits | [README](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/README.md) | - Network accessline 9
| Property IDs to logged names | [property_id_2_name_map.h](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/common/include/property_id_2_name_map.h) | - Network accessline 9
| Property IDs to logged names | [property_id_2_name_map.h](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/common/include/property_id_2_name_map.h) | - Network accessline 10
| Property writes | [property_bag_impl.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/common/property_bag_impl.cpp) | - Network accessline 10
| Property writes | [property_bag_impl.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/common/property_bag_impl.cpp) | - Network accessline 11
| Context construction and pre-send trace | [usp_reco_engine_adapter.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/sr/usp_reco_engine_adapter.cpp#L1300-L1345) | - Network accessline 11
| Context construction and pre-send trace | [usp_reco_engine_adapter.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/sr/usp_reco_engine_adapter.cpp#L1300-L1345) | - Network accessline 12
| Feature serialization | [context builders](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/sr/usp_reco_engine_adapter.cpp#L2265-L3120) | - Network accessline 12
| Feature serialization | [context builders](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/sr/usp_reco_engine_adapter.cpp#L2265-L3120) | - Network accessline 13
| Session creation/events | [audio_stream_session.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/sr/audio_stream_session.cpp) | - Network accessline 13
| Session creation/events | [audio_stream_session.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/sr/audio_stream_session.cpp) | - Network accessline 14
| Connection header | [usp_connection.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/usp/usp_connection.cpp#L636-L643) | - Network accessline 14
| Connection header | [usp_connection.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/usp/usp_connection.cpp#L636-L643) | - Network accessline 15
| STT result/phrase IDs | [recognition_result.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/sr/recognition_result.cpp) | - Network accessline 15
| STT result/phrase IDs | [recognition_result.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/sr/recognition_result.cpp) | - Network accessline 16
| TTS result/request IDs | [synthesis_result.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/tts/synthesis_result.cpp) | - Network accessline 16
| TTS result/request IDs | [synthesis_result.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/tts/synthesis_result.cpp) | - Network accessline 17
| Synthesis start/done traces | [synthesizer.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/tts/synthesizer.cpp) | - Network accessline 17
| Synthesis start/done traces | [synthesizer.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/tts/synthesizer.cpp) | - Network accessline 18
| Relative trace clock/thread marker | [trace_message.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/logging/trace_message.cpp) | - Network accessline 18
| Relative trace clock/thread marker | [trace_message.cpp](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/core/logging/trace_message.cpp) | - Network accessline 19
| C++ collection API | [speechapi_cxx_file_logger.h](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/public/cxx_api/speechapi_cxx_file_logger.h) | - Network accessline 19
| C++ collection API | [speechapi_cxx_file_logger.h](https://github.com/microsoft-foundry/SpeechSDK/blob/d0d08a34f40cd7a6d421f42fb14c2aab4f905ac5/source/public/cxx_api/speechapi_cxx_file_logger.h) |
skills/azure-ai/scripts/analyze-speech-sdk-log.mjs
skills/azure-ai/scripts/analyze-speech-sdk-log.ps1
skills/azure-ai/scripts/analyze-speech-sdk-log.sh
skills/azure-aigateway/SKILL.md
- Network accessline 15
> **To deploy APIM**, use the **azure-prepare** skill. See [APIM deployment guide](https://learn.microsoft.com/azure/api-management/get-started-create-service-instance). - Network accessline 15
> **To deploy APIM**, use the **azure-prepare** skill. See [APIM deployment guide](https://learn.microsoft.com/azure/api-management/get-started-create-service-instance). - Network accessline 63
curl -X POST "${GATEWAY_URL}/openai/deployments/<deployment>/chat/completions?api-version=2024-02-01" \ - Network accessline 63
curl -X POST "${GATEWAY_URL}/openai/deployments/<deployment>/chat/completions?api-version=2024-02-01" \ - Network accessline 121
- [**Configuration Patterns**](references/patterns.md) - Step-by-step patterns - [**Troubleshooting**](references/troubleshooting.md) - Common issues - [AI-Gateway Samples](https://github.com/Azure-Samples/AI-Gateway) - Network accessline 121
- [**Configuration Patterns**](references/patterns.md) - Step-by-step patterns - [**Troubleshooting**](references/troubleshooting.md) - Common issues - [AI-Gateway Samples](https://github.com/Azure-Samples/AI-Gateway) - Network accessline 122
- [**Troubleshooting**](references/troubleshooting.md) - Common issues - [AI-Gateway Samples](https://github.com/Azure-Samples/AI-Gateway) - [GenAI Gateway Docs](https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities) - Network accessline 122
- [**Troubleshooting**](references/troubleshooting.md) - Common issues - [AI-Gateway Samples](https://github.com/Azure-Samples/AI-Gateway) - [GenAI Gateway Docs](https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities) - Network accessline 123
- [AI-Gateway Samples](https://github.com/Azure-Samples/AI-Gateway) - Network accessline 123
- [AI-Gateway Samples](https://github.com/Azure-Samples/AI-Gateway) - Network accessline 124
- [GenAI Gateway Docs](https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities) - Network accessline 124
- [GenAI Gateway Docs](https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities)
skills/azure-aigateway/references/auth-best-practices.md
- Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme)
skills/azure-aigateway/references/patterns.md
- Network accessline 13
- APIM instance deployed (use **azure-prepare** skill to deploy APIM — see [APIM deployment guide](https://learn.microsoft.com/azure/api-management/get-started-create-service-instance)) - Network accessline 13
- APIM instance deployed (use **azure-prepare** skill to deploy APIM — see [APIM deployment guide](https://learn.microsoft.com/azure/api-management/get-started-create-service-instance)) - Network accessline 65
az apim api import --service-name <apim-name> --resource-group <rg> --api-id azure-openai-api --path "openai" --specification-format OpenApi --specification-url "https://raw.githubusercontent.com/Azure/azure-rest-api-specs - Network accessline 65
az apim api import --service-name <apim-name> --resource-group <rg> --api-id azure-openai-api --path "openai" --specification-format OpenApi --specification-url "https://raw.githubusercontent.com/Azure/azure-rest-api-specs - Network accessline 69
--path "openai" \ --specification-format OpenApi \ --specification-url "https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/cognitiveservices/data-plane/AzureOpenAI/inference/stable/2024-02-01/inference.json" - Network accessline 69
--path "openai" \ --specification-format OpenApi \ --specification-url "https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/cognitiveservices/data-plane/AzureOpenAI/inference/stable/2024-02-01/inference.json" - Network accessline 70
--specification-format OpenApi \ --specification-url "https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/cognitiveservices/data-plane/AzureOpenAI/inference/stable/2024-02-01/inference.json" \ --service-url " - Network accessline 70
--specification-format OpenApi \ --specification-url "https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/cognitiveservices/data-plane/AzureOpenAI/inference/stable/2024-02-01/inference.json" \ --service-url " - Network accessline 71
--specification-url "https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/cognitiveservices/data-plane/AzureOpenAI/inference/stable/2024-02-01/inference.json" \ - Network accessline 71
--specification-url "https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/cognitiveservices/data-plane/AzureOpenAI/inference/stable/2024-02-01/inference.json" \ - Network accessline 81
<base /> <set-backend-service backend-id="openai-backend" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 81
<base /> <set-backend-service backend-id="openai-backend" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 82
<set-backend-service backend-id="openai-backend" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> </inbound> - Network accessline 82
<set-backend-service backend-id="openai-backend" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> </inbound> - Network accessline 83
<authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 83
<authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 116
<set-variable name="backendUrl" value="@{ var backends = new [] { "https://aoai-eastus.openai.azure.com", - Network accessline 116
<set-variable name="backendUrl" value="@{ var backends = new [] { "https://aoai-eastus.openai.azure.com", - Network accessline 117
var backends = new [] { "https://aoai-eastus.openai.azure.com", "https://aoai-westus.openai.azure.com" - Network accessline 117
var backends = new [] { "https://aoai-eastus.openai.azure.com", "https://aoai-westus.openai.azure.com" - Network accessline 118
"https://aoai-eastus.openai.azure.com", - Network accessline 118
"https://aoai-eastus.openai.azure.com", - Network accessline 119
"https://aoai-westus.openai.azure.com" - Network accessline 119
"https://aoai-westus.openai.azure.com" - Network accessline 124
}" /> <set-backend-service base-url="@((string)context.Variables["backendUrl"] + "/openai")" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 124
}" /> <set-backend-service base-url="@((string)context.Variables["backendUrl"] + "/openai")" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 125
<set-backend-service base-url="@((string)context.Variables["backendUrl"] + "/openai")" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> </inbound> - Network accessline 125
<set-backend-service base-url="@((string)context.Variables["backendUrl"] + "/openai")" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> </inbound> - Network accessline 126
<authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 126
<authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 134
<set-variable name="backendUrl" value="@{ var backends = new [] { "https://aoai-eastus.openai.azure.com", - Network accessline 134
<set-variable name="backendUrl" value="@{ var backends = new [] { "https://aoai-eastus.openai.azure.com", - Network accessline 135
var backends = new [] { "https://aoai-eastus.openai.azure.com", "https://aoai-westus.openai.azure.com" - Network accessline 135
var backends = new [] { "https://aoai-eastus.openai.azure.com", "https://aoai-westus.openai.azure.com" - Network accessline 136
"https://aoai-eastus.openai.azure.com", - Network accessline 136
"https://aoai-eastus.openai.azure.com", - Network accessline 137
"https://aoai-westus.openai.azure.com" - Network accessline 137
"https://aoai-westus.openai.azure.com" - Network accessline 177
<base /> <set-backend-service backend-id="openai-backend" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 177
<base /> <set-backend-service backend-id="openai-backend" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 178
<set-backend-service backend-id="openai-backend" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> </inbound> - Network accessline 178
<set-backend-service backend-id="openai-backend" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> </inbound> - Network accessline 179
<authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 179
<authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 216
<set-backend-service backend-id="openai-backend" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 216
<set-backend-service backend-id="openai-backend" /> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 217
<authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 217
<authentication-managed-identity resource="https://cognitiveservices.azure.com" />
skills/azure-aigateway/references/policies.md
- Network accessline 231
<!-- 1. Authentication --> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 231
<!-- 1. Authentication --> <authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 232
<authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 232
<authentication-managed-identity resource="https://cognitiveservices.azure.com" /> - Network accessline 309
- [GenAI Gateway Capabilities](https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities) - Network accessline 309
- [GenAI Gateway Capabilities](https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities) - Network accessline 310
- [APIM Policy Reference](https://learn.microsoft.com/azure/api-management/api-management-policies) - Network accessline 310
- [APIM Policy Reference](https://learn.microsoft.com/azure/api-management/api-management-policies) - Network accessline 311
- [AI-Gateway Samples](https://github.com/Azure-Samples/AI-Gateway) - Network accessline 311
- [AI-Gateway Samples](https://github.com/Azure-Samples/AI-Gateway)
skills/azure-aigateway/references/sdk/azure-mgmt-apimanagement-py.md
skills/azure-aigateway/references/troubleshooting.md
- Network accessline 17
| Managed identity not enabled on APIM | `az apim update --name <apim> --resource-group <rg> --set identity.type=SystemAssigned` | | Missing RBAC role | `az role assignment create --assignee <apim-principal-id> --role "Cognitive Services Us - Network accessline 17
| Managed identity not enabled on APIM | `az apim update --name <apim> --resource-group <rg> --set identity.type=SystemAssigned` | | Missing RBAC role | `az role assignment create --assignee <apim-principal-id> --role "Cognitive Services Us - Network accessline 18
| Missing RBAC role | `az role assignment create --assignee <apim-principal-id> --role "Cognitive Services User" --scope <aoai-resource-id>` | | Wrong auth resource | Ensure `resource="https://cognitiveservices.azure.com"` (not the endpoint - Network accessline 18
| Missing RBAC role | `az role assignment create --assignee <apim-principal-id> --role "Cognitive Services User" --scope <aoai-resource-id>` | | Wrong auth resource | Ensure `resource="https://cognitiveservices.azure.com"` (not the endpoint - Network accessline 19
| Wrong auth resource | Ensure `resource="https://cognitiveservices.azure.com"` (not the endpoint URL) | - Network accessline 19
| Wrong auth resource | Ensure `resource="https://cognitiveservices.azure.com"` (not the endpoint URL) | - Network accessline 94
# Check cache-related headers in response curl -v -X POST "${GATEWAY_URL}/openai/deployments/<deployment>/chat/completions?api-version=2024-02-01" \ - Network accessline 94
# Check cache-related headers in response curl -v -X POST "${GATEWAY_URL}/openai/deployments/<deployment>/chat/completions?api-version=2024-02-01" \ - Network accessline 95
curl -v -X POST "${GATEWAY_URL}/openai/deployments/<deployment>/chat/completions?api-version=2024-02-01" \ - Network accessline 95
curl -v -X POST "${GATEWAY_URL}/openai/deployments/<deployment>/chat/completions?api-version=2024-02-01" \ - Network accessline 212
# Send request with tracing curl -X POST "${GATEWAY_URL}/..." \ - Network accessline 212
# Send request with tracing curl -X POST "${GATEWAY_URL}/..." \ - Network accessline 213
curl -X POST "${GATEWAY_URL}/..." \ - Network accessline 213
curl -X POST "${GATEWAY_URL}/..." \ - Network accessline 256
# 3. Test endpoint curl -s -o /dev/null -w "%{http_code}" "${GATEWAY_URL}/openai/deployments/<deployment>/chat/completions?api-version=2024-02-01" \ - Network accessline 256
# 3. Test endpoint curl -s -o /dev/null -w "%{http_code}" "${GATEWAY_URL}/openai/deployments/<deployment>/chat/completions?api-version=2024-02-01" \ - Network accessline 257
curl -s -o /dev/null -w "%{http_code}" "${GATEWAY_URL}/openai/deployments/<deployment>/chat/completions?api-version=2024-02-01" \ - Network accessline 257
curl -s -o /dev/null -w "%{http_code}" "${GATEWAY_URL}/openai/deployments/<deployment>/chat/completions?api-version=2024-02-01" \ - Network accessline 268
- [APIM Diagnostics](https://learn.microsoft.com/azure/api-management/diagnose-solve-problems) - Network accessline 268
- [APIM Diagnostics](https://learn.microsoft.com/azure/api-management/diagnose-solve-problems) - Network accessline 269
- [AI Gateway Monitoring](https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities#monitoring-and-analytics) - Network accessline 269
- [AI Gateway Monitoring](https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities#monitoring-and-analytics) - Network accessline 270
- [APIM Error Handling](https://learn.microsoft.com/azure/api-management/api-management-error-handling-policies) - Network accessline 270
- [APIM Error Handling](https://learn.microsoft.com/azure/api-management/api-management-error-handling-policies)
skills/azure-app-onboard-prereq/references/dependency-compatibility.md
- Network accessline 12
**PHP:** the runtime is the PHP version of the image (`FROM php:`, or any image that embeds PHP); `require.php` is a constraint, not the runtime. A floating minor tag tracks the latest patch. WARN `W-PHP-EOL` (PHP2Shell, critical RCE — [adv - Network accessline 12
**PHP:** the runtime is the PHP version of the image (`FROM php:`, or any image that embeds PHP); `require.php` is a constraint, not the runtime. A floating minor tag tracks the latest patch. WARN `W-PHP-EOL` (PHP2Shell, critical RCE — [adv
skills/azure-app-onboard-prereq/references/prereq-schemas.ts
- Executable scriptline 1
Executable file - Executable scriptline 1
Executable file - Network accessline 64
buildRequirements?: BuildRequirements; /** Detected health endpoint path (e.g., "/health", "/api/v1/health/"). * Used by scaffold for Azure health probe config and deploy for curl health check. - Network accessline 64
buildRequirements?: BuildRequirements; /** Detected health endpoint path (e.g., "/health", "/api/v1/health/"). * Used by scaffold for Azure health probe config and deploy for curl health check. - Network accessline 65
/** Detected health endpoint path (e.g., "/health", "/api/v1/health/"). * Used by scaffold for Azure health probe config and deploy for curl health check. * null if no health endpoint found (triggers W-HEALTH warning). */ - Network accessline 65
/** Detected health endpoint path (e.g., "/health", "/api/v1/health/"). * Used by scaffold for Azure health probe config and deploy for curl health check. * null if no health endpoint found (triggers W-HEALTH warning). */ - Network accessline 66
* Used by scaffold for Azure health probe config and deploy for curl health check. - Network accessline 66
* Used by scaffold for Azure health probe config and deploy for curl health check.
skills/azure-app-onboard-prereq/references/session-schemas.ts
skills/azure-app-onboard/deploy/SKILL.md
- Network accessline 47
| 4 | **Deploy approval gate** | Present cost + resource summary per `deploy-checklist.md` § Deploy approval gate format. | — | — | | 5b | **Write deploy-result.json skeleton** | ⛔ Read [`deploy-schemas.ts`](references/deploy-schemas.ts), w - Network accessline 47
| 4 | **Deploy approval gate** | Present cost + resource summary per `deploy-checklist.md` § Deploy approval gate format. | — | — | | 5b | **Write deploy-result.json skeleton** | ⛔ Read [`deploy-schemas.ts`](references/deploy-schemas.ts), w - Network accessline 48
| 5b | **Write deploy-result.json skeleton** | ⛔ Read [`deploy-schemas.ts`](references/deploy-schemas.ts), write skeleton (`status: "in-progress"`). Must exist BEFORE first `az` command. | `deploy-result.json` | ⛔ **You MUST read [`deploy-s - Network accessline 48
| 5b | **Write deploy-result.json skeleton** | ⛔ Read [`deploy-schemas.ts`](references/deploy-schemas.ts), write skeleton (`status: "in-progress"`). Must exist BEFORE first `az` command. | `deploy-result.json` | ⛔ **You MUST read [`deploy-s - Network accessline 49
| 6 | **Execute deployment** | ⛔ **BEFORE `az deployment sub create`:** Generate portal link — `$dn="{deploymentName}"; $r="/subscriptions/{subId}/providers/Microsoft.Resources/deployments/$dn"; $l="https://portal.azure.com/#view/Microsoft_ - Network accessline 49
| 6 | **Execute deployment** | ⛔ **BEFORE `az deployment sub create`:** Generate portal link — `$dn="{deploymentName}"; $r="/subscriptions/{subId}/providers/Microsoft.Resources/deployments/$dn"; $l="https://portal.azure.com/#view/Microsoft_
skills/azure-app-onboard/deploy/references/blocked-patterns.md
- Dangerous shell operationline 7
| `rm -rf` (any path outside a fresh temp dir) | ⛔ Block | Prevents accidental deletion of IaC, app code, or session artifacts — especially `infra/`, `.azure/`, `.copilot-azure/`. | - Dangerous shell operationline 7
| `rm -rf` (any path outside a fresh temp dir) | ⛔ Block | Prevents accidental deletion of IaC, app code, or session artifacts — especially `infra/`, `.azure/`, `.copilot-azure/`. |
skills/azure-app-onboard/deploy/references/code-deployment-appservice.md
- Network accessline 48
[Credential-related source omitted] - Network accessline 48
[Credential-related source omitted] - Network accessline 49
[Credential-related source omitted] - Network accessline 49
[Credential-related source omitted] - Network accessline 52
[Credential-related source omitted] - Network accessline 52
[Credential-related source omitted] - Network accessline 53
[Credential-related source omitted] - Network accessline 53
[Credential-related source omitted] - Network accessline 54
[Credential-related source omitted] - Network accessline 54
[Credential-related source omitted]
skills/azure-app-onboard/deploy/references/code-deployment-container-apps.md
- Network accessline 25
| Step | Command | Notes | |------|---------|-------| | 1. Build image | `az acr build --subscription {subscriptionId} -r {acrName} -t {appName}:latest . --no-logs` | Builds from workspace root. If `buildRequirements.hasBuildKitSyntax`, use - Network accessline 25
| Step | Command | Notes | |------|---------|-------| | 1. Build image | `az acr build --subscription {subscriptionId} -r {acrName} -t {appName}:latest . --no-logs` | Builds from workspace root. If `buildRequirements.hasBuildKitSyntax`, use - Network accessline 26
|------|---------|-------| | 1. Build image | `az acr build --subscription {subscriptionId} -r {acrName} -t {appName}:latest . --no-logs` | Builds from workspace root. If `buildRequirements.hasBuildKitSyntax`, use `-f Dockerfile.azure` (see - Network accessline 26
|------|---------|-------| | 1. Build image | `az acr build --subscription {subscriptionId} -r {acrName} -t {appName}:latest . --no-logs` | Builds from workspace root. If `buildRequirements.hasBuildKitSyntax`, use `-f Dockerfile.azure` (see - Network accessline 27
| 1. Build image | `az acr build --subscription {subscriptionId} -r {acrName} -t {appName}:latest . --no-logs` | Builds from workspace root. If `buildRequirements.hasBuildKitSyntax`, use `-f Dockerfile.azure` (see BuildKit handling below). - Network accessline 27
| 1. Build image | `az acr build --subscription {subscriptionId} -r {acrName} -t {appName}:latest . --no-logs` | Builds from workspace root. If `buildRequirements.hasBuildKitSyntax`, use `-f Dockerfile.azure` (see BuildKit handling below).
skills/azure-app-onboard/deploy/references/code-deployment-swa.md
- Access to secretsline 24
[Credential-related source omitted] - Access to secretsline 24
[Credential-related source omitted] - Network accessline 52
- **Hostname** — `swa deploy` produces no ARM endpoint output, so fetch it: `$swaHost = az staticwebapp show -n {swa} -g {rg} --query defaultHostname -o tsv` - `endpoints[]` — `[{ name, url: "https://$swaHost", healthStatus: "healthy" }]` ( - Network accessline 52
- **Hostname** — `swa deploy` produces no ARM endpoint output, so fetch it: `$swaHost = az staticwebapp show -n {swa} -g {rg} --query defaultHostname -o tsv` - `endpoints[]` — `[{ name, url: "https://$swaHost", healthStatus: "healthy" }]` ( - Network accessline 53
- `endpoints[]` — `[{ name, url: "https://$swaHost", healthStatus: "healthy" }]` (HTTP GET `https://$swaHost/` → 2xx confirms healthy) - Network accessline 53
- `endpoints[]` — `[{ name, url: "https://$swaHost", healthStatus: "healthy" }]` (HTTP GET `https://$swaHost/` → 2xx confirms healthy)
skills/azure-app-onboard/deploy/references/deploy-checklist-template.md
- Network accessline 55
- ACR build failures count toward healing counter - Windows: append `--no-logs` to `az acr build` to avoid UnicodeEncodeError - ⛔ After the revision is ready, run an explicit live HTTP probe against the ingress FQDN (`curl -sSfL`/`iwr` on ` - Network accessline 55
- ACR build failures count toward healing counter - Windows: append `--no-logs` to `az acr build` to avoid UnicodeEncodeError - ⛔ After the revision is ready, run an explicit live HTTP probe against the ingress FQDN (`curl -sSfL`/`iwr` on ` - Network accessline 55
- ACR build failures count toward healing counter - Windows: append `--no-logs` to `az acr build` to avoid UnicodeEncodeError - ⛔ After the revision is ready, run an explicit live HTTP probe against the ingress FQDN (`curl -sSfL`/`iwr` on ` - Network accessline 57
- ⛔ After the revision is ready, run an explicit live HTTP probe against the ingress FQDN (`curl -sSfL`/`iwr` on `*.azurecontainerapps.io`) — this call IS the health check; capture the result into `deploy-result.json.endpoints[].healthStatu - Network accessline 57
- ⛔ After the revision is ready, run an explicit live HTTP probe against the ingress FQDN (`curl -sSfL`/`iwr` on `*.azurecontainerapps.io`) — this call IS the health check; capture the result into `deploy-result.json.endpoints[].healthStatu - Network accessline 57
- ⛔ After the revision is ready, run an explicit live HTTP probe against the ingress FQDN (`curl -sSfL`/`iwr` on `*.azurecontainerapps.io`) — this call IS the health check; capture the result into `deploy-result.json.endpoints[].healthStatu - Access to secretsline 65
[Credential-related source omitted] - Access to secretsline 65
[Credential-related source omitted] - Access to secretsline 65
[Credential-related source omitted]
skills/azure-app-onboard/deploy/references/deploy-schemas.ts
skills/azure-app-onboard/deploy/references/health-check-patterns.md
- Network accessline 22
If the first health check returns **301 or 302**: 1. Read the `Location` header: `curl -sI "https://{fqdn}{probePath}" | Select-String "^location:" -CaseSensitive:$false` - Network accessline 22
If the first health check returns **301 or 302**: 1. Read the `Location` header: `curl -sI "https://{fqdn}{probePath}" | Select-String "^location:" -CaseSensitive:$false` - Network accessline 23
1. Read the `Location` header: `curl -sI "https://{fqdn}{probePath}" | Select-String "^location:" -CaseSensitive:$false` - Network accessline 23
1. Read the `Location` header: `curl -sI "https://{fqdn}{probePath}" | Select-String "^location:" -CaseSensitive:$false` - Network accessline 54
|---------|---------------| | Container Apps | `latestReadyRevisionName` not empty + HTTP on ingress FQDN | | App Service | HTTP GET `https://{name}.azurewebsites.net/` + `/health` | - Network accessline 54
|---------|---------------| | Container Apps | `latestReadyRevisionName` not empty + HTTP on ingress FQDN | | App Service | HTTP GET `https://{name}.azurewebsites.net/` + `/health` | - Network accessline 55
| Container Apps | `latestReadyRevisionName` not empty + HTTP on ingress FQDN | | App Service | HTTP GET `https://{name}.azurewebsites.net/` + `/health` | | Static Web Apps | HTTP GET `https://{defaultHostname}/` → 2xx = `healthy` (hostname - Network accessline 55
| Container Apps | `latestReadyRevisionName` not empty + HTTP on ingress FQDN | | App Service | HTTP GET `https://{name}.azurewebsites.net/` + `/health` | | Static Web Apps | HTTP GET `https://{defaultHostname}/` → 2xx = `healthy` (hostname - Network accessline 56
| App Service | HTTP GET `https://{name}.azurewebsites.net/` + `/health` | - Network accessline 56
| App Service | HTTP GET `https://{name}.azurewebsites.net/` + `/health` | - Network accessline 57
| Static Web Apps | HTTP GET `https://{defaultHostname}/` → 2xx = `healthy` (hostname: `az staticwebapp show -n {swa} -g {rg} --query defaultHostname -o tsv`) | - Network accessline 57
| Static Web Apps | HTTP GET `https://{defaultHostname}/` → 2xx = `healthy` (hostname: `az staticwebapp show -n {swa} -g {rg} --query defaultHostname -o tsv`) | - Network accessline 64
> ⛔ **Container Apps — run an explicit live HTTP probe (the pipeline status is NOT sufficient).** After `latestReadyRevisionName` is set, run an observable request against the ingress FQDN and capture the result into `deploy-result.json.end - Network accessline 64
> ⛔ **Container Apps — run an explicit live HTTP probe (the pipeline status is NOT sufficient).** After `latestReadyRevisionName` is set, run an observable request against the ingress FQDN and capture the result into `deploy-result.json.end - Network accessline 65
> ```powershell > iwr "https://{ingressFqdn}/{probePath}" -UseBasicParsing # PowerShell > curl -sSfL "https://{ingressFqdn}/{probePath}" # bash - Network accessline 65
> ```powershell > iwr "https://{ingressFqdn}/{probePath}" -UseBasicParsing # PowerShell > curl -sSfL "https://{ingressFqdn}/{probePath}" # bash - Network accessline 66
> iwr "https://{ingressFqdn}/{probePath}" -UseBasicParsing # PowerShell - Network accessline 66
> iwr "https://{ingressFqdn}/{probePath}" -UseBasicParsing # PowerShell - Network accessline 67
> curl -sSfL "https://{ingressFqdn}/{probePath}" # bash - Network accessline 67
> curl -sSfL "https://{ingressFqdn}/{probePath}" # bash - Network accessline 76
{ "name": "api", "url": "https://myapp-ca-dev-a1b2.azurecontainerapps.io", - Network accessline 76
{ "name": "api", "url": "https://myapp-ca-dev-a1b2.azurecontainerapps.io", - Network accessline 77
"name": "api", "url": "https://myapp-ca-dev-a1b2.azurecontainerapps.io", "healthStatus": "healthy" // healthy | degraded | unreachable | unknown - Network accessline 77
"name": "api", "url": "https://myapp-ca-dev-a1b2.azurecontainerapps.io", "healthStatus": "healthy" // healthy | degraded | unreachable | unknown - Network accessline 78
"url": "https://myapp-ca-dev-a1b2.azurecontainerapps.io", - Network accessline 78
"url": "https://myapp-ca-dev-a1b2.azurecontainerapps.io",
skills/azure-app-onboard/deploy/references/mcp-tools.md
- Network accessline 5
> **Troubleshooting:** If a tool call fails with unknown parameter or missing command errors, consult the official docs: <https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tools/> - Network accessline 5
> **Troubleshooting:** If a tool call fails with unknown parameter or missing command errors, consult the official docs: <https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tools/>
skills/azure-app-onboard/deploy/references/portal-links.md
- Network accessline 11
$deploymentName = "app-onboard-deploy-$("{sessionId}".Substring(0,8))" $resId = "/subscriptions/{subscriptionId}/providers/Microsoft.Resources/deployments/$deploymentName" $link = "https://portal.azure.com/#view/HubsExtension/DeploymentDeta - Network accessline 11
$deploymentName = "app-onboard-deploy-$("{sessionId}".Substring(0,8))" $resId = "/subscriptions/{subscriptionId}/providers/Microsoft.Resources/deployments/$deploymentName" $link = "https://portal.azure.com/#view/HubsExtension/DeploymentDeta - Network accessline 12
$resId = "/subscriptions/{subscriptionId}/providers/Microsoft.Resources/deployments/$deploymentName" $link = "https://portal.azure.com/#view/HubsExtension/DeploymentDetailsBlade/~/overview/id/$($resId.Replace('/', '%2F'))" Write-Output "LIN - Network accessline 12
$resId = "/subscriptions/{subscriptionId}/providers/Microsoft.Resources/deployments/$deploymentName" $link = "https://portal.azure.com/#view/HubsExtension/DeploymentDetailsBlade/~/overview/id/$($resId.Replace('/', '%2F'))" Write-Output "LIN - Network accessline 13
$link = "https://portal.azure.com/#view/HubsExtension/DeploymentDetailsBlade/~/overview/id/$($resId.Replace('/', '%2F'))" - Network accessline 13
$link = "https://portal.azure.com/#view/HubsExtension/DeploymentDetailsBlade/~/overview/id/$($resId.Replace('/', '%2F'))" - Network accessline 27
$resId = "/subscriptions/{subscriptionId}/resourceGroups/{rg}/providers/Microsoft.Resources/deployments/$deploymentName" $link = "https://portal.azure.com/#view/HubsExtension/DeploymentDetailsBlade/~/overview/id/$($resId.Replace('/', '%2F') - Network accessline 27
$resId = "/subscriptions/{subscriptionId}/resourceGroups/{rg}/providers/Microsoft.Resources/deployments/$deploymentName" $link = "https://portal.azure.com/#view/HubsExtension/DeploymentDetailsBlade/~/overview/id/$($resId.Replace('/', '%2F') - Network accessline 28
$link = "https://portal.azure.com/#view/HubsExtension/DeploymentDetailsBlade/~/overview/id/$($resId.Replace('/', '%2F'))" - Network accessline 28
$link = "https://portal.azure.com/#view/HubsExtension/DeploymentDetailsBlade/~/overview/id/$($resId.Replace('/', '%2F'))" - Network accessline 33
For Terraform (no single ARM deployment): `https://portal.azure.com/#@{tenantId}/resource/subscriptions/{subscriptionId}/resourceGroups/{resourceGroup}/activitylog` - Network accessline 33
For Terraform (no single ARM deployment): `https://portal.azure.com/#@{tenantId}/resource/subscriptions/{subscriptionId}/resourceGroups/{resourceGroup}/activitylog` - Network accessline 51
⚠<U+FE0F> Previous deployment link is stale — use this one: https://portal.azure.com/.../{newDeploymentName} - Network accessline 51
⚠<U+FE0F> Previous deployment link is stale — use this one: https://portal.azure.com/.../{newDeploymentName} - Network accessline 52
https://portal.azure.com/.../{newDeploymentName} - Network accessline 52
https://portal.azure.com/.../{newDeploymentName}
skills/azure-app-onboard/deploy/references/preflight-checks.md
- Network accessline 17
- Success → proceed. Active subscription + tenant confirmed. - Failure → `ENVIRONMENT_BLOCKING`. Suggest `az login` (plain, no scope). - ⛔ NEVER suggest `az login --scope https://graph.microsoft.com/.default` — Graph scope is irrelevant for - Network accessline 17
- Success → proceed. Active subscription + tenant confirmed. - Failure → `ENVIRONMENT_BLOCKING`. Suggest `az login` (plain, no scope). - ⛔ NEVER suggest `az login --scope https://graph.microsoft.com/.default` — Graph scope is irrelevant for - Network accessline 19
- ⛔ NEVER suggest `az login --scope https://graph.microsoft.com/.default` — Graph scope is irrelevant for ARM deployments. - Network accessline 19
- ⛔ NEVER suggest `az login --scope https://graph.microsoft.com/.default` — Graph scope is irrelevant for ARM deployments.
skills/azure-app-onboard/prepare/references/mcp-tools.md
- Network accessline 5
> **Troubleshooting:** If a tool call fails with unknown parameter or missing command errors, consult the official docs: <https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tools/> - Network accessline 5
> **Troubleshooting:** If a tool call fails with unknown parameter or missing command errors, consult the official docs: <https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tools/>
skills/azure-app-onboard/prepare/references/naming-patterns.md
- Network accessline 5
> **Reference:** [Azure naming conventions](https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-best-practices/resource-naming) — link, don't duplicate. Check docs for updates. - Network accessline 5
> **Reference:** [Azure naming conventions](https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-best-practices/resource-naming) — link, don't duplicate. Check docs for updates.
skills/azure-app-onboard/prepare/references/prepare-schemas.ts
skills/azure-app-onboard/prepare/references/pricing-guide-services.md
- Network accessline 197
**Not in the Retail Prices API.** Fixed pricing — query [azure.microsoft.com/pricing/details/app-service/static](https://azure.microsoft.com/en-us/pricing/details/app-service/static/): - Network accessline 197
**Not in the Retail Prices API.** Fixed pricing — query [azure.microsoft.com/pricing/details/app-service/static](https://azure.microsoft.com/en-us/pricing/details/app-service/static/):
skills/azure-app-onboard/prepare/references/pricing-guide.md
- Network accessline 66
When `pricing_get` returns empty: (1) Check `armSkuName` populated/case-sensitive? (2) HTTP fallback: `https://prices.azure.com/api/retail/prices?$filter={filter}`. (3) After 2 failures, use [pricing-guide-services.md](pricing-guide-service - Network accessline 66
When `pricing_get` returns empty: (1) Check `armSkuName` populated/case-sensitive? (2) HTTP fallback: `https://prices.azure.com/api/retail/prices?$filter={filter}`. (3) After 2 failures, use [pricing-guide-services.md](pricing-guide-service
skills/azure-app-onboard/prepare/references/service-mapping.md
- Network accessline 23
**AKS vs Container Apps:** Use Container Apps when scale-to-zero is needed, no K8s expertise is required, KEDA-driven event processing fits, or serverless GPU inference does not require Kubernetes control. Use AKS when the workload requires - Network accessline 23
**AKS vs Container Apps:** Use Container Apps when scale-to-zero is needed, no K8s expertise is required, KEDA-driven event processing fits, or serverless GPU inference does not require Kubernetes control. Use AKS when the workload requires
skills/azure-app-onboard/prepare/references/sku-quota-validation.md
- Network accessline 35
$sub = '{subscriptionId}'; $sku = '{sku}' @('{userRegion}','{alt1}','{alt2}','{alt3}') | ForEach-Object { $limit = az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/Microsoft.Web/locations/$_/providers/ - Network accessline 35
$sub = '{subscriptionId}'; $sku = '{sku}' @('{userRegion}','{alt1}','{alt2}','{alt3}') | ForEach-Object { $limit = az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/Microsoft.Web/locations/$_/providers/ - Network accessline 36
@('{userRegion}','{alt1}','{alt2}','{alt3}') | ForEach-Object { $limit = az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/Microsoft.Web/locations/$_/providers/Microsoft.Quota/quotas/$sku?api-version=20 - Network accessline 36
@('{userRegion}','{alt1}','{alt2}','{alt3}') | ForEach-Object { $limit = az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/Microsoft.Web/locations/$_/providers/Microsoft.Quota/quotas/$sku?api-version=20 - Network accessline 37
$limit = az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/Microsoft.Web/locations/$_/providers/Microsoft.Quota/quotas/$sku?api-version=2023-02-01" --query "properties.limit.value" -o tsv 2>$null - Network accessline 37
$limit = az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/Microsoft.Web/locations/$_/providers/Microsoft.Quota/quotas/$sku?api-version=2023-02-01" --query "properties.limit.value" -o tsv 2>$null - Network accessline 38
$used = az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/Microsoft.Web/locations/$_/providers/Microsoft.Quota/usages/$sku?api-version=2023-02-01" --query "properties.usages.value" -o tsv 2>$null - Network accessline 38
$used = az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/Microsoft.Web/locations/$_/providers/Microsoft.Quota/usages/$sku?api-version=2023-02-01" --query "properties.usages.value" -o tsv 2>$null - Network accessline 48
az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/Microsoft.App/locations/{region}/usages?api-version=2024-03-01" --query "value[?name.value=='ManagedEnvironmentCount'].{used:currentValue, limit:limit}" - - Network accessline 48
az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/Microsoft.App/locations/{region}/usages?api-version=2024-03-01" --query "value[?name.value=='ManagedEnvironmentCount'].{used:currentValue, limit:limit}" - - Network accessline 86
$sub = '{subscriptionId}'; $provider = 'Microsoft.DBforPostgreSQL'; $apiVer = '2022-12-01' @('{userRegion}','{alt1}','{alt2}','{alt3}') | ForEach-Object { $result = az rest --method get --url "https://management.azure.com/subscriptions/$s - Network accessline 86
$sub = '{subscriptionId}'; $provider = 'Microsoft.DBforPostgreSQL'; $apiVer = '2022-12-01' @('{userRegion}','{alt1}','{alt2}','{alt3}') | ForEach-Object { $result = az rest --method get --url "https://management.azure.com/subscriptions/$s - Network accessline 87
@('{userRegion}','{alt1}','{alt2}','{alt3}') | ForEach-Object { $result = az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/$provider/locations/$_/capabilities?api-version=$apiVer" --query "value[0].sup - Network accessline 87
@('{userRegion}','{alt1}','{alt2}','{alt3}') | ForEach-Object { $result = az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/$provider/locations/$_/capabilities?api-version=$apiVer" --query "value[0].sup - Network accessline 88
$result = az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/$provider/locations/$_/capabilities?api-version=$apiVer" --query "value[0].supportedFlexibleServerEditions[0].name" -o tsv 2>$null - Network accessline 88
$result = az rest --method get --url "https://management.azure.com/subscriptions/$sub/providers/$provider/locations/$_/capabilities?api-version=$apiVer" --query "value[0].supportedFlexibleServerEditions[0].name" -o tsv 2>$null
skills/azure-app-onboard/prepare/references/subagent-pricing.md
- Network accessline 42
- ⛔ **Do NOT invoke ANY skills** — no `{"skill": "azure-validate"}`, `{"skill": "azure-prepare"}`, or any other skill call. You are a pricing subagent only. Use direct HTTP to `https://prices.azure.com/api/retail/prices` for price queries ( - Network accessline 42
- ⛔ **Do NOT invoke ANY skills** — no `{"skill": "azure-validate"}`, `{"skill": "azure-prepare"}`, or any other skill call. You are a pricing subagent only. Use direct HTTP to `https://prices.azure.com/api/retail/prices` for price queries ( - Network accessline 45
- ⛔ For services with empty `armSkuName` (Container Apps, Functions Consumption, ACR, Storage, Cosmos, Key Vault): use `filter`/`meterName` matching — a `sku` filter returns `[]` - ⛔ **Monthly multiplier = each meter's `unitOfMeasure`** (`1 - Network accessline 45
- ⛔ For services with empty `armSkuName` (Container Apps, Functions Consumption, ACR, Storage, Cosmos, Key Vault): use `filter`/`meterName` matching — a `sku` filter returns `[]` - ⛔ **Monthly multiplier = each meter's `unitOfMeasure`** (`1 - Network accessline 46
- ⛔ **Monthly multiplier = each meter's `unitOfMeasure`** (`1 Hour`→×730, `1/Day`→×30 [ACR/registry, SQL DTU], `1 GB/Month`→×GB, `1 Second`→usage) — NEVER blanket ×730; applying ×730 to a `1/Day` meter overstates ~24× - ⛔ Use direct HTTP to - Network accessline 46
- ⛔ **Monthly multiplier = each meter's `unitOfMeasure`** (`1 Hour`→×730, `1/Day`→×30 [ACR/registry, SQL DTU], `1 GB/Month`→×GB, `1 Second`→usage) — NEVER blanket ×730; applying ×730 to a `1/Day` meter overstates ~24× - ⛔ Use direct HTTP to - Network accessline 47
- ⛔ Use direct HTTP to `https://prices.azure.com/api/retail/prices` for all price lookups. Do NOT use `mcp_azure_mcp_pricing` — it was already tried inline and failed. - Network accessline 47
- ⛔ Use direct HTTP to `https://prices.azure.com/api/retail/prices` for all price lookups. Do NOT use `mcp_azure_mcp_pricing` — it was already tried inline and failed.
skills/azure-app-onboard/prepare/references/validation-rubric.md
- Network accessline 8
|-----------|---------------| | **Goal Alignment** | Every `context.json.intent` field reflected in service/SKU choice. No orphaned services (every service maps to a component or supporting role). `overrides[]` honored. | | **WAF Alignment* - Network accessline 8
|-----------|---------------| | **Goal Alignment** | Every `context.json.intent` field reflected in service/SKU choice. No orphaned services (every service maps to a component or supporting role). `overrides[]` honored. | | **WAF Alignment* - Network accessline 9
| **Goal Alignment** | Every `context.json.intent` field reflected in service/SKU choice. No orphaned services (every service maps to a component or supporting role). `overrides[]` honored. | | **WAF Alignment** | **Cost:** SKU matches budg - Network accessline 9
| **Goal Alignment** | Every `context.json.intent` field reflected in service/SKU choice. No orphaned services (every service maps to a component or supporting role). `overrides[]` honored. | | **WAF Alignment** | **Cost:** SKU matches budg - Network accessline 10
| **WAF Alignment** | **Cost:** SKU matches budget; alternatives document cost tradeoffs. **Reliability:** Production plans include zone-redundant SKUs, GRS storage. **Security:** Managed identity + Key Vault; private endpoints where budget - Network accessline 10
| **WAF Alignment** | **Cost:** SKU matches budget; alternatives document cost tradeoffs. **Reliability:** Production plans include zone-redundant SKUs, GRS storage. **Security:** Managed identity + Key Vault; private endpoints where budget - Network accessline 22
- [Azure Well-Architected Framework](https://learn.microsoft.com/en-us/azure/well-architected/) — pillar definitions and tradeoff guidance - Network accessline 22
- [Azure Well-Architected Framework](https://learn.microsoft.com/en-us/azure/well-architected/) — pillar definitions and tradeoff guidance - Network accessline 23
- [WAF Service Guides](https://learn.microsoft.com/en-us/azure/well-architected/service-guides/) — per-service WAF alignment checklists - Network accessline 23
- [WAF Service Guides](https://learn.microsoft.com/en-us/azure/well-architected/service-guides/) — per-service WAF alignment checklists
skills/azure-app-onboard/references/handoff-protocol.md
- Network accessline 12
> 📁 Resource Group: {context.json.azure.resourceGroup} > 🌍 Region: {context.json.azure.region} > 🔗 Portal: https://portal.azure.com/#@/resource/subscriptions/{subId}/resourceGroups/{rgName}/overview - Network accessline 12
> 📁 Resource Group: {context.json.azure.resourceGroup} > 🌍 Region: {context.json.azure.region} > 🔗 Portal: https://portal.azure.com/#@/resource/subscriptions/{subId}/resourceGroups/{rgName}/overview - Network accessline 13
> 🌍 Region: {context.json.azure.region} > 🔗 Portal: https://portal.azure.com/#@/resource/subscriptions/{subId}/resourceGroups/{rgName}/overview > ``` - Network accessline 13
> 🌍 Region: {context.json.azure.region} > 🔗 Portal: https://portal.azure.com/#@/resource/subscriptions/{subId}/resourceGroups/{rgName}/overview > ``` - Network accessline 14
> 🔗 Portal: https://portal.azure.com/#@/resource/subscriptions/{subId}/resourceGroups/{rgName}/overview - Network accessline 14
> 🔗 Portal: https://portal.azure.com/#@/resource/subscriptions/{subId}/resourceGroups/{rgName}/overview
skills/azure-app-onboard/references/iac-resources.md
- Network accessline 7
| Resource | URL | Use When | |----------|-----|----------| | Bicep Documentation | https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/ | Syntax, file structure, deployment scopes, install | - Network accessline 7
| Resource | URL | Use When | |----------|-----|----------| | Bicep Documentation | https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/ | Syntax, file structure, deployment scopes, install | - Network accessline 8
|----------|-----|----------| | Bicep Documentation | https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/ | Syntax, file structure, deployment scopes, install | | Azure Resource Reference | https://learn.microsoft.com/en-u - Network accessline 8
|----------|-----|----------| | Bicep Documentation | https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/ | Syntax, file structure, deployment scopes, install | | Azure Resource Reference | https://learn.microsoft.com/en-u - Network accessline 9
| Bicep Documentation | https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/ | Syntax, file structure, deployment scopes, install | - Network accessline 9
| Bicep Documentation | https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/ | Syntax, file structure, deployment scopes, install | - Network accessline 10
| Azure Resource Reference | https://learn.microsoft.com/en-us/azure/templates/ | Resource properties, API versions, schema per type | - Network accessline 10
| Azure Resource Reference | https://learn.microsoft.com/en-us/azure/templates/ | Resource properties, API versions, schema per type | - Network accessline 14
| Resource | URL | Use When | |----------|-----|----------| | Terraform Registry — azurerm | https://registry.terraform.io/providers/hashicorp/azurerm/latest | Resource type properties, argument reference, import blocks | - Network accessline 14
| Resource | URL | Use When | |----------|-----|----------| | Terraform Registry — azurerm | https://registry.terraform.io/providers/hashicorp/azurerm/latest | Resource type properties, argument reference, import blocks | - Network accessline 15
|----------|-----|----------| | Terraform Registry — azurerm | https://registry.terraform.io/providers/hashicorp/azurerm/latest | Resource type properties, argument reference, import blocks | | Terraform Registry — azapi | https://registry. - Network accessline 15
|----------|-----|----------| | Terraform Registry — azurerm | https://registry.terraform.io/providers/hashicorp/azurerm/latest | Resource type properties, argument reference, import blocks | | Terraform Registry — azapi | https://registry. - Network accessline 16
| Terraform Registry — azurerm | https://registry.terraform.io/providers/hashicorp/azurerm/latest | Resource type properties, argument reference, import blocks | - Network accessline 16
| Terraform Registry — azurerm | https://registry.terraform.io/providers/hashicorp/azurerm/latest | Resource type properties, argument reference, import blocks | - Network accessline 17
| Terraform Registry — azapi | https://registry.terraform.io/providers/azure/azapi/latest | Preview resources not yet in azurerm; maps to ARM REST APIs | - Network accessline 17
| Terraform Registry — azapi | https://registry.terraform.io/providers/azure/azapi/latest | Preview resources not yet in azurerm; maps to ARM REST APIs | - Network accessline 34
| Resource | URL | Use When | |----------|-----|----------| | Common ARM Deployment Errors | https://learn.microsoft.com/en-us/azure/azure-resource-manager/troubleshooting/common-deployment-errors | `InvalidTemplateDeployment`, `SkuNotAvail - Network accessline 34
| Resource | URL | Use When | |----------|-----|----------| | Common ARM Deployment Errors | https://learn.microsoft.com/en-us/azure/azure-resource-manager/troubleshooting/common-deployment-errors | `InvalidTemplateDeployment`, `SkuNotAvail - Network accessline 35
|----------|-----|----------| | Common ARM Deployment Errors | https://learn.microsoft.com/en-us/azure/azure-resource-manager/troubleshooting/common-deployment-errors | `InvalidTemplateDeployment`, `SkuNotAvailable`, `QuotaExceeded`, any AR - Network accessline 35
|----------|-----|----------| | Common ARM Deployment Errors | https://learn.microsoft.com/en-us/azure/azure-resource-manager/troubleshooting/common-deployment-errors | `InvalidTemplateDeployment`, `SkuNotAvailable`, `QuotaExceeded`, any AR - Network accessline 36
| Common ARM Deployment Errors | https://learn.microsoft.com/en-us/azure/azure-resource-manager/troubleshooting/common-deployment-errors | `InvalidTemplateDeployment`, `SkuNotAvailable`, `QuotaExceeded`, any ARM error code | - Network accessline 36
| Common ARM Deployment Errors | https://learn.microsoft.com/en-us/azure/azure-resource-manager/troubleshooting/common-deployment-errors | `InvalidTemplateDeployment`, `SkuNotAvailable`, `QuotaExceeded`, any ARM error code | - Network accessline 37
| App Service Troubleshooting | https://learn.microsoft.com/en-us/troubleshoot/azure/app-service/ | Startup crashes, Kudu/Oryx build failures, health probe issues | - Network accessline 37
| App Service Troubleshooting | https://learn.microsoft.com/en-us/troubleshoot/azure/app-service/ | Startup crashes, Kudu/Oryx build failures, health probe issues | - Network accessline 38
| App Service Zip Deploy Guide | https://learn.microsoft.com/en-us/azure/app-service/deploy-zip | Zip deploy, SCM_DO_BUILD_DURING_DEPLOYMENT, Kudu publish API | | Container Apps Troubleshooting | https://learn.microsoft.com/en-us/azure/cont - Network accessline 38
| App Service Zip Deploy Guide | https://learn.microsoft.com/en-us/azure/app-service/deploy-zip | Zip deploy, SCM_DO_BUILD_DURING_DEPLOYMENT, Kudu publish API | | Container Apps Troubleshooting | https://learn.microsoft.com/en-us/azure/cont - Network accessline 39
| Container Apps Troubleshooting | https://learn.microsoft.com/en-us/azure/container-apps/troubleshooting | Revision failures, ingress errors, secret resolution, image pull failures | - Network accessline 39
| Container Apps Troubleshooting | https://learn.microsoft.com/en-us/azure/container-apps/troubleshooting | Revision failures, ingress errors, secret resolution, image pull failures | - Network accessline 40
| Quota Increase Portal | https://portal.azure.com/#blade/Microsoft_Azure_Capacity/QuotaMenuBlade/myQuotas | Direct link for quota increase requests | - Network accessline 40
| Quota Increase Portal | https://portal.azure.com/#blade/Microsoft_Azure_Capacity/QuotaMenuBlade/myQuotas | Direct link for quota increase requests |
skills/azure-app-onboard/references/mcp-tool-reference.md
- Network accessline 5
> **Troubleshooting:** If a tool call fails with unknown parameter or missing command errors, consult the official docs for current parameter names and allowed values: <https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tool - Network accessline 5
> **Troubleshooting:** If a tool call fails with unknown parameter or missing command errors, consult the official docs for current parameter names and allowed values: <https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tool - Network accessline 5
> **Troubleshooting:** If a tool call fails with unknown parameter or missing command errors, consult the official docs for current parameter names and allowed values: <https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tool - Network accessline 28
> **Additional global params** (not commonly needed by AppOnboard): `authentication-method` (credential\|key\|connectionString), `max-retries` (default 3), `retry-delay` (default 2s), `retry-delay-maximum` (default 10s), `retry-mode` (fixed - Network accessline 28
> **Additional global params** (not commonly needed by AppOnboard): `authentication-method` (credential\|key\|connectionString), `max-retries` (default 3), `retry-delay` (default 2s), `retry-delay-maximum` (default 10s), `retry-mode` (fixed - Network accessline 28
> **Additional global params** (not commonly needed by AppOnboard): `authentication-method` (credential\|key\|connectionString), `max-retries` (default 3), `retry-delay` (default 2s), `retry-delay-maximum` (default 10s), `retry-mode` (fixed
skills/azure-app-onboard/references/session-schemas.ts
skills/azure-app-onboard/scaffold/references/bicep-container-apps.md
- Network accessline 116
> ❌ **WRONG — `environment().suffixes.keyvaultDns` produces double-dot URL:** > `keyVaultUrl: 'https://${kvName}${environment().suffixes.keyvaultDns}/secrets/...'` - Network accessline 116
> ❌ **WRONG — `environment().suffixes.keyvaultDns` produces double-dot URL:** > `keyVaultUrl: 'https://${kvName}${environment().suffixes.keyvaultDns}/secrets/...'` - Network accessline 117
> `keyVaultUrl: 'https://${kvName}${environment().suffixes.keyvaultDns}/secrets/...'` - Network accessline 117
> `keyVaultUrl: 'https://${kvName}${environment().suffixes.keyvaultDns}/secrets/...'` - Network accessline 133
// ⛔ Do NOT replace vault.azure.net with environment().suffixes.keyvaultDns — it adds a leading dot → double-dot URL #disable-next-line no-hardcoded-env-urls keyVaultUrl: 'https://${keyVault.name}.vault.azure.net/secrets - Network accessline 133
// ⛔ Do NOT replace vault.azure.net with environment().suffixes.keyvaultDns — it adds a leading dot → double-dot URL #disable-next-line no-hardcoded-env-urls keyVaultUrl: 'https://${keyVault.name}.vault.azure.net/secrets - Network accessline 134
#disable-next-line no-hardcoded-env-urls keyVaultUrl: 'https://${keyVault.name}.vault.azure.net/secrets/db-connection-string' identity: 'system' // Uses the CA's system-assigned managed identity - Network accessline 134
#disable-next-line no-hardcoded-env-urls keyVaultUrl: 'https://${keyVault.name}.vault.azure.net/secrets/db-connection-string' identity: 'system' // Uses the CA's system-assigned managed identity - Network accessline 135
keyVaultUrl: 'https://${keyVault.name}.vault.azure.net/secrets/db-connection-string' - Network accessline 135
keyVaultUrl: 'https://${keyVault.name}.vault.azure.net/secrets/db-connection-string' - Network accessline 188
Container Apps in the same environment communicate via internal DNS: `http://{container-app-name}`. Set via env vars: - Network accessline 188
Container Apps in the same environment communicate via internal DNS: `http://{container-app-name}`. Set via env vars: - Network accessline 191
env: [ { name: 'API_URL', value: 'http://${apiContainerApp.name}' } - Network accessline 191
env: [ { name: 'API_URL', value: 'http://${apiContainerApp.name}' } - Network accessline 192
{ name: 'API_URL', value: 'http://${apiContainerApp.name}' } - Network accessline 192
{ name: 'API_URL', value: 'http://${apiContainerApp.name}' } - Network accessline 193
{ name: 'WORKER_URL', value: 'http://${workerContainerApp.name}' } - Network accessline 193
{ name: 'WORKER_URL', value: 'http://${workerContainerApp.name}' }
skills/azure-app-onboard/scaffold/references/bicep-patterns-security.md
- Network accessline 20
> **Source:** Adapted from Azure security best practices. See [Azure security baseline](https://learn.microsoft.com/en-us/security/benchmark/azure/overview) for updates. - Network accessline 20
> **Source:** Adapted from Azure security best practices. See [Azure security baseline](https://learn.microsoft.com/en-us/security/benchmark/azure/overview) for updates. - Access to secretsline 77
[Credential-related source omitted] - Access to secretsline 77
[Credential-related source omitted] - Network accessline 79
> **Container Apps exception:** Phase 1 of two-phase deployment uses `secrets: []` — NO secrets at all (not plaintext, not KV). KV `secretRef` entries are activated in Phase 2 after RBAC propagates. See [bicep-container-apps.md](../../scaff - Network accessline 79
> **Container Apps exception:** Phase 1 of two-phase deployment uses `secrets: []` — NO secrets at all (not plaintext, not KV). KV `secretRef` entries are activated in Phase 2 after RBAC propagates. See [bicep-container-apps.md](../../scaff - Network accessline 80
> > ⛔ **Container Apps KV URL — do NOT use `environment().suffixes.keyvaultDns`.** That function returns `.vault.azure.net` (WITH leading dot) → double-dot URL → `ContainerAppSecretKeyVaultUrlInvalid`. Use `'https://${kvName}.vault.azure.ne - Network accessline 80
> > ⛔ **Container Apps KV URL — do NOT use `environment().suffixes.keyvaultDns`.** That function returns `.vault.azure.net` (WITH leading dot) → double-dot URL → `ContainerAppSecretKeyVaultUrlInvalid`. Use `'https://${kvName}.vault.azure.ne - Network accessline 81
> ⛔ **Container Apps KV URL — do NOT use `environment().suffixes.keyvaultDns`.** That function returns `.vault.azure.net` (WITH leading dot) → double-dot URL → `ContainerAppSecretKeyVaultUrlInvalid`. Use `'https://${kvName}.vault.azure.net/ - Network accessline 81
> ⛔ **Container Apps KV URL — do NOT use `environment().suffixes.keyvaultDns`.** That function returns `.vault.azure.net` (WITH leading dot) → double-dot URL → `ContainerAppSecretKeyVaultUrlInvalid`. Use `'https://${kvName}.vault.azure.net/
skills/azure-app-onboard/scaffold/references/bicep-patterns.md
- Network accessline 5
> **Source:** Adapted from Azure Bicep best practices. See [Bicep best practices](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/best-practices) for updates. - Network accessline 5
> **Source:** Adapted from Azure Bicep best practices. See [Bicep best practices](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/best-practices) for updates. - Network accessline 76
{ "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", - Network accessline 76
{ "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", - Network accessline 77
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", - Network accessline 77
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#",
skills/azure-app-onboard/scaffold/references/dockerfile-generation.md
- Network accessline 60
1. Dockerfile MUST include `ARG NEXT_PUBLIC_API_URL` before the `RUN npm run build` step 2. Deploy phase passes `--build-arg NEXT_PUBLIC_API_URL=https://{api-fqdn}` to `az acr build` - Network accessline 60
1. Dockerfile MUST include `ARG NEXT_PUBLIC_API_URL` before the `RUN npm run build` step 2. Deploy phase passes `--build-arg NEXT_PUBLIC_API_URL=https://{api-fqdn}` to `az acr build` - Network accessline 61
2. Deploy phase passes `--build-arg NEXT_PUBLIC_API_URL=https://{api-fqdn}` to `az acr build` - Network accessline 61
2. Deploy phase passes `--build-arg NEXT_PUBLIC_API_URL=https://{api-fqdn}` to `az acr build` - Network accessline 63
Detect from `.env*` files containing `NEXT_PUBLIC_*` pointing to another service (e.g., `NEXT_PUBLIC_API_URL=http://localhost:3001`). - Network accessline 63
Detect from `.env*` files containing `NEXT_PUBLIC_*` pointing to another service (e.g., `NEXT_PUBLIC_API_URL=http://localhost:3001`).
skills/azure-app-onboard/scaffold/references/env-var-secrets.md
- Network accessline 12
> **Pitfalls:** `CORS_ORIGINS=["*"]` → invalid for strict validators (use actual URLs). `DATABASE_URL=changethis` → use KV ref. JSON array env vars need Bicep variable escaping: > ```bicep > var corsOrigins = '["https://${containerApp.prope - Network accessline 12
> **Pitfalls:** `CORS_ORIGINS=["*"]` → invalid for strict validators (use actual URLs). `DATABASE_URL=changethis` → use KV ref. JSON array env vars need Bicep variable escaping: > ```bicep > var corsOrigins = '["https://${containerApp.prope - Network accessline 13
> ```bicep > var corsOrigins = '["https://${containerApp.properties.configuration.ingress.fqdn}"]' > { name: 'CORS_ORIGINS', value: corsOrigins } - Network accessline 13
> ```bicep > var corsOrigins = '["https://${containerApp.properties.configuration.ingress.fqdn}"]' > { name: 'CORS_ORIGINS', value: corsOrigins } - Network accessline 14
> var corsOrigins = '["https://${containerApp.properties.configuration.ingress.fqdn}"]' - Network accessline 14
> var corsOrigins = '["https://${containerApp.properties.configuration.ingress.fqdn}"]' - Network accessline 35
{ name: 'db-connection-string' keyVaultUrl: 'https://${keyVault.name}.vault.azure.net/secrets/db-connection-string' - Network accessline 35
{ name: 'db-connection-string' keyVaultUrl: 'https://${keyVault.name}.vault.azure.net/secrets/db-connection-string' - Network accessline 36
name: 'db-connection-string' keyVaultUrl: 'https://${keyVault.name}.vault.azure.net/secrets/db-connection-string' identity: 'system' - Network accessline 36
name: 'db-connection-string' keyVaultUrl: 'https://${keyVault.name}.vault.azure.net/secrets/db-connection-string' identity: 'system' - Network accessline 37
keyVaultUrl: 'https://${keyVault.name}.vault.azure.net/secrets/db-connection-string' - Network accessline 37
keyVaultUrl: 'https://${keyVault.name}.vault.azure.net/secrets/db-connection-string' - Access to secretsline 56
[Credential-related source omitted] - Access to secretsline 56
[Credential-related source omitted]
skills/azure-app-onboard/scaffold/references/iac-generation-rules.md
- Network accessline 61
⛔ Read [`bicep-patterns-security.md`](bicep-patterns-security.md) (or `terraform-patterns.md` § Security Defaults) and verify ALL security patterns from Step 5. If deployment includes compute with MI ↔ resource RBAC, ⛔ read [rbac-roles.md]( - Network accessline 61
⛔ Read [`bicep-patterns-security.md`](bicep-patterns-security.md) (or `terraform-patterns.md` § Security Defaults) and verify ALL security patterns from Step 5. If deployment includes compute with MI ↔ resource RBAC, ⛔ read [rbac-roles.md](
skills/azure-app-onboard/scaffold/references/mcp-tools.md
- Network accessline 5
> **Troubleshooting:** If a tool call fails with unknown parameter or missing command errors, consult the official docs: <https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tools/> - Network accessline 5
> **Troubleshooting:** If a tool call fails with unknown parameter or missing command errors, consult the official docs: <https://learn.microsoft.com/en-us/azure/developer/azure-mcp-server/tools/>
skills/azure-app-onboard/scaffold/references/scaffold-schemas.ts
skills/azure-app-onboard/scaffold/references/self-review-checklist.md
skills/azure-app-onboard/scaffold/references/terraform-patterns.md
- Access to secretsline 63
[Credential-related source omitted] - Access to secretsline 63
[Credential-related source omitted] - Network accessline 162
Export: `resource_group_name`, `app_url` (https://${hostname}), `resource_ids` (list of all deployed resource IDs for deploy-result.json). - Network accessline 162
Export: `resource_group_name`, `app_url` (https://${hostname}), `resource_ids` (list of all deployed resource IDs for deploy-result.json).
skills/azure-app-onboard/scaffold/references/waf-checklist.md
- Network accessline 5
> **Reference:** [Azure Well-Architected Framework](https://learn.microsoft.com/en-us/azure/well-architected/) — link, don't duplicate. See [WAF Service Guides](https://learn.microsoft.com/en-us/azure/well-architected/service-guides/) for p - Network accessline 5
> **Reference:** [Azure Well-Architected Framework](https://learn.microsoft.com/en-us/azure/well-architected/) — link, don't duplicate. See [WAF Service Guides](https://learn.microsoft.com/en-us/azure/well-architected/service-guides/) for p
skills/azure-app-onboard/scaffold/scripts/scaffold-conformance.ps1
skills/azure-app-onboard/scaffold/scripts/scaffold-conformance.sh
skills/azure-cloud-migrate/SKILL.md
- Network accessline 21
6. Destructive actions require `ask_user` — [functions global-rules](references/services/functions/global-rules.md) | [app-service global-rules](references/services/app-service/global-rules.md) 7. **Report progress to user** — During long-r - Network accessline 21
6. Destructive actions require `ask_user` — [functions global-rules](references/services/functions/global-rules.md) | [app-service global-rules](references/services/app-service/global-rules.md) 7. **Report progress to user** — During long-r - Network accessline 23
8. **Audit service discovery in app code** — Kubernetes DNS names (e.g., `http://order-service:3001`) do not resolve in Container Apps. During assessment, scan source code for hardcoded hostnames/ports in HTTP clients and flag them for env- - Network accessline 23
8. **Audit service discovery in app code** — Kubernetes DNS names (e.g., `http://order-service:3001`) do not resolve in Container Apps. During assessment, scan source code for hardcoded hostnames/ports in HTTP clients and flag them for env-
skills/azure-cloud-migrate/references/services/app-service/app-engine-to-app-service.md
- Network accessline 180
- [GCP to Azure services comparison](https://learn.microsoft.com/en-us/azure/architecture/gcp-professional/) - Network accessline 180
- [GCP to Azure services comparison](https://learn.microsoft.com/en-us/azure/architecture/gcp-professional/) - Network accessline 181
- [App Service overview](https://learn.microsoft.com/en-us/azure/app-service/overview) - Network accessline 181
- [App Service overview](https://learn.microsoft.com/en-us/azure/app-service/overview) - Network accessline 182
- [Cosmos DB migration options](https://learn.microsoft.com/en-us/azure/cosmos-db/migration-choices) - Network accessline 182
- [Cosmos DB migration options](https://learn.microsoft.com/en-us/azure/cosmos-db/migration-choices) - Network accessline 183
- [App Service deployment slots](https://learn.microsoft.com/en-us/azure/app-service/deploy-staging-slots) - Network accessline 183
- [App Service deployment slots](https://learn.microsoft.com/en-us/azure/app-service/deploy-staging-slots)
skills/azure-cloud-migrate/references/services/app-service/beanstalk-to-app-service.md
- Network accessline 165
- [AWS to Azure services comparison](https://learn.microsoft.com/en-us/azure/architecture/aws-professional/) - Network accessline 165
- [AWS to Azure services comparison](https://learn.microsoft.com/en-us/azure/architecture/aws-professional/) - Network accessline 166
- [App Service overview](https://learn.microsoft.com/en-us/azure/app-service/overview) - Network accessline 166
- [App Service overview](https://learn.microsoft.com/en-us/azure/app-service/overview) - Network accessline 167
- [App Service autoscale](https://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-get-started) - Network accessline 167
- [App Service autoscale](https://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-get-started) - Network accessline 168
- [Azure Database Migration Service](https://learn.microsoft.com/en-us/azure/dms/dms-overview) - Network accessline 168
- [Azure Database Migration Service](https://learn.microsoft.com/en-us/azure/dms/dms-overview)
skills/azure-cloud-migrate/references/services/app-service/code-migration.md
skills/azure-cloud-migrate/references/services/app-service/global-rules.md
- Network accessline 25
- Always use `mcp_azure_mcp_get_azure_bestpractices` tool before generating Azure code - Prefer managed identity over connection strings or API keys - **Always use the latest supported runtime stack** — see the App Service [language overvie - Network accessline 25
- Always use `mcp_azure_mcp_get_azure_bestpractices` tool before generating Azure code - Prefer managed identity over connection strings or API keys - **Always use the latest supported runtime stack** — see the App Service [language overvie - Network accessline 26
- Prefer managed identity over connection strings or API keys - **Always use the latest supported runtime stack** — see the App Service [language overview](https://learn.microsoft.com/azure/app-service/overview-supported-languages) for the - Network accessline 26
- Prefer managed identity over connection strings or API keys - **Always use the latest supported runtime stack** — see the App Service [language overview](https://learn.microsoft.com/azure/app-service/overview-supported-languages) for the - Network accessline 27
- **Always use the latest supported runtime stack** — see the App Service [language overview](https://learn.microsoft.com/azure/app-service/overview-supported-languages) for the supported stacks page per language - Network accessline 27
- **Always use the latest supported runtime stack** — see the App Service [language overview](https://learn.microsoft.com/azure/app-service/overview-supported-languages) for the supported stacks page per language
skills/azure-cloud-migrate/references/services/app-service/heroku-to-app-service.md
- Network accessline 32
| Heroku Dyno Type | App Service Plan | Notes | |-------------------|------------------|-------| | Free / Eco | Free (F1) | Dev/test only — F1 has shared compute with quota limits (CPU minutes), not equivalent to Heroku's 60 min/day cap. Se - Network accessline 32
| Heroku Dyno Type | App Service Plan | Notes | |-------------------|------------------|-------| | Free / Eco | Free (F1) | Dev/test only — F1 has shared compute with quota limits (CPU minutes), not equivalent to Heroku's 60 min/day cap. Se - Network accessline 33
|-------------------|------------------|-------| | Free / Eco | Free (F1) | Dev/test only — F1 has shared compute with quota limits (CPU minutes), not equivalent to Heroku's 60 min/day cap. See [App Service Free SKU limits](https://learn.mi - Network accessline 33
|-------------------|------------------|-------| | Free / Eco | Free (F1) | Dev/test only — F1 has shared compute with quota limits (CPU minutes), not equivalent to Heroku's 60 min/day cap. See [App Service Free SKU limits](https://learn.mi - Network accessline 34
| Free / Eco | Free (F1) | Dev/test only — F1 has shared compute with quota limits (CPU minutes), not equivalent to Heroku's 60 min/day cap. See [App Service Free SKU limits](https://learn.microsoft.com/azure/app-service/overview-hosting-pl - Network accessline 34
| Free / Eco | Free (F1) | Dev/test only — F1 has shared compute with quota limits (CPU minutes), not equivalent to Heroku's 60 min/day cap. See [App Service Free SKU limits](https://learn.microsoft.com/azure/app-service/overview-hosting-pl - Access to secretsline 87
[Credential-related source omitted] - Access to secretsline 87
[Credential-related source omitted] - Network accessline 158
- [Heroku to Azure migration guide](https://learn.microsoft.com/en-us/azure/app-service/overview) - Network accessline 158
- [Heroku to Azure migration guide](https://learn.microsoft.com/en-us/azure/app-service/overview) - Network accessline 159
- [App Service deployment slots](https://learn.microsoft.com/en-us/azure/app-service/deploy-staging-slots) - Network accessline 159
- [App Service deployment slots](https://learn.microsoft.com/en-us/azure/app-service/deploy-staging-slots) - Network accessline 160
- [GitHub Actions for App Service](https://learn.microsoft.com/en-us/azure/app-service/deploy-github-actions) - Network accessline 160
- [GitHub Actions for App Service](https://learn.microsoft.com/en-us/azure/app-service/deploy-github-actions) - Network accessline 161
- [App Service managed identity](https://learn.microsoft.com/en-us/azure/app-service/overview-managed-identity) - Network accessline 161
- [App Service managed identity](https://learn.microsoft.com/en-us/azure/app-service/overview-managed-identity)
skills/azure-cloud-migrate/references/services/container-apps/cloudrun-deployment-guide.md
- Access to secretsline 56
[Credential-related source omitted] - Access to secretsline 56
[Credential-related source omitted] - Access to secretsline 57
[Credential-related source omitted] - Access to secretsline 57
[Credential-related source omitted] - Access to secretsline 80
[Credential-related source omitted] - Access to secretsline 80
[Credential-related source omitted] - Access to secretsline 81
[Credential-related source omitted] - Access to secretsline 81
[Credential-related source omitted] - Network accessline 193
FQDN=$(az containerapp show --name <app-name> -g "$RG" --query properties.configuration.ingress.fqdn -o tsv) curl -I "https://$FQDN/health" - Network accessline 193
FQDN=$(az containerapp show --name <app-name> -g "$RG" --query properties.configuration.ingress.fqdn -o tsv) curl -I "https://$FQDN/health" - Network accessline 194
curl -I "https://$FQDN/health" - Network accessline 194
curl -I "https://$FQDN/health" - Network accessline 201
$app = az containerapp show --name <app-name> -g $RG | ConvertFrom-Json Invoke-WebRequest -Uri "https://$($app.properties.configuration.ingress.fqdn)/health" - Network accessline 201
$app = az containerapp show --name <app-name> -g $RG | ConvertFrom-Json Invoke-WebRequest -Uri "https://$($app.properties.configuration.ingress.fqdn)/health" - Network accessline 202
Invoke-WebRequest -Uri "https://$($app.properties.configuration.ingress.fqdn)/health" - Network accessline 202
Invoke-WebRequest -Uri "https://$($app.properties.configuration.ingress.fqdn)/health"
skills/azure-cloud-migrate/references/services/container-apps/deployment-guide.md
- Access to secretsline 65
[Credential-related source omitted] - Access to secretsline 65
[Credential-related source omitted] - Access to secretsline 74
[Credential-related source omitted] - Access to secretsline 74
[Credential-related source omitted] - Access to secretsline 75
[Credential-related source omitted] - Access to secretsline 75
[Credential-related source omitted] - Possible obfuscationline 111
$decodedSecretValue = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($secretValue)) - Possible obfuscationline 111
$decodedSecretValue = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($secretValue)) - Network accessline 127
> ⚠<U+FE0F> **Warning: Service Discovery Changes** — In Kubernetes, pods reach other services by short DNS name (e.g., `http://order-service:3001`). In Container Apps, internal services use HTTPS FQDNs (e.g., `https://order-service.internal.<env-d - Network accessline 127
> ⚠<U+FE0F> **Warning: Service Discovery Changes** — In Kubernetes, pods reach other services by short DNS name (e.g., `http://order-service:3001`). In Container Apps, internal services use HTTPS FQDNs (e.g., `https://order-service.internal.<env-d - Network accessline 157
# Get app FQDN and test FQDN=$(az containerapp show --name my-app --resource-group myapp-rg --query properties.configuration.ingress.fqdn -o tsv) echo "App URL: https://$FQDN" - Network accessline 157
# Get app FQDN and test FQDN=$(az containerapp show --name my-app --resource-group myapp-rg --query properties.configuration.ingress.fqdn -o tsv) echo "App URL: https://$FQDN" - Network accessline 158
FQDN=$(az containerapp show --name my-app --resource-group myapp-rg --query properties.configuration.ingress.fqdn -o tsv) echo "App URL: https://$FQDN" curl https://$FQDN/health - Network accessline 158
FQDN=$(az containerapp show --name my-app --resource-group myapp-rg --query properties.configuration.ingress.fqdn -o tsv) echo "App URL: https://$FQDN" curl https://$FQDN/health - Network accessline 159
echo "App URL: https://$FQDN" - Network accessline 159
echo "App URL: https://$FQDN" - Network accessline 160
curl https://$FQDN/health - Network accessline 160
curl https://$FQDN/health - Network accessline 167
$FQDN = az containerapp show --name my-app --resource-group myapp-rg --query properties.configuration.ingress.fqdn -o tsv Write-Host "App URL: https://$FQDN" - Network accessline 167
$FQDN = az containerapp show --name my-app --resource-group myapp-rg --query properties.configuration.ingress.fqdn -o tsv Write-Host "App URL: https://$FQDN" - Network accessline 168
Write-Host "App URL: https://$FQDN" - Network accessline 168
Write-Host "App URL: https://$FQDN" - Network accessline 169
Invoke-WebRequest -Uri "https://$FQDN/health" -Method Head - Network accessline 169
Invoke-WebRequest -Uri "https://$FQDN/health" -Method Head - Network accessline 185
| SecretRef not found | `--env-vars KEY=secretref:name` requires `--secrets name=value` (or keyvaultref) in the **same** `az containerapp create` command | | ARM deployment locks | If a Bicep deployment is stuck with Container Apps InProgre - Network accessline 185
| SecretRef not found | `--env-vars KEY=secretref:name` requires `--secrets name=value` (or keyvaultref) in the **same** `az containerapp create` command | | ARM deployment locks | If a Bicep deployment is stuck with Container Apps InProgre - Network accessline 187
| Service-to-service timeout | Kubernetes DNS names (`http://svc:port`) don't work in ACA. Ensure app code reads `ORDER_SERVICE_URL` (or equivalent) env var pointing to the internal FQDN | - Network accessline 187
| Service-to-service timeout | Kubernetes DNS names (`http://svc:port`) don't work in ACA. Ensure app code reads `ORDER_SERVICE_URL` (or equivalent) env var pointing to the internal FQDN |
skills/azure-cloud-migrate/references/services/container-apps/fargate-deployment-guide.md
- Access to secretsline 45
[Credential-related source omitted] - Access to secretsline 45
[Credential-related source omitted] - Access to secretsline 46
[Credential-related source omitted] - Access to secretsline 46
[Credential-related source omitted] - Dangerous shell operationline 113
trap 'rm -f "$secret_file"' EXIT - Dangerous shell operationline 113
trap 'rm -f "$secret_file"' EXIT - Dangerous shell operationline 118
rm -f "$secret_file" - Dangerous shell operationline 118
rm -f "$secret_file" - Network accessline 197
set -euo pipefail FQDN=$(az containerapp show --name <app-name> -g "$RG" --query properties.configuration.ingress.fqdn -o tsv) curl -f -I "https://$FQDN/health" || { echo "Health check failed"; exit 1; } - Network accessline 197
set -euo pipefail FQDN=$(az containerapp show --name <app-name> -g "$RG" --query properties.configuration.ingress.fqdn -o tsv) curl -f -I "https://$FQDN/health" || { echo "Health check failed"; exit 1; } - Network accessline 198
FQDN=$(az containerapp show --name <app-name> -g "$RG" --query properties.configuration.ingress.fqdn -o tsv) curl -f -I "https://$FQDN/health" || { echo "Health check failed"; exit 1; } az containerapp logs show --name <app-name> -g "$RG" - - Network accessline 198
FQDN=$(az containerapp show --name <app-name> -g "$RG" --query properties.configuration.ingress.fqdn -o tsv) curl -f -I "https://$FQDN/health" || { echo "Health check failed"; exit 1; } az containerapp logs show --name <app-name> -g "$RG" - - Network accessline 199
curl -f -I "https://$FQDN/health" || { echo "Health check failed"; exit 1; } - Network accessline 199
curl -f -I "https://$FQDN/health" || { echo "Health check failed"; exit 1; } - Network accessline 204
$ErrorActionPreference = 'Stop' $fqdn = az containerapp show --name <app-name> -g $env:RG --query properties.configuration.ingress.fqdn -o tsv Invoke-WebRequest -Uri "https://$fqdn/health" -Method Head - Network accessline 204
$ErrorActionPreference = 'Stop' $fqdn = az containerapp show --name <app-name> -g $env:RG --query properties.configuration.ingress.fqdn -o tsv Invoke-WebRequest -Uri "https://$fqdn/health" -Method Head - Network accessline 205
$fqdn = az containerapp show --name <app-name> -g $env:RG --query properties.configuration.ingress.fqdn -o tsv Invoke-WebRequest -Uri "https://$fqdn/health" -Method Head az containerapp logs show --name <app-name> -g $env:RG --tail 100 - Network accessline 205
$fqdn = az containerapp show --name <app-name> -g $env:RG --query properties.configuration.ingress.fqdn -o tsv Invoke-WebRequest -Uri "https://$fqdn/health" -Method Head az containerapp logs show --name <app-name> -g $env:RG --tail 100 - Network accessline 206
Invoke-WebRequest -Uri "https://$fqdn/health" -Method Head - Network accessline 206
Invoke-WebRequest -Uri "https://$fqdn/health" -Method Head
skills/azure-cloud-migrate/references/services/container-apps/fargate-to-container-apps.md
- Network accessline 67
- [Azure Container Apps overview](https://learn.microsoft.com/azure/container-apps/overview) - Network accessline 67
- [Azure Container Apps overview](https://learn.microsoft.com/azure/container-apps/overview) - Network accessline 68
- [AWS to Azure services comparison](https://learn.microsoft.com/azure/architecture/aws-professional/services) - Network accessline 68
- [AWS to Azure services comparison](https://learn.microsoft.com/azure/architecture/aws-professional/services) - Network accessline 69
- [Container Apps scaling](https://learn.microsoft.com/azure/container-apps/scale-app) - Network accessline 69
- [Container Apps scaling](https://learn.microsoft.com/azure/container-apps/scale-app) - Network accessline 70
- [Container Apps managed identity](https://learn.microsoft.com/azure/container-apps/managed-identity) - Network accessline 70
- [Container Apps managed identity](https://learn.microsoft.com/azure/container-apps/managed-identity)
skills/azure-cloud-migrate/references/services/container-apps/spring-assessment-guide.md
- Network accessline 33
### Spring Boot Version Requirements - **Recommended target**: Spring Boot 3.x (requires Java 17+) - **Supported source**: Spring Boot 2.x on Java 8/11 → plan upgrade to Java 17+ and follow [Spring Boot 3.0 Migration Guide](https://github.c - Network accessline 33
### Spring Boot Version Requirements - **Recommended target**: Spring Boot 3.x (requires Java 17+) - **Supported source**: Spring Boot 2.x on Java 8/11 → plan upgrade to Java 17+ and follow [Spring Boot 3.0 Migration Guide](https://github.c - Network accessline 35
- **Supported source**: Spring Boot 2.x on Java 8/11 → plan upgrade to Java 17+ and follow [Spring Boot 3.0 Migration Guide](https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-3.0-Migration-Guide) - Network accessline 35
- **Supported source**: Spring Boot 2.x on Java 8/11 → plan upgrade to Java 17+ and follow [Spring Boot 3.0 Migration Guide](https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-3.0-Migration-Guide) - Network accessline 37
### Spring Cloud Compatibility - Verify Spring Cloud version matches Spring Boot 3.x requirements - See [Spring Cloud versions](https://spring.io/projects/spring-cloud#overview) - Network accessline 37
### Spring Cloud Compatibility - Verify Spring Cloud version matches Spring Boot 3.x requirements - See [Spring Cloud versions](https://spring.io/projects/spring-cloud#overview) - Network accessline 39
- See [Spring Cloud versions](https://spring.io/projects/spring-cloud#overview) - Network accessline 39
- See [Spring Cloud versions](https://spring.io/projects/spring-cloud#overview)
skills/azure-cloud-migrate/references/services/container-apps/spring-deployment-guide.md
- Access to secretsline 13
[Credential-related source omitted] - Access to secretsline 13
[Credential-related source omitted] - Access to secretsline 21
[Credential-related source omitted] - Access to secretsline 21
[Credential-related source omitted] - Access to secretsline 22
[Credential-related source omitted] - Access to secretsline 22
[Credential-related source omitted] - Access to secretsline 70
[Credential-related source omitted] - Access to secretsline 70
[Credential-related source omitted] - Access to secretsline 71
[Credential-related source omitted] - Access to secretsline 71
[Credential-related source omitted] - Access to secretsline 72
[Credential-related source omitted] - Access to secretsline 72
[Credential-related source omitted] - Access to secretsline 80
[Credential-related source omitted] - Access to secretsline 80
[Credential-related source omitted] - Access to secretsline 81
[Credential-related source omitted] - Access to secretsline 81
[Credential-related source omitted] - Access to secretsline 82
[Credential-related source omitted] - Access to secretsline 82
[Credential-related source omitted] - Access to secretsline 83
[Credential-related source omitted] - Access to secretsline 83
[Credential-related source omitted] - Dangerous shell operationline 102
trap 'shred -u "$SECRET_FILE" 2>/dev/null || rm -f "$SECRET_FILE"' EXIT - Dangerous shell operationline 102
trap 'shred -u "$SECRET_FILE" 2>/dev/null || rm -f "$SECRET_FILE"' EXIT - Network accessline 236
FQDN=$(az containerapp show --name spring-app --resource-group spring-rg --query properties.configuration.ingress.fqdn -o tsv) echo "Application URL: https://${FQDN}" curl "https://${FQDN}/actuator/health" - Network accessline 236
FQDN=$(az containerapp show --name spring-app --resource-group spring-rg --query properties.configuration.ingress.fqdn -o tsv) echo "Application URL: https://${FQDN}" curl "https://${FQDN}/actuator/health" - Network accessline 237
echo "Application URL: https://${FQDN}" curl "https://${FQDN}/actuator/health" az containerapp logs show --name spring-app --resource-group spring-rg --tail 50 - Network accessline 237
echo "Application URL: https://${FQDN}" curl "https://${FQDN}/actuator/health" az containerapp logs show --name spring-app --resource-group spring-rg --tail 50 - Network accessline 238
curl "https://${FQDN}/actuator/health" - Network accessline 238
curl "https://${FQDN}/actuator/health" - Network accessline 244
$FQDN = az containerapp show --name spring-app --resource-group spring-rg --query properties.configuration.ingress.fqdn -o tsv Write-Host "Application URL: https://${FQDN}" - Network accessline 244
$FQDN = az containerapp show --name spring-app --resource-group spring-rg --query properties.configuration.ingress.fqdn -o tsv Write-Host "Application URL: https://${FQDN}" - Network accessline 245
Write-Host "Application URL: https://${FQDN}" - Network accessline 245
Write-Host "Application URL: https://${FQDN}" - Network accessline 246
Invoke-WebRequest "https://${FQDN}/actuator/health" - Network accessline 246
Invoke-WebRequest "https://${FQDN}/actuator/health" - Network accessline 256
az containerapp env java-component config-server-for-spring create --environment spring-env --resource-group spring-rg --name config-server --min-replicas 1 --max-replicas 1 --configuration spring.cloud.config.server.git.uri=https: - Network accessline 256
az containerapp env java-component config-server-for-spring create --environment spring-env --resource-group spring-rg --name config-server --min-replicas 1 --max-replicas 1 --configuration spring.cloud.config.server.git.uri=https: - Network accessline 257
--environment spring-env --resource-group spring-rg --name config-server \ --min-replicas 1 --max-replicas 1 \ --configuration spring.cloud.config.server.git.uri=https://github.com/your-org/config-repo - Network accessline 257
--environment spring-env --resource-group spring-rg --name config-server \ --min-replicas 1 --max-replicas 1 \ --configuration spring.cloud.config.server.git.uri=https://github.com/your-org/config-repo - Network accessline 258
--min-replicas 1 --max-replicas 1 \ --configuration spring.cloud.config.server.git.uri=https://github.com/your-org/config-repo az containerapp update --name spring-app --resource-group spring-rg --bind config-server - Network accessline 258
--min-replicas 1 --max-replicas 1 \ --configuration spring.cloud.config.server.git.uri=https://github.com/your-org/config-repo az containerapp update --name spring-app --resource-group spring-rg --bind config-server - Network accessline 259
--configuration spring.cloud.config.server.git.uri=https://github.com/your-org/config-repo - Network accessline 259
--configuration spring.cloud.config.server.git.uri=https://github.com/your-org/config-repo - Network accessline 265
az containerapp env java-component config-server-for-spring create --environment spring-env --resource-group spring-rg --name config-server --min-replicas 1 --max-replicas 1 --configuration spring.cloud.config.server.git.uri=https: - Network accessline 265
az containerapp env java-component config-server-for-spring create --environment spring-env --resource-group spring-rg --name config-server --min-replicas 1 --max-replicas 1 --configuration spring.cloud.config.server.git.uri=https: - Network accessline 266
--environment spring-env --resource-group spring-rg --name config-server ` --min-replicas 1 --max-replicas 1 ` --configuration spring.cloud.config.server.git.uri=https://github.com/your-org/config-repo - Network accessline 266
--environment spring-env --resource-group spring-rg --name config-server ` --min-replicas 1 --max-replicas 1 ` --configuration spring.cloud.config.server.git.uri=https://github.com/your-org/config-repo - Network accessline 267
--min-replicas 1 --max-replicas 1 ` --configuration spring.cloud.config.server.git.uri=https://github.com/your-org/config-repo az containerapp update --name spring-app --resource-group spring-rg --bind config-server - Network accessline 267
--min-replicas 1 --max-replicas 1 ` --configuration spring.cloud.config.server.git.uri=https://github.com/your-org/config-repo az containerapp update --name spring-app --resource-group spring-rg --bind config-server - Network accessline 268
--configuration spring.cloud.config.server.git.uri=https://github.com/your-org/config-repo - Network accessline 268
--configuration spring.cloud.config.server.git.uri=https://github.com/your-org/config-repo
skills/azure-cloud-migrate/references/services/functions/code-migration.md
- Network accessline 16
- Use latest programming model (v4 for JavaScript, v2 for Python) - **Always use bindings and triggers instead of SDKs** — For blob read/write, use `input.storageBlob()` / `output.storageBlob()` with `extraInputs`/`extraOutputs`. For queues - Network accessline 16
- Use latest programming model (v4 for JavaScript, v2 for Python) - **Always use bindings and triggers instead of SDKs** — For blob read/write, use `input.storageBlob()` / `output.storageBlob()` with `extraInputs`/`extraOutputs`. For queues - Network accessline 18
- **Always use the latest supported language runtime** — Consult [supported languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) and select the newest GA version. Do NOT default to an older LTS version whe - Network accessline 18
- **Always use the latest supported language runtime** — Consult [supported languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) and select the newest GA version. Do NOT default to an older LTS version whe
skills/azure-cloud-migrate/references/services/functions/global-rules.md
- Network accessline 24
- Always use `mcp_azure_mcp_get_azure_bestpractices` tool before generating Azure code - Prefer managed identity over connection strings - **Always use the latest supported language runtime** — check [supported languages](https://learn.micr - Network accessline 24
- Always use `mcp_azure_mcp_get_azure_bestpractices` tool before generating Azure code - Prefer managed identity over connection strings - **Always use the latest supported language runtime** — check [supported languages](https://learn.micr - Network accessline 25
- Prefer managed identity over connection strings - **Always use the latest supported language runtime** — check [supported languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) for the newest GA version. N - Network accessline 25
- Prefer managed identity over connection strings - **Always use the latest supported language runtime** — check [supported languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) for the newest GA version. N - Network accessline 26
- **Always use the latest supported language runtime** — check [supported languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) for the newest GA version. Never default to older versions - Network accessline 26
- **Always use the latest supported language runtime** — check [supported languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) for the newest GA version. Never default to older versions
skills/azure-cloud-migrate/references/services/functions/lambda-to-functions.md
- Access to secretsline 90
[Credential-related source omitted] - Access to secretsline 90
[Credential-related source omitted] - Network accessline 95
- [AWS Lambda vs Azure Functions comparison](https://aka.ms/AWSLambda) - Network accessline 95
- [AWS Lambda vs Azure Functions comparison](https://aka.ms/AWSLambda) - Network accessline 96
- [AWS to Azure services comparison](https://learn.microsoft.com/en-us/azure/architecture/aws-professional/) - Network accessline 96
- [AWS to Azure services comparison](https://learn.microsoft.com/en-us/azure/architecture/aws-professional/) - Network accessline 97
- [Supported language runtimes](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) - Network accessline 97
- [Supported language runtimes](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) - Network accessline 98
- [Triggers and bindings overview](https://learn.microsoft.com/en-us/azure/azure-functions/functions-triggers-bindings) - Network accessline 98
- [Triggers and bindings overview](https://learn.microsoft.com/en-us/azure/azure-functions/functions-triggers-bindings) - Network accessline 99
- [Functions quickstart JS (azd)](https://github.com/Azure-Samples/functions-quickstart-javascript-azd/tree/main/infra) - Network accessline 99
- [Functions quickstart JS (azd)](https://github.com/Azure-Samples/functions-quickstart-javascript-azd/tree/main/infra) - Network accessline 100
- [Functions quickstart .NET Event Grid (azd)](https://github.com/Azure-Samples/functions-quickstart-dotnet-azd-eventgrid-blob/tree/main/infra) - Network accessline 100
- [Functions quickstart .NET Event Grid (azd)](https://github.com/Azure-Samples/functions-quickstart-dotnet-azd-eventgrid-blob/tree/main/infra) - Network accessline 172
properties: { // ARM resolves system key and handles validation at deployment time endpointUrl: 'https://${functionApp.properties.defaultHostName}/runtime/webhooks/blobs?functionName=${functionName}&code=${listKeys('${functi - Network accessline 172
properties: { // ARM resolves system key and handles validation at deployment time endpointUrl: 'https://${functionApp.properties.defaultHostName}/runtime/webhooks/blobs?functionName=${functionName}&code=${listKeys('${functi - Network accessline 173
// ARM resolves system key and handles validation at deployment time endpointUrl: 'https://${functionApp.properties.defaultHostName}/runtime/webhooks/blobs?functionName=${functionName}&code=${listKeys('${functionApp.id}/host/default - Network accessline 173
// ARM resolves system key and handles validation at deployment time endpointUrl: 'https://${functionApp.properties.defaultHostName}/runtime/webhooks/blobs?functionName=${functionName}&code=${listKeys('${functionApp.id}/host/default - Network accessline 174
endpointUrl: 'https://${functionApp.properties.defaultHostName}/runtime/webhooks/blobs?functionName=${functionName}&code=${listKeys('${functionApp.id}/host/default', '2023-12-01').systemKeys.blobs_extension}' - Network accessline 174
endpointUrl: 'https://${functionApp.properties.defaultHostName}/runtime/webhooks/blobs?functionName=${functionName}&code=${listKeys('${functionApp.id}/host/default', '2023-12-01').systemKeys.blobs_extension}'
skills/azure-cloud-migrate/references/services/functions/runtimes/csharp.md
- Network accessline 225
> Full reference: [Azure Functions C# isolated worker guide](https://learn.microsoft.com/en-us/azure/azure-functions/dotnet-isolated-process-guide) - Network accessline 225
> Full reference: [Azure Functions C# isolated worker guide](https://learn.microsoft.com/en-us/azure/azure-functions/dotnet-isolated-process-guide)
skills/azure-cloud-migrate/references/services/functions/runtimes/java.md
- Network accessline 214
> Full reference: [Azure Functions Java developer guide](https://learn.microsoft.com/en-us/azure/azure-functions/functions-reference-java) - Network accessline 214
> Full reference: [Azure Functions Java developer guide](https://learn.microsoft.com/en-us/azure/azure-functions/functions-reference-java)
skills/azure-cloud-migrate/references/services/functions/runtimes/javascript.md
- Network accessline 325
> Full reference: [Azure Functions JavaScript developer guide](https://learn.microsoft.com/en-us/azure/azure-functions/functions-reference-node) - Network accessline 325
> Full reference: [Azure Functions JavaScript developer guide](https://learn.microsoft.com/en-us/azure/azure-functions/functions-reference-node)
skills/azure-cloud-migrate/references/services/functions/runtimes/powershell.md
- Network accessline 221
> Full reference: [Azure Functions PowerShell developer guide](https://learn.microsoft.com/en-us/azure/azure-functions/functions-reference-powershell) - Network accessline 221
> Full reference: [Azure Functions PowerShell developer guide](https://learn.microsoft.com/en-us/azure/azure-functions/functions-reference-powershell)
skills/azure-cloud-migrate/references/services/functions/runtimes/python.md
- Access to secretsline 180
[Credential-related source omitted] - Access to secretsline 180
[Credential-related source omitted] - Network accessline 199
> Full reference: [Azure Functions Python developer guide](https://learn.microsoft.com/en-us/azure/azure-functions/functions-reference-python) - Network accessline 199
> Full reference: [Azure Functions Python developer guide](https://learn.microsoft.com/en-us/azure/azure-functions/functions-reference-python)
skills/azure-cloud-migrate/references/services/functions/runtimes/typescript.md
- Network accessline 119
> Full reference: [Azure Functions TypeScript developer guide](https://learn.microsoft.com/en-us/azure/azure-functions/functions-reference-node?tabs=typescript) - Network accessline 119
> Full reference: [Azure Functions TypeScript developer guide](https://learn.microsoft.com/en-us/azure/azure-functions/functions-reference-node?tabs=typescript)
skills/azure-compliance/references/auth-best-practices.md
- Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme)
skills/azure-compliance/references/azqr-recommendations.md
- Network accessline 171
- [Azure Proactive Resiliency Library](https://aka.ms/aprl) - Network accessline 171
- [Azure Proactive Resiliency Library](https://aka.ms/aprl) - Network accessline 172
- [Azure Orphaned Resources](https://github.com/dolevshor/azure-orphan-resources) - Network accessline 172
- [Azure Orphaned Resources](https://github.com/dolevshor/azure-orphan-resources) - Network accessline 173
- [Azure Advisor Documentation](https://learn.microsoft.com/azure/advisor/) - Network accessline 173
- [Azure Advisor Documentation](https://learn.microsoft.com/azure/advisor/) - Network accessline 174
- [Defender for Cloud Recommendations](https://learn.microsoft.com/azure/defender-for-cloud/recommendations-reference) - Network accessline 174
- [Defender for Cloud Recommendations](https://learn.microsoft.com/azure/defender-for-cloud/recommendations-reference)
skills/azure-compliance/references/azqr-remediation-patterns.md
- Network accessline 375
- [Azure CLI Reference](https://learn.microsoft.com/cli/azure/) - Network accessline 375
- [Azure CLI Reference](https://learn.microsoft.com/cli/azure/) - Network accessline 376
- [Bicep Documentation](https://learn.microsoft.com/azure/azure-resource-manager/bicep/) - Network accessline 376
- [Bicep Documentation](https://learn.microsoft.com/azure/azure-resource-manager/bicep/) - Network accessline 377
- [Azure Policy Built-in Definitions](https://learn.microsoft.com/azure/governance/policy/samples/built-in-policies) - Network accessline 377
- [Azure Policy Built-in Definitions](https://learn.microsoft.com/azure/governance/policy/samples/built-in-policies)
skills/azure-compliance/references/azure-quick-review.md
- Network accessline 154
- [Recommendation Categories](azqr-recommendations.md) - [Remediation Patterns](azqr-remediation-patterns.md) - [Azure Quick Review Documentation](https://azure.github.io/azqr/docs/) - Network accessline 154
- [Recommendation Categories](azqr-recommendations.md) - [Remediation Patterns](azqr-remediation-patterns.md) - [Azure Quick Review Documentation](https://azure.github.io/azqr/docs/) - Network accessline 155
- [Remediation Patterns](azqr-remediation-patterns.md) - [Azure Quick Review Documentation](https://azure.github.io/azqr/docs/) - [Azure Proactive Resiliency Library](https://aka.ms/aprl) - Network accessline 155
- [Remediation Patterns](azqr-remediation-patterns.md) - [Azure Quick Review Documentation](https://azure.github.io/azqr/docs/) - [Azure Proactive Resiliency Library](https://aka.ms/aprl) - Network accessline 156
- [Azure Quick Review Documentation](https://azure.github.io/azqr/docs/) - Network accessline 156
- [Azure Quick Review Documentation](https://azure.github.io/azqr/docs/) - Network accessline 157
- [Azure Proactive Resiliency Library](https://aka.ms/aprl) - Network accessline 157
- [Azure Proactive Resiliency Library](https://aka.ms/aprl)
skills/azure-compliance/references/sdk/azure-keyvault-keys-ts.md
- Network accessline 12
import { KeyClient } from "@azure/keyvault-keys"; import { DefaultAzureCredential } from "@azure/identity"; const keyClient = new KeyClient(`https://${vaultName}.vault.azure.net`, new DefaultAzureCredential()); - Network accessline 12
import { KeyClient } from "@azure/keyvault-keys"; import { DefaultAzureCredential } from "@azure/identity"; const keyClient = new KeyClient(`https://${vaultName}.vault.azure.net`, new DefaultAzureCredential()); - Network accessline 14
const keyClient = new KeyClient(`https://${vaultName}.vault.azure.net`, new DefaultAzureCredential()); - Network accessline 14
const keyClient = new KeyClient(`https://${vaultName}.vault.azure.net`, new DefaultAzureCredential());
skills/azure-compute/references/retail-prices-api.md
- Network accessline 3
The [Azure Retail Prices API](https://learn.microsoft.com/en-us/rest/api/cost-management/retail-prices/azure-retail-prices) is **unauthenticated** — no Azure account or subscription needed. - Network accessline 3
The [Azure Retail Prices API](https://learn.microsoft.com/en-us/rest/api/cost-management/retail-prices/azure-retail-prices) is **unauthenticated** — no Azure account or subscription needed. - Network accessline 8
https://prices.azure.com/api/retail/prices - Network accessline 8
https://prices.azure.com/api/retail/prices - Network accessline 13
https://prices.azure.com/api/retail/prices?api-version=2023-01-01-preview - Network accessline 13
https://prices.azure.com/api/retail/prices?api-version=2023-01-01-preview - Network accessline 23
GET https://prices.azure.com/api/retail/prices?$filter=serviceName eq 'Virtual Machines' and armRegionName eq 'eastus' and armSkuName eq 'Standard_D4s_v5' and priceType eq 'Consumption' - Network accessline 23
GET https://prices.azure.com/api/retail/prices?$filter=serviceName eq 'Virtual Machines' and armRegionName eq 'eastus' and armSkuName eq 'Standard_D4s_v5' and priceType eq 'Consumption' - Network accessline 27
curl -s "https://prices.azure.com/api/retail/prices?\$filter=serviceName%20eq%20'Virtual%20Machines'%20and%20armRegionName%20eq%20'eastus'%20and%20armSkuName%20eq%20'Standard_D4s_v5'%20and%20priceType%20eq%20'Consumption'" - Network accessline 27
curl -s "https://prices.azure.com/api/retail/prices?\$filter=serviceName%20eq%20'Virtual%20Machines'%20and%20armRegionName%20eq%20'eastus'%20and%20armSkuName%20eq%20'Standard_D4s_v5'%20and%20priceType%20eq%20'Consumption'" - Network accessline 31
$filter = "serviceName eq 'Virtual Machines' and armRegionName eq 'eastus' and armSkuName eq 'Standard_D4s_v5' and priceType eq 'Consumption'" $response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?`$filter=$filter" - Network accessline 31
$filter = "serviceName eq 'Virtual Machines' and armRegionName eq 'eastus' and armSkuName eq 'Standard_D4s_v5' and priceType eq 'Consumption'" $response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?`$filter=$filter" - Network accessline 32
$response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?`$filter=$filter" - Network accessline 32
$response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?`$filter=$filter" - Network accessline 39
GET https://prices.azure.com/api/retail/prices?$filter=serviceName eq 'Virtual Machines' and armRegionName eq 'eastus' and contains(armSkuName, 'Standard_D') and priceType eq 'Consumption' - Network accessline 39
GET https://prices.azure.com/api/retail/prices?$filter=serviceName eq 'Virtual Machines' and armRegionName eq 'eastus' and contains(armSkuName, 'Standard_D') and priceType eq 'Consumption' - Network accessline 43
curl -s "https://prices.azure.com/api/retail/prices?\$filter=serviceName%20eq%20'Virtual%20Machines'%20and%20armRegionName%20eq%20'eastus'%20and%20contains(armSkuName,%20'Standard_D')%20and%20priceType%20eq%20'Consumption'" - Network accessline 43
curl -s "https://prices.azure.com/api/retail/prices?\$filter=serviceName%20eq%20'Virtual%20Machines'%20and%20armRegionName%20eq%20'eastus'%20and%20contains(armSkuName,%20'Standard_D')%20and%20priceType%20eq%20'Consumption'" - Network accessline 47
$filter = "serviceName eq 'Virtual Machines' and armRegionName eq 'eastus' and contains(armSkuName, 'Standard_D') and priceType eq 'Consumption'" $response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?`$filter=$filter" - Network accessline 47
$filter = "serviceName eq 'Virtual Machines' and armRegionName eq 'eastus' and contains(armSkuName, 'Standard_D') and priceType eq 'Consumption'" $response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?`$filter=$filter" - Network accessline 48
$response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?`$filter=$filter" - Network accessline 48
$response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?`$filter=$filter" - Network accessline 55
GET https://prices.azure.com/api/retail/prices?$filter=serviceName eq 'Virtual Machines' and armSkuName eq 'Standard_D4s_v5' and priceType eq 'Reservation' - Network accessline 55
GET https://prices.azure.com/api/retail/prices?$filter=serviceName eq 'Virtual Machines' and armSkuName eq 'Standard_D4s_v5' and priceType eq 'Reservation' - Network accessline 59
curl -s "https://prices.azure.com/api/retail/prices?\$filter=serviceName%20eq%20'Virtual%20Machines'%20and%20armSkuName%20eq%20'Standard_D4s_v5'%20and%20priceType%20eq%20'Reservation'" - Network accessline 59
curl -s "https://prices.azure.com/api/retail/prices?\$filter=serviceName%20eq%20'Virtual%20Machines'%20and%20armSkuName%20eq%20'Standard_D4s_v5'%20and%20priceType%20eq%20'Reservation'" - Network accessline 63
$filter = "serviceName eq 'Virtual Machines' and armSkuName eq 'Standard_D4s_v5' and priceType eq 'Reservation'" $response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?`$filter=$filter" - Network accessline 63
$filter = "serviceName eq 'Virtual Machines' and armSkuName eq 'Standard_D4s_v5' and priceType eq 'Reservation'" $response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?`$filter=$filter" - Network accessline 64
$response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?`$filter=$filter" - Network accessline 64
$response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?`$filter=$filter" - Network accessline 72
GET https://prices.azure.com/api/retail/prices?currencyCode='EUR'&$filter=serviceName eq 'Virtual Machines' and armSkuName eq 'Standard_D4s_v5' - Network accessline 72
GET https://prices.azure.com/api/retail/prices?currencyCode='EUR'&$filter=serviceName eq 'Virtual Machines' and armSkuName eq 'Standard_D4s_v5' - Network accessline 76
curl -s "https://prices.azure.com/api/retail/prices?currencyCode='EUR'&\$filter=serviceName%20eq%20'Virtual%20Machines'%20and%20armSkuName%20eq%20'Standard_D4s_v5'" - Network accessline 76
curl -s "https://prices.azure.com/api/retail/prices?currencyCode='EUR'&\$filter=serviceName%20eq%20'Virtual%20Machines'%20and%20armSkuName%20eq%20'Standard_D4s_v5'" - Network accessline 80
$filter = "serviceName eq 'Virtual Machines' and armSkuName eq 'Standard_D4s_v5'" $response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?currencyCode='EUR'&`$filter=$filter" - Network accessline 80
$filter = "serviceName eq 'Virtual Machines' and armSkuName eq 'Standard_D4s_v5'" $response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?currencyCode='EUR'&`$filter=$filter" - Network accessline 81
$response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?currencyCode='EUR'&`$filter=$filter" - Network accessline 81
$response = Invoke-RestMethod "https://prices.azure.com/api/retail/prices?currencyCode='EUR'&`$filter=$filter" - Network accessline 119
{ "NextPageLink": "https://prices.azure.com:443/api/retail/prices?$filter=...&$skip=1000" } - Network accessline 119
{ "NextPageLink": "https://prices.azure.com:443/api/retail/prices?$filter=...&$skip=1000" }
skills/azure-compute/references/vm-families.md
skills/azure-compute/references/vm-quotas.md
- Network accessline 91
- Invoke the **azure-quotas** skill for complete quota CLI workflows across all Azure providers - [VM Family Guide](vm-families.md) — Family-to-workload mapping - [Azure VM quotas documentation](https://learn.microsoft.com/en-us/azure/virtu - Network accessline 91
- Invoke the **azure-quotas** skill for complete quota CLI workflows across all Azure providers - [VM Family Guide](vm-families.md) — Family-to-workload mapping - [Azure VM quotas documentation](https://learn.microsoft.com/en-us/azure/virtu - Network accessline 93
- [Azure VM quotas documentation](https://learn.microsoft.com/en-us/azure/virtual-machines/quotas) - Network accessline 93
- [Azure VM quotas documentation](https://learn.microsoft.com/en-us/azure/virtual-machines/quotas)
skills/azure-compute/references/vmss-guide.md
- Network accessline 5
> **Note:** This reference provides quick guidance but may become stale. Always verify VMSS features, limitations, and orchestration mode capabilities by fetching the latest documentation from: > - https://learn.microsoft.com/en-us/azure/vi - Network accessline 5
> **Note:** This reference provides quick guidance but may become stale. Always verify VMSS features, limitations, and orchestration mode capabilities by fetching the latest documentation from: > - https://learn.microsoft.com/en-us/azure/vi - Network accessline 6
> - https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/overview - Network accessline 6
> - https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/overview - Network accessline 7
> - https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-autoscale-overview - Network accessline 7
> - https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-autoscale-overview - Network accessline 8
> - https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/orchestration-modes-api-comparison - Network accessline 8
> - https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/orchestration-modes-api-comparison - Network accessline 62
- Use a **cool-down period** (default 5 min) to avoid flapping - Scale out aggressively, scale in conservatively (asymmetric rules) - Monitor with [Azure Monitor autoscale diagnostics](https://learn.microsoft.com/en-us/azure/azure-monitor/a - Network accessline 62
- Use a **cool-down period** (default 5 min) to avoid flapping - Scale out aggressively, scale in conservatively (asymmetric rules) - Monitor with [Azure Monitor autoscale diagnostics](https://learn.microsoft.com/en-us/azure/azure-monitor/a - Network accessline 64
- Monitor with [Azure Monitor autoscale diagnostics](https://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-best-practices) - Network accessline 64
- Monitor with [Azure Monitor autoscale diagnostics](https://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-best-practices) - Network accessline 92
- [VMSS orchestration modes](https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-orchestration-modes) - Network accessline 92
- [VMSS orchestration modes](https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-orchestration-modes) - Network accessline 93
- [Autoscale best practices](https://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-best-practices) - Network accessline 93
- [Autoscale best practices](https://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-best-practices) - Network accessline 94
- [VMSS networking](https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-networking) - Network accessline 94
- [VMSS networking](https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-networking) - Network accessline 95
- [VMSS Flexible portal quickstart](https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/flexible-virtual-machine-scale-sets-portal) - Network accessline 95
- [VMSS Flexible portal quickstart](https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/flexible-virtual-machine-scale-sets-portal)
skills/azure-compute/workflows/capacity-reservation/references/association-disassociation.md
- Network accessline 61
Existing VMSS can be associated using `az vmss update` similarly to VMs. Regional VMSS must be deallocated first. Zonal VMSS can be associated without deallocating, but this is currently a [Preview feature](https://learn.microsoft.com/en-us - Network accessline 61
Existing VMSS can be associated using `az vmss update` similarly to VMs. Regional VMSS must be deallocated first. Zonal VMSS can be associated without deallocating, but this is currently a [Preview feature](https://learn.microsoft.com/en-us - Network accessline 104
- [Associate a VM to a Capacity Reservation Group](https://learn.microsoft.com/en-us/azure/virtual-machines/capacity-reservation-associate-vm) - Network accessline 104
- [Associate a VM to a Capacity Reservation Group](https://learn.microsoft.com/en-us/azure/virtual-machines/capacity-reservation-associate-vm) - Network accessline 105
- [Remove/disassociate a VM from a Capacity Reservation Group](https://learn.microsoft.com/en-us/azure/virtual-machines/capacity-reservation-remove-vm) - Network accessline 105
- [Remove/disassociate a VM from a Capacity Reservation Group](https://learn.microsoft.com/en-us/azure/virtual-machines/capacity-reservation-remove-vm) - Network accessline 106
- [Remove/disassociate a VMSS from a Capacity Reservation Group](https://learn.microsoft.com/en-us/azure/virtual-machines/capacity-reservation-remove-virtual-machine-scale-set) - Network accessline 106
- [Remove/disassociate a VMSS from a Capacity Reservation Group](https://learn.microsoft.com/en-us/azure/virtual-machines/capacity-reservation-remove-virtual-machine-scale-set)
skills/azure-compute/workflows/capacity-reservation/references/capacity-reservation-overview.md
- Network accessline 103
- [Azure Capacity Reservations documentation](https://learn.microsoft.com/en-us/azure/virtual-machines/capacity-reservation-overview) - Network accessline 103
- [Azure Capacity Reservations documentation](https://learn.microsoft.com/en-us/azure/virtual-machines/capacity-reservation-overview) - Network accessline 104
- [Create a Capacity Reservation](https://learn.microsoft.com/en-us/azure/virtual-machines/capacity-reservation-create) - Network accessline 104
- [Create a Capacity Reservation](https://learn.microsoft.com/en-us/azure/virtual-machines/capacity-reservation-create)
skills/azure-compute/workflows/essential-machine-management/essential-machine-management.md
- Network accessline 51
GET https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.ManagedOps/managedOps/default?api-version=2025-07-28-preview - Network accessline 51
GET https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.ManagedOps/managedOps/default?api-version=2025-07-28-preview - Network accessline 81
For common EMM issues, refer to the official documentation: - [Troubleshoot Essential Machine Management (Preview)](https://learn.microsoft.com/en-us/azure/operations/configuration-enrollment-troubleshoot) - Network accessline 81
For common EMM issues, refer to the official documentation: - [Troubleshoot Essential Machine Management (Preview)](https://learn.microsoft.com/en-us/azure/operations/configuration-enrollment-troubleshoot) - Network accessline 82
- [Troubleshoot Essential Machine Management (Preview)](https://learn.microsoft.com/en-us/azure/operations/configuration-enrollment-troubleshoot) - Network accessline 82
- [Troubleshoot Essential Machine Management (Preview)](https://learn.microsoft.com/en-us/azure/operations/configuration-enrollment-troubleshoot)
skills/azure-compute/workflows/essential-machine-management/references/emm-enable-flow.md
- Network accessline 33
az rest --method GET --url "https://graph.microsoft.com/v1.0/me" --query id -o tsv - Network accessline 33
az rest --method GET --url "https://graph.microsoft.com/v1.0/me" --query id -o tsv - Network accessline 39
GET https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleAssignments?api-version=2022-04-01&$filter=assignedTo('{objectId}') - Network accessline 39
GET https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleAssignments?api-version=2022-04-01&$filter=assignedTo('{objectId}') - Network accessline 47
GET https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleDefinitions?api-version=2022-04-01 - Network accessline 47
GET https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleDefinitions?api-version=2022-04-01 - Network accessline 76
GET https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleAssignments?api-version=2022-04-01&$filter=assignedTo('{uamiPrincipalId}') - Network accessline 76
GET https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/roleAssignments?api-version=2022-04-01&$filter=assignedTo('{uamiPrincipalId}')
skills/azure-compute/workflows/essential-machine-management/references/emm-overview.md
- Network accessline 46
- [Essential Machine Management (Preview)](https://learn.microsoft.com/en-us/azure/operations/configuration-enrollment) - Network accessline 46
- [Essential Machine Management (Preview)](https://learn.microsoft.com/en-us/azure/operations/configuration-enrollment) - Network accessline 47
- [Troubleshoot EMM](https://learn.microsoft.com/en-us/azure/operations/configuration-enrollment-troubleshoot) - Network accessline 47
- [Troubleshoot EMM](https://learn.microsoft.com/en-us/azure/operations/configuration-enrollment-troubleshoot)
skills/azure-compute/workflows/vm-creator/examples/bicep/README.md
- Access to secretsline 8
[Credential-related source omitted] - Access to secretsline 8
[Credential-related source omitted] - Access to secretsline 13
[Credential-related source omitted] - Access to secretsline 13
[Credential-related source omitted] - Access to secretsline 16
[Credential-related source omitted] - Access to secretsline 16
[Credential-related source omitted] - Access to secretsline 18
[Credential-related source omitted] - Access to secretsline 18
[Credential-related source omitted] - Access to secretsline 21
[Credential-related source omitted] - Access to secretsline 21
[Credential-related source omitted]
skills/azure-compute/workflows/vm-creator/examples/bicep/main.bicep
skills/azure-compute/workflows/vm-creator/examples/terraform/README.md
- Access to secretsline 9
[Credential-related source omitted] - Access to secretsline 9
[Credential-related source omitted] - Network accessline 14
MY_IP=$(curl -s ifconfig.me)/32 # your current public IP, locked to /32 - Network accessline 14
MY_IP=$(curl -s ifconfig.me)/32 # your current public IP, locked to /32 - Access to secretsline 16
[Credential-related source omitted] - Access to secretsline 16
[Credential-related source omitted] - Access to secretsline 17
[Credential-related source omitted] - Access to secretsline 17
[Credential-related source omitted] - Access to secretsline 51
[Credential-related source omitted] - Access to secretsline 51
[Credential-related source omitted]
skills/azure-compute/workflows/vm-creator/references/delivery-options/github-pr.md
- Network accessline 7
1. **Repo** — accept any of: - `owner/name` (e.g., `myorg/azure-infra`) - Full URL (e.g., `https://github.com/myorg/azure-infra`) - Network accessline 7
1. **Repo** — accept any of: - `owner/name` (e.g., `myorg/azure-infra`) - Full URL (e.g., `https://github.com/myorg/azure-infra`) - Network accessline 8
- `owner/name` (e.g., `myorg/azure-infra`) - Full URL (e.g., `https://github.com/myorg/azure-infra`) - Local checkout path (e.g., `~/source/azure-infra`) — skips clone - Network accessline 8
- `owner/name` (e.g., `myorg/azure-infra`) - Full URL (e.g., `https://github.com/myorg/azure-infra`) - Local checkout path (e.g., `~/source/azure-infra`) — skips clone - Network accessline 9
- Full URL (e.g., `https://github.com/myorg/azure-infra`) - Network accessline 9
- Full URL (e.g., `https://github.com/myorg/azure-infra`) - Network accessline 76
> ✅ Opened PR: https://github.com/myorg/azure-infra/pull/42 - Network accessline 76
> ✅ Opened PR: https://github.com/myorg/azure-infra/pull/42
skills/azure-compute/workflows/vm-creator/references/delivery-options/save-local.md
skills/azure-compute/workflows/vm-creator/references/depth-probe/beginner.md
- Access to secretsline 13
[Credential-related source omitted] - Access to secretsline 13
[Credential-related source omitted] - Network accessline 14
- **VNet:** create new `<vm-name>-vnet` with `10.0.0.0/16` - **Subnet:** `default` with `10.0.0.0/24` - **NSG:** create new, allow SSH 22 (Linux) or RDP 3389 (Windows) from **the user's current public IP** (detect via `curl -s ifconfig.me` - Network accessline 14
- **VNet:** create new `<vm-name>-vnet` with `10.0.0.0/16` - **Subnet:** `default` with `10.0.0.0/24` - **NSG:** create new, allow SSH 22 (Linux) or RDP 3389 (Windows) from **the user's current public IP** (detect via `curl -s ifconfig.me` - Network accessline 15
- **Subnet:** `default` with `10.0.0.0/24` - **NSG:** create new, allow SSH 22 (Linux) or RDP 3389 (Windows) from **the user's current public IP** (detect via `curl -s ifconfig.me` or equivalent) — only fall back to `*` if detection fails, - Network accessline 15
- **Subnet:** `default` with `10.0.0.0/24` - **NSG:** create new, allow SSH 22 (Linux) or RDP 3389 (Windows) from **the user's current public IP** (detect via `curl -s ifconfig.me` or equivalent) — only fall back to `*` if detection fails, - Network accessline 16
- **NSG:** create new, allow SSH 22 (Linux) or RDP 3389 (Windows) from **the user's current public IP** (detect via `curl -s ifconfig.me` or equivalent) — only fall back to `*` if detection fails, and always flag the chosen source in the Pl - Network accessline 16
- **NSG:** create new, allow SSH 22 (Linux) or RDP 3389 (Windows) from **the user's current public IP** (detect via `curl -s ifconfig.me` or equivalent) — only fall back to `*` if detection fails, and always flag the chosen source in the Pl
skills/azure-compute/workflows/vm-creator/references/depth-probe/networking-deep.md
- Network accessline 7
| VNet | "Existing VNet, or new?" | If existing: ask name + RG; offer to list via `network_vnet_list` MCP or `az network vnet list` | | Subnet sizing | "Subnet CIDR?" | `/24` if new | | NSG | "Inbound rules: default (SSH/RDP from your IP) o - Network accessline 7
| VNet | "Existing VNet, or new?" | If existing: ask name + RG; offer to list via `network_vnet_list` MCP or `az network vnet list` | | Subnet sizing | "Subnet CIDR?" | `/24` if new | | NSG | "Inbound rules: default (SSH/RDP from your IP) o - Network accessline 8
| Subnet sizing | "Subnet CIDR?" | `/24` if new | | NSG | "Inbound rules: default (SSH/RDP from your IP) or paste a rule set?" | Restrict source to user's current public IP — fetch via `curl -s ifconfig.me` if not provided | | Public IP | " - Network accessline 8
| Subnet sizing | "Subnet CIDR?" | `/24` if new | | NSG | "Inbound rules: default (SSH/RDP from your IP) or paste a rule set?" | Restrict source to user's current public IP — fetch via `curl -s ifconfig.me` if not provided | | Public IP | " - Network accessline 9
| NSG | "Inbound rules: default (SSH/RDP from your IP) or paste a rule set?" | Restrict source to user's current public IP — fetch via `curl -s ifconfig.me` if not provided | - Network accessline 9
| NSG | "Inbound rules: default (SSH/RDP from your IP) or paste a rule set?" | Restrict source to user's current public IP — fetch via `curl -s ifconfig.me` if not provided |
skills/azure-compute/workflows/vm-creator/references/output-adapters/az-cli.md
- Access to secretsline 47
[Credential-related source omitted] - Access to secretsline 47
[Credential-related source omitted] - Access to secretsline 54
[Credential-related source omitted] - Access to secretsline 54
[Credential-related source omitted] - Access to secretsline 66
[Credential-related source omitted] - Access to secretsline 66
[Credential-related source omitted]
skills/azure-compute/workflows/vm-creator/references/output-adapters/bicep.md
- Access to secretsline 14
[Credential-related source omitted] - Access to secretsline 14
[Credential-related source omitted] - Access to secretsline 18
[Credential-related source omitted] - Access to secretsline 18
[Credential-related source omitted] - Access to secretsline 20
[Credential-related source omitted] - Access to secretsline 20
[Credential-related source omitted] - Access to secretsline 24
[Credential-related source omitted] - Access to secretsline 24
[Credential-related source omitted]
skills/azure-compute/workflows/vm-creator/references/output-adapters/terraform.md
skills/azure-compute/workflows/vm-creator/references/plan-card.md
skills/azure-compute/workflows/vm-recommender/references/web-fetch-policy.md
- Network accessline 17
## What to fetch (Step 2 — VMSS) - Network accessline 17
## What to fetch (Step 2 — VMSS) - Network accessline 20
https://learn.microsoft.com/azure/virtual-machine-scale-sets/overview - Network accessline 20
https://learn.microsoft.com/azure/virtual-machine-scale-sets/overview - Network accessline 21
https://learn.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-autoscale-overview - Network accessline 21
https://learn.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-autoscale-overview - Network accessline 24
## What to fetch (Step 3 — VM family) - Network accessline 24
## What to fetch (Step 3 — VM family) - Network accessline 27
https://learn.microsoft.com/azure/virtual-machines/sizes/<family-category>/<series-name> - Network accessline 27
https://learn.microsoft.com/azure/virtual-machines/sizes/<family-category>/<series-name> - Network accessline 30
Examples: - B-series: `https://learn.microsoft.com/azure/virtual-machines/sizes/general-purpose/b-family` - Network accessline 30
Examples: - B-series: `https://learn.microsoft.com/azure/virtual-machines/sizes/general-purpose/b-family` - Network accessline 31
- B-series: `https://learn.microsoft.com/azure/virtual-machines/sizes/general-purpose/b-family` - D-series: `https://learn.microsoft.com/azure/virtual-machines/sizes/general-purpose/ddsv5-series` - GPU: `https://learn.microsoft.com/azure/vi - Network accessline 31
- B-series: `https://learn.microsoft.com/azure/virtual-machines/sizes/general-purpose/b-family` - D-series: `https://learn.microsoft.com/azure/virtual-machines/sizes/general-purpose/ddsv5-series` - GPU: `https://learn.microsoft.com/azure/vi - Network accessline 32
- D-series: `https://learn.microsoft.com/azure/virtual-machines/sizes/general-purpose/ddsv5-series` - Network accessline 32
- D-series: `https://learn.microsoft.com/azure/virtual-machines/sizes/general-purpose/ddsv5-series` - Network accessline 33
- GPU: `https://learn.microsoft.com/azure/virtual-machines/sizes/gpu-accelerated/nc-family` - Network accessline 33
- GPU: `https://learn.microsoft.com/azure/virtual-machines/sizes/gpu-accelerated/nc-family` - Network accessline 35
For Spot, also: `https://learn.microsoft.com/azure/virtual-machine-scale-sets/use-spot`. - Network accessline 35
For Spot, also: `https://learn.microsoft.com/azure/virtual-machine-scale-sets/use-spot`.
skills/azure-compute/workflows/vm-recommender/vm-recommender.md
- Network accessline 56
https://learn.microsoft.com/en-us/azure/virtual-machines/sizes/<family-category>/<series-name> - Network accessline 56
https://learn.microsoft.com/en-us/azure/virtual-machines/sizes/<family-category>/<series-name> - Network accessline 59
For Spot eligibility, also fetch `https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/use-spot`. If any fetch fails, follow [web-fetch-policy.md](references/web-fetch-policy.md). Same SKUs apply to single VMs and VMSS. - Network accessline 59
For Spot eligibility, also fetch `https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/use-spot`. If any fetch fails, follow [web-fetch-policy.md](references/web-fetch-policy.md). Same SKUs apply to single VMs and VMSS. - Network accessline 101
- Compare reservation / savings plan pricing (`priceType eq 'Reservation'` in the API) - Suggest [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) for full estimates - Network accessline 101
- Compare reservation / savings plan pricing (`priceType eq 'Reservation'` in the API) - Suggest [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) for full estimates - Network accessline 102
- Suggest [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) for full estimates - Network accessline 102
- Suggest [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) for full estimates - Network accessline 103
- For VMSS: [autoscale best practices](https://learn.microsoft.com/azure/azure-monitor/autoscale/autoscale-best-practices), [VMSS networking](https://learn.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-networking - Network accessline 103
- For VMSS: [autoscale best practices](https://learn.microsoft.com/azure/azure-monitor/autoscale/autoscale-best-practices), [VMSS networking](https://learn.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-networking
skills/azure-deploy/SKILL.md
- Network accessline 45
> **APIM / AI Gateway**: Use this skill to deploy applications whose APIM/AI gateway infrastructure was already created during **azure-prepare**. For creating or changing APIM resources, see [APIM deployment guide](https://learn.microsoft.c - Network accessline 45
> **APIM / AI Gateway**: Use this skill to deploy applications whose APIM/AI gateway infrastructure was already created during **azure-prepare**. For creating or changing APIM resources, see [APIM deployment guide](https://learn.microsoft.c - Network accessline 68
| 8 | **Verify Success** — Confirm deployment completed and endpoints are accessible | [Verification](references/recipes/azd/verify.md) | | 9 | **Live Role Verification** — Query Azure to confirm provisioned RBAC roles are correct and suffi - Network accessline 68
| 8 | **Verify Success** — Confirm deployment completed and endpoints are accessible | [Verification](references/recipes/azd/verify.md) | | 9 | **Live Role Verification** — Query Azure to confirm provisioned RBAC roles are correct and suffi - Network accessline 70
| 10 | **Report Results** — Present deployed endpoint URLs to the user as fully-qualified `https://` links | [Verification](references/recipes/azd/verify.md) | - Network accessline 70
| 10 | **Report Results** — Present deployed endpoint URLs to the user as fully-qualified `https://` links | [Verification](references/recipes/azd/verify.md) | - Network accessline 72
> **⛔ URL FORMAT RULE** > > When presenting endpoint URLs to the user, you **MUST** always use fully-qualified URLs with the `https://` scheme (e.g. `https://myapp.azurewebsites.net`, not `myapp.azurewebsites.net`). Many Azure CLI commands - Network accessline 72
> **⛔ URL FORMAT RULE** > > When presenting endpoint URLs to the user, you **MUST** always use fully-qualified URLs with the `https://` scheme (e.g. `https://myapp.azurewebsites.net`, not `myapp.azurewebsites.net`). Many Azure CLI commands - Network accessline 74
> When presenting endpoint URLs to the user, you **MUST** always use fully-qualified URLs with the `https://` scheme (e.g. `https://myapp.azurewebsites.net`, not `myapp.azurewebsites.net`). Many Azure CLI commands return bare hostnames with - Network accessline 74
> When presenting endpoint URLs to the user, you **MUST** always use fully-qualified URLs with the `https://` scheme (e.g. `https://myapp.azurewebsites.net`, not `myapp.azurewebsites.net`). Many Azure CLI commands return bare hostnames with
skills/azure-deploy/references/auth-best-practices.md
- Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme)
skills/azure-deploy/references/global-rules.md
skills/azure-deploy/references/recipes/azcli/verify.md
- Network accessline 10
curl -s https://<endpoint>/health | jq . - Network accessline 10
curl -s https://<endpoint>/health | jq . - Network accessline 39
# Container Apps FQDN=$(az containerapp show --name <app-name> --resource-group <rg-name> --query "properties.configuration.ingress.fqdn" -o tsv) echo "https://$FQDN" - Network accessline 39
# Container Apps FQDN=$(az containerapp show --name <app-name> --resource-group <rg-name> --query "properties.configuration.ingress.fqdn" -o tsv) echo "https://$FQDN" - Network accessline 41
echo "https://$FQDN" - Network accessline 41
echo "https://$FQDN" - Network accessline 43
# App Service HOSTNAME=$(az webapp show --name <app-name> --resource-group <rg-name> --query "defaultHostName" -o tsv) echo "https://$HOSTNAME" - Network accessline 43
# App Service HOSTNAME=$(az webapp show --name <app-name> --resource-group <rg-name> --query "defaultHostName" -o tsv) echo "https://$HOSTNAME" - Network accessline 45
echo "https://$HOSTNAME" - Network accessline 45
echo "https://$HOSTNAME" - Network accessline 47
# Static Web Apps HOSTNAME=$(az staticwebapp show --name <app-name> --resource-group <rg-name> --query "defaultHostname" -o tsv) echo "https://$HOSTNAME" - Network accessline 47
# Static Web Apps HOSTNAME=$(az staticwebapp show --name <app-name> --resource-group <rg-name> --query "defaultHostname" -o tsv) echo "https://$HOSTNAME" - Network accessline 49
echo "https://$HOSTNAME" - Network accessline 49
echo "https://$HOSTNAME" - Network accessline 54
# Container Apps $Fqdn = az containerapp show --name <app-name> --resource-group <rg-name> --query "properties.configuration.ingress.fqdn" -o tsv Write-Output "https://$Fqdn" - Network accessline 54
# Container Apps $Fqdn = az containerapp show --name <app-name> --resource-group <rg-name> --query "properties.configuration.ingress.fqdn" -o tsv Write-Output "https://$Fqdn" - Network accessline 56
Write-Output "https://$Fqdn" - Network accessline 56
Write-Output "https://$Fqdn" - Network accessline 58
# App Service $Hostname = az webapp show --name <app-name> --resource-group <rg-name> --query "defaultHostName" -o tsv Write-Output "https://$Hostname" - Network accessline 58
# App Service $Hostname = az webapp show --name <app-name> --resource-group <rg-name> --query "defaultHostName" -o tsv Write-Output "https://$Hostname" - Network accessline 60
Write-Output "https://$Hostname" - Network accessline 60
Write-Output "https://$Hostname" - Network accessline 62
# Static Web Apps $Hostname = az staticwebapp show --name <app-name> --resource-group <rg-name> --query "defaultHostname" -o tsv Write-Output "https://$Hostname" - Network accessline 62
# Static Web Apps $Hostname = az staticwebapp show --name <app-name> --resource-group <rg-name> --query "defaultHostname" -o tsv Write-Output "https://$Hostname" - Network accessline 64
Write-Output "https://$Hostname" - Network accessline 64
Write-Output "https://$Hostname" - Network accessline 67
> ⚠<U+FE0F> **These commands return bare hostnames without a scheme.** Always prepend `https://` when presenting URLs to the user. For example, report `https://myapp.azurewebsites.net`, never `myapp.azurewebsites.net`. - Network accessline 67
> ⚠<U+FE0F> **These commands return bare hostnames without a scheme.** Always prepend `https://` when presenting URLs to the user. For example, report `https://myapp.azurewebsites.net`, never `myapp.azurewebsites.net`. - Network accessline 69
Present a summary including all service URLs as fully-qualified `https://` links. Do NOT end your response without including them. - Network accessline 69
Present a summary including all service URLs as fully-qualified `https://` links. Do NOT end your response without including them.
skills/azure-deploy/references/recipes/azd/ef-migrations.md
- Network accessline 146
- [SQL Managed Identity Access](sql-managed-identity.md) - [Post-Deployment Guide](post-deployment.md) - [EF Core Migrations](https://learn.microsoft.com/ef/core/managing-schemas/migrations/) - Network accessline 146
- [SQL Managed Identity Access](sql-managed-identity.md) - [Post-Deployment Guide](post-deployment.md) - [EF Core Migrations](https://learn.microsoft.com/ef/core/managing-schemas/migrations/) - Network accessline 148
- [EF Core Migrations](https://learn.microsoft.com/ef/core/managing-schemas/migrations/) - Network accessline 148
- [EF Core Migrations](https://learn.microsoft.com/ef/core/managing-schemas/migrations/)
skills/azure-deploy/references/recipes/azd/functions-deploy.md
- Network accessline 73
# Check status code only (GET, don't follow redirects) curl -s -o /dev/null -w "%{http_code}" "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 73
# Check status code only (GET, don't follow redirects) curl -s -o /dev/null -w "%{http_code}" "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 74
curl -s -o /dev/null -w "%{http_code}" "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 74
curl -s -o /dev/null -w "%{http_code}" "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 76
# Get status code and redirect URL curl -s -o /dev/null -w "Status: %{http_code}\nRedirect: %{redirect_url}" "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 76
# Get status code and redirect URL curl -s -o /dev/null -w "Status: %{http_code}\nRedirect: %{redirect_url}" "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 77
curl -s -o /dev/null -w "Status: %{http_code}\nRedirect: %{redirect_url}" "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 77
curl -s -o /dev/null -w "Status: %{http_code}\nRedirect: %{redirect_url}" "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 79
# Verbose output showing response headers (GET) curl -sS -D - -o /dev/null "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 79
# Verbose output showing response headers (GET) curl -sS -D - -o /dev/null "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 80
curl -sS -D - -o /dev/null "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 80
curl -sS -D - -o /dev/null "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 86
# DO NOT use this — returns 404 even when the function works curl -I "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 86
# DO NOT use this — returns 404 even when the function works curl -I "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 87
curl -I "https://<func-name>.azurewebsites.net/api/<route>" - Network accessline 87
curl -I "https://<func-name>.azurewebsites.net/api/<route>"
skills/azure-deploy/references/recipes/azd/post-deployment.md
- Dangerous shell operationline 38
eval $(azd env get-values) - Dangerous shell operationline 38
eval $(azd env get-values) - Network accessline 78
# Health check curl -f "$ENDPOINT/health" || echo "Health check failed" - Network accessline 78
# Health check curl -f "$ENDPOINT/health" || echo "Health check failed" - Network accessline 79
curl -f "$ENDPOINT/health" || echo "Health check failed" - Network accessline 79
curl -f "$ENDPOINT/health" || echo "Health check failed" - Network accessline 81
# Test database connectivity curl -f "$ENDPOINT/api/test-db" || echo "Database connection failed" - Network accessline 81
# Test database connectivity curl -f "$ENDPOINT/api/test-db" || echo "Database connection failed" - Network accessline 82
curl -f "$ENDPOINT/api/test-db" || echo "Database connection failed" - Network accessline 82
curl -f "$ENDPOINT/api/test-db" || echo "Database connection failed"
skills/azure-deploy/references/recipes/azd/scripts/apply-migrations.ps1
skills/azure-deploy/references/recipes/azd/scripts/apply-migrations.sh
skills/azure-deploy/references/recipes/azd/scripts/grant-and-migrate.ps1
skills/azure-deploy/references/recipes/azd/scripts/grant-and-migrate.sh
skills/azure-deploy/references/recipes/azd/sql-managed-identity.md
- Dangerous shell operationline 16
eval $(azd env get-values) - Dangerous shell operationline 16
eval $(azd env get-values) - Dangerous shell operationline 83
eval $(azd env get-values) - Dangerous shell operationline 83
eval $(azd env get-values) - Dangerous shell operationline 171
eval $(azd env get-values) - Dangerous shell operationline 171
eval $(azd env get-values)
skills/azure-deploy/references/recipes/azd/verify.md
- Network accessline 14
Resource Group: rg-myapp-dev Services: api - Endpoint: https://api-xxxx.azurecontainerapps.io - Network accessline 14
Resource Group: rg-myapp-dev Services: api - Endpoint: https://api-xxxx.azurecontainerapps.io - Network accessline 16
api - Endpoint: https://api-xxxx.azurecontainerapps.io - Network accessline 16
api - Endpoint: https://api-xxxx.azurecontainerapps.io - Network accessline 25
# Test endpoint curl -f "$ENDPOINT/health" || curl -f "$ENDPOINT" - Network accessline 25
# Test endpoint curl -f "$ENDPOINT/health" || curl -f "$ENDPOINT" - Network accessline 26
curl -f "$ENDPOINT/health" || curl -f "$ENDPOINT" - Network accessline 26
curl -f "$ENDPOINT/health" || curl -f "$ENDPOINT" - Network accessline 66
| Service | Endpoint | |---------|----------| | apiservice | https://apiservice.xxx.azurecontainerapps.io | - Network accessline 66
| Service | Endpoint | |---------|----------| | apiservice | https://apiservice.xxx.azurecontainerapps.io | - Network accessline 68
| apiservice | https://apiservice.xxx.azurecontainerapps.io | - Network accessline 68
| apiservice | https://apiservice.xxx.azurecontainerapps.io | - Network accessline 70
Aspire Dashboard: https://aspire-dashboard.xxx.azurecontainerapps.io - Network accessline 70
Aspire Dashboard: https://aspire-dashboard.xxx.azurecontainerapps.io - Network accessline 73
> ⚠<U+FE0F> **Always use fully-qualified URLs with the `https://` scheme.** If a command returns a bare hostname (e.g. `myapp.azurestaticapps.net`), prepend `https://` before presenting it to the user. - Network accessline 73
> ⚠<U+FE0F> **Always use fully-qualified URLs with the `https://` scheme.** If a command returns a bare hostname (e.g. `myapp.azurestaticapps.net`), prepend `https://` before presenting it to the user. - Dangerous shell operationline 85
eval $(azd env get-values) - Dangerous shell operationline 85
eval $(azd env get-values)
skills/azure-deploy/references/recipes/bicep/verify.md
- Network accessline 18
curl -s https://<endpoint>/health | jq . - Network accessline 18
curl -s https://<endpoint>/health | jq . - Network accessline 31
Present a summary including all service URLs as fully-qualified `https://` links. If a deployment output returns a bare hostname (e.g. `myapp.azurewebsites.net`), always prepend `https://`. Do NOT end your response without including them. - Network accessline 31
Present a summary including all service URLs as fully-qualified `https://` links. If a deployment output returns a bare hostname (e.g. `myapp.azurewebsites.net`), always prepend `https://`. Do NOT end your response without including them.
skills/azure-deploy/references/recipes/cicd/verify.md
- Network accessline 16
curl -s https://<endpoint>/health | jq . - Network accessline 16
curl -s https://<endpoint>/health | jq . - Network accessline 23
Extract endpoints from the pipeline output or query them directly via `az` CLI. Present a summary including all service URLs as fully-qualified `https://` links. If any command returns a bare hostname (e.g. `myapp.azurewebsites.net`), alway - Network accessline 23
Extract endpoints from the pipeline output or query them directly via `az` CLI. Present a summary including all service URLs as fully-qualified `https://` links. If any command returns a bare hostname (e.g. `myapp.azurewebsites.net`), alway
skills/azure-deploy/references/recipes/terraform/README.md
skills/azure-deploy/references/recipes/terraform/errors.md
skills/azure-deploy/references/recipes/terraform/verify.md
- Network accessline 11
curl -s https://$(terraform output -raw api_url)/health | jq . - Network accessline 11
curl -s https://$(terraform output -raw api_url)/health | jq . - Network accessline 30
Present a summary including all service URLs as fully-qualified `https://` links. If a Terraform output returns a bare hostname (e.g. `myapp.azurewebsites.net`), always prepend `https://`. Do NOT end your response without including them. - Network accessline 30
Present a summary including all service URLs as fully-qualified `https://` links. If a Terraform output returns a bare hostname (e.g. `myapp.azurewebsites.net`), always prepend `https://`. Do NOT end your response without including them.
skills/azure-deploy/references/region-availability.md
- Network accessline 3
> **AUTHORITATIVE SOURCE** — Consult this file BEFORE recommending any region. > > Official reference: https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table - Network accessline 3
> **AUTHORITATIVE SOURCE** — Consult this file BEFORE recommending any region. > > Official reference: https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table - Network accessline 5
> Official reference: https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table - Network accessline 5
> Official reference: https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table - Network accessline 65
> Check https://learn.microsoft.com/azure/ai-services/openai/concepts/models for current model availability. - Network accessline 65
> Check https://learn.microsoft.com/azure/ai-services/openai/concepts/models for current model availability.
skills/azure-deploy/references/sdk/azd-deployment.md
- Network accessline 7
## Install curl -fsSL https://aka.ms/install-azd.sh | bash - Network accessline 7
## Install curl -fsSL https://aka.ms/install-azd.sh | bash - Dangerous shell operationline 8
curl -fsSL https://aka.ms/install-azd.sh | bash - Dangerous shell operationline 8
curl -fsSL https://aka.ms/install-azd.sh | bash - Network accessline 8
curl -fsSL https://aka.ms/install-azd.sh | bash - Network accessline 8
curl -fsSL https://aka.ms/install-azd.sh | bash - Access to secretsline 19
[Credential-related source omitted] - Access to secretsline 19
[Credential-related source omitted]
skills/azure-deploy/references/troubleshooting.md
- Network accessline 114
{ "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", - Network accessline 114
{ "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", - Network accessline 115
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", - Network accessline 115
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", - Network accessline 134
**Reference:** [Use environment variables in infrastructure files](https://learn.microsoft.com/azure/developer/azure-developer-cli/manage-environment-variables?tabs=bash#use-environment-variables-in-infrastructure-files) - Network accessline 134
**Reference:** [Use environment variables in infrastructure files](https://learn.microsoft.com/azure/developer/azure-developer-cli/manage-environment-variables?tabs=bash#use-environment-variables-in-infrastructure-files)
skills/azure-diagnostics/references/app-service/README.md
- Network accessline 15
|---------|--------------|-----------| | High CPU / memory | Runaway process, inefficient code | Use Process Explorer via Kudu, scale up | | Deployment failure | Build error, locked files, quota | Check Kudu logs at `https://APP.scm.azurewe - Network accessline 15
|---------|--------------|-----------| | High CPU / memory | Runaway process, inefficient code | Use Process Explorer via Kudu, scale up | | Deployment failure | Build error, locked files, quota | Check Kudu logs at `https://APP.scm.azurewe - Network accessline 16
| High CPU / memory | Runaway process, inefficient code | Use Process Explorer via Kudu, scale up | | Deployment failure | Build error, locked files, quota | Check Kudu logs at `https://APP.scm.azurewebsites.net/api/deployments` to look for - Network accessline 16
| High CPU / memory | Runaway process, inefficient code | Use Process Explorer via Kudu, scale up | | Deployment failure | Build error, locked files, quota | Check Kudu logs at `https://APP.scm.azurewebsites.net/api/deployments` to look for - Network accessline 17
| Deployment failure | Build error, locked files, quota | Check Kudu logs at `https://APP.scm.azurewebsites.net/api/deployments` to look for details on build errors, locked files or lack of storage quota | - Network accessline 17
| Deployment failure | Build error, locked files, quota | Check Kudu logs at `https://APP.scm.azurewebsites.net/api/deployments` to look for details on build errors, locked files or lack of storage quota | - Network accessline 39
**Fix:** Scale up (`az appservice plan update -n <app-service-plan-name> -g <resource-group> --sku P1V3`) or profile the app via Kudu Process Explorer at `https://APP.scm.azurewebsites.net/ProcessExplorer/` to identify hot paths. - Network accessline 39
**Fix:** Scale up (`az appservice plan update -n <app-service-plan-name> -g <resource-group> --sku P1V3`) or profile the app via Kudu Process Explorer at `https://APP.scm.azurewebsites.net/ProcessExplorer/` to identify hot paths. - Network accessline 105
# Test the endpoint directly curl -s -o /dev/null -w "%{http_code}" https://APP.azurewebsites.net/health - Network accessline 105
# Test the endpoint directly curl -s -o /dev/null -w "%{http_code}" https://APP.azurewebsites.net/health - Network accessline 106
curl -s -o /dev/null -w "%{http_code}" https://APP.azurewebsites.net/health - Network accessline 106
curl -s -o /dev/null -w "%{http_code}" https://APP.azurewebsites.net/health
skills/azure-diagnostics/references/container-apps/README.md
- Network accessline 70
# Check if /health endpoint responds curl https://APP.REGION.azurecontainerapps.io/health - Network accessline 70
# Check if /health endpoint responds curl https://APP.REGION.azurecontainerapps.io/health - Network accessline 71
curl https://APP.REGION.azurecontainerapps.io/health - Network accessline 71
curl https://APP.REGION.azurecontainerapps.io/health
skills/azure-diagnostics/references/functions/durable.md
- Network accessline 99
> **Tip:** For the Azure Storage provider, a task hub uses multiple tables, queues, and > blobs. See the [storage > providers docs](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-storage-providers#azure-storage) - Network accessline 99
> **Tip:** For the Azure Storage provider, a task hub uses multiple tables, queues, and > blobs. See the [storage > providers docs](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-storage-providers#azure-storage) - Network accessline 100
> blobs. See the [storage > providers docs](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-storage-providers#azure-storage) > for the full schema before assuming an artifact is missing. - Network accessline 100
> blobs. See the [storage > providers docs](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-storage-providers#azure-storage) > for the full schema before assuming an artifact is missing. - Network accessline 101
> providers docs](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-storage-providers#azure-storage) - Network accessline 101
> providers docs](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-storage-providers#azure-storage)
skills/azure-diagnostics/references/kql-queries.md
- Network accessline 64
- [KQL Quick Reference](https://learn.microsoft.com/azure/data-explorer/kql-quick-reference) - Network accessline 64
- [KQL Quick Reference](https://learn.microsoft.com/azure/data-explorer/kql-quick-reference) - Network accessline 65
- [Application Insights Queries](https://learn.microsoft.com/azure/azure-monitor/logs/queries) - Network accessline 65
- [Application Insights Queries](https://learn.microsoft.com/azure/azure-monitor/logs/queries)
skills/azure-diagnostics/scripts/aks-baseline.ps1
skills/azure-diagnostics/scripts/aks-baseline.sh
skills/azure-diagnostics/scripts/appservice-diagnostics.ps1
skills/azure-diagnostics/scripts/appservice-diagnostics.sh
skills/azure-diagnostics/scripts/containerapp-diagnostics.ps1
skills/azure-diagnostics/scripts/containerapp-diagnostics.sh
skills/azure-diagnostics/scripts/pod-evidence.ps1
skills/azure-diagnostics/scripts/pod-evidence.sh
skills/azure-diagnostics/scripts/run-ig.ps1
skills/azure-diagnostics/scripts/run-ig.sh
skills/azure-diagnostics/scripts/test-messaging-connectivity.ps1
- Executable scriptline 1
Executable file - Executable scriptline 1
Executable file - Network accessline 89
function Get-HttpsResult { try { $resp = Invoke-WebRequest -Uri "https://$fqdn/" -Method Get -TimeoutSec 15 ` - Network accessline 89
function Get-HttpsResult { try { $resp = Invoke-WebRequest -Uri "https://$fqdn/" -Method Get -TimeoutSec 15 ` - Network accessline 90
try { $resp = Invoke-WebRequest -Uri "https://$fqdn/" -Method Get -TimeoutSec 15 ` -UseBasicParsing -ErrorAction Stop - Network accessline 90
try { $resp = Invoke-WebRequest -Uri "https://$fqdn/" -Method Get -TimeoutSec 15 ` -UseBasicParsing -ErrorAction Stop - Network accessline 91
$resp = Invoke-WebRequest -Uri "https://$fqdn/" -Method Get -TimeoutSec 15 ` - Network accessline 91
$resp = Invoke-WebRequest -Uri "https://$fqdn/" -Method Get -TimeoutSec 15 `
skills/azure-diagnostics/scripts/test-messaging-connectivity.sh
- Executable scriptline 1
#!/usr/bin/env bash - Executable scriptline 1
#!/usr/bin/env bash - Network accessline 99
probe_tcp() { local host="$1" port="$2" if command -v nc >/dev/null 2>&1; then - Network accessline 99
probe_tcp() { local host="$1" port="$2" if command -v nc >/dev/null 2>&1; then - Network accessline 100
local host="$1" port="$2" if command -v nc >/dev/null 2>&1; then if nc -z -w 5 "$host" "$port" >/dev/null 2>&1; then - Network accessline 100
local host="$1" port="$2" if command -v nc >/dev/null 2>&1; then if nc -z -w 5 "$host" "$port" >/dev/null 2>&1; then - Network accessline 101
if command -v nc >/dev/null 2>&1; then - Network accessline 101
if command -v nc >/dev/null 2>&1; then - Network accessline 102
if nc -z -w 5 "$host" "$port" >/dev/null 2>&1; then - Network accessline 102
if nc -z -w 5 "$host" "$port" >/dev/null 2>&1; then - Dangerous shell operationline 108
( exec 3<>"/dev/tcp/$host/$port" ) >/dev/null 2>&1 & - Dangerous shell operationline 108
( exec 3<>"/dev/tcp/$host/$port" ) >/dev/null 2>&1 & - Network accessline 108
( exec 3<>"/dev/tcp/$host/$port" ) >/dev/null 2>&1 & - Network accessline 108
( exec 3<>"/dev/tcp/$host/$port" ) >/dev/null 2>&1 & - Network accessline 132
# ── HTTPS reachability ──────────────────────────────────────────────────────── # On success the namespace returns an Atom feed or HTTP 401 — either proves the # endpoint is reachable. A connection failure (curl exit != 0) means blocked. - Network accessline 132
# ── HTTPS reachability ──────────────────────────────────────────────────────── # On success the namespace returns an Atom feed or HTTP 401 — either proves the # endpoint is reachable. A connection failure (curl exit != 0) means blocked. - Network accessline 134
# endpoint is reachable. A connection failure (curl exit != 0) means blocked. - Network accessline 134
# endpoint is reachable. A connection failure (curl exit != 0) means blocked. - Network accessline 135
https_result() { if ! command -v curl >/dev/null 2>&1; then - Network accessline 135
https_result() { if ! command -v curl >/dev/null 2>&1; then - Network accessline 136
if ! command -v curl >/dev/null 2>&1; then - Network accessline 136
if ! command -v curl >/dev/null 2>&1; then - Network accessline 138
if probe_tcp "$FQDN" 443; then echo "reachable (TCP 443 open; curl unavailable for HTTP check)" - Network accessline 138
if probe_tcp "$FQDN" 443; then echo "reachable (TCP 443 open; curl unavailable for HTTP check)" - Network accessline 139
echo "reachable (TCP 443 open; curl unavailable for HTTP check)" - Network accessline 139
echo "reachable (TCP 443 open; curl unavailable for HTTP check)" - Network accessline 144
fi local code code=$(curl -s -o /dev/null -m 15 -w '%{http_code}' "https://$FQDN/" 2>/dev/null) - Network accessline 144
fi local code code=$(curl -s -o /dev/null -m 15 -w '%{http_code}' "https://$FQDN/" 2>/dev/null) - Network accessline 145
local code code=$(curl -s -o /dev/null -m 15 -w '%{http_code}' "https://$FQDN/" 2>/dev/null) local rc=$? - Network accessline 145
local code code=$(curl -s -o /dev/null -m 15 -w '%{http_code}' "https://$FQDN/" 2>/dev/null) local rc=$? - Network accessline 146
code=$(curl -s -o /dev/null -m 15 -w '%{http_code}' "https://$FQDN/" 2>/dev/null) - Network accessline 146
code=$(curl -s -o /dev/null -m 15 -w '%{http_code}' "https://$FQDN/" 2>/dev/null) - Network accessline 149
echo "reachable (HTTP $code)" else echo "BLOCKED (curl exit $rc)" - Network accessline 149
echo "reachable (HTTP $code)" else echo "BLOCKED (curl exit $rc)" - Network accessline 150
else echo "BLOCKED (curl exit $rc)" fi - Network accessline 150
else echo "BLOCKED (curl exit $rc)" fi - Network accessline 151
echo "BLOCKED (curl exit $rc)" - Network accessline 151
echo "BLOCKED (curl exit $rc)"
skills/azure-diagnostics/troubleshooting/aks/networking.md
- Network accessline 3
For CNI-specific issues, check CNI pod health and review [AKS networking concepts](https://learn.microsoft.com/azure/aks/concepts-network). - Network accessline 3
For CNI-specific issues, check CNI pod health and review [AKS networking concepts](https://learn.microsoft.com/azure/aks/concepts-network). - Network accessline 15
# This creates a temporary pod. Prefer read-only checks first. # Only use it after the user explicitly approves a mutating test. kubectl run netdebug --image=curlimages/curl -it --rm -n <ns> -- \ - Network accessline 15
# This creates a temporary pod. Prefer read-only checks first. # Only use it after the user explicitly approves a mutating test. kubectl run netdebug --image=curlimages/curl -it --rm -n <ns> -- \ - Network accessline 16
# Only use it after the user explicitly approves a mutating test. kubectl run netdebug --image=curlimages/curl -it --rm -n <ns> -- \ curl -sv http://<service>.<ns>.svc.cluster.local:<port>/healthz - Network accessline 16
# Only use it after the user explicitly approves a mutating test. kubectl run netdebug --image=curlimages/curl -it --rm -n <ns> -- \ curl -sv http://<service>.<ns>.svc.cluster.local:<port>/healthz - Network accessline 17
kubectl run netdebug --image=curlimages/curl -it --rm -n <ns> -- \ - Network accessline 17
kubectl run netdebug --image=curlimages/curl -it --rm -n <ns> -- \ - Network accessline 18
curl -sv http://<service>.<ns>.svc.cluster.local:<port>/healthz - Network accessline 18
curl -sv http://<service>.<ns>.svc.cluster.local:<port>/healthz
skills/azure-diagnostics/troubleshooting/aks/node-issues.md
- Network accessline 97
See [AKS resource reservations](https://learn.microsoft.com/azure/aks/concepts-clusters-workloads#resource-reservations) for allocatable math. - Network accessline 97
See [AKS resource reservations](https://learn.microsoft.com/azure/aks/concepts-clusters-workloads#resource-reservations) for allocatable math.
skills/azure-diagnostics/troubleshooting/aks/references/aks-mcp.md
- Network accessline 29
Health. Use the separate Azure MCP area that advertises the needed operation, or use the portable command flows. Never route Kubernetes commands through the AKS area. See [Azure Kubernetes Service tools for the Azure MCP Server](https://lea - Network accessline 29
Health. Use the separate Azure MCP area that advertises the needed operation, or use the portable command flows. Never route Kubernetes commands through the AKS area. See [Azure Kubernetes Service tools for the Azure MCP Server](https://lea - Network accessline 31
AKS area. See [Azure Kubernetes Service tools for the Azure MCP Server](https://learn.microsoft.com/azure/developer/azure-mcp-server/tools/azure-kubernetes). - Network accessline 31
AKS area. See [Azure Kubernetes Service tools for the Azure MCP Server](https://learn.microsoft.com/azure/developer/azure-mcp-server/tools/azure-kubernetes).
skills/azure-diagnostics/troubleshooting/aks/spot-and-zone-issues.md
- Network accessline 64
Use `Premium_ZRS` or `StandardSSD_ZRS` in custom StorageClasses to reduce zonal PVC conflicts. See [AKS storage best practices](https://learn.microsoft.com/azure/aks/operator-best-practices-storage). - Network accessline 64
Use `Premium_ZRS` or `StandardSSD_ZRS` in custom StorageClasses to reduce zonal PVC conflicts. See [AKS storage best practices](https://learn.microsoft.com/azure/aks/operator-best-practices-storage).
skills/azure-diagnostics/troubleshooting/compute/references/cannot-connect-to-vm.md
- Network accessline 48
[Windows RDP]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-connection - Network accessline 48
[Windows RDP]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-connection - Network accessline 49
[Linux SSH]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/troubleshoot-ssh-connection - Network accessline 49
[Linux SSH]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/troubleshoot-ssh-connection - Network accessline 50
[Windows VM hub]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/welcome-virtual-machines-windows - Network accessline 50
[Windows VM hub]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/welcome-virtual-machines-windows - Network accessline 51
[Linux VM hub]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/welcome-virtual-machines-linux - Network accessline 51
[Linux VM hub]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/welcome-virtual-machines-linux
skills/azure-diagnostics/troubleshooting/compute/references/credential-auth-errors.md
- Dangerous shell operationline 16
| sudo prompt fails | Linux | Fix sudoers via Run Command or Serial Console | [SSH overview] | - Dangerous shell operationline 16
| sudo prompt fails | Linux | Fix sudoers via Run Command or Serial Console | [SSH overview] | - Network accessline 33
[Reset RDP]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/reset-rdp - Network accessline 33
[Reset RDP]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/reset-rdp - Network accessline 34
[RDP overview]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-connection - Network accessline 34
[RDP overview]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-connection - Network accessline 35
[RDP errors]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-specific-rdp-errors - Network accessline 35
[RDP errors]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-specific-rdp-errors - Network accessline 36
[CredSSP]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/credssp-encryption-oracle-remediation - Network accessline 36
[CredSSP]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/credssp-encryption-oracle-remediation - Network accessline 37
[SSH detail]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/detailed-troubleshoot-ssh-connection - Network accessline 37
[SSH detail]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/detailed-troubleshoot-ssh-connection - Network accessline 38
[SSH overview]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/troubleshoot-ssh-connection - Network accessline 38
[SSH overview]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/troubleshoot-ssh-connection
skills/azure-diagnostics/troubleshooting/compute/references/firewall-blocking.md
- Network accessline 36
[Guest firewall]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/guest-os-firewall-blocking-inbound-traffic - Network accessline 36
[Guest firewall]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/guest-os-firewall-blocking-inbound-traffic - Network accessline 37
[Firewall rule]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/enable-disable-firewall-rule-guest-os - Network accessline 37
[Firewall rule]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/enable-disable-firewall-rule-guest-os - Network accessline 38
[Offline firewall]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/disable-guest-os-firewall-windows - Network accessline 38
[Offline firewall]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/disable-guest-os-firewall-windows - Network accessline 39
[SSH overview]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/troubleshoot-ssh-connection - Network accessline 39
[SSH overview]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/troubleshoot-ssh-connection - Network accessline 40
[Linux repair]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/repair-linux-vm-using-azure-virtual-machine-repair-commands - Network accessline 40
[Linux repair]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/repair-linux-vm-using-azure-virtual-machine-repair-commands
skills/azure-diagnostics/troubleshooting/compute/references/network-connectivity.md
- Network accessline 36
[RDP NSG]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-nsg-problem - Network accessline 36
[RDP NSG]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-nsg-problem - Network accessline 37
[Traffic filter]: https://learn.microsoft.com/en-us/azure/network-watcher/diagnose-vm-network-traffic-filtering-problem - Network accessline 37
[Traffic filter]: https://learn.microsoft.com/en-us/azure/network-watcher/diagnose-vm-network-traffic-filtering-problem - Network accessline 38
[Routing]: https://learn.microsoft.com/en-us/azure/network-watcher/diagnose-vm-network-routing-problem - Network accessline 38
[Routing]: https://learn.microsoft.com/en-us/azure/network-watcher/diagnose-vm-network-routing-problem - Network accessline 39
[Public IP]: https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/public-ip-addresses - Network accessline 39
[Public IP]: https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/public-ip-addresses - Network accessline 40
[RDP NIC]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-nic-disabled - Network accessline 40
[RDP NIC]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-nic-disabled - Network accessline 41
[Reset NIC]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/reset-network-interface - Network accessline 41
[Reset NIC]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/reset-network-interface - Network accessline 42
[DHCP]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-dhcp-disabled - Network accessline 42
[DHCP]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-dhcp-disabled - Network accessline 43
[SSH overview]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/troubleshoot-ssh-connection - Network accessline 43
[SSH overview]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/troubleshoot-ssh-connection
skills/azure-diagnostics/troubleshooting/compute/references/rdp-connectivity.md
- Network accessline 34
[RDP NSG]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-nsg-problem - Network accessline 34
[RDP NSG]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-nsg-problem - Network accessline 35
[Guest firewall]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/guest-os-firewall-blocking-inbound-traffic - Network accessline 35
[Guest firewall]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/guest-os-firewall-blocking-inbound-traffic - Network accessline 36
[RDP errors]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-specific-rdp-errors - Network accessline 36
[RDP errors]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-specific-rdp-errors - Network accessline 37
[Internal]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-internal-error - Network accessline 37
[Internal]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-internal-error - Network accessline 38
[General]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-general-error - Network accessline 38
[General]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-general-error - Network accessline 39
[Detailed]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/detailed-troubleshoot-rdp - Network accessline 39
[Detailed]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/detailed-troubleshoot-rdp - Network accessline 40
[RDP overview]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-connection - Network accessline 40
[RDP overview]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-connection - Network accessline 41
[Event IDs]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/event-id-troubleshoot-vm-rdp-connecton - Network accessline 41
[Event IDs]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/event-id-troubleshoot-vm-rdp-connecton - Network accessline 42
[RDP NIC]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-nic-disabled - Network accessline 42
[RDP NIC]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-nic-disabled
skills/azure-diagnostics/troubleshooting/compute/references/rdp-service-config.md
- Network accessline 7
| Symptom | Solution | Documentation - Network accessline 7
| Symptom | Solution | Documentation - Network accessline 8
| -------------------------------------- | ---------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------- - Network accessline 8
| -------------------------------------- | ---------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------- - Network accessline 9
| TermService not running | Start the service and set to Automatic | [Reset RDP service](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/reset-rdp) - Network accessline 9
| TermService not running | Start the service and set to Automatic | [Reset RDP service](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/reset-rdp) - Network accessline 10
| RDP port changed from 3389 | Reset port or update NSG to allow the custom port | [Detailed RDP troubleshooting](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/detailed-troubl - Network accessline 10
| RDP port changed from 3389 | Reset port or update NSG to allow the custom port | [Detailed RDP troubleshooting](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/detailed-troubl - Network accessline 11
| RDP disabled (fDenyTSConnections = 1) | Reset RDP config via CLI or Portal | [Reset RDP service](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/reset-rdp) - Network accessline 11
| RDP disabled (fDenyTSConnections = 1) | Reset RDP config via CLI or Portal | [Reset RDP service](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/reset-rdp) - Network accessline 12
| TLS/SSL certificate expired or corrupt | Delete cert and restart TermService to regenerate | [RDP internal error](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-internal - Network accessline 12
| TLS/SSL certificate expired or corrupt | Delete cert and restart TermService to regenerate | [RDP internal error](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-internal - Network accessline 13
| NLA/Security Layer mismatch | Temporarily disable NLA for recovery | [RDP general error](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-general-e - Network accessline 13
| NLA/Security Layer mismatch | Temporarily disable NLA for recovery | [RDP general error](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-general-e - Network accessline 14
| GPO overriding local RDP settings | Check `HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services` | [Detailed RDP troubleshooting](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/detailed-troubl - Network accessline 14
| GPO overriding local RDP settings | Check `HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services` | [Detailed RDP troubleshooting](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/detailed-troubl - Network accessline 15
| RDS licensing expired | Remove RDSH role or configure license server | [Specific RDP errors](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-specific-rd - Network accessline 15
| RDS licensing expired | Remove RDSH role or configure license server | [Specific RDP errors](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-specific-rd
skills/azure-diagnostics/troubleshooting/compute/references/ssh-connectivity.md
- Network accessline 40
[SSH overview]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/troubleshoot-ssh-connection - Network accessline 40
[SSH overview]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/troubleshoot-ssh-connection - Network accessline 41
[SSH detail]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/detailed-troubleshoot-ssh-connection - Network accessline 41
[SSH detail]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/detailed-troubleshoot-ssh-connection - Network accessline 42
[Debian]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/cannot-connect-debian-linux - Network accessline 42
[Debian]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/cannot-connect-debian-linux - Network accessline 43
[Ubuntu SSH]: https://documentation.ubuntu.com/release-notes/24.04/#openssh - Network accessline 43
[Ubuntu SSH]: https://documentation.ubuntu.com/release-notes/24.04/#openssh - Network accessline 44
[SELinux]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/linux-selinux-troubleshooting - Network accessline 44
[SELinux]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/linux-selinux-troubleshooting - Network accessline 45
[UEFI]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/azure-linux-vm-uefi-boot-failures - Network accessline 45
[UEFI]: https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/azure-linux-vm-uefi-boot-failures
skills/azure-diagnostics/troubleshooting/compute/references/vm-agent-not-responding.md
- Network accessline 9
| Symptom | OS | Solution | Documentation - Network accessline 9
| Symptom | OS | Solution | Documentation - Network accessline 10
| ---------------------------------------------------------------- | ------- | -------------------------------------------------------- | ------------------------------------------------------------------------------------------------------ - Network accessline 10
| ---------------------------------------------------------------- | ------- | -------------------------------------------------------- | ------------------------------------------------------------------------------------------------------ - Network accessline 11
| Run Command times out | Windows | VM agent may be down — use Serial Console instead | [Serial Console — Windows](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windo - Network accessline 11
| Run Command times out | Windows | VM agent may be down — use Serial Console instead | [Serial Console — Windows](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windo - Network accessline 12
| Run Command times out | Linux | VM agent may be down — use Serial Console instead | [Serial Console — Linux](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/s - Network accessline 12
| Run Command times out | Linux | VM agent may be down — use Serial Console instead | [Serial Console — Linux](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/s - Network accessline 13
| Password reset fails via Portal/CLI | Windows | VMAccess extension can't communicate — use offline reset | [Reset password without agent](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/w - Network accessline 13
| Password reset fails via Portal/CLI | Windows | VMAccess extension can't communicate — use offline reset | [Reset password without agent](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/w - Network accessline 14
| Password/key reset fails via Portal/CLI | Linux | VMAccess extension can't communicate — use Serial Console | [Serial Console — Linux](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/ - Network accessline 14
| Password/key reset fails via Portal/CLI | Linux | VMAccess extension can't communicate — use Serial Console | [Serial Console — Linux](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/ - Network accessline 15
| VM not booting (Boot Diagnostics shows BSOD/stuck) | Windows | OS-level issue — use repair VM for offline fix | [Repair Windows VM](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/repa - Network accessline 15
| VM not booting (Boot Diagnostics shows BSOD/stuck) | Windows | OS-level issue — use repair VM for offline fix | [Repair Windows VM](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/repa - Network accessline 16
| VM not booting (Boot Diagnostics shows kernel panic/stuck) | Linux | Use repair VM for offline Linux disk fix | [Repair Linux VM](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/repair-l - Network accessline 16
| VM not booting (Boot Diagnostics shows kernel panic/stuck) | Linux | Use repair VM for offline Linux disk fix | [Repair Linux VM](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/linux/repair-l - Network accessline 17
| VMAccess extension error on domain controller | Windows | VMAccess doesn't support DCs — use Serial Console | [Serial Console — Windows](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windo - Network accessline 17
| VMAccess extension error on domain controller | Windows | VMAccess doesn't support DCs — use Serial Console | [Serial Console — Windows](https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windo
skills/azure-diagnostics/troubleshooting/messaging/auth-best-practices.md
- Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme)
skills/azure-diagnostics/troubleshooting/messaging/azure-eventhubs-dotnet.md
- Network accessline 3
Package: `Azure.Messaging.EventHubs` | [README](https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/eventhub/Azure.Messaging.EventHubs/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/eventhub/A - Network accessline 3
Package: `Azure.Messaging.EventHubs` | [README](https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/eventhub/Azure.Messaging.EventHubs/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/eventhub/A - Network accessline 27
Configure via `EventHubsRetryOptions` when creating the client. See [Configuring retry thresholds sample](https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/eventhub/Azure.Messaging.EventHubs/samples). - Network accessline 27
Configure via `EventHubsRetryOptions` when creating the client. See [Configuring retry thresholds sample](https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/eventhub/Azure.Messaging.EventHubs/samples). - Network accessline 31
- **Socket exhaustion**: Treat clients as singletons. Share `EventHubConnection` across clients if needed. Always call `CloseAsync` or `DisposeAsync`. - **HTTP 412/409 from storage**: Normal during checkpoint store operations — not an error - Network accessline 31
- **Socket exhaustion**: Treat clients as singletons. Share `EventHubConnection` across clients if needed. Always call `CloseAsync` or `DisposeAsync`. - **HTTP 412/409 from storage**: Normal during checkpoint store operations — not an error - Network accessline 32
- **HTTP 412/409 from storage**: Normal during checkpoint store operations — not an error. - **Partitions closing frequently**: Expected when scaling. If persists >5 min without scaling, investigate. See [Troubleshooting Guide](https://gith - Network accessline 32
- **HTTP 412/409 from storage**: Normal during checkpoint store operations — not an error. - **Partitions closing frequently**: Expected when scaling. If persists >5 min without scaling, investigate. See [Troubleshooting Guide](https://gith - Network accessline 33
- **Partitions closing frequently**: Expected when scaling. If persists >5 min without scaling, investigate. See [Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/eventhub/Azure.Messaging.EventHubs/TROUBLESHOO - Network accessline 33
- **Partitions closing frequently**: Expected when scaling. If persists >5 min without scaling, investigate. See [Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/eventhub/Azure.Messaging.EventHubs/TROUBLESHOO
skills/azure-diagnostics/troubleshooting/messaging/azure-eventhubs-java.md
- Network accessline 3
Package: `azure-messaging-eventhubs` | [README](https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/eventhubs/azure-messaging-eventhubs/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/eventhu - Network accessline 3
Package: `azure-messaging-eventhubs` | [README](https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/eventhubs/azure-messaging-eventhubs/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/eventhu - Network accessline 5
> ⚠<U+FE0F> **Note:** The detailed Java troubleshooting guide has moved to [Microsoft Learn](https://learn.microsoft.com/azure/developer/java/sdk/troubleshooting-messaging-event-hubs-overview). - Network accessline 5
> ⚠<U+FE0F> **Note:** The detailed Java troubleshooting guide has moved to [Microsoft Learn](https://learn.microsoft.com/azure/developer/java/sdk/troubleshooting-messaging-event-hubs-overview). - Network accessline 29
See [Java SDK logging docs](https://learn.microsoft.com/azure/developer/java/sdk/troubleshooting-messaging-event-hubs-overview) for details. - Network accessline 29
See [Java SDK logging docs](https://learn.microsoft.com/azure/developer/java/sdk/troubleshooting-messaging-event-hubs-overview) for details.
skills/azure-diagnostics/troubleshooting/messaging/azure-eventhubs-js.md
- Network accessline 3
Package: `@azure/event-hubs` | [README](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/eventhub/event-hubs/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/eventhub/event-hubs/TROUBLESHOOTING - Network accessline 3
Package: `@azure/event-hubs` | [README](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/eventhub/event-hubs/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/eventhub/event-hubs/TROUBLESHOOTING
skills/azure-diagnostics/troubleshooting/messaging/azure-eventhubs-py.md
- Network accessline 3
Package: `azure-eventhub` | [README](https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/eventhub/azure-eventhub) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/eventhub/azure-eventhub/TRO - Network accessline 3
Package: `azure-eventhub` | [README](https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/eventhub/azure-eventhub) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/eventhub/azure-eventhub/TRO
skills/azure-diagnostics/troubleshooting/messaging/azure-servicebus-dotnet.md
- Network accessline 3
Package: `Azure.Messaging.ServiceBus` | [README](https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/servicebus/Azure.Messaging.ServiceBus/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/servic - Network accessline 3
Package: `Azure.Messaging.ServiceBus` | [README](https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/servicebus/Azure.Messaging.ServiceBus/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/servic - Network accessline 12
| `ServiceBusException` (QuotaExceeded) | Too many concurrent receives | Reduce receivers or use batch receives | | `ServiceBusException` (MessageSizeExceeded) | Message or batch too large | Reduce payload. Premium tier supports individual - Network accessline 12
| `ServiceBusException` (QuotaExceeded) | Too many concurrent receives | Reduce receivers or use batch receives | | `ServiceBusException` (MessageSizeExceeded) | Message or batch too large | Reduce payload. Premium tier supports individual - Network accessline 13
| `ServiceBusException` (MessageSizeExceeded) | Message or batch too large | Reduce payload. Premium tier supports individual messages up to 100MB. Batch limit is artificially computed on the client from the max message size sent by the ser - Network accessline 13
| `ServiceBusException` (MessageSizeExceeded) | Message or batch too large | Reduce payload. Premium tier supports individual messages up to 100MB. Batch limit is artificially computed on the client from the max message size sent by the ser - Network accessline 14
| `ServiceBusException` (ServiceBusy) | Request throttled | Auto-retried with 10s backoff. See [throttling docs](https://learn.microsoft.com/azure/service-bus-messaging/service-bus-throttling) | - Network accessline 14
| `ServiceBusException` (ServiceBusy) | Request throttled | Auto-retried with 10s backoff. See [throttling docs](https://learn.microsoft.com/azure/service-bus-messaging/service-bus-throttling) |
skills/azure-diagnostics/troubleshooting/messaging/azure-servicebus-java.md
- Network accessline 3
Package: `azure-messaging-servicebus` | [README](https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/servicebus/azure-messaging-servicebus/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/serv - Network accessline 3
Package: `azure-messaging-servicebus` | [README](https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/servicebus/azure-messaging-servicebus/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/serv - Network accessline 30
Even with prefetch disabled in the builder, `receiveMessages` API can re-enable prefetch implicitly. See [SyncReceiveAndPrefetch](https://github.com/Azure/azure-sdk-for-java/tree/main/sdk/servicebus/azure-messaging-servicebus/docs/SyncRecei - Network accessline 30
Even with prefetch disabled in the builder, `receiveMessages` API can re-enable prefetch implicitly. See [SyncReceiveAndPrefetch](https://github.com/Azure/azure-sdk-for-java/tree/main/sdk/servicebus/azure-messaging-servicebus/docs/SyncRecei - Network accessline 45
See [Java SDK logging docs](https://learn.microsoft.com/azure/developer/java/sdk/troubleshooting-messaging-service-bus-overview) for details. - Network accessline 45
See [Java SDK logging docs](https://learn.microsoft.com/azure/developer/java/sdk/troubleshooting-messaging-service-bus-overview) for details.
skills/azure-diagnostics/troubleshooting/messaging/azure-servicebus-js.md
- Network accessline 3
Package: `@azure/service-bus` | [README](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/servicebus/service-bus/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/servicebus/service-bus/TROUBLES - Network accessline 3
Package: `@azure/service-bus` | [README](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/servicebus/service-bus/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/servicebus/service-bus/TROUBLES
skills/azure-diagnostics/troubleshooting/messaging/azure-servicebus-py.md
- Network accessline 3
Package: `azure-servicebus` | [README](https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/servicebus/azure-servicebus/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/servicebus/azure-ser - Network accessline 3
Package: `azure-servicebus` | [README](https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/servicebus/azure-servicebus/) | [Full Troubleshooting Guide](https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/servicebus/azure-ser
skills/azure-diagnostics/troubleshooting/messaging/service-troubleshooting.md
- Network accessline 9
1. **Verify connection string** — Get from Azure portal. For **Event Hubs (Kafka endpoint)** clients, also check `producer.config` / `consumer.config`. 2. **Check service outage** — [Azure status page](https://azure.status.microsoft/status) - Network accessline 9
1. **Verify connection string** — Get from Azure portal. For **Event Hubs (Kafka endpoint)** clients, also check `producer.config` / `consumer.config`. 2. **Check service outage** — [Azure status page](https://azure.status.microsoft/status) - Network accessline 10
2. **Check service outage** — [Azure status page](https://azure.status.microsoft/status) - Network accessline 10
2. **Check service outage** — [Azure status page](https://azure.status.microsoft/status) - Network accessline 80
- [Event Hubs troubleshooting guide](https://learn.microsoft.com/azure/event-hubs/troubleshooting-guide) - Network accessline 80
- [Event Hubs troubleshooting guide](https://learn.microsoft.com/azure/event-hubs/troubleshooting-guide) - Network accessline 81
- [Service Bus troubleshooting guide](https://learn.microsoft.com/azure/service-bus-messaging/service-bus-troubleshooting-guide) - Network accessline 81
- [Service Bus troubleshooting guide](https://learn.microsoft.com/azure/service-bus-messaging/service-bus-troubleshooting-guide) - Network accessline 82
- [Event Hubs quotas and limits](https://learn.microsoft.com/azure/event-hubs/event-hubs-quotas) - Network accessline 82
- [Event Hubs quotas and limits](https://learn.microsoft.com/azure/event-hubs/event-hubs-quotas) - Network accessline 83
- [Service Bus quotas and limits](https://learn.microsoft.com/azure/service-bus-messaging/service-bus-quotas) - Network accessline 83
- [Service Bus quotas and limits](https://learn.microsoft.com/azure/service-bus-messaging/service-bus-quotas) - Network accessline 84
- [Event Hubs AMQP troubleshooting](https://learn.microsoft.com/azure/event-hubs/event-hubs-amqp-troubleshoot) - Network accessline 84
- [Event Hubs AMQP troubleshooting](https://learn.microsoft.com/azure/event-hubs/event-hubs-amqp-troubleshoot) - Network accessline 85
- [Service Bus AMQP troubleshooting](https://learn.microsoft.com/azure/service-bus-messaging/service-bus-amqp-troubleshoot) - Network accessline 85
- [Service Bus AMQP troubleshooting](https://learn.microsoft.com/azure/service-bus-messaging/service-bus-amqp-troubleshoot) - Network accessline 86
- [Event Hubs IP addresses and service tags](https://learn.microsoft.com/azure/event-hubs/troubleshooting-guide#what-ip-addresses-do-i-need-to-allow) - Network accessline 86
- [Event Hubs IP addresses and service tags](https://learn.microsoft.com/azure/event-hubs/troubleshooting-guide#what-ip-addresses-do-i-need-to-allow) - Network accessline 87
- [Service Bus IP addresses](https://learn.microsoft.com/azure/service-bus-messaging/service-bus-faq#what-ip-addresses-do-i-need-to-add-to-allowlist-) - Network accessline 87
- [Service Bus IP addresses](https://learn.microsoft.com/azure/service-bus-messaging/service-bus-faq#what-ip-addresses-do-i-need-to-add-to-allowlist-)
skills/azure-enterprise-infra-planner/references/constraints/networking-connectivity.md
- Network accessline 8
| **Developer SKU** | Does NOT require `AzureBastionSubnet` or public IP. Deploys as shared infrastructure. Only connects to VMs in the same VNet. | | **Public IP** | Requires Standard SKU public IP with Static allocation. | | **NSG** | NSG - Network accessline 8
| **Developer SKU** | Does NOT require `AzureBastionSubnet` or public IP. Deploys as shared infrastructure. Only connects to VMs in the same VNet. | | **Public IP** | Requires Standard SKU public IP with Static allocation. | | **NSG** | NSG - Network accessline 9
| **Public IP** | Requires Standard SKU public IP with Static allocation. | | **NSG** | NSG on `AzureBastionSubnet` requires mandatory inbound (HTTPS 443 from Internet, GatewayManager 443) and outbound rules (see [Bastion NSG docs](https:// - Network accessline 9
| **Public IP** | Requires Standard SKU public IP with Static allocation. | | **NSG** | NSG on `AzureBastionSubnet` requires mandatory inbound (HTTPS 443 from Internet, GatewayManager 443) and outbound rules (see [Bastion NSG docs](https:// - Network accessline 10
| **NSG** | NSG on `AzureBastionSubnet` requires mandatory inbound (HTTPS 443 from Internet, GatewayManager 443) and outbound rules (see [Bastion NSG docs](https://learn.microsoft.com/azure/bastion/bastion-nsg)). | - Network accessline 10
| **NSG** | NSG on `AzureBastionSubnet` requires mandatory inbound (HTTPS 443 from Internet, GatewayManager 443) and outbound rules (see [Bastion NSG docs](https://learn.microsoft.com/azure/bastion/bastion-nsg)). |
skills/azure-enterprise-infra-planner/references/constraints/networking-core.md
- Network accessline 32
|-------------|------------| | **GatewaySubnet** | NSGs are not supported on `GatewaySubnet`. Associating an NSG may cause VPN and ExpressRoute gateways to stop functioning. | | **AzureBastionSubnet** | NSG on Bastion subnet requires specif - Network accessline 32
|-------------|------------| | **GatewaySubnet** | NSGs are not supported on `GatewaySubnet`. Associating an NSG may cause VPN and ExpressRoute gateways to stop functioning. | | **AzureBastionSubnet** | NSG on Bastion subnet requires specif - Network accessline 33
| **GatewaySubnet** | NSGs are not supported on `GatewaySubnet`. Associating an NSG may cause VPN and ExpressRoute gateways to stop functioning. | | **AzureBastionSubnet** | NSG on Bastion subnet requires specific inbound/outbound rules (se - Network accessline 33
| **GatewaySubnet** | NSGs are not supported on `GatewaySubnet`. Associating an NSG may cause VPN and ExpressRoute gateways to stop functioning. | | **AzureBastionSubnet** | NSG on Bastion subnet requires specific inbound/outbound rules (se - Network accessline 34
| **AzureBastionSubnet** | NSG on Bastion subnet requires specific inbound/outbound rules (see [Azure Bastion NSG](https://learn.microsoft.com/azure/bastion/bastion-nsg)). | - Network accessline 34
| **AzureBastionSubnet** | NSG on Bastion subnet requires specific inbound/outbound rules (see [Azure Bastion NSG](https://learn.microsoft.com/azure/bastion/bastion-nsg)). |
skills/azure-enterprise-infra-planner/references/resources/ai-ml.md
- Network accessline 11
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Cognitive Services | [2025-06-01](https://learn.microsoft.com/azure/templates/micro - Network accessline 11
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Cognitive Services | [2025-06-01](https://learn.microsoft.com/azure/templates/micro - Network accessline 12
|----------|----------------|------------------|--------------|------------| | Cognitive Services | [2025-06-01](https://learn.microsoft.com/azure/templates/microsoft.cognitiveservices/accounts?pivots=deployment-language-bicep) | [Custom su - Network accessline 12
|----------|----------------|------------------|--------------|------------| | Cognitive Services | [2025-06-01](https://learn.microsoft.com/azure/templates/microsoft.cognitiveservices/accounts?pivots=deployment-language-bicep) | [Custom su - Network accessline 13
| Cognitive Services | [2025-06-01](https://learn.microsoft.com/azure/templates/microsoft.cognitiveservices/accounts?pivots=deployment-language-bicep) | [Custom subdomain names](https://learn.microsoft.com/azure/ai-services/cognitive-servic - Network accessline 13
| Cognitive Services | [2025-06-01](https://learn.microsoft.com/azure/templates/microsoft.cognitiveservices/accounts?pivots=deployment-language-bicep) | [Custom subdomain names](https://learn.microsoft.com/azure/ai-services/cognitive-servic - Network accessline 14
| ML Workspace | [2025-06-01](https://learn.microsoft.com/azure/templates/microsoft.machinelearningservices/workspaces?pivots=deployment-language-bicep) | [ML Services](https://learn.microsoft.com/azure/templates/microsoft.machinelearningse - Network accessline 14
| ML Workspace | [2025-06-01](https://learn.microsoft.com/azure/templates/microsoft.machinelearningservices/workspaces?pivots=deployment-language-bicep) | [ML Services](https://learn.microsoft.com/azure/templates/microsoft.machinelearningse - Network accessline 15
| AI Search | [2025-05-01](https://learn.microsoft.com/azure/templates/microsoft.search/searchservices?pivots=deployment-language-bicep) | [Service limits](https://learn.microsoft.com/azure/search/search-limits-quotas-capacity) | [Naming ru - Network accessline 15
| AI Search | [2025-05-01](https://learn.microsoft.com/azure/templates/microsoft.search/searchservices?pivots=deployment-language-bicep) | [Service limits](https://learn.microsoft.com/azure/search/search-limits-quotas-capacity) | [Naming ru
skills/azure-enterprise-infra-planner/references/resources/compute-apps.md
- Network accessline 15
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | App Service | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.we - Network accessline 15
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | App Service | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.we - Network accessline 16
|----------|----------------|------------------|--------------|------------| | App Service | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.web/sites?pivots=deployment-language-bicep) | [App Service overview](https://lea - Network accessline 16
|----------|----------------|------------------|--------------|------------| | App Service | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.web/sites?pivots=deployment-language-bicep) | [App Service overview](https://lea - Network accessline 17
| App Service | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.web/sites?pivots=deployment-language-bicep) | [App Service overview](https://learn.microsoft.com/azure/app-service/overview) | [Naming rules](https://learn.m - Network accessline 17
| App Service | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.web/sites?pivots=deployment-language-bicep) | [App Service overview](https://learn.microsoft.com/azure/app-service/overview) | [Naming rules](https://learn.m - Network accessline 18
| App Service Plan | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.web/serverfarms?pivots=deployment-language-bicep) | [Plan overview](https://learn.microsoft.com/azure/app-service/overview-hosting-plans) | [Naming rule - Network accessline 18
| App Service Plan | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.web/serverfarms?pivots=deployment-language-bicep) | [Plan overview](https://learn.microsoft.com/azure/app-service/overview-hosting-plans) | [Naming rule - Network accessline 19
| Container App | [2025-01-01](https://learn.microsoft.com/azure/templates/microsoft.app/containerapps?pivots=deployment-language-bicep) | [Container Apps overview](https://learn.microsoft.com/azure/container-apps/overview) | [Naming rules] - Network accessline 19
| Container App | [2025-01-01](https://learn.microsoft.com/azure/templates/microsoft.app/containerapps?pivots=deployment-language-bicep) | [Container Apps overview](https://learn.microsoft.com/azure/container-apps/overview) | [Naming rules] - Network accessline 20
| Container Apps Environment | [2025-01-01](https://learn.microsoft.com/azure/templates/microsoft.app/managedenvironments?pivots=deployment-language-bicep) | [Environments overview](https://learn.microsoft.com/azure/container-apps/environme - Network accessline 20
| Container Apps Environment | [2025-01-01](https://learn.microsoft.com/azure/templates/microsoft.app/managedenvironments?pivots=deployment-language-bicep) | [Environments overview](https://learn.microsoft.com/azure/container-apps/environme - Network accessline 21
| Container Registry | [2025-04-01](https://learn.microsoft.com/azure/templates/microsoft.containerregistry/registries?pivots=deployment-language-bicep) | [ACR overview](https://learn.microsoft.com/azure/container-registry/container-registr - Network accessline 21
| Container Registry | [2025-04-01](https://learn.microsoft.com/azure/templates/microsoft.containerregistry/registries?pivots=deployment-language-bicep) | [ACR overview](https://learn.microsoft.com/azure/container-registry/container-registr - Network accessline 22
| Function App | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.web/sites?pivots=deployment-language-bicep) | [Functions overview](https://learn.microsoft.com/azure/azure-functions/functions-overview) | [Naming rules](ht - Network accessline 22
| Function App | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.web/sites?pivots=deployment-language-bicep) | [Functions overview](https://learn.microsoft.com/azure/azure-functions/functions-overview) | [Naming rules](ht - Network accessline 23
| Static Web App | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.web/staticsites?pivots=deployment-language-bicep) | [Static Web Apps overview](https://learn.microsoft.com/azure/static-web-apps/overview) | [Naming rules - Network accessline 23
| Static Web App | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.web/staticsites?pivots=deployment-language-bicep) | [Static Web Apps overview](https://learn.microsoft.com/azure/static-web-apps/overview) | [Naming rules
skills/azure-enterprise-infra-planner/references/resources/compute-infra.md
- Network accessline 13
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | AKS Cluster | [2025-05-01](https://learn.microsoft.com/azure/templates/microsoft.co - Network accessline 13
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | AKS Cluster | [2025-05-01](https://learn.microsoft.com/azure/templates/microsoft.co - Network accessline 14
|----------|----------------|------------------|--------------|------------| | AKS Cluster | [2025-05-01](https://learn.microsoft.com/azure/templates/microsoft.containerservice/managedclusters?pivots=deployment-language-bicep) | [AKS overvi - Network accessline 14
|----------|----------------|------------------|--------------|------------| | AKS Cluster | [2025-05-01](https://learn.microsoft.com/azure/templates/microsoft.containerservice/managedclusters?pivots=deployment-language-bicep) | [AKS overvi - Network accessline 15
| AKS Cluster | [2025-05-01](https://learn.microsoft.com/azure/templates/microsoft.containerservice/managedclusters?pivots=deployment-language-bicep) | [AKS overview](https://learn.microsoft.com/azure/aks/intro-kubernetes) | [Naming rules]( - Network accessline 15
| AKS Cluster | [2025-05-01](https://learn.microsoft.com/azure/templates/microsoft.containerservice/managedclusters?pivots=deployment-language-bicep) | [AKS overview](https://learn.microsoft.com/azure/aks/intro-kubernetes) | [Naming rules]( - Network accessline 16
| Availability Set | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.compute/availabilitysets?pivots=deployment-language-bicep) | [Overview](https://learn.microsoft.com/azure/virtual-machines/availability-set-overview) | - Network accessline 16
| Availability Set | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.compute/availabilitysets?pivots=deployment-language-bicep) | [Overview](https://learn.microsoft.com/azure/virtual-machines/availability-set-overview) | - Network accessline 17
| Managed Disk | [2025-01-02](https://learn.microsoft.com/azure/templates/microsoft.compute/disks?pivots=deployment-language-bicep) | [Managed disks overview](https://learn.microsoft.com/azure/virtual-machines/managed-disks-overview) | [Nam - Network accessline 17
| Managed Disk | [2025-01-02](https://learn.microsoft.com/azure/templates/microsoft.compute/disks?pivots=deployment-language-bicep) | [Managed disks overview](https://learn.microsoft.com/azure/virtual-machines/managed-disks-overview) | [Nam - Network accessline 18
| Virtual Machine | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.compute/virtualmachines?pivots=deployment-language-bicep) | [VMs overview](https://learn.microsoft.com/azure/virtual-machines/overview) | [Naming rules]( - Network accessline 18
| Virtual Machine | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.compute/virtualmachines?pivots=deployment-language-bicep) | [VMs overview](https://learn.microsoft.com/azure/virtual-machines/overview) | [Naming rules]( - Network accessline 19
| VM Scale Set | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.compute/virtualmachinescalesets?pivots=deployment-language-bicep) | [VMSS overview](https://learn.microsoft.com/azure/virtual-machine-scale-sets/overview) | - Network accessline 19
| VM Scale Set | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.compute/virtualmachinescalesets?pivots=deployment-language-bicep) | [VMSS overview](https://learn.microsoft.com/azure/virtual-machine-scale-sets/overview) |
skills/azure-enterprise-infra-planner/references/resources/data-analytics.md
- Network accessline 13
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Cosmos DB | [2025-04-15](https://learn.microsoft.com/azure/templates/microsoft.docu - Network accessline 13
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Cosmos DB | [2025-04-15](https://learn.microsoft.com/azure/templates/microsoft.docu - Network accessline 14
|----------|----------------|------------------|--------------|------------| | Cosmos DB | [2025-04-15](https://learn.microsoft.com/azure/templates/microsoft.documentdb/databaseaccounts?pivots=deployment-language-bicep) | [Cosmos DB overvie - Network accessline 14
|----------|----------------|------------------|--------------|------------| | Cosmos DB | [2025-04-15](https://learn.microsoft.com/azure/templates/microsoft.documentdb/databaseaccounts?pivots=deployment-language-bicep) | [Cosmos DB overvie - Network accessline 15
| Cosmos DB | [2025-04-15](https://learn.microsoft.com/azure/templates/microsoft.documentdb/databaseaccounts?pivots=deployment-language-bicep) | [Cosmos DB overview](https://learn.microsoft.com/azure/cosmos-db/introduction) | [Naming rules] - Network accessline 15
| Cosmos DB | [2025-04-15](https://learn.microsoft.com/azure/templates/microsoft.documentdb/databaseaccounts?pivots=deployment-language-bicep) | [Cosmos DB overview](https://learn.microsoft.com/azure/cosmos-db/introduction) | [Naming rules] - Network accessline 16
| Data Factory | [2018-06-01](https://learn.microsoft.com/azure/templates/microsoft.datafactory/factories?pivots=deployment-language-bicep) | [ADF overview](https://learn.microsoft.com/azure/data-factory/introduction) | [Naming rules](https - Network accessline 16
| Data Factory | [2018-06-01](https://learn.microsoft.com/azure/templates/microsoft.datafactory/factories?pivots=deployment-language-bicep) | [ADF overview](https://learn.microsoft.com/azure/data-factory/introduction) | [Naming rules](https - Network accessline 17
| Redis Cache | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.cache/redis?pivots=deployment-language-bicep) | [Redis overview](https://learn.microsoft.com/azure/azure-cache-for-redis/cache-overview) | [Naming rules](htt - Network accessline 17
| Redis Cache | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.cache/redis?pivots=deployment-language-bicep) | [Redis overview](https://learn.microsoft.com/azure/azure-cache-for-redis/cache-overview) | [Naming rules](htt - Network accessline 18
| Storage Account | [2025-01-01](https://learn.microsoft.com/azure/templates/microsoft.storage/storageaccounts?pivots=deployment-language-bicep) | [Storage overview](https://learn.microsoft.com/azure/storage/common/storage-account-overview) - Network accessline 18
| Storage Account | [2025-01-01](https://learn.microsoft.com/azure/templates/microsoft.storage/storageaccounts?pivots=deployment-language-bicep) | [Storage overview](https://learn.microsoft.com/azure/storage/common/storage-account-overview) - Network accessline 19
| Synapse Workspace | [2021-06-01](https://learn.microsoft.com/azure/templates/microsoft.synapse/workspaces?pivots=deployment-language-bicep) | [Synapse overview](https://learn.microsoft.com/azure/synapse-analytics/overview-what-is) | [Nami - Network accessline 19
| Synapse Workspace | [2021-06-01](https://learn.microsoft.com/azure/templates/microsoft.synapse/workspaces?pivots=deployment-language-bicep) | [Synapse overview](https://learn.microsoft.com/azure/synapse-analytics/overview-what-is) | [Nami
skills/azure-enterprise-infra-planner/references/resources/data-relational.md
- Network accessline 12
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | SQL Server | [2023-08-01](https://learn.microsoft.com/azure/templates/microsoft.sql - Network accessline 12
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | SQL Server | [2023-08-01](https://learn.microsoft.com/azure/templates/microsoft.sql - Network accessline 13
|----------|----------------|------------------|--------------|------------| | SQL Server | [2023-08-01](https://learn.microsoft.com/azure/templates/microsoft.sql/servers?pivots=deployment-language-bicep) | [SQL Server overview](https://lea - Network accessline 13
|----------|----------------|------------------|--------------|------------| | SQL Server | [2023-08-01](https://learn.microsoft.com/azure/templates/microsoft.sql/servers?pivots=deployment-language-bicep) | [SQL Server overview](https://lea - Network accessline 14
| SQL Server | [2023-08-01](https://learn.microsoft.com/azure/templates/microsoft.sql/servers?pivots=deployment-language-bicep) | [SQL Server overview](https://learn.microsoft.com/azure/azure-sql/database/sql-database-paas-overview) | [Nami - Network accessline 14
| SQL Server | [2023-08-01](https://learn.microsoft.com/azure/templates/microsoft.sql/servers?pivots=deployment-language-bicep) | [SQL Server overview](https://learn.microsoft.com/azure/azure-sql/database/sql-database-paas-overview) | [Nami - Network accessline 15
| SQL Database | [2023-08-01](https://learn.microsoft.com/azure/templates/microsoft.sql/servers/databases?pivots=deployment-language-bicep) | [SQL Database overview](https://learn.microsoft.com/azure/azure-sql/database/sql-database-paas-ove - Network accessline 15
| SQL Database | [2023-08-01](https://learn.microsoft.com/azure/templates/microsoft.sql/servers/databases?pivots=deployment-language-bicep) | [SQL Database overview](https://learn.microsoft.com/azure/azure-sql/database/sql-database-paas-ove - Network accessline 16
| MySQL Flexible Server | [2023-12-30](https://learn.microsoft.com/azure/templates/microsoft.dbformysql/flexibleservers?pivots=deployment-language-bicep) | [MySQL overview](https://learn.microsoft.com/azure/mysql/flexible-server/overview) | - Network accessline 16
| MySQL Flexible Server | [2023-12-30](https://learn.microsoft.com/azure/templates/microsoft.dbformysql/flexibleservers?pivots=deployment-language-bicep) | [MySQL overview](https://learn.microsoft.com/azure/mysql/flexible-server/overview) | - Network accessline 17
| PostgreSQL Flexible Server | [2024-08-01](https://learn.microsoft.com/azure/templates/microsoft.dbforpostgresql/flexibleservers?pivots=deployment-language-bicep) | [PostgreSQL overview](https://learn.microsoft.com/azure/postgresql/flexibl - Network accessline 17
| PostgreSQL Flexible Server | [2024-08-01](https://learn.microsoft.com/azure/templates/microsoft.dbforpostgresql/flexibleservers?pivots=deployment-language-bicep) | [PostgreSQL overview](https://learn.microsoft.com/azure/postgresql/flexibl
skills/azure-enterprise-infra-planner/references/resources/messaging.md
- Network accessline 11
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Event Grid Topic | [2025-02-15](https://learn.microsoft.com/azure/templates/microso - Network accessline 11
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Event Grid Topic | [2025-02-15](https://learn.microsoft.com/azure/templates/microso - Network accessline 12
|----------|----------------|------------------|--------------|------------| | Event Grid Topic | [2025-02-15](https://learn.microsoft.com/azure/templates/microsoft.eventgrid/topics?pivots=deployment-language-bicep) | [Event Grid overview]( - Network accessline 12
|----------|----------------|------------------|--------------|------------| | Event Grid Topic | [2025-02-15](https://learn.microsoft.com/azure/templates/microsoft.eventgrid/topics?pivots=deployment-language-bicep) | [Event Grid overview]( - Network accessline 13
| Event Grid Topic | [2025-02-15](https://learn.microsoft.com/azure/templates/microsoft.eventgrid/topics?pivots=deployment-language-bicep) | [Event Grid overview](https://learn.microsoft.com/azure/event-grid/overview) | [Naming rules](https - Network accessline 13
| Event Grid Topic | [2025-02-15](https://learn.microsoft.com/azure/templates/microsoft.eventgrid/topics?pivots=deployment-language-bicep) | [Event Grid overview](https://learn.microsoft.com/azure/event-grid/overview) | [Naming rules](https - Network accessline 14
| Event Hub | [2024-01-01](https://learn.microsoft.com/azure/templates/microsoft.eventhub/namespaces?pivots=deployment-language-bicep) | [Event Hubs overview](https://learn.microsoft.com/azure/event-hubs/event-hubs-about) | [Naming rules](h - Network accessline 14
| Event Hub | [2024-01-01](https://learn.microsoft.com/azure/templates/microsoft.eventhub/namespaces?pivots=deployment-language-bicep) | [Event Hubs overview](https://learn.microsoft.com/azure/event-hubs/event-hubs-about) | [Naming rules](h - Network accessline 15
| Service Bus | [2024-01-01](https://learn.microsoft.com/azure/templates/microsoft.servicebus/namespaces?pivots=deployment-language-bicep) | [Service Bus overview](https://learn.microsoft.com/azure/service-bus-messaging/service-bus-messagin - Network accessline 15
| Service Bus | [2024-01-01](https://learn.microsoft.com/azure/templates/microsoft.servicebus/namespaces?pivots=deployment-language-bicep) | [Service Bus overview](https://learn.microsoft.com/azure/service-bus-messaging/service-bus-messagin
skills/azure-enterprise-infra-planner/references/resources/monitoring.md
- Network accessline 10
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Application Insights | [2020-02-02](https://learn.microsoft.com/azure/templates/mic - Network accessline 10
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Application Insights | [2020-02-02](https://learn.microsoft.com/azure/templates/mic - Network accessline 11
|----------|----------------|------------------|--------------|------------| | Application Insights | [2020-02-02](https://learn.microsoft.com/azure/templates/microsoft.insights/components?pivots=deployment-language-bicep) | [App Insights o - Network accessline 11
|----------|----------------|------------------|--------------|------------| | Application Insights | [2020-02-02](https://learn.microsoft.com/azure/templates/microsoft.insights/components?pivots=deployment-language-bicep) | [App Insights o - Network accessline 12
| Application Insights | [2020-02-02](https://learn.microsoft.com/azure/templates/microsoft.insights/components?pivots=deployment-language-bicep) | [App Insights overview](https://learn.microsoft.com/azure/azure-monitor/app/app-insights-ove - Network accessline 12
| Application Insights | [2020-02-02](https://learn.microsoft.com/azure/templates/microsoft.insights/components?pivots=deployment-language-bicep) | [App Insights overview](https://learn.microsoft.com/azure/azure-monitor/app/app-insights-ove - Network accessline 13
| Log Analytics | [2025-02-01](https://learn.microsoft.com/azure/templates/microsoft.operationalinsights/workspaces?pivots=deployment-language-bicep) | [Log Analytics overview](https://learn.microsoft.com/azure/azure-monitor/logs/log-analyt - Network accessline 13
| Log Analytics | [2025-02-01](https://learn.microsoft.com/azure/templates/microsoft.operationalinsights/workspaces?pivots=deployment-language-bicep) | [Log Analytics overview](https://learn.microsoft.com/azure/azure-monitor/logs/log-analyt
skills/azure-enterprise-infra-planner/references/resources/networking-connectivity.md
- Network accessline 14
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Azure Bastion | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft. - Network accessline 14
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Azure Bastion | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft. - Network accessline 15
|----------|----------------|------------------|--------------|------------| | Azure Bastion | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/bastionhosts?pivots=deployment-language-bicep) | [Bastion overview](ht - Network accessline 15
|----------|----------------|------------------|--------------|------------| | Azure Bastion | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/bastionhosts?pivots=deployment-language-bicep) | [Bastion overview](ht - Network accessline 16
| Azure Bastion | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/bastionhosts?pivots=deployment-language-bicep) | [Bastion overview](https://learn.microsoft.com/azure/bastion/bastion-overview) | [Naming rules](ht - Network accessline 16
| Azure Bastion | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/bastionhosts?pivots=deployment-language-bicep) | [Bastion overview](https://learn.microsoft.com/azure/bastion/bastion-overview) | [Naming rules](ht - Network accessline 17
| Azure Firewall | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/azurefirewalls?pivots=deployment-language-bicep) | [Firewall overview](https://learn.microsoft.com/azure/firewall/overview) | [Naming rules](https - Network accessline 17
| Azure Firewall | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/azurefirewalls?pivots=deployment-language-bicep) | [Firewall overview](https://learn.microsoft.com/azure/firewall/overview) | [Naming rules](https - Network accessline 18
| DNS Zone | [2018-05-01](https://learn.microsoft.com/azure/templates/microsoft.network/dnszones?pivots=deployment-language-bicep) | [Azure DNS overview](https://learn.microsoft.com/azure/dns/dns-overview) | [Naming rules](https://learn.mic - Network accessline 18
| DNS Zone | [2018-05-01](https://learn.microsoft.com/azure/templates/microsoft.network/dnszones?pivots=deployment-language-bicep) | [Azure DNS overview](https://learn.microsoft.com/azure/dns/dns-overview) | [Naming rules](https://learn.mic - Network accessline 19
| VPN Gateway | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/virtualnetworkgateways?pivots=deployment-language-bicep) | [VPN Gateway overview](https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-about-vpn - Network accessline 19
| VPN Gateway | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/virtualnetworkgateways?pivots=deployment-language-bicep) | [VPN Gateway overview](https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-about-vpn - Network accessline 20
| Private DNS Zone | [2024-06-01](https://learn.microsoft.com/azure/templates/microsoft.network/privatednszones?pivots=deployment-language-bicep) | [Private DNS overview](https://learn.microsoft.com/azure/dns/private-dns-overview) | [Naming - Network accessline 20
| Private DNS Zone | [2024-06-01](https://learn.microsoft.com/azure/templates/microsoft.network/privatednszones?pivots=deployment-language-bicep) | [Private DNS overview](https://learn.microsoft.com/azure/dns/private-dns-overview) | [Naming - Network accessline 21
| Private Endpoint | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/privateendpoints?pivots=deployment-language-bicep) | [PE overview](https://learn.microsoft.com/azure/private-link/private-endpoint-overview) | [ - Network accessline 21
| Private Endpoint | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/privateendpoints?pivots=deployment-language-bicep) | [PE overview](https://learn.microsoft.com/azure/private-link/private-endpoint-overview) | [
skills/azure-enterprise-infra-planner/references/resources/networking-core.md
- Network accessline 15
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Virtual Network | [2024-07-01](https://learn.microsoft.com/azure/templates/microsof - Network accessline 15
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Virtual Network | [2024-07-01](https://learn.microsoft.com/azure/templates/microsof - Network accessline 16
|----------|----------------|------------------|--------------|------------| | Virtual Network | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/virtualnetworks?pivots=deployment-language-bicep) | [VNet overview]( - Network accessline 16
|----------|----------------|------------------|--------------|------------| | Virtual Network | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/virtualnetworks?pivots=deployment-language-bicep) | [VNet overview]( - Network accessline 17
| Virtual Network | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/virtualnetworks?pivots=deployment-language-bicep) | [VNet overview](https://learn.microsoft.com/azure/virtual-network/virtual-networks-overview) - Network accessline 17
| Virtual Network | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/virtualnetworks?pivots=deployment-language-bicep) | [VNet overview](https://learn.microsoft.com/azure/virtual-network/virtual-networks-overview) - Network accessline 18
| Subnet | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/virtualnetworks/subnets?pivots=deployment-language-bicep) | [Subnets](https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet) | [ - Network accessline 18
| Subnet | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/virtualnetworks/subnets?pivots=deployment-language-bicep) | [Subnets](https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet) | [ - Network accessline 19
| NSG | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/networksecuritygroups?pivots=deployment-language-bicep) | [NSG overview](https://learn.microsoft.com/azure/virtual-network/network-security-groups-overview) - Network accessline 19
| NSG | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/networksecuritygroups?pivots=deployment-language-bicep) | [NSG overview](https://learn.microsoft.com/azure/virtual-network/network-security-groups-overview) - Network accessline 20
| Route Table | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/routetables?pivots=deployment-language-bicep) | [Traffic routing](https://learn.microsoft.com/azure/virtual-network/virtual-networks-udr-overview) | - Network accessline 20
| Route Table | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/routetables?pivots=deployment-language-bicep) | [Traffic routing](https://learn.microsoft.com/azure/virtual-network/virtual-networks-udr-overview) | - Network accessline 21
| Network Interface | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/networkinterfaces?pivots=deployment-language-bicep) | [NIC overview](https://learn.microsoft.com/azure/virtual-network/virtual-network-network- - Network accessline 21
| Network Interface | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/networkinterfaces?pivots=deployment-language-bicep) | [NIC overview](https://learn.microsoft.com/azure/virtual-network/virtual-network-network- - Network accessline 22
| Public IP | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/publicipaddresses?pivots=deployment-language-bicep) | [Public IP overview](https://learn.microsoft.com/azure/virtual-network/ip-services/public-ip-addr - Network accessline 22
| Public IP | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/publicipaddresses?pivots=deployment-language-bicep) | [Public IP overview](https://learn.microsoft.com/azure/virtual-network/ip-services/public-ip-addr - Network accessline 23
| NAT Gateway | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/natgateways?pivots=deployment-language-bicep) | [NAT Gateway overview](https://learn.microsoft.com/azure/nat-gateway/nat-overview) | [Naming rules](h - Network accessline 23
| NAT Gateway | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/natgateways?pivots=deployment-language-bicep) | [NAT Gateway overview](https://learn.microsoft.com/azure/nat-gateway/nat-overview) | [Naming rules](h
skills/azure-enterprise-infra-planner/references/resources/networking-traffic.md
- Network accessline 12
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | API Management | [2024-05-01](https://learn.microsoft.com/azure/templates/microsoft - Network accessline 12
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | API Management | [2024-05-01](https://learn.microsoft.com/azure/templates/microsoft - Network accessline 13
|----------|----------------|------------------|--------------|------------| | API Management | [2024-05-01](https://learn.microsoft.com/azure/templates/microsoft.apimanagement/service?pivots=deployment-language-bicep) | [APIM overview](htt - Network accessline 13
|----------|----------------|------------------|--------------|------------| | API Management | [2024-05-01](https://learn.microsoft.com/azure/templates/microsoft.apimanagement/service?pivots=deployment-language-bicep) | [APIM overview](htt - Network accessline 14
| API Management | [2024-05-01](https://learn.microsoft.com/azure/templates/microsoft.apimanagement/service?pivots=deployment-language-bicep) | [APIM overview](https://learn.microsoft.com/azure/api-management/api-management-key-concepts) | - Network accessline 14
| API Management | [2024-05-01](https://learn.microsoft.com/azure/templates/microsoft.apimanagement/service?pivots=deployment-language-bicep) | [APIM overview](https://learn.microsoft.com/azure/api-management/api-management-key-concepts) | - Network accessline 15
| Application Gateway | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/applicationgateways?pivots=deployment-language-bicep) | [App Gateway overview](https://learn.microsoft.com/azure/application-gateway/overview - Network accessline 15
| Application Gateway | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/applicationgateways?pivots=deployment-language-bicep) | [App Gateway overview](https://learn.microsoft.com/azure/application-gateway/overview - Network accessline 16
| Front Door | [2025-06-01](https://learn.microsoft.com/azure/templates/microsoft.cdn/profiles?pivots=deployment-language-bicep) | [Front Door overview](https://learn.microsoft.com/azure/frontdoor/front-door-overview) | [Naming rules](https - Network accessline 16
| Front Door | [2025-06-01](https://learn.microsoft.com/azure/templates/microsoft.cdn/profiles?pivots=deployment-language-bicep) | [Front Door overview](https://learn.microsoft.com/azure/frontdoor/front-door-overview) | [Naming rules](https - Network accessline 17
| Load Balancer | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/loadbalancers?pivots=deployment-language-bicep) | [LB overview](https://learn.microsoft.com/azure/load-balancer/load-balancer-overview) | [Naming r - Network accessline 17
| Load Balancer | [2024-07-01](https://learn.microsoft.com/azure/templates/microsoft.network/loadbalancers?pivots=deployment-language-bicep) | [LB overview](https://learn.microsoft.com/azure/load-balancer/load-balancer-overview) | [Naming r
skills/azure-enterprise-infra-planner/references/resources/security.md
- Network accessline 10
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Key Vault | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.keyv - Network accessline 10
| Resource | Bicep Reference | Service Overview | Naming Rules | Additional | |----------|----------------|------------------|--------------|------------| | Key Vault | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.keyv - Network accessline 11
|----------|----------------|------------------|--------------|------------| | Key Vault | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.keyvault/vaults?pivots=deployment-language-bicep) | [Key Vault overview](https://l - Network accessline 11
|----------|----------------|------------------|--------------|------------| | Key Vault | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.keyvault/vaults?pivots=deployment-language-bicep) | [Key Vault overview](https://l - Network accessline 12
| Key Vault | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.keyvault/vaults?pivots=deployment-language-bicep) | [Key Vault overview](https://learn.microsoft.com/azure/key-vault/general/overview) | [Naming rules](https:/ - Network accessline 12
| Key Vault | [2024-11-01](https://learn.microsoft.com/azure/templates/microsoft.keyvault/vaults?pivots=deployment-language-bicep) | [Key Vault overview](https://learn.microsoft.com/azure/key-vault/general/overview) | [Naming rules](https:/ - Network accessline 13
| Managed Identity | [2024-11-30](https://learn.microsoft.com/azure/templates/microsoft.managedidentity/userassignedidentities?pivots=deployment-language-bicep) | [Managed identities](https://learn.microsoft.com/entra/identity/managed-ident - Network accessline 13
| Managed Identity | [2024-11-30](https://learn.microsoft.com/azure/templates/microsoft.managedidentity/userassignedidentities?pivots=deployment-language-bicep) | [Managed identities](https://learn.microsoft.com/entra/identity/managed-ident
skills/azure-kubernetes/SKILL.md
- Network accessline 72
- **Azure CNI Overlay** (recommended): pod IPs from private overlay range, not VNet-routable, scales to large environments and good for most workloads - **Azure CNI (VNet-routable)**: pod IPs directly from VNet (pod subnet or node subnet), - Network accessline 72
- **Azure CNI Overlay** (recommended): pod IPs from private overlay range, not VNet-routable, scales to large environments and good for most workloads - **Azure CNI (VNet-routable)**: pod IPs directly from VNet (pod subnet or node subnet), - Network accessline 74
- Docs: https://learn.microsoft.com/azure/aks/azure-cni-overlay - Network accessline 74
- Docs: https://learn.microsoft.com/azure/aks/azure-cni-overlay
skills/azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/aspnet-core.md
- Network accessline 180
- **Default port:** 8080 (since .NET 8; previously 80 in .NET 7 and earlier) - **Env var override:** `ASPNETCORE_URLS=http://+:8080` or `ASPNETCORE_HTTP_PORTS=8080` - Network accessline 180
- **Default port:** 8080 (since .NET 8; previously 80 in .NET 7 and earlier) - **Env var override:** `ASPNETCORE_URLS=http://+:8080` or `ASPNETCORE_HTTP_PORTS=8080` - Network accessline 181
- **Env var override:** `ASPNETCORE_URLS=http://+:8080` or `ASPNETCORE_HTTP_PORTS=8080` - Network accessline 181
- **Env var override:** `ASPNETCORE_URLS=http://+:8080` or `ASPNETCORE_HTTP_PORTS=8080` - Network accessline 182
- **Code override:** `builder.WebHost.UseUrls("http://+:8080")` in `Program.cs` - Network accessline 182
- **Code override:** `builder.WebHost.UseUrls("http://+:8080")` in `Program.cs`
skills/azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/django.md
- Access to secretsline 158
[Credential-related source omitted] - Access to secretsline 158
[Credential-related source omitted] - Network accessline 162
Gunicorn logs the port on startup: `Listening at: http://0.0.0.0:8000` - Network accessline 162
Gunicorn logs the port on startup: `Listening at: http://0.0.0.0:8000`
skills/azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/fastapi.md
- Access to secretsline 155
[Credential-related source omitted] - Access to secretsline 155
[Credential-related source omitted] - Network accessline 157
Uvicorn logs the port on startup: `Uvicorn running on http://0.0.0.0:8000` - Network accessline 157
Uvicorn logs the port on startup: `Uvicorn running on http://0.0.0.0:8000`
skills/azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/flask.md
- Access to secretsline 82
[Credential-related source omitted] - Access to secretsline 82
[Credential-related source omitted] - Access to secretsline 168
[Credential-related source omitted] - Access to secretsline 168
[Credential-related source omitted] - Network accessline 172
Gunicorn logs the port on startup: `Listening at: http://0.0.0.0:8000` - Network accessline 172
Gunicorn logs the port on startup: `Listening at: http://0.0.0.0:8000`
skills/azure-kubernetes/azure-kubernetes-app-deploy/knowledge-packs/frameworks/go.md
- Network accessline 108
config.BeforeConnect = func(ctx context.Context, cfg *pgx.ConnConfig) error { token, err := cred.GetToken(ctx, policy.TokenRequestOptions{ Scopes: []string{"https://ossrdbms-aad.database.windows.net/.default"}, - Network accessline 108
config.BeforeConnect = func(ctx context.Context, cfg *pgx.ConnConfig) error { token, err := cred.GetToken(ctx, policy.TokenRequestOptions{ Scopes: []string{"https://ossrdbms-aad.database.windows.net/.default"}, - Network accessline 109
token, err := cred.GetToken(ctx, policy.TokenRequestOptions{ Scopes: []string{"https://ossrdbms-aad.database.windows.net/.default"}, }) - Network accessline 109
token, err := cred.GetToken(ctx, policy.TokenRequestOptions{ Scopes: []string{"https://ossrdbms-aad.database.windows.net/.default"}, }) - Network accessline 110
Scopes: []string{"https://ossrdbms-aad.database.windows.net/.default"}, - Network accessline 110
Scopes: []string{"https://ossrdbms-aad.database.windows.net/.default"}, - Network accessline 199
The `./cmd/server` path is conventional for Go projects using the [Standard Go Project Layout](https://github.com/golang-standards/project-layout). Adjust to match the actual `main` package location. - Network accessline 199
The `./cmd/server` path is conventional for Go projects using the [Standard Go Project Layout](https://github.com/golang-standards/project-layout). Adjust to match the actual `main` package location.
skills/azure-kubernetes/azure-kubernetes-app-deploy/phases/quick-deploy.md
- Network accessline 165
If missing: `kubectl apply -f https://github.com/kubernetes-sigs/gateway-api/releases/latest/download/standard-install.yaml` - Network accessline 165
If missing: `kubectl apply -f https://github.com/kubernetes-sigs/gateway-api/releases/latest/download/standard-install.yaml` - Network accessline 202
Wait up to 3 minutes for external IP, then curl the health endpoint. - Network accessline 202
Wait up to 3 minutes for external IP, then curl the health endpoint.
skills/azure-kubernetes/azure-kubernetes-app-deploy/references/detection.md
- Network accessline 32
| Source code | `app.listen(<number>)`, `.listen(<number>)`, `server.port=<number>` | `app.listen(3000)` | | `application.properties` / `application.yml` (Java) | `server.port=<number>` | `server.port=8080` | | `appsettings.json` (.NET) | ` - Network accessline 32
| Source code | `app.listen(<number>)`, `.listen(<number>)`, `server.port=<number>` | `app.listen(3000)` | | `application.properties` / `application.yml` (Java) | `server.port=<number>` | `server.port=8080` | | `appsettings.json` (.NET) | ` - Network accessline 33
| `application.properties` / `application.yml` (Java) | `server.port=<number>` | `server.port=8080` | | `appsettings.json` (.NET) | `"Urls": "http://*:<number>"` | `"Urls": "http://*:8080"` | | Framework defaults | Use known defaults if not - Network accessline 33
| `application.properties` / `application.yml` (Java) | `server.port=<number>` | `server.port=8080` | | `appsettings.json` (.NET) | `"Urls": "http://*:<number>"` | `"Urls": "http://*:8080"` | | Framework defaults | Use known defaults if not - Network accessline 34
| `appsettings.json` (.NET) | `"Urls": "http://*:<number>"` | `"Urls": "http://*:8080"` | - Network accessline 34
| `appsettings.json` (.NET) | `"Urls": "http://*:<number>"` | `"Urls": "http://*:8080"` |
skills/azure-kubernetes/azure-kubernetes-app-deploy/references/workload-identity.md
- Network accessline 39
Federated Credential ├── Issuer: https://oidc.prod-aks.azure.com/<tenant-id>/<cluster-id> - Network accessline 39
Federated Credential ├── Issuer: https://oidc.prod-aks.azure.com/<tenant-id>/<cluster-id> - Network accessline 40
├── Issuer: https://oidc.prod-aks.azure.com/<tenant-id>/<cluster-id> - Network accessline 40
├── Issuer: https://oidc.prod-aks.azure.com/<tenant-id>/<cluster-id> - Network accessline 102
[Credential-related source omitted] - Network accessline 102
[Credential-related source omitted] - Network accessline 103
[Credential-related source omitted] - Network accessline 103
[Credential-related source omitted] - Network accessline 116
[Credential-related source omitted] - Network accessline 116
[Credential-related source omitted] - Network accessline 118
new TokenRequestContext(new[] { "https://ossrdbms-aad.database.windows.net/.default" })); - Network accessline 118
new TokenRequestContext(new[] { "https://ossrdbms-aad.database.windows.net/.default" })); - Network accessline 182
[Credential-related source omitted] - Network accessline 182
[Credential-related source omitted] - Network accessline 183
[Credential-related source omitted] - Network accessline 183
[Credential-related source omitted] - Access to secretsline 189
[Credential-related source omitted] - Access to secretsline 189
[Credential-related source omitted] - Network accessline 196
[Credential-related source omitted] - Network accessline 196
[Credential-related source omitted] - Network accessline 198
new TokenRequestContext(new[] { "https://redis.azure.com/.default" })); - Network accessline 198
new TokenRequestContext(new[] { "https://redis.azure.com/.default" }));
skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/dotnet.Dockerfile
- Network accessline 56
ENV ASPNETCORE_URLS="http://+:8080" \ - Network accessline 56
ENV ASPNETCORE_URLS="http://+:8080" \ - Network accessline 60
# No HEALTHCHECK: the aspnet runtime image does not include curl or wget. - Network accessline 60
# No HEALTHCHECK: the aspnet runtime image does not include curl or wget. - Network accessline 61
# Kubernetes liveness/readiness probes (configured in deployment.yaml) handle # health checking in AKS. For local Docker usage, install wget or add # app.MapHealthChecks("/healthz") and use a custom health check binary. - Network accessline 61
# Kubernetes liveness/readiness probes (configured in deployment.yaml) handle # health checking in AKS. For local Docker usage, install wget or add # app.MapHealthChecks("/healthz") and use a custom health check binary. - Network accessline 62
# health checking in AKS. For local Docker usage, install wget or add - Network accessline 62
# health checking in AKS. For local Docker usage, install wget or add
skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/dotnet.dockerignore
skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/go.dockerignore
skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/java.Dockerfile
skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/java.dockerignore
skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/node.dockerignore
skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/python.Dockerfile
- Network accessline 62
# HEALTHCHECK is omitted — Kubernetes liveness/readiness probes handle health # checks in AKS. Adding a Dockerfile HEALTHCHECK would require installing curl # in the runtime image, increasing size and attack surface. - Network accessline 62
# HEALTHCHECK is omitted — Kubernetes liveness/readiness probes handle health # checks in AKS. Adding a Dockerfile HEALTHCHECK would require installing curl # in the runtime image, increasing size and attack surface.
skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/python.dockerignore
skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/rust.Dockerfile
- Dangerous shell operationline 30
&& rm -rf /var/lib/apt/lists/* - Dangerous shell operationline 30
&& rm -rf /var/lib/apt/lists/* - Dangerous shell operationline 41
&& rm -rf src target/release/deps/app* target/release/app* - Dangerous shell operationline 41
&& rm -rf src target/release/deps/app* target/release/app*
skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/dockerfiles/rust.dockerignore
skills/azure-kubernetes/azure-kubernetes-app-deploy/templates/mermaid/summary-dashboard.md
- Network accessline 17
| Resource | Type | Name | Portal Link | |----------|------|------|-------------| | Resource Group | resourceGroups | {{RG_NAME}} | `https://portal.azure.com/...` | - Network accessline 17
| Resource | Type | Name | Portal Link | |----------|------|------|-------------| | Resource Group | resourceGroups | {{RG_NAME}} | `https://portal.azure.com/...` | - Network accessline 18
|----------|------|------|-------------| | Resource Group | resourceGroups | {{RG_NAME}} | `https://portal.azure.com/...` | | AKS Cluster | managedClusters | {{AKS_NAME}} | `https://portal.azure.com/...` | - Network accessline 18
|----------|------|------|-------------| | Resource Group | resourceGroups | {{RG_NAME}} | `https://portal.azure.com/...` | | AKS Cluster | managedClusters | {{AKS_NAME}} | `https://portal.azure.com/...` | - Network accessline 19
| Resource Group | resourceGroups | {{RG_NAME}} | `https://portal.azure.com/...` | - Network accessline 19
| Resource Group | resourceGroups | {{RG_NAME}} | `https://portal.azure.com/...` | - Network accessline 20
| AKS Cluster | managedClusters | {{AKS_NAME}} | `https://portal.azure.com/...` | - Network accessline 20
| AKS Cluster | managedClusters | {{AKS_NAME}} | `https://portal.azure.com/...` | - Network accessline 21
| Container Registry | registries | {{ACR_NAME}} | `https://portal.azure.com/...` | - Network accessline 21
| Container Registry | registries | {{ACR_NAME}} | `https://portal.azure.com/...` | - Network accessline 22
| {{BACKING_SERVICE}} | {{TYPE}} | {{NAME}} | `https://portal.azure.com/...` | - Network accessline 22
| {{BACKING_SERVICE}} | {{TYPE}} | {{NAME}} | `https://portal.azure.com/...` |
skills/azure-kubernetes/azure-kubernetes-automatic-readiness/SKILL.md
- Network accessline 18
You are an AKS Automatic compatibility assessment agent. Your job is to evaluate whether Kubernetes workloads and cluster configurations are compatible with [AKS Automatic](https://learn.microsoft.com/en-us/azure/aks/intro-aks-automatic), i - Network accessline 18
You are an AKS Automatic compatibility assessment agent. Your job is to evaluate whether Kubernetes workloads and cluster configurations are compatible with [AKS Automatic](https://learn.microsoft.com/en-us/azure/aks/intro-aks-automatic), i - Network accessline 79
1. Discover the host's approved AKS metadata capabilities; use their host-assigned names and schemas. Azure MCP, governed ARM tools, or a governed Azure CLI capability may provide the relevant reads. A missing literal name is not proof of a - Network accessline 79
1. Discover the host's approved AKS metadata capabilities; use their host-assigned names and schemas. Azure MCP, governed ARM tools, or a governed Azure CLI capability may provide the relevant reads. A missing literal name is not proof of a - Network accessline 80
2. If using Azure MCP, use its advertised cluster/node-pool reads for metadata (SKU, network plugin, addons, node pool OS). The documented surface has no readiness-assessment operation — do not expect one ([Azure MCP AKS tools](https://lear - Network accessline 80
2. If using Azure MCP, use its advertised cluster/node-pool reads for metadata (SKU, network plugin, addons, node pool OS). The documented surface has no readiness-assessment operation — do not expect one ([Azure MCP AKS tools](https://lear
skills/azure-kubernetes/azure-kubernetes-automatic-readiness/references/mcp-integration.md
- Network accessline 28
It does **not** document an AKS Automatic readiness-assessment operation, a workload assessment response schema, or an assessment polling action. Earlier versions of this skill described such an API; it does not exist. See [Azure Kubernetes - Network accessline 28
It does **not** document an AKS Automatic readiness-assessment operation, a workload assessment response schema, or an assessment polling action. Earlier versions of this skill described such an API; it does not exist. See [Azure Kubernetes - Network accessline 100
Azure SRE Agent's built-in Azure operations, diagnostics, monitoring, and `kubectl` tools use the agent's managed identity and require no connector. Prefer those built-in capabilities when they satisfy the read. See [Tools in Azure SRE Agen - Network accessline 100
Azure SRE Agent's built-in Azure operations, diagnostics, monitoring, and `kubectl` tools use the agent's managed identity and require no connector. Prefer those built-in capabilities when they satisfy the read. See [Tools in Azure SRE Agen - Network accessline 109
See the official [plugin marketplace guidance](https://learn.microsoft.com/azure/sre-agent/plugin-marketplace#what-the-plugin-marketplace-does) and [MCP connector tutorial](https://learn.microsoft.com/azure/sre-agent/mcp-connector). - Network accessline 109
See the official [plugin marketplace guidance](https://learn.microsoft.com/azure/sre-agent/plugin-marketplace#what-the-plugin-marketplace-does) and [MCP connector tutorial](https://learn.microsoft.com/azure/sre-agent/mcp-connector). - Network accessline 111
If a built-in Azure or Kubernetes read fails, check that the target resource group is in the agent's scope and that its user-assigned managed identity has the required RBAC. Do not tell an SRE Agent user to configure Azure MCP "in the edito - Network accessline 111
If a built-in Azure or Kubernetes read fails, check that the target resource group is in the agent's scope and that its user-assigned managed identity has the required RBAC. Do not tell an SRE Agent user to configure Azure MCP "in the edito - Network accessline 122
a prerequisite. Only if the host supports and authorizes connector setup, point to its configuration flow or the official [Azure MCP Server setup overview](https://learn.microsoft.com/azure/developer/azure-mcp-server/get-started). - Network accessline 122
a prerequisite. Only if the host supports and authorizes connector setup, point to its configuration flow or the official [Azure MCP Server setup overview](https://learn.microsoft.com/azure/developer/azure-mcp-server/get-started). - Network accessline 124
[Azure MCP Server setup overview](https://learn.microsoft.com/azure/developer/azure-mcp-server/get-started). - Network accessline 124
[Azure MCP Server setup overview](https://learn.microsoft.com/azure/developer/azure-mcp-server/get-started). - Network accessline 140
| No Azure MCP AKS capability appears in the host catalog | Host uses another approved surface or does not expose these reads | Use approved equivalent metadata capabilities or offline validation. Suggest connector setup only where the host - Network accessline 140
| No Azure MCP AKS capability appears in the host catalog | Host uses another approved surface or does not expose these reads | Use approved equivalent metadata capabilities or offline validation. Suggest connector setup only where the host - Network accessline 141
| Discovered AKS capability lacks a readiness-assessment operation | Expected for the currently documented Azure MCP AKS surface | Use advertised cluster/node-pool reads, collect sanitized manifests through Kubernetes-native tools, and eval - Network accessline 141
| Discovered AKS capability lacks a readiness-assessment operation | Expected for the currently documented Azure MCP AKS surface | Use advertised cluster/node-pool reads, collect sanitized manifests through Kubernetes-native tools, and eval - Network accessline 142
| Azure or Kubernetes read fails in Azure SRE Agent | Agent UAMI lacks target scope or RBAC | Check managed resource groups and role assignments in [SRE Agent permissions](https://learn.microsoft.com/azure/sre-agent/permissions) | - Network accessline 142
| Azure or Kubernetes read fails in Azure SRE Agent | Agent UAMI lacks target scope or RBAC | Check managed resource groups and role assignments in [SRE Agent permissions](https://learn.microsoft.com/azure/sre-agent/permissions) |
skills/azure-kubernetes/azure-kubernetes-automatic-readiness/references/migration-guide-summary.md
- Network accessline 17
Source: [AKS Automatic cluster SKU migration](https://learn.microsoft.com/azure/aks/automatic/aks-automatic-sku-migration). If that article changes, it wins over this summary. - Network accessline 17
Source: [AKS Automatic cluster SKU migration](https://learn.microsoft.com/azure/aks/automatic/aks-automatic-sku-migration). If that article changes, it wins over this summary.
skills/azure-kubernetes/references/azure-aks-autoscaler.md
- Network accessline 68
> adds provisioning latency; use a less aggressive profile for workloads with > frequent short scale-out and scale-in cycles. See > [AKS cluster autoscaler profile settings](https://learn.microsoft.com/azure/aks/cluster-autoscaler#cluster-a - Network accessline 68
> adds provisioning latency; use a less aggressive profile for workloads with > frequent short scale-out and scale-in cycles. See > [AKS cluster autoscaler profile settings](https://learn.microsoft.com/azure/aks/cluster-autoscaler#cluster-a - Network accessline 69
> frequent short scale-out and scale-in cycles. See > [AKS cluster autoscaler profile settings](https://learn.microsoft.com/azure/aks/cluster-autoscaler#cluster-autoscaler-profile-settings) > and [aggressive scale-down guidance](https://lea - Network accessline 69
> frequent short scale-out and scale-in cycles. See > [AKS cluster autoscaler profile settings](https://learn.microsoft.com/azure/aks/cluster-autoscaler#cluster-autoscaler-profile-settings) > and [aggressive scale-down guidance](https://lea - Network accessline 70
> [AKS cluster autoscaler profile settings](https://learn.microsoft.com/azure/aks/cluster-autoscaler#cluster-autoscaler-profile-settings) - Network accessline 70
> [AKS cluster autoscaler profile settings](https://learn.microsoft.com/azure/aks/cluster-autoscaler#cluster-autoscaler-profile-settings) - Network accessline 71
> and [aggressive scale-down guidance](https://learn.microsoft.com/azure/aks/cluster-autoscaler#configure-cluster-autoscaler-profile-for-aggressive-scale-down). - Network accessline 71
> and [aggressive scale-down guidance](https://learn.microsoft.com/azure/aks/cluster-autoscaler#configure-cluster-autoscaler-profile-for-aggressive-scale-down). - Network accessline 75
> `skip-nodes-with-system-pods=false` as a cost lever or assume every > Microsoft-managed system component can be protected by a customer-managed > PDB. See [AKS support policies](https://learn.microsoft.com/azure/aks/support-policies#manag - Network accessline 75
> `skip-nodes-with-system-pods=false` as a cost lever or assume every > Microsoft-managed system component can be protected by a customer-managed > PDB. See [AKS support policies](https://learn.microsoft.com/azure/aks/support-policies#manag - Network accessline 77
> PDB. See [AKS support policies](https://learn.microsoft.com/azure/aks/support-policies#managed-features-in-aks). - Network accessline 77
> PDB. See [AKS support policies](https://learn.microsoft.com/azure/aks/support-policies#managed-features-in-aks).
skills/azure-kubernetes/references/azure-aks-spot.md
- Network accessline 115
> API, such as drains, upgrades, and cluster-autoscaler scale-down. Azure can > reclaim or delete the underlying Spot VM involuntarily, reducing availability > below the budget. See [AKS PDB guidance](https://learn.microsoft.com/azure/aks/o - Network accessline 115
> API, such as drains, upgrades, and cluster-autoscaler scale-down. Azure can > reclaim or delete the underlying Spot VM involuntarily, reducing availability > below the budget. See [AKS PDB guidance](https://learn.microsoft.com/azure/aks/o - Network accessline 116
> reclaim or delete the underlying Spot VM involuntarily, reducing availability > below the budget. See [AKS PDB guidance](https://learn.microsoft.com/azure/aks/operator-best-practices-scheduler#limit-disruption-impact-by-using-pod-disrupti - Network accessline 116
> reclaim or delete the underlying Spot VM involuntarily, reducing availability > below the budget. See [AKS PDB guidance](https://learn.microsoft.com/azure/aks/operator-best-practices-scheduler#limit-disruption-impact-by-using-pod-disrupti - Network accessline 117
> below the budget. See [AKS PDB guidance](https://learn.microsoft.com/azure/aks/operator-best-practices-scheduler#limit-disruption-impact-by-using-pod-disruption-budgets-pdbs) - Network accessline 117
> below the budget. See [AKS PDB guidance](https://learn.microsoft.com/azure/aks/operator-best-practices-scheduler#limit-disruption-impact-by-using-pod-disruption-budgets-pdbs) - Network accessline 118
> and [Spot node pool limitations](https://learn.microsoft.com/azure/aks/spot-node-pool). - Network accessline 118
> and [Spot node pool limitations](https://learn.microsoft.com/azure/aks/spot-node-pool).
skills/azure-prepare/references/apim.md
- Access to secretsline 199
[Credential-related source omitted] - Access to secretsline 199
[Credential-related source omitted] - Network accessline 209
- [APIM v2 Overview](https://learn.microsoft.com/azure/api-management/v2-service-tiers-overview) - Network accessline 209
- [APIM v2 Overview](https://learn.microsoft.com/azure/api-management/v2-service-tiers-overview) - Network accessline 210
- [APIM Bicep Reference](https://learn.microsoft.com/azure/templates/microsoft.apimanagement/service) - Network accessline 210
- [APIM Bicep Reference](https://learn.microsoft.com/azure/templates/microsoft.apimanagement/service) - Network accessline 211
- [APIM Terraform](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/api_management) - Network accessline 211
- [APIM Terraform](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/api_management) - Network accessline 212
- [GenAI Gateway Capabilities](https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities) - Network accessline 212
- [GenAI Gateway Capabilities](https://learn.microsoft.com/azure/api-management/genai-gateway-capabilities)
skills/azure-prepare/references/architecture.md
- Network accessline 42
- Teams without Kubernetes expertise - Serverless GPU inference that does not require Kubernetes APIs, operators, or custom scheduling ([Microsoft Learn](https://learn.microsoft.com/azure/container-apps/gpu-serverless-overview)) - Network accessline 42
- Teams without Kubernetes expertise - Serverless GPU inference that does not require Kubernetes APIs, operators, or custom scheduling ([Microsoft Learn](https://learn.microsoft.com/azure/container-apps/gpu-serverless-overview)) - Network accessline 44
custom scheduling ([Microsoft Learn](https://learn.microsoft.com/azure/container-apps/gpu-serverless-overview)) - Network accessline 44
custom scheduling ([Microsoft Learn](https://learn.microsoft.com/azure/container-apps/gpu-serverless-overview))
skills/azure-prepare/references/aspire.md
- Network accessline 267
| Sample | Repository | Notes | |--------|------------|-------| | orleans-voting | [dotnet/aspire-samples](https://github.com/dotnet/aspire-samples/tree/main/samples/orleans-voting) | Orleans cluster with voting app | - Network accessline 267
| Sample | Repository | Notes | |--------|------------|-------| | orleans-voting | [dotnet/aspire-samples](https://github.com/dotnet/aspire-samples/tree/main/samples/orleans-voting) | Orleans cluster with voting app | - Network accessline 268
|--------|------------|-------| | orleans-voting | [dotnet/aspire-samples](https://github.com/dotnet/aspire-samples/tree/main/samples/orleans-voting) | Orleans cluster with voting app | | AspireYarp | [dotnet/aspire-samples](https://github. - Network accessline 268
|--------|------------|-------| | orleans-voting | [dotnet/aspire-samples](https://github.com/dotnet/aspire-samples/tree/main/samples/orleans-voting) | Orleans cluster with voting app | | AspireYarp | [dotnet/aspire-samples](https://github. - Network accessline 269
| orleans-voting | [dotnet/aspire-samples](https://github.com/dotnet/aspire-samples/tree/main/samples/orleans-voting) | Orleans cluster with voting app | - Network accessline 269
| orleans-voting | [dotnet/aspire-samples](https://github.com/dotnet/aspire-samples/tree/main/samples/orleans-voting) | Orleans cluster with voting app | - Network accessline 270
| AspireYarp | [dotnet/aspire-samples](https://github.com/dotnet/aspire-samples/tree/main/samples/AspireYarp) | YARP reverse proxy | - Network accessline 270
| AspireYarp | [dotnet/aspire-samples](https://github.com/dotnet/aspire-samples/tree/main/samples/AspireYarp) | YARP reverse proxy | - Network accessline 271
| AspireWithDapr | [dotnet/aspire-samples](https://github.com/dotnet/aspire-samples/tree/main/samples/AspireWithDapr) | Dapr integration | - Network accessline 271
| AspireWithDapr | [dotnet/aspire-samples](https://github.com/dotnet/aspire-samples/tree/main/samples/AspireWithDapr) | Dapr integration | - Network accessline 272
| eShop | [dotnet/eShop](https://github.com/dotnet/eShop) | Reference microservices app | - Network accessline 272
| eShop | [dotnet/eShop](https://github.com/dotnet/eShop) | Reference microservices app | - Network accessline 418
- [.NET Aspire Documentation](https://learn.microsoft.com/en-us/dotnet/aspire/) - Network accessline 418
- [.NET Aspire Documentation](https://learn.microsoft.com/en-us/dotnet/aspire/) - Network accessline 419
- [Azure Developer CLI (azd)](https://learn.microsoft.com/en-us/azure/developer/azure-developer-cli/) - Network accessline 419
- [Azure Developer CLI (azd)](https://learn.microsoft.com/en-us/azure/developer/azure-developer-cli/) - Network accessline 420
- [Aspire Samples Repository](https://github.com/dotnet/aspire-samples) - Network accessline 420
- [Aspire Samples Repository](https://github.com/dotnet/aspire-samples) - Network accessline 421
- [azd + Aspire Integration](https://learn.microsoft.com/en-us/dotnet/aspire/deployment/azure/aca-deployment-azd-in-depth) - Network accessline 421
- [azd + Aspire Integration](https://learn.microsoft.com/en-us/dotnet/aspire/deployment/azure/aca-deployment-azd-in-depth)
skills/azure-prepare/references/auth-best-practices.md
- Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme)
skills/azure-prepare/references/azure-context.md
- Network accessline 121
- Invoke **azure-resource-lookup** skill to count existing deployments of that resource type in the selected subscription and region - Use the count to calculate: `Total After Deployment = Current Count + Planned Deployment` - Referen - Network accessline 121
- Invoke **azure-resource-lookup** skill to count existing deployments of that resource type in the selected subscription and region - Use the count to calculate: `Total After Deployment = Current Count + Planned Deployment` - Referen - Network accessline 122
- Use the count to calculate: `Total After Deployment = Current Count + Planned Deployment` - Reference [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-ser - Network accessline 122
- Use the count to calculate: `Total After Deployment = Current Count + Planned Deployment` - Reference [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-ser - Network accessline 123
- Reference [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) for the limit value - Network accessline 123
- Reference [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) for the limit value
skills/azure-prepare/references/functional-verification.md
- Network accessline 42
│ ├── User says yes │ │ ├── App can run locally? → Run locally, verify backend + UI │ │ ├── API-only / no UI? → Test endpoints with curl or similar - Network accessline 42
│ ├── User says yes │ │ ├── App can run locally? → Run locally, verify backend + UI │ │ ├── API-only / no UI? → Test endpoints with curl or similar - Network accessline 43
│ │ ├── App can run locally? → Run locally, verify backend + UI │ │ ├── API-only / no UI? → Test endpoints with curl or similar │ │ └── Static site? → Open in browser, verify rendering - Network accessline 43
│ │ ├── App can run locally? → Run locally, verify backend + UI │ │ ├── API-only / no UI? → Test endpoints with curl or similar │ │ └── Static site? → Open in browser, verify rendering - Network accessline 44
│ │ ├── API-only / no UI? → Test endpoints with curl or similar - Network accessline 44
│ │ ├── API-only / no UI? → Test endpoints with curl or similar
skills/azure-prepare/references/global-rules.md
- Dangerous shell operationline 13
| **Delete** | `az group delete`, `azd down`, `rm -rf`, delete resource | - Dangerous shell operationline 13
| **Delete** | `az group delete`, `azd down`, `rm -rf`, delete resource | - Dangerous shell operationline 33
- ⛔ Do NOT delete user project or workspace directories (e.g., `rm -rf <project-dir>`) even when adding features, converting, or migrating — use MODIFY mode to edit existing files instead. File deletions within a project (e.g., removing bui - Dangerous shell operationline 33
- ⛔ Do NOT delete user project or workspace directories (e.g., `rm -rf <project-dir>`) even when adding features, converting, or migrating — use MODIFY mode to edit existing files instead. File deletions within a project (e.g., removing bui
skills/azure-prepare/references/plan-template.md
- Network accessline 119
- **If quota CLI is NOT supported** (returns `BadRequest`): - Get current usage: `az graph query -q "resources | where type == '{resource-type}' and location == '{location}' | count"` (requires `az extension add --name resource-graph`) - Network accessline 119
- **If quota CLI is NOT supported** (returns `BadRequest`): - Get current usage: `az graph query -q "resources | where type == '{resource-type}' and location == '{location}' | count"` (requires `az extension add --name resource-graph`) - Network accessline 120
- Get current usage: `az graph query -q "resources | where type == '{resource-type}' and location == '{location}' | count"` (requires `az extension add --name resource-graph`) - Get limit: [Azure service limits documentation](https://l - Network accessline 120
- Get current usage: `az graph query -q "resources | where type == '{resource-type}' and location == '{location}' | count"` (requires `az extension add --name resource-graph`) - Get limit: [Azure service limits documentation](https://l - Network accessline 121
- Get limit: [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) - Network accessline 121
- Get limit: [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) - Network accessline 141
- **MUST use azure-quotas skill first** to check providers via quota CLI (`az quota` commands) - Microsoft.Compute, Microsoft.Network, Microsoft.App, etc. - Azure quota CLI is **ALWAYS preferred over REST API** for checking quotas - **ONLY - Network accessline 141
- **MUST use azure-quotas skill first** to check providers via quota CLI (`az quota` commands) - Microsoft.Compute, Microsoft.Network, Microsoft.App, etc. - Azure quota CLI is **ALWAYS preferred over REST API** for checking quotas - **ONLY - Network accessline 142
- Azure quota CLI is **ALWAYS preferred over REST API** for checking quotas - **ONLY for unsupported providers** (e.g., Microsoft.DocumentDB returns `BadRequest`), use fallback methods: [Azure service limits documentation](https://learn.mic - Network accessline 142
- Azure quota CLI is **ALWAYS preferred over REST API** for checking quotas - **ONLY for unsupported providers** (e.g., Microsoft.DocumentDB returns `BadRequest`), use fallback methods: [Azure service limits documentation](https://learn.mic - Network accessline 143
- **ONLY for unsupported providers** (e.g., Microsoft.DocumentDB returns `BadRequest`), use fallback methods: [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription- - Network accessline 143
- **ONLY for unsupported providers** (e.g., Microsoft.DocumentDB returns `BadRequest`), use fallback methods: [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-
skills/azure-prepare/references/recipes/azd/aspire.md
- Network accessline 68
.NET Aspire [external parameters](https://aspire.dev/fundamentals/external-parameters/) let apps request values from the deployment environment. Each `AddParameter()` call generates a Bicep parameter in the deployment manifest. However, azd - Network accessline 68
.NET Aspire [external parameters](https://aspire.dev/fundamentals/external-parameters/) let apps request values from the deployment environment. Each `AddParameter()` call generates a Bicep parameter in the deployment manifest. However, azd - Network accessline 106
If the value must remain an [external parameter](https://aspire.dev/fundamentals/external-parameters/) (e.g., it varies per environment), pre-set it in the azd environment config immediately after `azd init`: - Network accessline 106
If the value must remain an [external parameter](https://aspire.dev/fundamentals/external-parameters/) (e.g., it varies per environment), pre-set it in the azd environment config immediately after `azd init`: - Access to secretsline 117
[Credential-related source omitted] - Access to secretsline 117
[Credential-related source omitted] - Network accessline 145
**Cause:** The AppHost uses `AddParameter()` as a `WithBuildArg` argument. azd cannot resolve Aspire [external parameters](https://aspire.dev/fundamentals/external-parameters/) during Docker builds, regardless of azd version. - Network accessline 145
**Cause:** The AppHost uses `AddParameter()` as a `WithBuildArg` argument. azd cannot resolve Aspire [external parameters](https://aspire.dev/fundamentals/external-parameters/) during Docker builds, regardless of azd version. - Network accessline 224
- [.NET Aspire External Parameters](https://aspire.dev/fundamentals/external-parameters/) - Network accessline 224
- [.NET Aspire External Parameters](https://aspire.dev/fundamentals/external-parameters/) - Network accessline 225
- [.NET Aspire Docs](https://learn.microsoft.com/dotnet/aspire/) - Network accessline 225
- [.NET Aspire Docs](https://learn.microsoft.com/dotnet/aspire/) - Network accessline 226
- [azd + Aspire](https://learn.microsoft.com/dotnet/aspire/deployment/azure/aca-deployment-azd-in-depth) - Network accessline 226
- [azd + Aspire](https://learn.microsoft.com/dotnet/aspire/deployment/azure/aca-deployment-azd-in-depth) - Network accessline 227
- [Samples](https://github.com/dotnet/aspire-samples) - Network accessline 227
- [Samples](https://github.com/dotnet/aspire-samples)
skills/azure-prepare/references/recipes/azd/docker.md
skills/azure-prepare/references/recipes/azd/iac-rules.md
- Network accessline 50
{ "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", - Network accessline 50
{ "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", - Network accessline 51
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", - Network accessline 51
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", - Network accessline 64
> ⚠<U+FE0F> **Before generating any resource name in Bicep, check [Resource naming rules](https://learn.microsoft.com/azure/azure-resource-manager/management/resource-name-rules) for that resource type's valid characters, length limits, and unique - Network accessline 64
> ⚠<U+FE0F> **Before generating any resource name in Bicep, check [Resource naming rules](https://learn.microsoft.com/azure/azure-resource-manager/management/resource-name-rules) for that resource type's valid characters, length limits, and unique - Network accessline 70
- [Resource abbreviations](https://learn.microsoft.com/azure/cloud-adoption-framework/ready/azure-best-practices/resource-abbreviations) — recommended prefixes per resource type - Network accessline 70
- [Resource abbreviations](https://learn.microsoft.com/azure/cloud-adoption-framework/ready/azure-best-practices/resource-abbreviations) — recommended prefixes per resource type
skills/azure-prepare/references/recipes/azd/terraform.md
- Network accessline 478
- [Microsoft Docs: Use Terraform with azd](https://learn.microsoft.com/en-us/azure/developer/azure-developer-cli/use-terraform-for-azd) - Network accessline 478
- [Microsoft Docs: Use Terraform with azd](https://learn.microsoft.com/en-us/azure/developer/azure-developer-cli/use-terraform-for-azd) - Network accessline 479
- [azd-starter-terraform template](https://github.com/Azure-Samples/azd-starter-terraform) - Network accessline 479
- [azd-starter-terraform template](https://github.com/Azure-Samples/azd-starter-terraform) - Network accessline 480
- [Terraform Azure Provider](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs) - Network accessline 480
- [Terraform Azure Provider](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs) - Network accessline 481
- [Azure CAF Naming](https://registry.terraform.io/providers/aztfmod/azurecaf/latest/docs) - Network accessline 481
- [Azure CAF Naming](https://registry.terraform.io/providers/aztfmod/azurecaf/latest/docs)
skills/azure-prepare/references/recipes/bicep/patterns.md
- Network accessline 55
{ "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", - Network accessline 55
{ "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", - Network accessline 56
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#", - Network accessline 56
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#",
skills/azure-prepare/references/region-availability.md
- Network accessline 3
> **AUTHORITATIVE SOURCE** — Consult service-specific files BEFORE recommending any region. > > Official reference: https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table - Network accessline 3
> **AUTHORITATIVE SOURCE** — Consult service-specific files BEFORE recommending any region. > > Official reference: https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table - Network accessline 5
> Official reference: https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table - Network accessline 5
> Official reference: https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table
skills/azure-prepare/references/research.md
- Network accessline 7
1. **Identify Components** — List all Azure services from architecture plan 2. **Load Service References** — For each service, load `services/<service>/README.md` first, then specific references as needed 3. **Check Resource Naming Rules** - Network accessline 7
1. **Identify Components** — List all Azure services from architecture plan 2. **Load Service References** — For each service, load `services/<service>/README.md` first, then specific references as needed 3. **Check Resource Naming Rules** - Network accessline 8
2. **Load Service References** — For each service, load `services/<service>/README.md` first, then specific references as needed 3. **Check Resource Naming Rules** — For each resource type, check [resource naming rules](https://learn.micros - Network accessline 8
2. **Load Service References** — For each service, load `services/<service>/README.md` first, then specific references as needed 3. **Check Resource Naming Rules** — For each resource type, check [resource naming rules](https://learn.micros - Network accessline 9
3. **Check Resource Naming Rules** — For each resource type, check [resource naming rules](https://learn.microsoft.com/azure/azure-resource-manager/management/resource-name-rules) for valid characters, length limits, and uniqueness scopes - Network accessline 9
3. **Check Resource Naming Rules** — For each resource type, check [resource naming rules](https://learn.microsoft.com/azure/azure-resource-manager/management/resource-name-rules) for valid characters, length limits, and uniqueness scopes
skills/azure-prepare/references/resources-limits-quotas.md
- Network accessline 59
2. Get limit from [service documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) - Network accessline 59
2. Get limit from [service documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) - Network accessline 96
| Service | Hard Limits (examples) | Quota Check | Notes | |---------|------------------------|-------------|-------| | **Cosmos DB** | Item: 2MB, Partition key: 2KB, Serverless storage: 50GB | ❌ Not supported. Use Resource Graph + [docs](h - Network accessline 96
| Service | Hard Limits (examples) | Quota Check | Notes | |---------|------------------------|-------------|-------| | **Cosmos DB** | Item: 2MB, Partition key: 2KB, Serverless storage: 50GB | ❌ Not supported. Use Resource Graph + [docs](h - Network accessline 97
|---------|------------------------|-------------|-------| | **Cosmos DB** | Item: 2MB, Partition key: 2KB, Serverless storage: 50GB | ❌ Not supported. Use Resource Graph + [docs](https://learn.microsoft.com/en-us/azure/cosmos-db/concepts-l - Network accessline 97
|---------|------------------------|-------------|-------| | **Cosmos DB** | Item: 2MB, Partition key: 2KB, Serverless storage: 50GB | ❌ Not supported. Use Resource Graph + [docs](https://learn.microsoft.com/en-us/azure/cosmos-db/concepts-l - Network accessline 98
| **Cosmos DB** | Item: 2MB, Partition key: 2KB, Serverless storage: 50GB | ❌ Not supported. Use Resource Graph + [docs](https://learn.microsoft.com/en-us/azure/cosmos-db/concepts-limits). Default: 50 accounts/region | Query: `az graph quer - Network accessline 98
| **Cosmos DB** | Item: 2MB, Partition key: 2KB, Serverless storage: 50GB | ❌ Not supported. Use Resource Graph + [docs](https://learn.microsoft.com/en-us/azure/cosmos-db/concepts-limits). Default: 50 accounts/region | Query: `az graph quer - Network accessline 158
|-------|------|--------| | "Quota exceeded" | Quota | Use azure-quotas to request increase | | "(BadRequest) Bad request" | Unsupported provider | Use [service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/man - Network accessline 158
|-------|------|--------| | "Quota exceeded" | Quota | Use azure-quotas to request increase | | "(BadRequest) Bad request" | Unsupported provider | Use [service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/man - Network accessline 159
| "Quota exceeded" | Quota | Use azure-quotas to request increase | | "(BadRequest) Bad request" | Unsupported provider | Use [service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription - Network accessline 159
| "Quota exceeded" | Quota | Use azure-quotas to request increase | | "(BadRequest) Bad request" | Unsupported provider | Use [service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription - Network accessline 160
| "(BadRequest) Bad request" | Unsupported provider | Use [service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) | - Network accessline 160
| "(BadRequest) Bad request" | Unsupported provider | Use [service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) | - Network accessline 210
- **azure-quotas skill** - Complete quota checking workflow and CLI commands (invoke the **azure-quotas** skill) - [Azure subscription limits](https://learn.microsoft.com/azure/azure-resource-manager/management/azure-subscription-service-li - Network accessline 210
- **azure-quotas skill** - Complete quota checking workflow and CLI commands (invoke the **azure-quotas** skill) - [Azure subscription limits](https://learn.microsoft.com/azure/azure-resource-manager/management/azure-subscription-service-li - Network accessline 211
- [Azure subscription limits](https://learn.microsoft.com/azure/azure-resource-manager/management/azure-subscription-service-limits) - Official Microsoft documentation - Network accessline 211
- [Azure subscription limits](https://learn.microsoft.com/azure/azure-resource-manager/management/azure-subscription-service-limits) - Official Microsoft documentation - Network accessline 212
- [Azure Quotas Overview](https://learn.microsoft.com/en-us/azure/quotas/quotas-overview) - Understanding quotas and limits - Network accessline 212
- [Azure Quotas Overview](https://learn.microsoft.com/en-us/azure/quotas/quotas-overview) - Understanding quotas and limits
skills/azure-prepare/references/runtimes/nodejs.md
- Access to secretsline 27
[Credential-related source omitted] - Access to secretsline 27
[Credential-related source omitted] - Access to secretsline 117
[Credential-related source omitted] - Access to secretsline 117
[Credential-related source omitted] - Network accessline 173
# Health check HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \ CMD wget --no-verbose --tries=1 --spider http://localhost:3000/health || exit 1 - Network accessline 173
# Health check HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \ CMD wget --no-verbose --tries=1 --spider http://localhost:3000/health || exit 1 - Network accessline 174
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 CMD wget --no-verbose --tries=1 --spider http://localhost:3000/health || exit 1 - Network accessline 174
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 CMD wget --no-verbose --tries=1 --spider http://localhost:3000/health || exit 1 - Network accessline 175
CMD wget --no-verbose --tries=1 --spider http://localhost:3000/health || exit 1 - Network accessline 175
CMD wget --no-verbose --tries=1 --spider http://localhost:3000/health || exit 1 - Network accessline 209
if (req.get('x-forwarded-proto') !== 'https' && process.env.NODE_ENV === 'production') { if (!TRUSTED_HOST) return next(); return res.redirect(`https://${TRUSTED_HOST}${req.originalUrl}`); - Network accessline 209
if (req.get('x-forwarded-proto') !== 'https' && process.env.NODE_ENV === 'production') { if (!TRUSTED_HOST) return next(); return res.redirect(`https://${TRUSTED_HOST}${req.originalUrl}`); - Network accessline 210
if (!TRUSTED_HOST) return next(); return res.redirect(`https://${TRUSTED_HOST}${req.originalUrl}`); } - Network accessline 210
if (!TRUSTED_HOST) return next(); return res.redirect(`https://${TRUSTED_HOST}${req.originalUrl}`); } - Network accessline 211
return res.redirect(`https://${TRUSTED_HOST}${req.originalUrl}`); - Network accessline 211
return res.redirect(`https://${TRUSTED_HOST}${req.originalUrl}`); - Access to secretsline 241
[Credential-related source omitted] - Access to secretsline 241
[Credential-related source omitted]
skills/azure-prepare/references/sdk/azd-deployment.md
- Network accessline 7
## Install curl -fsSL https://aka.ms/install-azd.sh | bash - Network accessline 7
## Install curl -fsSL https://aka.ms/install-azd.sh | bash - Dangerous shell operationline 8
curl -fsSL https://aka.ms/install-azd.sh | bash - Dangerous shell operationline 8
curl -fsSL https://aka.ms/install-azd.sh | bash - Network accessline 8
curl -fsSL https://aka.ms/install-azd.sh | bash - Network accessline 8
curl -fsSL https://aka.ms/install-azd.sh | bash - Access to secretsline 19
[Credential-related source omitted] - Access to secretsline 19
[Credential-related source omitted]
skills/azure-prepare/references/security.md
- Network accessline 268
- [Key Vault documentation](https://learn.microsoft.com/azure/key-vault/general/overview) - Network accessline 268
- [Key Vault documentation](https://learn.microsoft.com/azure/key-vault/general/overview) - Network accessline 269
- [Managed identities documentation](https://learn.microsoft.com/azure/active-directory/managed-identities-azure-resources/overview) - Network accessline 269
- [Managed identities documentation](https://learn.microsoft.com/azure/active-directory/managed-identities-azure-resources/overview) - Network accessline 270
- [Azure RBAC documentation](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 270
- [Azure RBAC documentation](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 271
- [Microsoft Defender for Cloud](https://learn.microsoft.com/azure/defender-for-cloud/defender-for-cloud-introduction) - Network accessline 271
- [Microsoft Defender for Cloud](https://learn.microsoft.com/azure/defender-for-cloud/defender-for-cloud-introduction)
skills/azure-prepare/references/services/app-service/sku-selection.md
- Network accessline 33
> 💡 **Tip:** Figures are representative for **Windows OS** in **Central US**, **as of 2026-04**. Prices vary by region, OS, and offer. Use the [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) for exact figures. - Network accessline 33
> 💡 **Tip:** Figures are representative for **Windows OS** in **Central US**, **as of 2026-04**. Prices vary by region, OS, and offer. Use the [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) for exact figures. - Network accessline 37
Cost savings can be made on Premium V3, Premium V4 and Isolated V2 plans by committing to reserved instances for 1 or 3 year terms, details can found at [https://learn.microsoft.com/azure/cost-management-billing/reservations/prepay-app-serv - Network accessline 37
Cost savings can be made on Premium V3, Premium V4 and Isolated V2 plans by committing to reserved instances for 1 or 3 year terms, details can found at [https://learn.microsoft.com/azure/cost-management-billing/reservations/prepay-app-serv - Network accessline 39
Alternatively cost savings can be made using [Azure Savings plans](https://learn.microsoft.com/en-us/azure/cost-management-billing/savings-plan/). - Network accessline 39
Alternatively cost savings can be made using [Azure Savings plans](https://learn.microsoft.com/en-us/azure/cost-management-billing/savings-plan/).
skills/azure-prepare/references/services/app-service/templates/recipes/auth/README.md
- Network accessline 37
enabled: true registration: { openIdIssuer: 'https://login.microsoftonline.com/${tenant().tenantId}/v2.0' - Network accessline 37
enabled: true registration: { openIdIssuer: 'https://login.microsoftonline.com/${tenant().tenantId}/v2.0' - Network accessline 38
registration: { openIdIssuer: 'https://login.microsoftonline.com/${tenant().tenantId}/v2.0' clientId: appRegistration.properties.appId - Network accessline 38
registration: { openIdIssuer: 'https://login.microsoftonline.com/${tenant().tenantId}/v2.0' clientId: appRegistration.properties.appId - Network accessline 39
openIdIssuer: 'https://login.microsoftonline.com/${tenant().tenantId}/v2.0' - Network accessline 39
openIdIssuer: 'https://login.microsoftonline.com/${tenant().tenantId}/v2.0' - Network accessline 67
web: { redirectUris: [ 'https://${webApp.properties.defaultHostName}/.auth/login/aad/callback' - Network accessline 67
web: { redirectUris: [ 'https://${webApp.properties.defaultHostName}/.auth/login/aad/callback' - Network accessline 68
redirectUris: [ 'https://${webApp.properties.defaultHostName}/.auth/login/aad/callback' ] - Network accessline 68
redirectUris: [ 'https://${webApp.properties.defaultHostName}/.auth/login/aad/callback' ] - Network accessline 69
'https://${webApp.properties.defaultHostName}/.auth/login/aad/callback' - Network accessline 69
'https://${webApp.properties.defaultHostName}/.auth/login/aad/callback' - Network accessline 94
- [Easy Auth overview](https://learn.microsoft.com/en-us/azure/app-service/overview-authentication-authorization) - Network accessline 94
- [Easy Auth overview](https://learn.microsoft.com/en-us/azure/app-service/overview-authentication-authorization) - Network accessline 95
- [Microsoft Identity Web](https://learn.microsoft.com/en-us/entra/msal/dotnet/microsoft-identity-web/) - Network accessline 95
- [Microsoft Identity Web](https://learn.microsoft.com/en-us/entra/msal/dotnet/microsoft-identity-web/) - Network accessline 96
- [Configure Entra ID auth](https://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-aad) - Network accessline 96
- [Configure Entra ID auth](https://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-aad)
skills/azure-prepare/references/services/app-service/templates/recipes/auth/source/dotnet.md
- Network accessline 37
{ "AzureAd": { "Instance": "https://login.microsoftonline.com/", - Network accessline 37
{ "AzureAd": { "Instance": "https://login.microsoftonline.com/", - Network accessline 38
"AzureAd": { "Instance": "https://login.microsoftonline.com/", "TenantId": "<tenant-id>", - Network accessline 38
"AzureAd": { "Instance": "https://login.microsoftonline.com/", "TenantId": "<tenant-id>", - Network accessline 39
"Instance": "https://login.microsoftonline.com/", - Network accessline 39
"Instance": "https://login.microsoftonline.com/",
skills/azure-prepare/references/services/app-service/templates/recipes/auth/source/nodejs.md
- Network accessline 19
const client = jwksClient({ jwksUri: `https://login.microsoftonline.com/${process.env.AZURE_TENANT_ID}/discovery/v2.0/keys`, - Network accessline 19
const client = jwksClient({ jwksUri: `https://login.microsoftonline.com/${process.env.AZURE_TENANT_ID}/discovery/v2.0/keys`, - Network accessline 20
jwksUri: `https://login.microsoftonline.com/${process.env.AZURE_TENANT_ID}/discovery/v2.0/keys`, - Network accessline 20
jwksUri: `https://login.microsoftonline.com/${process.env.AZURE_TENANT_ID}/discovery/v2.0/keys`, - Network accessline 46
algorithms: ["RS256"], audience: AUDIENCE, issuer: `https://login.microsoftonline.com/${process.env.AZURE_TENANT_ID}/v2.0`, - Network accessline 46
algorithms: ["RS256"], audience: AUDIENCE, issuer: `https://login.microsoftonline.com/${process.env.AZURE_TENANT_ID}/v2.0`, - Network accessline 47
audience: AUDIENCE, issuer: `https://login.microsoftonline.com/${process.env.AZURE_TENANT_ID}/v2.0`, }, - Network accessline 47
audience: AUDIENCE, issuer: `https://login.microsoftonline.com/${process.env.AZURE_TENANT_ID}/v2.0`, }, - Network accessline 48
issuer: `https://login.microsoftonline.com/${process.env.AZURE_TENANT_ID}/v2.0`, - Network accessline 48
issuer: `https://login.microsoftonline.com/${process.env.AZURE_TENANT_ID}/v2.0`,
skills/azure-prepare/references/services/app-service/templates/recipes/auth/source/python.md
- Access to secretsline 28
[Credential-related source omitted] - Access to secretsline 28
[Credential-related source omitted] - Access to secretsline 29
[Credential-related source omitted] - Access to secretsline 29
[Credential-related source omitted] - Network accessline 30
# Use APP_ID_URI if set (e.g., "api://<client-id>"); fall back to CLIENT_ID AUDIENCE = os.environ.get("AZURE_APP_ID_URI", CLIENT_ID) JWKS_URL = f"https://login.microsoftonline.com/{TENANT_ID}/discovery/v2.0/keys" - Network accessline 30
# Use APP_ID_URI if set (e.g., "api://<client-id>"); fall back to CLIENT_ID AUDIENCE = os.environ.get("AZURE_APP_ID_URI", CLIENT_ID) JWKS_URL = f"https://login.microsoftonline.com/{TENANT_ID}/discovery/v2.0/keys" - Access to secretsline 31
[Credential-related source omitted] - Access to secretsline 31
[Credential-related source omitted] - Network accessline 32
JWKS_URL = f"https://login.microsoftonline.com/{TENANT_ID}/discovery/v2.0/keys" - Network accessline 32
JWKS_URL = f"https://login.microsoftonline.com/{TENANT_ID}/discovery/v2.0/keys" - Network accessline 42
algorithms=["RS256"], audience=AUDIENCE, issuer=f"https://login.microsoftonline.com/{TENANT_ID}/v2.0", - Network accessline 42
algorithms=["RS256"], audience=AUDIENCE, issuer=f"https://login.microsoftonline.com/{TENANT_ID}/v2.0", - Network accessline 43
audience=AUDIENCE, issuer=f"https://login.microsoftonline.com/{TENANT_ID}/v2.0", ) - Network accessline 43
audience=AUDIENCE, issuer=f"https://login.microsoftonline.com/{TENANT_ID}/v2.0", ) - Network accessline 44
issuer=f"https://login.microsoftonline.com/{TENANT_ID}/v2.0", - Network accessline 44
issuer=f"https://login.microsoftonline.com/{TENANT_ID}/v2.0",
skills/azure-prepare/references/services/app-service/templates/recipes/cosmos/README.md
- Network accessline 33
| Setting | Value | Purpose | |---------|-------|---------| | `COSMOS_ENDPOINT` | `https://{account}.documents.azure.com:443/` | Cosmos account endpoint | - Network accessline 33
| Setting | Value | Purpose | |---------|-------|---------| | `COSMOS_ENDPOINT` | `https://{account}.documents.azure.com:443/` | Cosmos account endpoint | - Network accessline 34
|---------|-------|---------| | `COSMOS_ENDPOINT` | `https://{account}.documents.azure.com:443/` | Cosmos account endpoint | | `COSMOS_DATABASE_NAME` | `app-db` | Target database | - Network accessline 34
|---------|-------|---------| | `COSMOS_ENDPOINT` | `https://{account}.documents.azure.com:443/` | Cosmos account endpoint | | `COSMOS_DATABASE_NAME` | `app-db` | Target database | - Network accessline 35
| `COSMOS_ENDPOINT` | `https://{account}.documents.azure.com:443/` | Cosmos account endpoint | - Network accessline 35
| `COSMOS_ENDPOINT` | `https://{account}.documents.azure.com:443/` | Cosmos account endpoint | - Network accessline 87
- [Cosmos DB + App Service tutorial](https://learn.microsoft.com/en-us/azure/cosmos-db/nosql/tutorial-dotnet-web-app) - Network accessline 87
- [Cosmos DB + App Service tutorial](https://learn.microsoft.com/en-us/azure/cosmos-db/nosql/tutorial-dotnet-web-app) - Network accessline 88
- [Passwordless Cosmos DB connections](https://learn.microsoft.com/en-us/azure/cosmos-db/nosql/how-to-dotnet-get-started) - Network accessline 88
- [Passwordless Cosmos DB connections](https://learn.microsoft.com/en-us/azure/cosmos-db/nosql/how-to-dotnet-get-started) - Network accessline 89
- [Cosmos DB RBAC](https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac) - Network accessline 89
- [Cosmos DB RBAC](https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac)
skills/azure-prepare/references/services/app-service/templates/recipes/cosmos/source/python.md
- Access to secretsline 24
[Credential-related source omitted] - Access to secretsline 24
[Credential-related source omitted] - Access to secretsline 25
[Credential-related source omitted] - Access to secretsline 25
[Credential-related source omitted] - Access to secretsline 26
[Credential-related source omitted] - Access to secretsline 26
[Credential-related source omitted]
skills/azure-prepare/references/services/app-service/templates/recipes/redis/README.md
- Network accessline 84
- [Azure Cache for Redis overview](https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-overview) - Network accessline 84
- [Azure Cache for Redis overview](https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-overview) - Network accessline 85
- [Use Entra ID with Redis](https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-azure-active-directory-for-authentication) - Network accessline 85
- [Use Entra ID with Redis](https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-azure-active-directory-for-authentication) - Network accessline 86
- [Redis + App Service tutorial](https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-web-app-howto) - Network accessline 86
- [Redis + App Service tutorial](https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-web-app-howto)
skills/azure-prepare/references/services/app-service/templates/recipes/redis/source/nodejs.md
- Network accessline 19
const credential = new DefaultAzureCredential(); const TOKEN_SCOPE = "https://redis.azure.com/.default"; - Network accessline 19
const credential = new DefaultAzureCredential(); const TOKEN_SCOPE = "https://redis.azure.com/.default"; - Network accessline 20
const TOKEN_SCOPE = "https://redis.azure.com/.default"; - Network accessline 20
const TOKEN_SCOPE = "https://redis.azure.com/.default";
skills/azure-prepare/references/services/app-service/templates/recipes/redis/source/python.md
- Network accessline 25
# Redis ACL auth requires both username and token as password _REDIS_USERNAME = "default" _TOKEN_SCOPE = "https://redis.azure.com/.default" - Network accessline 25
# Redis ACL auth requires both username and token as password _REDIS_USERNAME = "default" _TOKEN_SCOPE = "https://redis.azure.com/.default" - Network accessline 26
_REDIS_USERNAME = "default" _TOKEN_SCOPE = "https://redis.azure.com/.default" _TOKEN_REFRESH_MARGIN = 300 # Refresh 5 minutes before expiry - Network accessline 26
_REDIS_USERNAME = "default" _TOKEN_SCOPE = "https://redis.azure.com/.default" _TOKEN_REFRESH_MARGIN = 300 # Refresh 5 minutes before expiry - Network accessline 27
_TOKEN_SCOPE = "https://redis.azure.com/.default" - Network accessline 27
_TOKEN_SCOPE = "https://redis.azure.com/.default" - Access to secretsline 49
[Credential-related source omitted] - Access to secretsline 49
[Credential-related source omitted] - Access to secretsline 50
[Credential-related source omitted] - Access to secretsline 50
[Credential-related source omitted]
skills/azure-prepare/references/services/app-service/templates/recipes/sql/README.md
- Network accessline 79
- [Azure SQL passwordless connections](https://learn.microsoft.com/en-us/azure/azure-sql/database/azure-sql-passwordless-migration) - Network accessline 79
- [Azure SQL passwordless connections](https://learn.microsoft.com/en-us/azure/azure-sql/database/azure-sql-passwordless-migration) - Network accessline 80
- [EF Core with Azure SQL](https://learn.microsoft.com/en-us/ef/core/providers/sql-server/) - Network accessline 80
- [EF Core with Azure SQL](https://learn.microsoft.com/en-us/ef/core/providers/sql-server/) - Network accessline 81
- [Tutorial: App Service with SQL](https://learn.microsoft.com/en-us/azure/app-service/tutorial-dotnetcore-sqldb-app) - Network accessline 81
- [Tutorial: App Service with SQL](https://learn.microsoft.com/en-us/azure/app-service/tutorial-dotnetcore-sqldb-app)
skills/azure-prepare/references/services/app-service/templates/recipes/sql/source/nodejs.md
skills/azure-prepare/references/services/app-service/templates/recipes/sql/source/python.md
- Access to secretsline 37
[Credential-related source omitted] - Access to secretsline 37
[Credential-related source omitted] - Access to secretsline 44
[Credential-related source omitted] - Access to secretsline 44
[Credential-related source omitted] - Access to secretsline 45
[Credential-related source omitted] - Access to secretsline 45
[Credential-related source omitted] - Access to secretsline 46
[Credential-related source omitted] - Access to secretsline 46
[Credential-related source omitted] - Network accessline 61
[Credential-related source omitted] - Network accessline 61
[Credential-related source omitted] - Network accessline 62
[Credential-related source omitted] - Network accessline 62
[Credential-related source omitted] - Network accessline 63
[Credential-related source omitted] - Network accessline 63
[Credential-related source omitted] - Access to secretsline 66
[Credential-related source omitted] - Access to secretsline 66
[Credential-related source omitted] - Access to secretsline 140
[Credential-related source omitted] - Access to secretsline 140
[Credential-related source omitted]
skills/azure-prepare/references/services/app-service/templates/selection.md
- Network accessline 7
Cross-reference with [App Service overview](https://learn.microsoft.com/en-us/azure/app-service/overview) and [official AZD gallery templates](https://azure.github.io/awesome-azd/?tags=appservice). - Network accessline 7
Cross-reference with [App Service overview](https://learn.microsoft.com/en-us/azure/app-service/overview) and [official AZD gallery templates](https://azure.github.io/awesome-azd/?tags=appservice).
skills/azure-prepare/references/services/app-service/templates/web-api.md
- Network accessline 15
**Browse all:** [Awesome AZD App Service](https://azure.github.io/awesome-azd/?tags=appservice) - Network accessline 15
**Browse all:** [Awesome AZD App Service](https://azure.github.io/awesome-azd/?tags=appservice) - Network accessline 179
- [App Service overview](https://learn.microsoft.com/en-us/azure/app-service/overview) - Network accessline 179
- [App Service overview](https://learn.microsoft.com/en-us/azure/app-service/overview) - Network accessline 180
- [App Service best practices](https://learn.microsoft.com/en-us/azure/app-service/app-service-best-practices) - Network accessline 180
- [App Service best practices](https://learn.microsoft.com/en-us/azure/app-service/app-service-best-practices) - Network accessline 181
- [Health check](https://learn.microsoft.com/en-us/azure/app-service/monitor-instances-health-check) - Network accessline 181
- [Health check](https://learn.microsoft.com/en-us/azure/app-service/monitor-instances-health-check)
skills/azure-prepare/references/services/app-service/templates/web-app.md
- Network accessline 14
**Browse all:** [Awesome AZD](https://azure.github.io/awesome-azd/?tags=appservice) - Network accessline 14
**Browse all:** [Awesome AZD](https://azure.github.io/awesome-azd/?tags=appservice) - Network accessline 106
ALLOWED_HOSTS = ['.azurewebsites.net', 'localhost'] STATIC_ROOT = BASE_DIR / 'staticfiles' CSRF_TRUSTED_ORIGINS = ['https://*.azurewebsites.net'] - Network accessline 106
ALLOWED_HOSTS = ['.azurewebsites.net', 'localhost'] STATIC_ROOT = BASE_DIR / 'staticfiles' CSRF_TRUSTED_ORIGINS = ['https://*.azurewebsites.net'] - Network accessline 108
CSRF_TRUSTED_ORIGINS = ['https://*.azurewebsites.net'] - Network accessline 108
CSRF_TRUSTED_ORIGINS = ['https://*.azurewebsites.net'] - Network accessline 179
- [Deploy to App Service](https://learn.microsoft.com/en-us/azure/app-service/quickstart-dotnetcore) - Network accessline 179
- [Deploy to App Service](https://learn.microsoft.com/en-us/azure/app-service/quickstart-dotnetcore) - Network accessline 180
- [Node.js on App Service](https://learn.microsoft.com/en-us/azure/app-service/quickstart-nodejs) - Network accessline 180
- [Node.js on App Service](https://learn.microsoft.com/en-us/azure/app-service/quickstart-nodejs) - Network accessline 181
- [Python on App Service](https://learn.microsoft.com/en-us/azure/app-service/quickstart-python) - Network accessline 181
- [Python on App Service](https://learn.microsoft.com/en-us/azure/app-service/quickstart-python)
skills/azure-prepare/references/services/container-apps/day2-operations.md
- Network accessline 113
[Credential-related source omitted] - Network accessline 113
[Credential-related source omitted] - Network accessline 114
[Credential-related source omitted] - Network accessline 114
[Credential-related source omitted] - Network accessline 115
[Credential-related source omitted] - Network accessline 115
[Credential-related source omitted]
skills/azure-prepare/references/services/container-apps/environment.md
- Network accessline 25
{ name: 'database-url' keyVaultUrl: 'https://myvault.vault.azure.net/secrets/database-url' - Network accessline 25
{ name: 'database-url' keyVaultUrl: 'https://myvault.vault.azure.net/secrets/database-url' - Network accessline 26
name: 'database-url' keyVaultUrl: 'https://myvault.vault.azure.net/secrets/database-url' identity: managedIdentity.id - Network accessline 26
name: 'database-url' keyVaultUrl: 'https://myvault.vault.azure.net/secrets/database-url' identity: managedIdentity.id - Network accessline 27
keyVaultUrl: 'https://myvault.vault.azure.net/secrets/database-url' - Network accessline 27
keyVaultUrl: 'https://myvault.vault.azure.net/secrets/database-url'
skills/azure-prepare/references/services/container-apps/terraform.md
- Network accessline 157
output "api_url" { value = "https://${azurerm_container_app.api.ingress[0].fqdn}" - Network accessline 157
output "api_url" { value = "https://${azurerm_container_app.api.ingress[0].fqdn}" - Network accessline 158
value = "https://${azurerm_container_app.api.ingress[0].fqdn}" - Network accessline 158
value = "https://${azurerm_container_app.api.ingress[0].fqdn}"
skills/azure-prepare/references/services/cosmos-db/sdk.md
skills/azure-prepare/references/services/durable-task-scheduler/README.md
- Network accessline 28
# Start the emulator (see https://mcr.microsoft.com/v2/dts/dts-emulator/tags/list for available versions) - Network accessline 28
# Start the emulator (see https://mcr.microsoft.com/v2/dts/dts-emulator/tags/list for available versions) - Network accessline 32
# Dashboard available at http://localhost:8082 - Network accessline 32
# Dashboard available at http://localhost:8082 - Network accessline 49
| Environment | Connection String | |-------------|-------------------| | Local Development (Emulator) | `Endpoint=http://localhost:8080;Authentication=None;TaskHub=default` | - Network accessline 49
| Environment | Connection String | |-------------|-------------------| | Local Development (Emulator) | `Endpoint=http://localhost:8080;Authentication=None;TaskHub=default` | - Network accessline 50
|-------------|-------------------| | Local Development (Emulator) | `Endpoint=http://localhost:8080;Authentication=None;TaskHub=default` | | Azure (System-Assigned MI) | `Endpoint=https://<scheduler>.durabletask.io;Authentication=ManagedId - Network accessline 50
|-------------|-------------------| | Local Development (Emulator) | `Endpoint=http://localhost:8080;Authentication=None;TaskHub=default` | | Azure (System-Assigned MI) | `Endpoint=https://<scheduler>.durabletask.io;Authentication=ManagedId - Network accessline 51
| Local Development (Emulator) | `Endpoint=http://localhost:8080;Authentication=None;TaskHub=default` | - Network accessline 51
| Local Development (Emulator) | `Endpoint=http://localhost:8080;Authentication=None;TaskHub=default` | - Network accessline 72
- [JavaScript](javascript.md) — packages, setup, examples, determinism, retry, SDK - [Bicep Patterns](bicep.md) — scheduler, task hub, RBAC, CLI provisioning - [Official Documentation](https://learn.microsoft.com/azure/azure-functions/durab - Network accessline 72
- [JavaScript](javascript.md) — packages, setup, examples, determinism, retry, SDK - [Bicep Patterns](bicep.md) — scheduler, task hub, RBAC, CLI provisioning - [Official Documentation](https://learn.microsoft.com/azure/azure-functions/durab - Network accessline 73
- [Bicep Patterns](bicep.md) — scheduler, task hub, RBAC, CLI provisioning - [Official Documentation](https://learn.microsoft.com/azure/azure-functions/durable/durable-task-scheduler/durable-task-scheduler) - [Durable Functions Overview](ht - Network accessline 73
- [Bicep Patterns](bicep.md) — scheduler, task hub, RBAC, CLI provisioning - [Official Documentation](https://learn.microsoft.com/azure/azure-functions/durable/durable-task-scheduler/durable-task-scheduler) - [Durable Functions Overview](ht - Network accessline 74
- [Official Documentation](https://learn.microsoft.com/azure/azure-functions/durable/durable-task-scheduler/durable-task-scheduler) - Network accessline 74
- [Official Documentation](https://learn.microsoft.com/azure/azure-functions/durable/durable-task-scheduler/durable-task-scheduler) - Network accessline 75
- [Durable Functions Overview](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-overview) - Network accessline 75
- [Durable Functions Overview](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-overview) - Network accessline 76
- [Sample Repository](https://github.com/Azure-Samples/Durable-Task-Scheduler) - Network accessline 76
- [Sample Repository](https://github.com/Azure-Samples/Durable-Task-Scheduler) - Network accessline 77
- [Choosing an Orchestration Framework](https://learn.microsoft.com/azure/azure-functions/durable/durable-task-scheduler/choose-orchestration-framework) - Network accessline 77
- [Choosing an Orchestration Framework](https://learn.microsoft.com/azure/azure-functions/durable/durable-task-scheduler/choose-orchestration-framework)
skills/azure-prepare/references/services/durable-task-scheduler/bicep.md
- Network accessline 65
To allow developers to view orchestration status and history in the [DTS dashboard](https://portal.azure.com), assign the same `Durable Task Data Contributor` role to the deploying user's identity. Without this, the dashboard returns **403 - Network accessline 65
To allow developers to view orchestration status and history in the [DTS dashboard](https://portal.azure.com), assign the same `Durable Task Data Contributor` role to the deploying user's identity. Without this, the dashboard returns **403 - Network accessline 82
> **💡 TIP**: This is the same role used for the Function App's managed identity, but assigned with `principalType: 'User'` to the developer. See the [sample repo](https://github.com/Azure-Samples/Durable-Task-Scheduler/blob/main/samples/inf - Network accessline 82
> **💡 TIP**: This is the same role used for the Function App's managed identity, but assigned with `principalType: 'User'` to the developer. See the [sample repo](https://github.com/Azure-Samples/Durable-Task-Scheduler/blob/main/samples/inf - Network accessline 100
> **⚠<U+FE0F> WARNING**: Always use `scheduler.properties.endpoint` to get the scheduler URL. Do **not** construct it manually — the endpoint includes a hash suffix and region (e.g., `https://myscheduler-abc123.westus2.durabletask.io`). - Network accessline 100
> **⚠<U+FE0F> WARNING**: Always use `scheduler.properties.endpoint` to get the scheduler URL. Do **not** construct it manually — the endpoint includes a hash suffix and region (e.g., `https://myscheduler-abc123.westus2.durabletask.io`).
skills/azure-prepare/references/services/durable-task-scheduler/dotnet.md
- Network accessline 5
- [Durable Task Scheduler documentation](https://learn.microsoft.com/azure/durable-task-scheduler/) - Network accessline 5
- [Durable Task Scheduler documentation](https://learn.microsoft.com/azure/durable-task-scheduler/) - Network accessline 6
- [Durable Functions .NET isolated worker guide](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-dotnet-isolated-overview) - Network accessline 6
- [Durable Functions .NET isolated worker guide](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-dotnet-isolated-overview) - Network accessline 20
> **💡 Finding latest versions**: Search [nuget.org](https://www.nuget.org/) for each package name to find the current stable version. Look for the `Microsoft.Azure.Functions.Worker.Extensions.DurableTask` and `Microsoft.Azure.Functions.Work - Network accessline 20
> **💡 Finding latest versions**: Search [nuget.org](https://www.nuget.org/) for each package name to find the current stable version. Look for the `Microsoft.Azure.Functions.Worker.Extensions.DurableTask` and `Microsoft.Azure.Functions.Work - Network accessline 47
"FUNCTIONS_WORKER_RUNTIME": "dotnet-isolated", "AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 47
"FUNCTIONS_WORKER_RUNTIME": "dotnet-isolated", "AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 48
"AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" } - Network accessline 48
"AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" } - Network accessline 49
"DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 49
"DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 179
var connectionString = "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None"; - Network accessline 179
var connectionString = "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None";
skills/azure-prepare/references/services/durable-task-scheduler/java.md
- Network accessline 5
- [Durable Task Scheduler documentation](https://learn.microsoft.com/azure/durable-task-scheduler/) - Network accessline 5
- [Durable Task Scheduler documentation](https://learn.microsoft.com/azure/durable-task-scheduler/) - Network accessline 6
- [Durable Functions Java guide](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-overview?tabs=java) - Network accessline 6
- [Durable Functions Java guide](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-overview?tabs=java) - Network accessline 27
> **💡 Finding latest versions**: Search [Maven Central](https://central.sonatype.com/) for `durabletask-azure-functions` (group: `com.microsoft`) to find the current stable version. - Network accessline 27
> **💡 Finding latest versions**: Search [Maven Central](https://central.sonatype.com/) for `durabletask-azure-functions` (group: `com.microsoft`) to find the current stable version. - Network accessline 56
"FUNCTIONS_WORKER_RUNTIME": "java", "AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 56
"FUNCTIONS_WORKER_RUNTIME": "java", "AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 57
"AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" } - Network accessline 57
"AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" } - Network accessline 58
"DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 58
"DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 204
public class App { public static void main(String[] args) throws Exception { String connectionString = "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None"; - Network accessline 204
public class App { public static void main(String[] args) throws Exception { String connectionString = "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None"; - Network accessline 206
String connectionString = "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None"; - Network accessline 206
String connectionString = "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None";
skills/azure-prepare/references/services/durable-task-scheduler/javascript.md
- Network accessline 5
- [Durable Task Scheduler documentation](https://learn.microsoft.com/azure/durable-task-scheduler/) - Network accessline 5
- [Durable Task Scheduler documentation](https://learn.microsoft.com/azure/durable-task-scheduler/) - Network accessline 6
- [Durable Functions JavaScript guide](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-overview?tabs=javascript) - Network accessline 6
- [Durable Functions JavaScript guide](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-overview?tabs=javascript) - Network accessline 21
> **💡 Finding latest versions**: Run `npm view durable-functions version` or check [npmjs.com/package/durable-functions](https://www.npmjs.com/package/durable-functions) for the latest stable release. - Network accessline 21
> **💡 Finding latest versions**: Run `npm view durable-functions version` or check [npmjs.com/package/durable-functions](https://www.npmjs.com/package/durable-functions) for the latest stable release. - Network accessline 50
"FUNCTIONS_WORKER_RUNTIME": "node", "AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 50
"FUNCTIONS_WORKER_RUNTIME": "node", "AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 51
"AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" } - Network accessline 51
"AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" } - Network accessline 52
"DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 52
"DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 179
const connectionString = "Endpoint=http://localhost:8080;Authentication=None;TaskHub=default"; - Network accessline 179
const connectionString = "Endpoint=http://localhost:8080;Authentication=None;TaskHub=default";
skills/azure-prepare/references/services/durable-task-scheduler/python.md
- Network accessline 5
- [Durable Task Scheduler documentation](https://learn.microsoft.com/azure/durable-task-scheduler/) - Network accessline 5
- [Durable Task Scheduler documentation](https://learn.microsoft.com/azure/durable-task-scheduler/) - Network accessline 6
- [Durable Functions Python guide](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-overview?tabs=python) - Network accessline 6
- [Durable Functions Python guide](https://learn.microsoft.com/azure/azure-functions/durable/durable-functions-overview?tabs=python) - Network accessline 19
> **💡 Finding latest versions**: Run `pip index versions azure-functions-durable` or check [pypi.org/project/azure-functions-durable](https://pypi.org/project/azure-functions-durable/) for the latest stable release. - Network accessline 19
> **💡 Finding latest versions**: Run `pip index versions azure-functions-durable` or check [pypi.org/project/azure-functions-durable](https://pypi.org/project/azure-functions-durable/) for the latest stable release. - Network accessline 50
"FUNCTIONS_WORKER_RUNTIME": "python", "AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 50
"FUNCTIONS_WORKER_RUNTIME": "python", "AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 51
"AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" } - Network accessline 51
"AzureWebJobsStorage": "UseDevelopmentStorage=true", "DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" } - Network accessline 52
"DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 52
"DURABLE_TASK_SCHEDULER_CONNECTION_STRING": "Endpoint=http://localhost:8080;TaskHub=default;Authentication=None" - Network accessline 194
async def main(): with DurableTaskSchedulerWorker( host_address="http://localhost:8080", - Network accessline 194
async def main(): with DurableTaskSchedulerWorker( host_address="http://localhost:8080", - Network accessline 195
with DurableTaskSchedulerWorker( host_address="http://localhost:8080", secure_channel=False, - Network accessline 195
with DurableTaskSchedulerWorker( host_address="http://localhost:8080", secure_channel=False, - Network accessline 196
host_address="http://localhost:8080", - Network accessline 196
host_address="http://localhost:8080", - Network accessline 205
from durabletask.azuremanaged.client import DurableTaskSchedulerClient client = DurableTaskSchedulerClient( host_address="http://localhost:8080", - Network accessline 205
from durabletask.azuremanaged.client import DurableTaskSchedulerClient client = DurableTaskSchedulerClient( host_address="http://localhost:8080", - Network accessline 206
client = DurableTaskSchedulerClient( host_address="http://localhost:8080", taskhub="default", - Network accessline 206
client = DurableTaskSchedulerClient( host_address="http://localhost:8080", taskhub="default", - Network accessline 207
host_address="http://localhost:8080", - Network accessline 207
host_address="http://localhost:8080",
skills/azure-prepare/references/services/event-grid/bicep.md
- Access to secretsline 51
[Credential-related source omitted] - Access to secretsline 51
[Credential-related source omitted] - Access to secretsline 69
[Credential-related source omitted] - Access to secretsline 69
[Credential-related source omitted] - Access to secretsline 70
[Credential-related source omitted] - Access to secretsline 70
[Credential-related source omitted]
skills/azure-prepare/references/services/event-grid/subscriptions.md
- Network accessline 11
endpointType: 'WebHook' properties: { endpointUrl: 'https://my-api.azurecontainerapps.io/webhooks/orders' - Network accessline 11
endpointType: 'WebHook' properties: { endpointUrl: 'https://my-api.azurecontainerapps.io/webhooks/orders' - Network accessline 12
properties: { endpointUrl: 'https://my-api.azurecontainerapps.io/webhooks/orders' } - Network accessline 12
properties: { endpointUrl: 'https://my-api.azurecontainerapps.io/webhooks/orders' } - Network accessline 13
endpointUrl: 'https://my-api.azurecontainerapps.io/webhooks/orders' - Network accessline 13
endpointUrl: 'https://my-api.azurecontainerapps.io/webhooks/orders' - Network accessline 36
endpointType: 'WebHook' properties: { endpointUrl: 'https://my-api.example.com/events' - Network accessline 36
endpointType: 'WebHook' properties: { endpointUrl: 'https://my-api.example.com/events' - Network accessline 37
properties: { endpointUrl: 'https://my-api.example.com/events' } - Network accessline 37
properties: { endpointUrl: 'https://my-api.example.com/events' } - Network accessline 38
endpointUrl: 'https://my-api.example.com/events' - Network accessline 38
endpointUrl: 'https://my-api.example.com/events'
skills/azure-prepare/references/services/foundry/region-availability.md
skills/azure-prepare/references/services/functions/README.md
- Network accessline 53
> Do NOT use hardcoded versions. Query for latest GA versions before generating code: > > **Primary Source:** [Azure Functions Supported Languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) - Network accessline 53
> Do NOT use hardcoded versions. Query for latest GA versions before generating code: > > **Primary Source:** [Azure Functions Supported Languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) - Network accessline 54
> > **Primary Source:** [Azure Functions Supported Languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) > - Network accessline 54
> > **Primary Source:** [Azure Functions Supported Languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) > - Network accessline 55
> **Primary Source:** [Azure Functions Supported Languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) > > Use the azure-documentation MCP tool to fetch current supported versions: - Network accessline 55
> **Primary Source:** [Azure Functions Supported Languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) > > Use the azure-documentation MCP tool to fetch current supported versions:
skills/azure-prepare/references/services/functions/bicep.md
- Network accessline 86
runtime: { name: 'python' // or 'node', 'dotnet-isolated' version: '<version>' // Query latest GA: https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages - Network accessline 86
runtime: { name: 'python' // or 'node', 'dotnet-isolated' version: '<version>' // Query latest GA: https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages - Network accessline 87
name: 'python' // or 'node', 'dotnet-isolated' version: '<version>' // Query latest GA: https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages } - Network accessline 87
name: 'python' // or 'node', 'dotnet-isolated' version: '<version>' // Query latest GA: https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages } - Network accessline 88
version: '<version>' // Query latest GA: https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages - Network accessline 88
version: '<version>' // Query latest GA: https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages
skills/azure-prepare/references/services/functions/hosting-plans.md
- Network accessline 11
| **VNet integration (outbound)** | ❌ | ✅ | ✅ | ✅ | ✅ | | **Private endpoints (inbound)** | ❌ | ✅ | ✅ | ✅ | ✅ (environment-level) | | **Deployment slots (incl. production)** | 2 | ❌ Not supported | 3 | 1-20 (tier-dependent) | Via [revisions - Network accessline 11
| **VNet integration (outbound)** | ❌ | ✅ | ✅ | ✅ | ✅ | | **Private endpoints (inbound)** | ❌ | ✅ | ✅ | ✅ | ✅ (environment-level) | | **Deployment slots (incl. production)** | 2 | ❌ Not supported | 3 | 1-20 (tier-dependent) | Via [revisions - Network accessline 12
| **Private endpoints (inbound)** | ❌ | ✅ | ✅ | ✅ | ✅ (environment-level) | | **Deployment slots (incl. production)** | 2 | ❌ Not supported | 3 | 1-20 (tier-dependent) | Via [revisions](https://learn.microsoft.com/azure/container-apps/revis - Network accessline 12
| **Private endpoints (inbound)** | ❌ | ✅ | ✅ | ✅ | ✅ (environment-level) | | **Deployment slots (incl. production)** | 2 | ❌ Not supported | 3 | 1-20 (tier-dependent) | Via [revisions](https://learn.microsoft.com/azure/container-apps/revis - Network accessline 13
| **Deployment slots (incl. production)** | 2 | ❌ Not supported | 3 | 1-20 (tier-dependent) | Via [revisions](https://learn.microsoft.com/azure/container-apps/revisions) | - Network accessline 13
| **Deployment slots (incl. production)** | 2 | ❌ Not supported | 3 | 1-20 (tier-dependent) | Via [revisions](https://learn.microsoft.com/azure/container-apps/revisions) | - Network accessline 71
- **Recommended default for new Functions apps.** Best for Linux workloads needing fast/large scale-out, VNet, per-function scaling, and configurable instance memory. - Limits: Linux only, **no deployment slots** (use [rolling/blue-green si - Network accessline 71
- **Recommended default for new Functions apps.** Best for Linux workloads needing fast/large scale-out, VNet, per-function scaling, and configurable instance memory. - Limits: Linux only, **no deployment slots** (use [rolling/blue-green si - Network accessline 72
- Limits: Linux only, **no deployment slots** (use [rolling/blue-green site update strategies](https://learn.microsoft.com/azure/azure-functions/flex-consumption-site-updates) instead for zero-downtime deploys). - Network accessline 72
- Limits: Linux only, **no deployment slots** (use [rolling/blue-green site update strategies](https://learn.microsoft.com/azure/azure-functions/flex-consumption-site-updates) instead for zero-downtime deploys). - Network accessline 83
- Best for: consolidating Functions onto App Service Plan capacity you already run, or workloads needing the broadest App Service feature set (Hybrid Connections, custom domains, `Always On`). - Slot count depends on the underlying App Serv - Network accessline 83
- Best for: consolidating Functions onto App Service Plan capacity you already run, or workloads needing the broadest App Service feature set (Hybrid Connections, custom domains, `Always On`). - Slot count depends on the underlying App Serv - Network accessline 84
- Slot count depends on the underlying App Service Plan tier (Basic = 1, Standard = 5, Premium = 20; see [App Service limits](https://learn.microsoft.com/azure/azure-resource-manager/management/azure-subscription-service-limits#azure-app-se - Network accessline 84
- Slot count depends on the underlying App Service Plan tier (Basic = 1, Standard = 5, Premium = 20; see [App Service limits](https://learn.microsoft.com/azure/azure-resource-manager/management/azure-subscription-service-limits#azure-app-se - Network accessline 95
Switching hosting plans generally requires creating a new function app, **except**: Consumption ↔ Premium migration **on Windows** is supported in place via `az functionapp update` (see [Plan migration](https://learn.microsoft.com/azure/azu - Network accessline 95
Switching hosting plans generally requires creating a new function app, **except**: Consumption ↔ Premium migration **on Windows** is supported in place via `az functionapp update` (see [Plan migration](https://learn.microsoft.com/azure/azu
skills/azure-prepare/references/services/functions/templates/README.md
- Network accessline 112
GET https://cdn.functions.azure.com/public/templates-manifest/manifest.json - Network accessline 112
GET https://cdn.functions.azure.com/public/templates-manifest/manifest.json - Network accessline 115
> ⚠<U+FE0F> **If manifest fetch fails** (any error): > 1. Fall back to the source manifest at `https://github.com/Azure/azure-functions-templates/blob/dev/Functions.Templates/Template-Manifest/manifest.json` - Network accessline 115
> ⚠<U+FE0F> **If manifest fetch fails** (any error): > 1. Fall back to the source manifest at `https://github.com/Azure/azure-functions-templates/blob/dev/Functions.Templates/Template-Manifest/manifest.json` - Network accessline 116
> 1. Fall back to the source manifest at `https://github.com/Azure/azure-functions-templates/blob/dev/Functions.Templates/Template-Manifest/manifest.json` - Network accessline 116
> 1. Fall back to the source manifest at `https://github.com/Azure/azure-functions-templates/blob/dev/Functions.Templates/Template-Manifest/manifest.json` - Network accessline 127
| `resource` | Trigger type (see [selection.md](selection.md)) | `http`, `cosmos`, `timer`, `eventhub`, `servicebus`, `blob`, `sql`, `mcp`, `durable` | | `iac` | Infrastructure type | `bicep`, `terraform` | | `repositoryUrl` | GitHub repo w - Network accessline 127
| `resource` | Trigger type (see [selection.md](selection.md)) | `http`, `cosmos`, `timer`, `eventhub`, `servicebus`, `blob`, `sql`, `mcp`, `durable` | | `iac` | Infrastructure type | `bicep`, `terraform` | | `repositoryUrl` | GitHub repo w - Network accessline 128
| `iac` | Infrastructure type | `bicep`, `terraform` | | `repositoryUrl` | GitHub repo with complete project | `https://github.com/Azure-Samples/functions-quickstart-python-http-azd` | | `folderPath` | Path within repo | `.` or `src/api` | - Network accessline 128
| `iac` | Infrastructure type | `bicep`, `terraform` | | `repositoryUrl` | GitHub repo with complete project | `https://github.com/Azure-Samples/functions-quickstart-python-http-azd` | | `folderPath` | Path within repo | `.` or `src/api` | - Network accessline 129
| `repositoryUrl` | GitHub repo with complete project | `https://github.com/Azure-Samples/functions-quickstart-python-http-azd` | - Network accessline 129
| `repositoryUrl` | GitHub repo with complete project | `https://github.com/Azure-Samples/functions-quickstart-python-http-azd` | - Network accessline 139
GET https://github.com/{owner}/{repo}/archive/refs/heads/main.zip - Network accessline 139
GET https://github.com/{owner}/{repo}/archive/refs/heads/main.zip - Network accessline 146
1. GET https://api.github.com/repos/{owner}/{repo}/git/trees/main?recursive=1 - Network accessline 146
1. GET https://api.github.com/repos/{owner}/{repo}/git/trees/main?recursive=1 - Network accessline 147
2. Filter tree entries where path starts with {folderPath}/ 3. For each file: GET https://raw.githubusercontent.com/{owner}/{repo}/main/{path} - Network accessline 147
2. Filter tree entries where path starts with {folderPath}/ 3. For each file: GET https://raw.githubusercontent.com/{owner}/{repo}/main/{path} - Network accessline 149
GET https://raw.githubusercontent.com/{owner}/{repo}/main/{path} - Network accessline 149
GET https://raw.githubusercontent.com/{owner}/{repo}/main/{path} - Network accessline 181
**Browse all:** [Awesome AZD Functions](https://azure.github.io/awesome-azd/?tags=functions) - Network accessline 181
**Browse all:** [Awesome AZD Functions](https://azure.github.io/awesome-azd/?tags=functions)
skills/azure-prepare/references/services/functions/templates/base/eval/summary.md
- Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language × trigger eval requires ~5 min of agent runtime. Full matrix (6 languages × 9 triggers) = ~4.5 hours of CI. Python is verified end-to-end; other languages are confirmed available in the [functions temp - Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language × trigger eval requires ~5 min of agent runtime. Full matrix (6 languages × 9 triggers) = ~4.5 hours of CI. Python is verified end-to-end; other languages are confirmed available in the [functions temp
skills/azure-prepare/references/services/functions/templates/recipes/blob-eventgrid/README.md
- Network accessline 28
See [Blob Storage trigger connections](https://learn.microsoft.com/en-us/azure/azure-functions/functions-bindings-storage-blob-trigger#connections) for identity-based config — refer to the **"Connections"** section on that page for managed - Network accessline 28
See [Blob Storage trigger connections](https://learn.microsoft.com/en-us/azure/azure-functions/functions-bindings-storage-blob-trigger#connections) for identity-based config — refer to the **"Connections"** section on that page for managed
skills/azure-prepare/references/services/functions/templates/recipes/blob-eventgrid/eval/summary.md
- Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). Multi-language ev - Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). Multi-language ev
skills/azure-prepare/references/services/functions/templates/recipes/composition.md
- Network accessline 47
1. FETCH MANIFEST GET https://cdn.functions.azure.com/public/templates-manifest/manifest.json - Network accessline 47
1. FETCH MANIFEST GET https://cdn.functions.azure.com/public/templates-manifest/manifest.json - Network accessline 48
GET https://cdn.functions.azure.com/public/templates-manifest/manifest.json If fetch fails → fall back to: https://github.com/Azure/azure-functions-templates/blob/dev/Functions.Templates/Template-Manifest/manifest.json If both fail → - Network accessline 48
GET https://cdn.functions.azure.com/public/templates-manifest/manifest.json If fetch fails → fall back to: https://github.com/Azure/azure-functions-templates/blob/dev/Functions.Templates/Template-Manifest/manifest.json If both fail → - Network accessline 49
If fetch fails → fall back to: https://github.com/Azure/azure-functions-templates/blob/dev/Functions.Templates/Template-Manifest/manifest.json - Network accessline 49
If fetch fails → fall back to: https://github.com/Azure/azure-functions-templates/blob/dev/Functions.Templates/Template-Manifest/manifest.json - Network accessline 224
> ⚠<U+FE0F> **ALWAYS QUERY OFFICIAL DOCUMENTATION** — Do NOT use hardcoded versions. > > **Primary Source:** [Azure Functions Supported Languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) - Network accessline 224
> ⚠<U+FE0F> **ALWAYS QUERY OFFICIAL DOCUMENTATION** — Do NOT use hardcoded versions. > > **Primary Source:** [Azure Functions Supported Languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) - Network accessline 225
> > **Primary Source:** [Azure Functions Supported Languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) > - Network accessline 225
> > **Primary Source:** [Azure Functions Supported Languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) > - Network accessline 226
> **Primary Source:** [Azure Functions Supported Languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) - Network accessline 226
> **Primary Source:** [Azure Functions Supported Languages](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages)
skills/azure-prepare/references/services/functions/templates/recipes/cosmosdb/README.md
- Network accessline 27
See [Cosmos DB trigger connections](https://learn.microsoft.com/en-us/azure/azure-functions/functions-bindings-cosmosdb-v2-trigger#connections) for identity-based config — refer to the **"Connections"** section on that page for managed iden - Network accessline 27
See [Cosmos DB trigger connections](https://learn.microsoft.com/en-us/azure/azure-functions/functions-bindings-cosmosdb-v2-trigger#connections) for identity-based config — refer to the **"Connections"** section on that page for managed iden
skills/azure-prepare/references/services/functions/templates/recipes/cosmosdb/eval/summary.md
- Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). JavaScript and Po - Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). JavaScript and Po
skills/azure-prepare/references/services/functions/templates/recipes/durable/README.md
- Network accessline 34
The identity must have the **Durable Task Data Contributor** role on the scheduler or task hub resource. See [DTS identity auth](https://learn.microsoft.com/en-us/azure/durable-task/scheduler/durable-task-scheduler-identity) for identity-ba - Network accessline 34
The identity must have the **Durable Task Data Contributor** role on the scheduler or task hub resource. See [DTS identity auth](https://learn.microsoft.com/en-us/azure/durable-task/scheduler/durable-task-scheduler-identity) for identity-ba
skills/azure-prepare/references/services/functions/templates/recipes/durable/eval/summary.md
- Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). PowerShell has no - Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). PowerShell has no
skills/azure-prepare/references/services/functions/templates/recipes/eventhubs/README.md
- Network accessline 21
See [Event Hubs trigger connections](https://learn.microsoft.com/en-us/azure/azure-functions/functions-bindings-event-hubs-trigger#connections) for identity-based config — refer to the **"Connections"** section on that page for managed iden - Network accessline 21
See [Event Hubs trigger connections](https://learn.microsoft.com/en-us/azure/azure-functions/functions-bindings-event-hubs-trigger#connections) for identity-based config — refer to the **"Connections"** section on that page for managed iden
skills/azure-prepare/references/services/functions/templates/recipes/eventhubs/eval/summary.md
- Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). JavaScript and Po - Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). JavaScript and Po
skills/azure-prepare/references/services/functions/templates/recipes/mcp/README.md
- Network accessline 17
See [MCP Specification](https://modelcontextprotocol.io/) for protocol details. - Network accessline 17
See [MCP Specification](https://modelcontextprotocol.io/) for protocol details. - Network accessline 31
See [MCP extension trigger and bindings](https://learn.microsoft.com/azure/azure-functions/functions-bindings-mcp) for extension-based servers, [Self-hosted MCP servers](https://learn.microsoft.com/en-us/azure/azure-functions/self-hosted-mc - Network accessline 31
See [MCP extension trigger and bindings](https://learn.microsoft.com/azure/azure-functions/functions-bindings-mcp) for extension-based servers, [Self-hosted MCP servers](https://learn.microsoft.com/en-us/azure/azure-functions/self-hosted-mc
skills/azure-prepare/references/services/functions/templates/recipes/mcp/eval/summary.md
- Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). JavaScript and Po - Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). JavaScript and Po
skills/azure-prepare/references/services/functions/templates/recipes/servicebus/README.md
- Network accessline 26
See [Service Bus trigger connections](https://learn.microsoft.com/en-us/azure/azure-functions/functions-bindings-service-bus-trigger#connections) for identity-based config — refer to the **"Connections"** section on that page for managed id - Network accessline 26
See [Service Bus trigger connections](https://learn.microsoft.com/en-us/azure/azure-functions/functions-bindings-service-bus-trigger#connections) for identity-based config — refer to the **"Connections"** section on that page for managed id
skills/azure-prepare/references/services/functions/templates/recipes/servicebus/eval/summary.md
- Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). Multi-language ev - Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). Multi-language ev
skills/azure-prepare/references/services/functions/templates/recipes/sql/README.md
- Network accessline 45
See [SQL managed identity](https://learn.microsoft.com/en-us/azure/azure-functions/functions-identity-access-azure-sql-with-managed-identity) for identity-based config — refer to the **"Configure the function app"** section for connection s - Network accessline 45
See [SQL managed identity](https://learn.microsoft.com/en-us/azure/azure-functions/functions-identity-access-azure-sql-with-managed-identity) for identity-based config — refer to the **"Configure the function app"** section for connection s
skills/azure-prepare/references/services/functions/templates/recipes/sql/eval/summary.md
- Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). Java, JavaScript, - Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). Java, JavaScript,
skills/azure-prepare/references/services/functions/templates/recipes/timer/README.md
- Network accessline 22
> Azure uses 6-part cron expressions (with seconds). See [Azure Functions timer trigger](https://learn.microsoft.com/en-us/azure/azure-functions/functions-bindings-timer#ncrontab-expressions) for full syntax reference. - Network accessline 22
> Azure uses 6-part cron expressions (with seconds). See [Azure Functions timer trigger](https://learn.microsoft.com/en-us/azure/azure-functions/functions-bindings-timer#ncrontab-expressions) for full syntax reference.
skills/azure-prepare/references/services/functions/templates/recipes/timer/eval/summary.md
- Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). Multi-language ev - Network accessline 14
> ⚠<U+FE0F> **Eval cost note:** Each language eval requires ~5 min of agent runtime. Python is verified end-to-end; other languages confirmed in [manifest](https://cdn.functions.azure.com/public/templates-manifest/manifest.json). Multi-language ev
skills/azure-prepare/references/services/functions/terraform.md
- Network accessline 173
> 💡 **Example Reference:** [HashiCorp Flex Consumption Example](https://registry.terraform.io/modules/Azure/avm-res-web-site/azurerm/latest/examples/flex_consumption) - Network accessline 173
> 💡 **Example Reference:** [HashiCorp Flex Consumption Example](https://registry.terraform.io/modules/Azure/avm-res-web-site/azurerm/latest/examples/flex_consumption)
skills/azure-prepare/references/services/key-vault/README.md
- Network accessline 39
| Variable | Value | |----------|-------| | `KEY_VAULT_URL` | `https://{vault-name}.vault.azure.net/` | - Network accessline 39
| Variable | Value | |----------|-------| | `KEY_VAULT_URL` | `https://{vault-name}.vault.azure.net/` | - Network accessline 40
|----------|-------| | `KEY_VAULT_URL` | `https://{vault-name}.vault.azure.net/` | | `KEY_VAULT_NAME` | Vault name | - Network accessline 40
|----------|-------| | `KEY_VAULT_URL` | `https://{vault-name}.vault.azure.net/` | | `KEY_VAULT_NAME` | Vault name | - Network accessline 41
| `KEY_VAULT_URL` | `https://{vault-name}.vault.azure.net/` | - Network accessline 41
| `KEY_VAULT_URL` | `https://{vault-name}.vault.azure.net/` |
skills/azure-prepare/references/services/key-vault/sdk.md
- Access to secretsline 29
[Credential-related source omitted] - Access to secretsline 29
[Credential-related source omitted] - Network accessline 59
endpointType: 'WebHook' properties: { endpointUrl: 'https://my-api.example.com/secret-rotation' - Network accessline 59
endpointType: 'WebHook' properties: { endpointUrl: 'https://my-api.example.com/secret-rotation' - Network accessline 60
properties: { endpointUrl: 'https://my-api.example.com/secret-rotation' } - Network accessline 60
properties: { endpointUrl: 'https://my-api.example.com/secret-rotation' } - Network accessline 61
endpointUrl: 'https://my-api.example.com/secret-rotation' - Network accessline 61
endpointUrl: 'https://my-api.example.com/secret-rotation'
skills/azure-prepare/references/services/logic-apps/bicep.md
- Network accessline 10
state: 'Enabled' definition: { '$schema': 'https://schema.management.azure.com/providers/Microsoft.Logic/schemas/2016-06-01/workflowdefinition.json#' - Network accessline 10
state: 'Enabled' definition: { '$schema': 'https://schema.management.azure.com/providers/Microsoft.Logic/schemas/2016-06-01/workflowdefinition.json#' - Network accessline 11
definition: { '$schema': 'https://schema.management.azure.com/providers/Microsoft.Logic/schemas/2016-06-01/workflowdefinition.json#' contentVersion: '1.0.0.0' - Network accessline 11
definition: { '$schema': 'https://schema.management.azure.com/providers/Microsoft.Logic/schemas/2016-06-01/workflowdefinition.json#' contentVersion: '1.0.0.0' - Network accessline 12
'$schema': 'https://schema.management.azure.com/providers/Microsoft.Logic/schemas/2016-06-01/workflowdefinition.json#' - Network accessline 12
'$schema': 'https://schema.management.azure.com/providers/Microsoft.Logic/schemas/2016-06-01/workflowdefinition.json#'
skills/azure-prepare/references/services/logic-apps/triggers.md
- Network accessline 69
"inputs": { "method": "POST", "uri": "https://api.example.com/orders", - Network accessline 69
"inputs": { "method": "POST", "uri": "https://api.example.com/orders", - Network accessline 70
"method": "POST", "uri": "https://api.example.com/orders", "headers": { - Network accessline 70
"method": "POST", "uri": "https://api.example.com/orders", "headers": { - Network accessline 71
"uri": "https://api.example.com/orders", - Network accessline 71
"uri": "https://api.example.com/orders",
skills/azure-prepare/references/services/service-bus/patterns.md
skills/azure-prepare/references/services/sql-database/scripts/grant-sql-access.ps1
- Executable scriptline 1
Executable file - Executable scriptline 1
Executable file - Network accessline 109
if (-not (Get-Command sqlcmd -ErrorAction SilentlyContinue)) { Write-Error "'sqlcmd' is not installed or not on PATH." Write-Error "Install the modern go-sqlcmd from https://github.com/microsoft/go-sqlcmd and retry." - Network accessline 109
if (-not (Get-Command sqlcmd -ErrorAction SilentlyContinue)) { Write-Error "'sqlcmd' is not installed or not on PATH." Write-Error "Install the modern go-sqlcmd from https://github.com/microsoft/go-sqlcmd and retry." - Network accessline 110
Write-Error "'sqlcmd' is not installed or not on PATH." Write-Error "Install the modern go-sqlcmd from https://github.com/microsoft/go-sqlcmd and retry." exit 1 - Network accessline 110
Write-Error "'sqlcmd' is not installed or not on PATH." Write-Error "Install the modern go-sqlcmd from https://github.com/microsoft/go-sqlcmd and retry." exit 1 - Network accessline 111
Write-Error "Install the modern go-sqlcmd from https://github.com/microsoft/go-sqlcmd and retry." - Network accessline 111
Write-Error "Install the modern go-sqlcmd from https://github.com/microsoft/go-sqlcmd and retry."
skills/azure-prepare/references/services/sql-database/scripts/grant-sql-access.sh
- Executable scriptline 1
#!/usr/bin/env bash - Executable scriptline 1
#!/usr/bin/env bash - Network accessline 103
if ! command -v sqlcmd >/dev/null 2>&1; then echo "ERROR: 'sqlcmd' is not installed or not on PATH." >&2 echo "Install the modern go-sqlcmd from https://github.com/microsoft/go-sqlcmd and retry." >&2 - Network accessline 103
if ! command -v sqlcmd >/dev/null 2>&1; then echo "ERROR: 'sqlcmd' is not installed or not on PATH." >&2 echo "Install the modern go-sqlcmd from https://github.com/microsoft/go-sqlcmd and retry." >&2 - Network accessline 104
echo "ERROR: 'sqlcmd' is not installed or not on PATH." >&2 echo "Install the modern go-sqlcmd from https://github.com/microsoft/go-sqlcmd and retry." >&2 exit 1 - Network accessline 104
echo "ERROR: 'sqlcmd' is not installed or not on PATH." >&2 echo "Install the modern go-sqlcmd from https://github.com/microsoft/go-sqlcmd and retry." >&2 exit 1 - Network accessline 105
echo "Install the modern go-sqlcmd from https://github.com/microsoft/go-sqlcmd and retry." >&2 - Network accessline 105
echo "Install the modern go-sqlcmd from https://github.com/microsoft/go-sqlcmd and retry." >&2
skills/azure-prepare/references/services/sql-database/sdk.md
- Network accessline 30
[Credential-related source omitted] - Network accessline 30
[Credential-related source omitted] - Network accessline 31
[Credential-related source omitted] - Network accessline 31
[Credential-related source omitted] - Access to secretsline 35
[Credential-related source omitted] - Access to secretsline 35
[Credential-related source omitted] - Access to secretsline 36
[Credential-related source omitted] - Access to secretsline 36
[Credential-related source omitted]
skills/azure-prepare/references/services/static-web-apps/deployment.md
- Network accessline 16
properties: { repositoryUrl: 'https://github.com/owner/repo' - Network accessline 16
properties: { repositoryUrl: 'https://github.com/owner/repo' - Network accessline 17
repositoryUrl: 'https://github.com/owner/repo' - Network accessline 17
repositoryUrl: 'https://github.com/owner/repo' - Access to secretsline 38
[Credential-related source omitted] - Access to secretsline 38
[Credential-related source omitted] - Access to secretsline 65
[Credential-related source omitted] - Access to secretsline 65
[Credential-related source omitted]
skills/azure-prepare/references/services/static-web-apps/routing.md
- Network accessline 41
"azureActiveDirectory": { "registration": { "openIdIssuer": "https://login.microsoftonline.com/{tenant-id}", - Network accessline 41
"azureActiveDirectory": { "registration": { "openIdIssuer": "https://login.microsoftonline.com/{tenant-id}", - Network accessline 42
"registration": { "openIdIssuer": "https://login.microsoftonline.com/{tenant-id}", "clientIdSettingName": "AAD_CLIENT_ID", - Network accessline 42
"registration": { "openIdIssuer": "https://login.microsoftonline.com/{tenant-id}", "clientIdSettingName": "AAD_CLIENT_ID", - Network accessline 43
"openIdIssuer": "https://login.microsoftonline.com/{tenant-id}", - Network accessline 43
"openIdIssuer": "https://login.microsoftonline.com/{tenant-id}", - Access to secretsline 45
[Credential-related source omitted] - Access to secretsline 45
[Credential-related source omitted]
skills/azure-prepare/references/services/storage/access.md
- Access to secretsline 70
[Credential-related source omitted] - Access to secretsline 70
[Credential-related source omitted] - Network accessline 92
const client = new BlobServiceClient( `https://${accountName}.blob.core.windows.net`, - Network accessline 92
const client = new BlobServiceClient( `https://${accountName}.blob.core.windows.net`, - Network accessline 93
`https://${accountName}.blob.core.windows.net`, - Network accessline 93
`https://${accountName}.blob.core.windows.net`,
skills/azure-quotas/SKILL.md
- Network accessline 46
| **Key Commands** | `az quota list`, `az quota show`, `az quota usage list`, `az quota usage show` | | **Complete CLI Reference** | [commands.md](./references/commands.md) | | **Azure Portal** | [My quotas](https://portal.azure.com/#blade/ - Network accessline 46
| **Key Commands** | `az quota list`, `az quota show`, `az quota usage list`, `az quota usage show` | | **Complete CLI Reference** | [commands.md](./references/commands.md) | | **Azure Portal** | [My quotas](https://portal.azure.com/#blade/ - Network accessline 47
| **Complete CLI Reference** | [commands.md](./references/commands.md) | | **Azure Portal** | [My quotas](https://portal.azure.com/#blade/Microsoft_Azure_Capacity/QuotaMenuBlade/myQuotas) - Use only as fallback | | **REST API** | Microsoft. - Network accessline 47
| **Complete CLI Reference** | [commands.md](./references/commands.md) | | **Azure Portal** | [My quotas](https://portal.azure.com/#blade/Microsoft_Azure_Capacity/QuotaMenuBlade/myQuotas) - Use only as fallback | | **REST API** | Microsoft. - Network accessline 48
| **Azure Portal** | [My quotas](https://portal.azure.com/#blade/Microsoft_Azure_Capacity/QuotaMenuBlade/myQuotas) - Use only as fallback | - Network accessline 48
| **Azure Portal** | [My quotas](https://portal.azure.com/#blade/Microsoft_Azure_Capacity/QuotaMenuBlade/myQuotas) - Use only as fallback | - Network accessline 53
> **⚠<U+FE0F> ALWAYS USE CLI FIRST** > > REST API and Portal can show misleading "No Limit" values — this does **not** mean unlimited capacity. It means the quota API doesn't support that resource type. Always start with `az quota` commands; fall - Network accessline 53
> **⚠<U+FE0F> ALWAYS USE CLI FIRST** > > REST API and Portal can show misleading "No Limit" values — this does **not** mean unlimited capacity. It means the quota API doesn't support that resource type. Always start with `az quota` commands; fall - Network accessline 54
> > REST API and Portal can show misleading "No Limit" values — this does **not** mean unlimited capacity. It means the quota API doesn't support that resource type. Always start with `az quota` commands; fall back to [Azure service limits - Network accessline 54
> > REST API and Portal can show misleading "No Limit" values — this does **not** mean unlimited capacity. It means the quota API doesn't support that resource type. Always start with `az quota` commands; fall back to [Azure service limits - Network accessline 55
> REST API and Portal can show misleading "No Limit" values — this does **not** mean unlimited capacity. It means the quota API doesn't support that resource type. Always start with `az quota` commands; fall back to [Azure service limits do - Network accessline 55
> REST API and Portal can show misleading "No Limit" values — this does **not** mean unlimited capacity. It means the quota API doesn't support that resource type. Always start with `az quota` commands; fall back to [Azure service limits do - Network accessline 237
| REST API "No Limit" | Misleading — not unlimited | Use CLI instead; see warning in Quick Reference | | `ExtensionNotFound` | Quota extension not installed | `az extension add --name quota` | | `BadRequest` | Resource provider not supporte - Network accessline 237
| REST API "No Limit" | Misleading — not unlimited | Use CLI instead; see warning in Quick Reference | | `ExtensionNotFound` | Quota extension not installed | `az extension add --name quota` | | `BadRequest` | Resource provider not supporte - Network accessline 238
| `ExtensionNotFound` | Quota extension not installed | `az extension add --name quota` | | `BadRequest` | Resource provider not supported by quota API | Check [service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-man - Network accessline 238
| `ExtensionNotFound` | Quota extension not installed | `az extension add --name quota` | | `BadRequest` | Resource provider not supported by quota API | Check [service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-man - Network accessline 239
| `BadRequest` | Resource provider not supported by quota API | Check [service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) | - Network accessline 239
| `BadRequest` | Resource provider not supported by quota API | Check [service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) | - Network accessline 247
**Known unsupported providers:** - ❌ Microsoft.DocumentDB (Cosmos DB) - Use Portal or [Cosmos DB limits docs](https://learn.microsoft.com/en-us/azure/cosmos-db/concepts-limits) - Network accessline 247
**Known unsupported providers:** - ❌ Microsoft.DocumentDB (Cosmos DB) - Use Portal or [Cosmos DB limits docs](https://learn.microsoft.com/en-us/azure/cosmos-db/concepts-limits) - Network accessline 248
- ❌ Microsoft.DocumentDB (Cosmos DB) - Use Portal or [Cosmos DB limits docs](https://learn.microsoft.com/en-us/azure/cosmos-db/concepts-limits) - Network accessline 248
- ❌ Microsoft.DocumentDB (Cosmos DB) - Use Portal or [Cosmos DB limits docs](https://learn.microsoft.com/en-us/azure/cosmos-db/concepts-limits) - Network accessline 262
|----------|------| | **CLI Commands Reference** | [commands.md](./references/commands.md) - Complete syntax, parameters, examples | | **Azure Quotas Overview** | [Microsoft Learn](https://learn.microsoft.com/en-us/azure/quotas/quotas-overv - Network accessline 262
|----------|------| | **CLI Commands Reference** | [commands.md](./references/commands.md) - Complete syntax, parameters, examples | | **Azure Quotas Overview** | [Microsoft Learn](https://learn.microsoft.com/en-us/azure/quotas/quotas-overv - Network accessline 263
| **CLI Commands Reference** | [commands.md](./references/commands.md) - Complete syntax, parameters, examples | | **Azure Quotas Overview** | [Microsoft Learn](https://learn.microsoft.com/en-us/azure/quotas/quotas-overview) | | **Service L - Network accessline 263
| **CLI Commands Reference** | [commands.md](./references/commands.md) - Complete syntax, parameters, examples | | **Azure Quotas Overview** | [Microsoft Learn](https://learn.microsoft.com/en-us/azure/quotas/quotas-overview) | | **Service L - Network accessline 264
| **Azure Quotas Overview** | [Microsoft Learn](https://learn.microsoft.com/en-us/azure/quotas/quotas-overview) | - Network accessline 264
| **Azure Quotas Overview** | [Microsoft Learn](https://learn.microsoft.com/en-us/azure/quotas/quotas-overview) | - Network accessline 265
| **Service Limits Documentation** | [Azure subscription limits](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) | - Network accessline 265
| **Service Limits Documentation** | [Azure subscription limits](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) | - Network accessline 266
| **Azure Portal - My Quotas** | [Portal Link](https://portal.azure.com/#blade/Microsoft_Azure_Capacity/QuotaMenuBlade/myQuotas) | - Network accessline 266
| **Azure Portal - My Quotas** | [Portal Link](https://portal.azure.com/#blade/Microsoft_Azure_Capacity/QuotaMenuBlade/myQuotas) | - Network accessline 267
| **Request Quota Increases** | [How to request increases](https://learn.microsoft.com/en-us/azure/quotas/quickstart-increase-quota-portal) | - Network accessline 267
| **Request Quota Increases** | [How to request increases](https://learn.microsoft.com/en-us/azure/quotas/quickstart-increase-quota-portal) |
skills/azure-quotas/references/commands.md
- Network accessline 18
> **Required workflow:** > 1. **FIRST:** Try `az quota list` / `az quota show` / `az quota usage show` > 2. **If CLI returns `BadRequest`:** Resource provider doesn't support quota API → use [Azure service limits docs](https://learn.microso - Network accessline 18
> **Required workflow:** > 1. **FIRST:** Try `az quota list` / `az quota show` / `az quota usage show` > 2. **If CLI returns `BadRequest`:** Resource provider doesn't support quota API → use [Azure service limits docs](https://learn.microso - Network accessline 19
> 1. **FIRST:** Try `az quota list` / `az quota show` / `az quota usage show` > 2. **If CLI returns `BadRequest`:** Resource provider doesn't support quota API → use [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure- - Network accessline 19
> 1. **FIRST:** Try `az quota list` / `az quota show` / `az quota usage show` > 2. **If CLI returns `BadRequest`:** Resource provider doesn't support quota API → use [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure- - Network accessline 20
> 2. **If CLI returns `BadRequest`:** Resource provider doesn't support quota API → use [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) - Network accessline 20
> 2. **If CLI returns `BadRequest`:** Resource provider doesn't support quota API → use [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) - Network accessline 31
> - ❌ This is NOT unlimited capacity > - ✅ It means quota API doesn't support that resource type > - ✅ Check [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-li - Network accessline 31
> - ❌ This is NOT unlimited capacity > - ✅ It means quota API doesn't support that resource type > - ✅ Check [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-li - Network accessline 32
> - ✅ It means quota API doesn't support that resource type > - ✅ Check [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) for actual limits > - ✅ Regiona - Network accessline 32
> - ✅ It means quota API doesn't support that resource type > - ✅ Check [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) for actual limits > - ✅ Regiona - Network accessline 33
> - ✅ Check [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) for actual limits - Network accessline 33
> - ✅ Check [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) for actual limits - Network accessline 268
**Workarounds**: - Check [Azure subscription limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) - Network accessline 268
**Workarounds**: - Check [Azure subscription limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) - Network accessline 269
- Check [Azure subscription limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) - Network accessline 269
- Check [Azure subscription limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) - Network accessline 295
> **DO NOT assume unlimited capacity. Always:** > 1. Use `az quota` CLI commands first (preferred method) > 2. If CLI returns `BadRequest`, check [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-ma - Network accessline 295
> **DO NOT assume unlimited capacity. Always:** > 1. Use `az quota` CLI commands first (preferred method) > 2. If CLI returns `BadRequest`, check [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-ma - Network accessline 296
> 1. Use `az quota` CLI commands first (preferred method) > 2. If CLI returns `BadRequest`, check [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limi - Network accessline 296
> 1. Use `az quota` CLI commands first (preferred method) > 2. If CLI returns `BadRequest`, check [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limi - Network accessline 297
> 2. If CLI returns `BadRequest`, check [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) - Network accessline 297
> 2. If CLI returns `BadRequest`, check [Azure service limits documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) - Network accessline 303
| Error | Cause | Solution | |-------|-------|----------| | `BadRequest` | Provider not supported by quota API | Use CLI (preferred) or check [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/managem - Network accessline 303
| Error | Cause | Solution | |-------|-------|----------| | `BadRequest` | Provider not supported by quota API | Use CLI (preferred) or check [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/managem - Network accessline 304
|-------|-------|----------| | `BadRequest` | Provider not supported by quota API | Use CLI (preferred) or check [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-servic - Network accessline 304
|-------|-------|----------| | `BadRequest` | Provider not supported by quota API | Use CLI (preferred) or check [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-servic - Network accessline 305
| `BadRequest` | Provider not supported by quota API | Use CLI (preferred) or check [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) | - Network accessline 305
| `BadRequest` | Provider not supported by quota API | Use CLI (preferred) or check [Azure service limits docs](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits) |
skills/azure-quotas/scripts/check-quota.ps1
skills/azure-quotas/scripts/check-quota.sh
skills/azure-reliability/references/configure-health-probes.md
- Network accessline 27
3. **Two endpoints, not one** — a fast `/health` for the load balancer, and an optional `/health/deep` for on-call diagnostics. 4. **For Container Apps, both liveness AND readiness** — liveness alone restarts the container without taking it - Network accessline 27
3. **Two endpoints, not one** — a fast `/health` for the load balancer, and an optional `/health/deep` for on-call diagnostics. 4. **For Container Apps, both liveness AND readiness** — liveness alone restarts the container without taking it - Network accessline 29
5. **Test the endpoint** before relying on it: `curl https://<app-url>/api/health`. - Network accessline 29
5. **Test the endpoint** before relying on it: `curl https://<app-url>/api/health`.
skills/azure-reliability/references/configure-multi-region.md
- Network accessline 276
output endpoint string = 'https://${endpoint.properties.hostName}' - Network accessline 276
output endpoint string = 'https://${endpoint.properties.hostName}' - Access to secretsline 441
[Credential-related source omitted] - Access to secretsline 441
[Credential-related source omitted] - Access to secretsline 442
[Credential-related source omitted] - Access to secretsline 442
[Credential-related source omitted] - Access to secretsline 448
[Credential-related source omitted] - Access to secretsline 448
[Credential-related source omitted] - Access to secretsline 449
[Credential-related source omitted] - Access to secretsline 449
[Credential-related source omitted] - Access to secretsline 456
[Credential-related source omitted] - Access to secretsline 456
[Credential-related source omitted] - Access to secretsline 457
[Credential-related source omitted] - Access to secretsline 457
[Credential-related source omitted] - Access to secretsline 464
[Credential-related source omitted] - Access to secretsline 464
[Credential-related source omitted] - Access to secretsline 467
[Credential-related source omitted] - Access to secretsline 467
[Credential-related source omitted] - Access to secretsline 468
[Credential-related source omitted] - Access to secretsline 468
[Credential-related source omitted] - Network accessline 563
# Check Front Door endpoint is responding curl -I https://<front-door-name>-endpoint.z01.azurefd.net/api/health - Network accessline 563
# Check Front Door endpoint is responding curl -I https://<front-door-name>-endpoint.z01.azurefd.net/api/health - Network accessline 564
curl -I https://<front-door-name>-endpoint.z01.azurefd.net/api/health - Network accessline 564
curl -I https://<front-door-name>-endpoint.z01.azurefd.net/api/health
skills/azure-reliability/references/health-probe-checks.md
- Network accessline 68
3. **Two endpoints, not one** — fast `/health` for the load balancer, optional `/health/deep` for on-call diagnostics. 4. **For Container Apps, both liveness AND readiness** — liveness alone restarts the container without taking it out of r - Network accessline 68
3. **Two endpoints, not one** — fast `/health` for the load balancer, optional `/health/deep` for on-call diagnostics. 4. **For Container Apps, both liveness AND readiness** — liveness alone restarts the container without taking it out of r - Network accessline 70
5. **Test the endpoint** before relying on it: `curl https://<app-url>/api/health`. - Network accessline 70
5. **Test the endpoint** before relying on it: `curl https://<app-url>/api/health`.
skills/azure-reliability/references/services/app-service/reliability.md
- Network accessline 59
# Rules must be set via ARM PATCH (CLI doesn't expose autoHealRules directly) az rest --method patch \ --uri "https://management.azure.com/subscriptions/{sub}/resourceGroups/{rg}/providers/Microsoft.Web/sites/{app}/config/web?api-version= - Network accessline 59
# Rules must be set via ARM PATCH (CLI doesn't expose autoHealRules directly) az rest --method patch \ --uri "https://management.azure.com/subscriptions/{sub}/resourceGroups/{rg}/providers/Microsoft.Web/sites/{app}/config/web?api-version= - Network accessline 60
az rest --method patch --uri "https://management.azure.com/subscriptions/{sub}/resourceGroups/{rg}/providers/Microsoft.Web/sites/{app}/config/web?api-version=2022-03-01" - Network accessline 60
az rest --method patch --uri "https://management.azure.com/subscriptions/{sub}/resourceGroups/{rg}/providers/Microsoft.Web/sites/{app}/config/web?api-version=2022-03-01" - Network accessline 61
--uri "https://management.azure.com/subscriptions/{sub}/resourceGroups/{rg}/providers/Microsoft.Web/sites/{app}/config/web?api-version=2022-03-01" \ - Network accessline 61
--uri "https://management.azure.com/subscriptions/{sub}/resourceGroups/{rg}/providers/Microsoft.Web/sites/{app}/config/web?api-version=2022-03-01" \
skills/azure-reliability/references/services/functions/reliability.md
skills/azure-storage/SKILL.md
- Network accessline 82
- Blob storage patterns and lifecycle -> [Blob Storage documentation](https://learn.microsoft.com/azure/storage/blobs/storage-blobs-overview) - Network accessline 82
- Blob storage patterns and lifecycle -> [Blob Storage documentation](https://learn.microsoft.com/azure/storage/blobs/storage-blobs-overview) - Network accessline 83
- File shares and Azure File Sync -> [Azure Files documentation](https://learn.microsoft.com/azure/storage/files/storage-files-introduction) - Network accessline 83
- File shares and Azure File Sync -> [Azure Files documentation](https://learn.microsoft.com/azure/storage/files/storage-files-introduction) - Network accessline 84
- Queue patterns and poison handling -> [Queue Storage documentation](https://learn.microsoft.com/azure/storage/queues/storage-queues-introduction) - Network accessline 84
- Queue patterns and poison handling -> [Queue Storage documentation](https://learn.microsoft.com/azure/storage/queues/storage-queues-introduction)
skills/azure-storage/references/auth-best-practices.md
- Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme)
skills/azure-storage/references/sdk-usage.md
- Network accessline 36
service = BlobServiceClient(account_url="https://ACCOUNT.blob.core.windows.net/", credential=DefaultAzureCredential()) - Network accessline 36
service = BlobServiceClient(account_url="https://ACCOUNT.blob.core.windows.net/", credential=DefaultAzureCredential()) - Network accessline 47
const client = new BlobServiceClient("https://ACCOUNT.blob.core.windows.net/", new DefaultAzureCredential()); - Network accessline 47
const client = new BlobServiceClient("https://ACCOUNT.blob.core.windows.net/", new DefaultAzureCredential()); - Network accessline 58
var client = new BlobServiceClient(new Uri("https://ACCOUNT.blob.core.windows.net/"), new DefaultAzureCredential()); - Network accessline 58
var client = new BlobServiceClient(new Uri("https://ACCOUNT.blob.core.windows.net/"), new DefaultAzureCredential()); - Network accessline 70
BlobServiceClient client = new BlobServiceClientBuilder() .endpoint("https://ACCOUNT.blob.core.windows.net/") - Network accessline 70
BlobServiceClient client = new BlobServiceClientBuilder() .endpoint("https://ACCOUNT.blob.core.windows.net/") - Network accessline 71
.endpoint("https://ACCOUNT.blob.core.windows.net/") - Network accessline 71
.endpoint("https://ACCOUNT.blob.core.windows.net/") - Network accessline 90
func main() { cred, _ := azidentity.NewDefaultAzureCredential(nil) client, _ := azblob.NewClient("https://ACCOUNT.blob.core.windows.net/", cred, nil) - Network accessline 90
func main() { cred, _ := azidentity.NewDefaultAzureCredential(nil) client, _ := azblob.NewClient("https://ACCOUNT.blob.core.windows.net/", cred, nil) - Network accessline 92
client, _ := azblob.NewClient("https://ACCOUNT.blob.core.windows.net/", cred, nil) - Network accessline 92
client, _ := azblob.NewClient("https://ACCOUNT.blob.core.windows.net/", cred, nil) - Network accessline 104
let credential = DeveloperToolsCredential::new(None)?; let blob_client = BlobClient::new( "https://ACCOUNT.blob.core.windows.net/", - Network accessline 104
let credential = DeveloperToolsCredential::new(None)?; let blob_client = BlobClient::new( "https://ACCOUNT.blob.core.windows.net/", - Network accessline 105
let blob_client = BlobClient::new( "https://ACCOUNT.blob.core.windows.net/", "my-container", - Network accessline 105
let blob_client = BlobClient::new( "https://ACCOUNT.blob.core.windows.net/", "my-container", - Network accessline 106
"https://ACCOUNT.blob.core.windows.net/", - Network accessline 106
"https://ACCOUNT.blob.core.windows.net/",
skills/azure-storage/references/sdk/azure-storage-blob-ts.md
- Network accessline 12
import { BlobServiceClient } from "@azure/storage-blob"; import { DefaultAzureCredential } from "@azure/identity"; const client = new BlobServiceClient(`https://${accountName}.blob.core.windows.net`, new DefaultAzureCredential()); - Network accessline 12
import { BlobServiceClient } from "@azure/storage-blob"; import { DefaultAzureCredential } from "@azure/identity"; const client = new BlobServiceClient(`https://${accountName}.blob.core.windows.net`, new DefaultAzureCredential()); - Network accessline 14
const client = new BlobServiceClient(`https://${accountName}.blob.core.windows.net`, new DefaultAzureCredential()); - Network accessline 14
const client = new BlobServiceClient(`https://${accountName}.blob.core.windows.net`, new DefaultAzureCredential());
skills/azure-storage/references/sdk/azure-storage-file-share-ts.md
- Network accessline 12
import { ShareServiceClient } from "@azure/storage-file-share"; import { DefaultAzureCredential } from "@azure/identity"; const client = new ShareServiceClient(`https://${accountName}.file.core.windows.net`, new DefaultAzureCredential()); - Network accessline 12
import { ShareServiceClient } from "@azure/storage-file-share"; import { DefaultAzureCredential } from "@azure/identity"; const client = new ShareServiceClient(`https://${accountName}.file.core.windows.net`, new DefaultAzureCredential()); - Network accessline 14
const client = new ShareServiceClient(`https://${accountName}.file.core.windows.net`, new DefaultAzureCredential()); - Network accessline 14
const client = new ShareServiceClient(`https://${accountName}.file.core.windows.net`, new DefaultAzureCredential());
skills/azure-storage/references/sdk/azure-storage-queue-ts.md
- Network accessline 12
import { QueueServiceClient } from "@azure/storage-queue"; import { DefaultAzureCredential } from "@azure/identity"; const client = new QueueServiceClient(`https://${accountName}.queue.core.windows.net`, new DefaultAzureCredential()); - Network accessline 12
import { QueueServiceClient } from "@azure/storage-queue"; import { DefaultAzureCredential } from "@azure/identity"; const client = new QueueServiceClient(`https://${accountName}.queue.core.windows.net`, new DefaultAzureCredential()); - Network accessline 14
const client = new QueueServiceClient(`https://${accountName}.queue.core.windows.net`, new DefaultAzureCredential()); - Network accessline 14
const client = new QueueServiceClient(`https://${accountName}.queue.core.windows.net`, new DefaultAzureCredential());
skills/azure-upgrade/SKILL.md
- Network accessline 91
- [Automation Scripts](references/services/functions/consumption-to-flex/windows/automation.md) - **Redis** - [Redis (ACR or ACRE) to AMR Migration](references/services/redis/redis-to-amr.md) — routes to dedicated [amr-migration-skill](ht - Network accessline 91
- [Automation Scripts](references/services/functions/consumption-to-flex/windows/automation.md) - **Redis** - [Redis (ACR or ACRE) to AMR Migration](references/services/redis/redis-to-amr.md) — routes to dedicated [amr-migration-skill](ht - Network accessline 92
- **Redis** - [Redis (ACR or ACRE) to AMR Migration](references/services/redis/redis-to-amr.md) — routes to dedicated [amr-migration-skill](https://github.com/AzureManagedRedis/amr-migration-skill) (ACR/OSS) or [acre-to-amr-migration-skil - Network accessline 92
- **Redis** - [Redis (ACR or ACRE) to AMR Migration](references/services/redis/redis-to-amr.md) — routes to dedicated [amr-migration-skill](https://github.com/AzureManagedRedis/amr-migration-skill) (ACR/OSS) or [acre-to-amr-migration-skil - Network accessline 93
- [Redis (ACR or ACRE) to AMR Migration](references/services/redis/redis-to-amr.md) — routes to dedicated [amr-migration-skill](https://github.com/AzureManagedRedis/amr-migration-skill) (ACR/OSS) or [acre-to-amr-migration-skill](https://git - Network accessline 93
- [Redis (ACR or ACRE) to AMR Migration](references/services/redis/redis-to-amr.md) — routes to dedicated [amr-migration-skill](https://github.com/AzureManagedRedis/amr-migration-skill) (ACR/OSS) or [acre-to-amr-migration-skill](https://git
skills/azure-upgrade/references/languages/java/INSTRUCTION.md
- Network accessline 102
- If azure-sdk-bom is used, ensure the BOM version exactly matches the resolved latest stable version recorded in the plan's `Guidelines` section as `TARGET_AZURE_SDK_BOM_VERSION` and there are **NO** explicit version dependencies for Azure - Network accessline 102
- If azure-sdk-bom is used, ensure the BOM version exactly matches the resolved latest stable version recorded in the plan's `Guidelines` section as `TARGET_AZURE_SDK_BOM_VERSION` and there are **NO** explicit version dependencies for Azure - Network accessline 103
E.g. Instead of `implementation 'com.azure.resourcemanager:azure-resourcemanager:2.60.0'`, we should use `implementation 'com.azure.resourcemanager:azure-resourcemanager'`. For Azure libraries in azure-sdk-bom, check https://raw.githubuse - Network accessline 103
E.g. Instead of `implementation 'com.azure.resourcemanager:azure-resourcemanager:2.60.0'`, we should use `implementation 'com.azure.resourcemanager:azure-resourcemanager'`. For Azure libraries in azure-sdk-bom, check https://raw.githubuse - Network accessline 104
For Azure libraries in azure-sdk-bom, check https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/boms/azure-sdk-bom/pom.xml. - Network accessline 104
For Azure libraries in azure-sdk-bom, check https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/boms/azure-sdk-bom/pom.xml. - Network accessline 115
- [Migrate to `com.azure.resourcemanager.**` from `com.microsoft.azure.management.**`](https://aka.ms/java-track2-migration-guide) - Network accessline 115
- [Migrate to `com.azure.resourcemanager.**` from `com.microsoft.azure.management.**`](https://aka.ms/java-track2-migration-guide) - Network accessline 116
- [Migrate to com.azure:azure-messaging-servicebus from com.microsoft.azure:azure-servicebus](https://aka.ms/azsdk/java/migrate/sb) - Network accessline 116
- [Migrate to com.azure:azure-messaging-servicebus from com.microsoft.azure:azure-servicebus](https://aka.ms/azsdk/java/migrate/sb) - Network accessline 117
- [Migrate to azure-messaging-eventhubs from azure-eventhubs and azure-eventhubs-eph](https://aka.ms/azsdk/java/migrate/eh) - Network accessline 117
- [Migrate to azure-messaging-eventhubs from azure-eventhubs and azure-eventhubs-eph](https://aka.ms/azsdk/java/migrate/eh) - Network accessline 118
- [Migrate to `azure-messaging-eventgrid` from `microsoft-azure-eventgrid`](https://aka.ms/azsdk/java/migrate/eg) - Network accessline 118
- [Migrate to `azure-messaging-eventgrid` from `microsoft-azure-eventgrid`](https://aka.ms/azsdk/java/migrate/eg) - Network accessline 119
- [Storage Blob Service SDK Migration Guide from 8.x to 12.x](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/storage/azure-storage-blob/migrationGuides/V8_V12.md) - Network accessline 119
- [Storage Blob Service SDK Migration Guide from 8.x to 12.x](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/storage/azure-storage-blob/migrationGuides/V8_V12.md) - Network accessline 120
- [Storage Blob Service SDK Migration Guide from 10.x/11.x to 12.x](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/storage/azure-storage-blob/migrationGuides/V10_V12.md) - Network accessline 120
- [Storage Blob Service SDK Migration Guide from 10.x/11.x to 12.x](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/storage/azure-storage-blob/migrationGuides/V10_V12.md) - Network accessline 121
- [Storage Queue Service SDK Migration Guide from 8.x to 12.x](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/storage/azure-storage-queue/migrationGuides/V8_V12.md) - Network accessline 121
- [Storage Queue Service SDK Migration Guide from 8.x to 12.x](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/storage/azure-storage-queue/migrationGuides/V8_V12.md) - Network accessline 122
- [Storage File Share Service SDK Migration Guide from 8.x to 12.x](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/storage/azure-storage-file-share/migrationGuides/V8_V12.md) - Network accessline 122
- [Storage File Share Service SDK Migration Guide from 8.x to 12.x](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/storage/azure-storage-file-share/migrationGuides/V8_V12.md) - Network accessline 123
- [Migrate to azure-security-keyvault-secrets from azure-keyvault](https://aka.ms/azsdk/java/migrate/kv-secrets) - Network accessline 123
- [Migrate to azure-security-keyvault-secrets from azure-keyvault](https://aka.ms/azsdk/java/migrate/kv-secrets) - Network accessline 124
- [Migrate to azure-security-keyvault-keys from azure-keyvault](https://aka.ms/azsdk/java/migrate/kv-keys) - Network accessline 124
- [Migrate to azure-security-keyvault-keys from azure-keyvault](https://aka.ms/azsdk/java/migrate/kv-keys) - Network accessline 125
- [Migrate to azure-security-keyvault-certificates from azure-keyvault](https://aka.ms/azsdk/java/migrate/kv-cert) - Network accessline 125
- [Migrate to azure-security-keyvault-certificates from azure-keyvault](https://aka.ms/azsdk/java/migrate/kv-cert) - Network accessline 126
- [Migrate to `Azure-Compute-Batch` from `Microsoft-Azure-Batch`](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/batch/azure-compute-batch/MigrationGuide.md) - Network accessline 126
- [Migrate to `Azure-Compute-Batch` from `Microsoft-Azure-Batch`](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/batch/azure-compute-batch/MigrationGuide.md) - Network accessline 127
- [Migrate to `azure-ai-documentintelligence` from `azure-ai-formrecognizer`](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/documentintelligence/azure-ai-documentintelligence/MIGRATION_GUIDE.md) - Network accessline 127
- [Migrate to `azure-ai-documentintelligence` from `azure-ai-formrecognizer`](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/documentintelligence/azure-ai-documentintelligence/MIGRATION_GUIDE.md) - Network accessline 128
- [Migrate to `azure-ai-formrecognizer 4.0.0-beta.1 - above` from `azure-ai-formrecognizer 3.1.x - lower`](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/formrecognizer/azure-ai-formrecognizer/migration-guide.md) - Network accessline 128
- [Migrate to `azure-ai-formrecognizer 4.0.0-beta.1 - above` from `azure-ai-formrecognizer 3.1.x - lower`](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/formrecognizer/azure-ai-formrecognizer/migration-guide.md) - Network accessline 129
- [Migration Guide from Azure OpenAI Java SDK to OpenAI Java SDK](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/openai/azure-ai-openai-stainless/MIGRATION.md) - Network accessline 129
- [Migration Guide from Azure OpenAI Java SDK to OpenAI Java SDK](https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/openai/azure-ai-openai-stainless/MIGRATION.md) - Network accessline 130
- [Migrate to azure-monitor-query from azure-loganalytics and azure-applicationinsights-query](https://aka.ms/azsdk/java/migrate/monitorquery) - Network accessline 130
- [Migrate to azure-monitor-query from azure-loganalytics and azure-applicationinsights-query](https://aka.ms/azsdk/java/migrate/monitorquery)
skills/azure-upgrade/references/languages/java/bom-migration/bom-gradle-settings.md
- Network accessline 3
Some projects define version catalogs programmatically in `settings.gradle` / `settings.gradle.kts` instead of using a TOML file. OpenRewrite does not support this either ([openrewrite/rewrite#4852](https://github.com/openrewrite/rewrite/is - Network accessline 3
Some projects define version catalogs programmatically in `settings.gradle` / `settings.gradle.kts` instead of using a TOML file. OpenRewrite does not support this either ([openrewrite/rewrite#4852](https://github.com/openrewrite/rewrite/is
skills/azure-upgrade/references/languages/java/bom-migration/bom-gradle-toml.md
- Network accessline 3
OpenRewrite does not yet support TOML version catalogs ([openrewrite/rewrite#4400](https://github.com/openrewrite/rewrite/issues/4400)). Handle manually. - Network accessline 3
OpenRewrite does not yet support TOML version catalogs ([openrewrite/rewrite#4400](https://github.com/openrewrite/rewrite/issues/4400)). Handle manually.
skills/azure-upgrade/references/languages/java/bom-migration/bom-gradle.md
- Network accessline 24
Under the hood (OpenRewrite recipes): - **Add BOM**: `AddPlatformDependency` ([docs](https://docs.openrewrite.org/recipes/gradle/addplatformdependency)) - Network accessline 24
Under the hood (OpenRewrite recipes): - **Add BOM**: `AddPlatformDependency` ([docs](https://docs.openrewrite.org/recipes/gradle/addplatformdependency)) - Network accessline 25
- **Add BOM**: `AddPlatformDependency` ([docs](https://docs.openrewrite.org/recipes/gradle/addplatformdependency)) - Network accessline 25
- **Add BOM**: `AddPlatformDependency` ([docs](https://docs.openrewrite.org/recipes/gradle/addplatformdependency)) - Network accessline 26
- **Upgrade BOM**: `UpgradeDependencyVersion` ([docs](https://docs.openrewrite.org/recipes/gradle/upgradedependencyversion)) - Network accessline 26
- **Upgrade BOM**: `UpgradeDependencyVersion` ([docs](https://docs.openrewrite.org/recipes/gradle/upgradedependencyversion)) - Network accessline 27
- **Remove redundant versions**: `RemoveRedundantDependencyVersions` ([docs](https://docs.openrewrite.org/recipes/gradle/removeredundantdependencyversions)) - Network accessline 27
- **Remove redundant versions**: `RemoveRedundantDependencyVersions` ([docs](https://docs.openrewrite.org/recipes/gradle/removeredundantdependencyversions)) - Network accessline 84
For every Azure dependency whose group starts with `com.azure` and is managed by the BOM (verify against `https://repo1.maven.org/maven2/com/azure/azure-sdk-bom/{bom_version}/azure-sdk-bom-{bom_version}.pom`), strip the version coordinate. - Network accessline 84
For every Azure dependency whose group starts with `com.azure` and is managed by the BOM (verify against `https://repo1.maven.org/maven2/com/azure/azure-sdk-bom/{bom_version}/azure-sdk-bom-{bom_version}.pom`), strip the version coordinate.
skills/azure-upgrade/references/languages/java/bom-migration/bom-maven.md
- Network accessline 24
Under the hood (OpenRewrite recipes): - **Add BOM**: `AddManagedDependency` ([docs](https://docs.openrewrite.org/recipes/maven/addmanageddependency)) - Network accessline 24
Under the hood (OpenRewrite recipes): - **Add BOM**: `AddManagedDependency` ([docs](https://docs.openrewrite.org/recipes/maven/addmanageddependency)) - Network accessline 25
- **Add BOM**: `AddManagedDependency` ([docs](https://docs.openrewrite.org/recipes/maven/addmanageddependency)) - Network accessline 25
- **Add BOM**: `AddManagedDependency` ([docs](https://docs.openrewrite.org/recipes/maven/addmanageddependency)) - Network accessline 26
- **Upgrade BOM**: `UpgradeDependencyVersion` ([docs](https://docs.openrewrite.org/recipes/maven/upgradedependencyversion)) - Network accessline 26
- **Upgrade BOM**: `UpgradeDependencyVersion` ([docs](https://docs.openrewrite.org/recipes/maven/upgradedependencyversion)) - Network accessline 27
- **Remove redundant versions**: `RemoveRedundantDependencyVersions` ([docs](https://docs.openrewrite.org/recipes/maven/removeredundantdependencyversions)) - Network accessline 27
- **Remove redundant versions**: `RemoveRedundantDependencyVersions` ([docs](https://docs.openrewrite.org/recipes/maven/removeredundantdependencyversions)) - Network accessline 85
For every `<dependency>` whose `<groupId>` starts with `com.azure` (e.g. `com.azure`, `com.azure.resourcemanager`, `com.azure.spring`), check whether the BOM manages it (see the BOM POM at `https://repo1.maven.org/maven2/com/azure/azure-sdk - Network accessline 85
For every `<dependency>` whose `<groupId>` starts with `com.azure` (e.g. `com.azure`, `com.azure.resourcemanager`, `com.azure.spring`), check whether the BOM manages it (see the BOM POM at `https://repo1.maven.org/maven2/com/azure/azure-sdk
skills/azure-upgrade/references/languages/java/bom-migration/bom-migration.md
- Network accessline 39
If Python is not available or the `--get-latest-version` command fails, fetch `https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/boms/azure-sdk-bom/pom.xml` directly and use the `<version>` value declared in that BOM `pom. - Network accessline 39
If Python is not available or the `--get-latest-version` command fails, fetch `https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/boms/azure-sdk-bom/pom.xml` directly and use the `<version>` value declared in that BOM `pom. - Network accessline 57
> 💡 **Tip:** To check which artifacts are managed by the BOM, fetch > `https://repo1.maven.org/maven2/com/azure/azure-sdk-bom/{bom_version}/azure-sdk-bom-{bom_version}.pom` - Network accessline 57
> 💡 **Tip:** To check which artifacts are managed by the BOM, fetch > `https://repo1.maven.org/maven2/com/azure/azure-sdk-bom/{bom_version}/azure-sdk-bom-{bom_version}.pom` - Network accessline 58
> `https://repo1.maven.org/maven2/com/azure/azure-sdk-bom/{bom_version}/azure-sdk-bom-{bom_version}.pom` - Network accessline 58
> `https://repo1.maven.org/maven2/com/azure/azure-sdk-bom/{bom_version}/azure-sdk-bom-{bom_version}.pom`
skills/azure-upgrade/references/languages/java/package-specific/com.microsoft.azure.eventprocessorhost.md
- Network accessline 16
Replace usage of `InMemoryCheckpointManager` / `InMemoryLeaseManager` with [BlobCheckpointStore](https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/eventhubs/azure-messaging-eventhubs-checkpointstore-blob/src/main/java/com/azure/mess - Network accessline 16
Replace usage of `InMemoryCheckpointManager` / `InMemoryLeaseManager` with [BlobCheckpointStore](https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/eventhubs/azure-messaging-eventhubs-checkpointstore-blob/src/main/java/com/azure/mess
skills/azure-upgrade/references/languages/java/package-specific/com.microsoft.azure.management.md
skills/azure-upgrade/references/languages/java/scripts/upgrade_bom.py
- Executable scriptline 1
#!/usr/bin/env python3 - Executable scriptline 1
#!/usr/bin/env python3 - Network accessline 43
GROUP_ID = "com.azure" ARTIFACT_ID = "azure-sdk-bom" BOM_POM_URL = "https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/boms/azure-sdk-bom/pom.xml" - Network accessline 43
GROUP_ID = "com.azure" ARTIFACT_ID = "azure-sdk-bom" BOM_POM_URL = "https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/boms/azure-sdk-bom/pom.xml" - Network accessline 44
ARTIFACT_ID = "azure-sdk-bom" BOM_POM_URL = "https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/boms/azure-sdk-bom/pom.xml" POM_NAMESPACE = {"m": "http://maven.apache.org/POM/4.0.0"} - Network accessline 44
ARTIFACT_ID = "azure-sdk-bom" BOM_POM_URL = "https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/boms/azure-sdk-bom/pom.xml" POM_NAMESPACE = {"m": "http://maven.apache.org/POM/4.0.0"} - Network accessline 45
BOM_POM_URL = "https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/boms/azure-sdk-bom/pom.xml" - Network accessline 45
BOM_POM_URL = "https://raw.githubusercontent.com/Azure/azure-sdk-for-java/main/sdk/boms/azure-sdk-bom/pom.xml" - Network accessline 46
POM_NAMESPACE = {"m": "http://maven.apache.org/POM/4.0.0"} - Network accessline 46
POM_NAMESPACE = {"m": "http://maven.apache.org/POM/4.0.0"} - Network accessline 80
def _get_latest_bom_version() -> str: try: with urllib.request.urlopen(BOM_POM_URL, timeout=HTTP_TIMEOUT_SECONDS) as response: - Network accessline 80
def _get_latest_bom_version() -> str: try: with urllib.request.urlopen(BOM_POM_URL, timeout=HTTP_TIMEOUT_SECONDS) as response: - Network accessline 81
try: with urllib.request.urlopen(BOM_POM_URL, timeout=HTTP_TIMEOUT_SECONDS) as response: pom_xml = response.read() - Network accessline 81
try: with urllib.request.urlopen(BOM_POM_URL, timeout=HTTP_TIMEOUT_SECONDS) as response: pom_xml = response.read() - Network accessline 82
with urllib.request.urlopen(BOM_POM_URL, timeout=HTTP_TIMEOUT_SECONDS) as response: - Network accessline 82
with urllib.request.urlopen(BOM_POM_URL, timeout=HTTP_TIMEOUT_SECONDS) as response: - Network accessline 167
except ET.ParseError: return False ns = {"m": "http://maven.apache.org/POM/4.0.0"} - Network accessline 167
except ET.ParseError: return False ns = {"m": "http://maven.apache.org/POM/4.0.0"} - Network accessline 168
return False ns = {"m": "http://maven.apache.org/POM/4.0.0"} for dep in tree.findall(".//m:dependencyManagement/m:dependencies/m:dependency", ns): - Network accessline 168
return False ns = {"m": "http://maven.apache.org/POM/4.0.0"} for dep in tree.findall(".//m:dependencyManagement/m:dependencies/m:dependency", ns): - Network accessline 169
ns = {"m": "http://maven.apache.org/POM/4.0.0"} - Network accessline 169
ns = {"m": "http://maven.apache.org/POM/4.0.0"}
skills/azure-upgrade/references/languages/java/templates/PLAN_TEMPLATE.md
- Network accessline 198
- **Fluent API Changes** - **Challenge**: Method names and builder patterns differ between legacy and modern Azure Resource Manager. - **Strategy**: Follow the migration guide at https://aka.ms/java-track2-migration-guide for meth - Network accessline 198
- **Fluent API Changes** - **Challenge**: Method names and builder patterns differ between legacy and modern Azure Resource Manager. - **Strategy**: Follow the migration guide at https://aka.ms/java-track2-migration-guide for meth - Network accessline 199
- **Challenge**: Method names and builder patterns differ between legacy and modern Azure Resource Manager. - **Strategy**: Follow the migration guide at https://aka.ms/java-track2-migration-guide for method-level mappings. --> - Network accessline 199
- **Challenge**: Method names and builder patterns differ between legacy and modern Azure Resource Manager. - **Strategy**: Follow the migration guide at https://aka.ms/java-track2-migration-guide for method-level mappings. --> - Network accessline 200
- **Strategy**: Follow the migration guide at https://aka.ms/java-track2-migration-guide for method-level mappings. - Network accessline 200
- **Strategy**: Follow the migration guide at https://aka.ms/java-track2-migration-guide for method-level mappings.
skills/azure-upgrade/references/languages/java/templates/SUMMARY_TEMPLATE.md
- Network accessline 111
- **Fluent API Changes** - **Issue**: Method names differ between legacy Azure.management and modern azure-resourcemanager. - **Resolution**: Followed migration guide at https://aka.ms/java-track2-migration-guide - Network accessline 111
- **Fluent API Changes** - **Issue**: Method names differ between legacy Azure.management and modern azure-resourcemanager. - **Resolution**: Followed migration guide at https://aka.ms/java-track2-migration-guide - Network accessline 112
- **Issue**: Method names differ between legacy Azure.management and modern azure-resourcemanager. - **Resolution**: Followed migration guide at https://aka.ms/java-track2-migration-guide - **Files Changed**: ResourceProvisioner.jav - Network accessline 112
- **Issue**: Method names differ between legacy Azure.management and modern azure-resourcemanager. - **Resolution**: Followed migration guide at https://aka.ms/java-track2-migration-guide - **Files Changed**: ResourceProvisioner.jav - Network accessline 113
- **Resolution**: Followed migration guide at https://aka.ms/java-track2-migration-guide - Network accessline 113
- **Resolution**: Followed migration guide at https://aka.ms/java-track2-migration-guide
skills/azure-upgrade/references/services/functions/consumption-to-flex/linux/automation.md
- Network accessline 4
> All scripts use `bash` syntax compatible with Azure Cloud Shell. For PowerShell, adapt accordingly. > > **Source docs**: [Linux migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migration/migrate-plan-consumption-to - Network accessline 4
> All scripts use `bash` syntax compatible with Azure Cloud Shell. For PowerShell, adapt accordingly. > > **Source docs**: [Linux migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migration/migrate-plan-consumption-to - Network accessline 6
> **Source docs**: [Linux migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migration/migrate-plan-consumption-to-flex?pivots=platform-linux) - Network accessline 6
> **Source docs**: [Linux migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migration/migrate-plan-consumption-to-flex?pivots=platform-linux) - Network accessline 89
If this returns output, determine whether the source app actually uses those certificates. Plan to re-add used certificates after migration with the documented [site-scoped certificate process](https://learn.microsoft.com/en-us/azure/azure- - Network accessline 89
If this returns output, determine whether the source app actually uses those certificates. Plan to re-add used certificates after migration with the documented [site-scoped certificate process](https://learn.microsoft.com/en-us/azure/azure- - Network accessline 209
if [[ "$runFromPackage" =~ ^https:// ]]; then echo "Downloading the remote deployment package..." curl --fail --location --silent --show-error --output "$UPGRADE_DIR/source-package.zip" "$runFromPackage" - Network accessline 209
if [[ "$runFromPackage" =~ ^https:// ]]; then echo "Downloading the remote deployment package..." curl --fail --location --silent --show-error --output "$UPGRADE_DIR/source-package.zip" "$runFromPackage" - Network accessline 210
echo "Downloading the remote deployment package..." curl --fail --location --silent --show-error --output "$UPGRADE_DIR/source-package.zip" "$runFromPackage" echo "Downloaded the remote deployment package without displaying - Network accessline 210
echo "Downloading the remote deployment package..." curl --fail --location --silent --show-error --output "$UPGRADE_DIR/source-package.zip" "$runFromPackage" echo "Downloaded the remote deployment package without displaying - Network accessline 211
curl --fail --location --silent --show-error --output "$UPGRADE_DIR/source-package.zip" "$runFromPackage" - Network accessline 211
curl --fail --location --silent --show-error --output "$UPGRADE_DIR/source-package.zip" "$runFromPackage" - Network accessline 352
- [Build and deploy with Azure Pipelines](https://learn.microsoft.com/en-us/azure/azure-functions/functions-how-to-azure-devops) - Network accessline 352
- [Build and deploy with Azure Pipelines](https://learn.microsoft.com/en-us/azure/azure-functions/functions-how-to-azure-devops) - Network accessline 353
- [Build and deploy with GitHub Actions](https://learn.microsoft.com/en-us/azure/azure-functions/functions-how-to-github-actions) - Network accessline 353
- [Build and deploy with GitHub Actions](https://learn.microsoft.com/en-us/azure/azure-functions/functions-how-to-github-actions) - Network accessline 363
If `func` is unavailable or the reported major version is not `4`, stop and provide the [Core Tools installation guidance](https://learn.microsoft.com/en-us/azure/azure-functions/functions-run-local#install-the-azure-functions-core-tools). - Network accessline 363
If `func` is unavailable or the reported major version is not `4`, stop and provide the [Core Tools installation guidance](https://learn.microsoft.com/en-us/azure/azure-functions/functions-run-local#install-the-azure-functions-core-tools). - Network accessline 401
HTTP_STATUS=$(curl -s -o /dev/null -w "%{http_code}" "https://$DEFAULT_HOST") - Network accessline 401
HTTP_STATUS=$(curl -s -o /dev/null -w "%{http_code}" "https://$DEFAULT_HOST") - Network accessline 418
# Test an HTTP trigger function curl -s -o /dev/null -w "%{http_code}" "https://$DEFAULT_HOST/api/<FUNCTION_NAME>" - Network accessline 418
# Test an HTTP trigger function curl -s -o /dev/null -w "%{http_code}" "https://$DEFAULT_HOST/api/<FUNCTION_NAME>" - Network accessline 419
curl -s -o /dev/null -w "%{http_code}" "https://$DEFAULT_HOST/api/<FUNCTION_NAME>" - Network accessline 419
curl -s -o /dev/null -w "%{http_code}" "https://$DEFAULT_HOST/api/<FUNCTION_NAME>"
skills/azure-upgrade/references/services/functions/consumption-to-flex/linux/workflow.md
- Network accessline 4
> **Target**: Azure Functions Flex Consumption Plan (FC1/FlexConsumption) > **Platform**: Linux → Linux. For a Windows Consumption source, use the [Windows workflow](../windows/workflow.md). > **Docs**: [Linux migration guide](https://learn - Network accessline 4
> **Target**: Azure Functions Flex Consumption Plan (FC1/FlexConsumption) > **Platform**: Linux → Linux. For a Windows Consumption source, use the [Windows workflow](../windows/workflow.md). > **Docs**: [Linux migration guide](https://learn - Network accessline 6
> **Docs**: [Linux migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migration/migrate-plan-consumption-to-flex?pivots=platform-linux) - Network accessline 6
> **Docs**: [Linux migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migration/migrate-plan-consumption-to-flex?pivots=platform-linux) - Network accessline 139
1. **Smoke test** — Get the app’s default hostname via `az functionapp show --query defaultHostName -o tsv`, then hit that URL and confirm it returns a non-error response (HTTP 2xx/4xx, not connection refused or 503). This is the minimum ba - Network accessline 139
1. **Smoke test** — Get the app’s default hostname via `az functionapp show --query defaultHostName -o tsv`, then hit that URL and confirm it returns a non-error response (HTTP 2xx/4xx, not connection refused or 503). This is the minimum ba - Network accessline 140
2. Verify the app is running on Flex Consumption (`az functionapp show --query sku`) 3. Test HTTP trigger endpoints (e.g. `curl https://<DEFAULT_HOST>/api/<FUNCTION_NAME>`) 4. Capture and compare performance benchmarks - Network accessline 140
2. Verify the app is running on Flex Consumption (`az functionapp show --query sku`) 3. Test HTTP trigger endpoints (e.g. `curl https://<DEFAULT_HOST>/api/<FUNCTION_NAME>`) 4. Capture and compare performance benchmarks - Network accessline 141
3. Test HTTP trigger endpoints (e.g. `curl https://<DEFAULT_HOST>/api/<FUNCTION_NAME>`) - Network accessline 141
3. Test HTTP trigger endpoints (e.g. `curl https://<DEFAULT_HOST>/api/<FUNCTION_NAME>`) - Network accessline 225
- [Flex Consumption plan overview](https://learn.microsoft.com/en-us/azure/azure-functions/flex-consumption-plan) - Network accessline 225
- [Flex Consumption plan overview](https://learn.microsoft.com/en-us/azure/azure-functions/flex-consumption-plan) - Network accessline 226
- [How to use the Flex Consumption plan](https://learn.microsoft.com/en-us/azure/azure-functions/flex-consumption-how-to) - Network accessline 226
- [How to use the Flex Consumption plan](https://learn.microsoft.com/en-us/azure/azure-functions/flex-consumption-how-to) - Network accessline 227
- [Azure CLI flex-migration commands](https://learn.microsoft.com/en-us/cli/azure/functionapp/flex-migration) (Linux only) - Network accessline 227
- [Azure CLI flex-migration commands](https://learn.microsoft.com/en-us/cli/azure/functionapp/flex-migration) (Linux only) - Network accessline 228
- [Flex Consumption IaC samples](https://github.com/Azure-Samples/azure-functions-flex-consumption-samples/tree/main/IaC) - Network accessline 228
- [Flex Consumption IaC samples](https://github.com/Azure-Samples/azure-functions-flex-consumption-samples/tree/main/IaC) - Network accessline 229
- [Flex Consumption plan deprecations](https://learn.microsoft.com/en-us/azure/azure-functions/functions-app-settings#flex-consumption-plan-deprecations) - Network accessline 229
- [Flex Consumption plan deprecations](https://learn.microsoft.com/en-us/azure/azure-functions/functions-app-settings#flex-consumption-plan-deprecations)
skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation.md
- Network accessline 12
> Replace `<PLACEHOLDERS>` (e.g. `<APP_NAME>`, `<RESOURCE_GROUP>`) with literal values before running each command. Each `az` command is a single line for cross-shell safety; conditional steps are described in prose between code blocks. > > - Network accessline 12
> Replace `<PLACEHOLDERS>` (e.g. `<APP_NAME>`, `<RESOURCE_GROUP>`) with literal values before running each command. Each `az` command is a single line for cross-shell safety; conditional steps are described in prose between code blocks. > > - Network accessline 13
> > **Source docs**: [Windows migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migration/migrate-plan-consumption-to-flex?pivots=platform-windows) > - Network accessline 13
> > **Source docs**: [Windows migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migration/migrate-plan-consumption-to-flex?pivots=platform-windows) > - Network accessline 14
> **Source docs**: [Windows migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migration/migrate-plan-consumption-to-flex?pivots=platform-windows) - Network accessline 14
> **Source docs**: [Windows migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migration/migrate-plan-consumption-to-flex?pivots=platform-windows)
skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/app-creation.md
- Network accessline 69
If either account prohibits Shared Key access, or policy requires identity-based storage, **do not run the `az functionapp create` command below**. Its basic flow configures host storage with a connection string; deployment-storage identity - Network accessline 69
If either account prohibits Shared Key access, or policy requires identity-based storage, **do not run the `az functionapp create` command below**. Its basic flow configures host storage with a connection string; deployment-storage identity - Network accessline 80
1. Load and reconcile the saved progress using [Migration Progress](../progress-tracking.md). Keep Step 4b blocked while checking the target. If the progress file is missing, stop and ask for its location rather than guessing prior work. If - Network accessline 80
1. Load and reconcile the saved progress using [Migration Progress](../progress-tracking.md). Keep Step 4b blocked while checking the target. If the progress file is missing, stop and ask for its location rather than guessing prior work. If - Network accessline 81
2. Require a full `Microsoft.Web/sites` resource ID, not a slot, and reject the source app itself. Resolve the target read-only. Require the source and target to be in the active subscription because subsequent migration commands assume tha - Network accessline 81
2. Require a full `Microsoft.Web/sites` resource ID, not a slot, and reject the source app itself. Resolve the target read-only. Require the source and target to be in the active subscription because subsequent migration commands assume tha - Network accessline 82
3. Verify managed identity configuration and effective role assignments for **both** [host storage](https://learn.microsoft.com/en-us/azure/azure-functions/manage-connections?pivots=functions-auth-identity&tabs=host) and [deployment storage - Network accessline 82
3. Verify managed identity configuration and effective role assignments for **both** [host storage](https://learn.microsoft.com/en-us/azure/azure-functions/manage-connections?pivots=functions-auth-identity&tabs=host) and [deployment storage - Network accessline 104
> 💡 This command matches the basic Flex Consumption create flow documented in [Create a Flex Consumption app (MS Learn)](https://learn.microsoft.com/en-us/azure/azure-functions/flex-consumption-how-to?tabs=azure-cli%2Cazure-cli-publish&pivo - Network accessline 104
> 💡 This command matches the basic Flex Consumption create flow documented in [Create a Flex Consumption app (MS Learn)](https://learn.microsoft.com/en-us/azure/azure-functions/flex-consumption-how-to?tabs=azure-cli%2Cazure-cli-publish&pivo - Network accessline 112
This is a post-create hardening pass that mirrors the optional pattern documented in [Configure deployment settings (MS Learn)](https://learn.microsoft.com/en-us/azure/azure-functions/flex-consumption-how-to?tabs=azure-cli%2Cazure-cli-publi - Network accessline 112
This is a post-create hardening pass that mirrors the optional pattern documented in [Configure deployment settings (MS Learn)](https://learn.microsoft.com/en-us/azure/azure-functions/flex-consumption-how-to?tabs=azure-cli%2Cazure-cli-publi - Network accessline 150
> 💡 **Deployment storage is separate**: The commands above configure only runtime `AzureWebJobsStorage`. To also move the One Deploy package container off the connection string, follow [Configure deployment settings](https://learn.microsoft - Network accessline 150
> 💡 **Deployment storage is separate**: The commands above configure only runtime `AzureWebJobsStorage`. To also move the One Deploy package container off the connection string, follow [Configure deployment settings](https://learn.microsoft
skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/app-settings.md
- Network accessline 17
> Before reading values, compare mapped source names case-insensitively. If two source names map to the same target name, stop and use `ask_user`; never silently choose between them. An existing target name is not a collision: after the use - Network accessline 17
> Before reading values, compare mapped source names case-insensitively. If two source names map to the same target name, stop and use `ask_user`; never silently choose between them. An existing target name is not a collision: after the use - Network accessline 18
> > Surface this once as a **post-migration follow-up** (do not block 4c on it): connection strings or keys for **Azure services** (Storage, Service Bus, Event Hubs, Cosmos DB, Key Vault) can be replaced with [identity-based connections](ht - Network accessline 18
> > Surface this once as a **post-migration follow-up** (do not block 4c on it): connection strings or keys for **Azure services** (Storage, Service Bus, Event Hubs, Cosmos DB, Key Vault) can be replaced with [identity-based connections](ht - Network accessline 19
> Surface this once as a **post-migration follow-up** (do not block 4c on it): connection strings or keys for **Azure services** (Storage, Service Bus, Event Hubs, Cosmos DB, Key Vault) can be replaced with [identity-based connections](http - Network accessline 19
> Surface this once as a **post-migration follow-up** (do not block 4c on it): connection strings or keys for **Azure services** (Storage, Service Bus, Event Hubs, Cosmos DB, Key Vault) can be replaced with [identity-based connections](http - Network accessline 102
} $body = @{ properties = $merged } | ConvertTo-Json -Compress -Depth 10 $accessToken = az account get-access-token --resource https://management.azure.com/ --query accessToken -o tsv - Network accessline 102
} $body = @{ properties = $merged } | ConvertTo-Json -Compress -Depth 10 $accessToken = az account get-access-token --resource https://management.azure.com/ --query accessToken -o tsv - Network accessline 103
$body = @{ properties = $merged } | ConvertTo-Json -Compress -Depth 10 $accessToken = az account get-access-token --resource https://management.azure.com/ --query accessToken -o tsv if ($LASTEXITCODE -ne 0 -or [string]::IsNullOrWhit - Network accessline 103
$body = @{ properties = $merged } | ConvertTo-Json -Compress -Depth 10 $accessToken = az account get-access-token --resource https://management.azure.com/ --query accessToken -o tsv if ($LASTEXITCODE -ne 0 -or [string]::IsNullOrWhit - Network accessline 104
$accessToken = az account get-access-token --resource https://management.azure.com/ --query accessToken -o tsv - Network accessline 104
$accessToken = az account get-access-token --resource https://management.azure.com/ --query accessToken -o tsv - Network accessline 106
$secureToken = ConvertTo-SecureString ($accessToken.Trim()) -AsPlainText -Force $accessToken = $null $uri = "https://management.azure.com$base/<RESOURCE_GROUP>/providers/Microsoft.Web/sites/<NEW_APP_NAME>/config/appsettings?api-vers - Network accessline 106
$secureToken = ConvertTo-SecureString ($accessToken.Trim()) -AsPlainText -Force $accessToken = $null $uri = "https://management.azure.com$base/<RESOURCE_GROUP>/providers/Microsoft.Web/sites/<NEW_APP_NAME>/config/appsettings?api-vers - Network accessline 107
$accessToken = $null $uri = "https://management.azure.com$base/<RESOURCE_GROUP>/providers/Microsoft.Web/sites/<NEW_APP_NAME>/config/appsettings?api-version=$api" Invoke-RestMethod -Method Patch -Uri $uri -Authentication Bearer -Toke - Network accessline 107
$accessToken = $null $uri = "https://management.azure.com$base/<RESOURCE_GROUP>/providers/Microsoft.Web/sites/<NEW_APP_NAME>/config/appsettings?api-version=$api" Invoke-RestMethod -Method Patch -Uri $uri -Authentication Bearer -Toke - Network accessline 108
$uri = "https://management.azure.com$base/<RESOURCE_GROUP>/providers/Microsoft.Web/sites/<NEW_APP_NAME>/config/appsettings?api-version=$api" - Network accessline 108
$uri = "https://management.azure.com$base/<RESOURCE_GROUP>/providers/Microsoft.Web/sites/<NEW_APP_NAME>/config/appsettings?api-version=$api"
skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/built-in-authentication.md
- Network accessline 15
For each enabled provider, identify the target callback URI required by that provider. Easy Auth callback URIs generally use `https://<TARGET_HOSTNAME>/.auth/login/<PROVIDER>/callback`, but verify the exact URI against the provider-specific - Network accessline 15
For each enabled provider, identify the target callback URI required by that provider. Easy Auth callback URIs generally use `https://<TARGET_HOSTNAME>/.auth/login/<PROVIDER>/callback`, but verify the exact URI against the provider-specific
skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/code-deployment.md
- Network accessline 72
- [Build and deploy with Azure Pipelines](https://learn.microsoft.com/en-us/azure/azure-functions/functions-how-to-azure-devops) - Network accessline 72
- [Build and deploy with Azure Pipelines](https://learn.microsoft.com/en-us/azure/azure-functions/functions-how-to-azure-devops) - Network accessline 73
- [Build and deploy with GitHub Actions](https://learn.microsoft.com/en-us/azure/azure-functions/functions-how-to-github-actions) - Network accessline 73
- [Build and deploy with GitHub Actions](https://learn.microsoft.com/en-us/azure/azure-functions/functions-how-to-github-actions) - Network accessline 83
If `func` is unavailable or the reported major version is not `4`, stop and provide the [Core Tools installation guidance](https://learn.microsoft.com/en-us/azure/azure-functions/functions-run-local#install-the-azure-functions-core-tools). - Network accessline 83
If `func` is unavailable or the reported major version is not `4`, stop and provide the [Core Tools installation guidance](https://learn.microsoft.com/en-us/azure/azure-functions/functions-run-local#install-the-azure-functions-core-tools).
skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/deployment-package.md
- Network accessline 13
runFromPackage=$(az functionapp config appsettings list --name <APP_NAME> --resource-group <RESOURCE_GROUP> --query "[?name=='WEBSITE_RUN_FROM_PACKAGE'].value | [0]" -o tsv) if [[ "$runFromPackage" =~ ^https:// ]]; then curl --fail --lo - Network accessline 13
runFromPackage=$(az functionapp config appsettings list --name <APP_NAME> --resource-group <RESOURCE_GROUP> --query "[?name=='WEBSITE_RUN_FROM_PACKAGE'].value | [0]" -o tsv) if [[ "$runFromPackage" =~ ^https:// ]]; then curl --fail --lo - Network accessline 14
if [[ "$runFromPackage" =~ ^https:// ]]; then curl --fail --location --silent --show-error --output "$UPGRADE_DIR/source-package.zip" "$runFromPackage" echo "Downloaded the remote deployment package without displaying its URL." - Network accessline 14
if [[ "$runFromPackage" =~ ^https:// ]]; then curl --fail --location --silent --show-error --output "$UPGRADE_DIR/source-package.zip" "$runFromPackage" echo "Downloaded the remote deployment package without displaying its URL." - Network accessline 15
curl --fail --location --silent --show-error --output "$UPGRADE_DIR/source-package.zip" "$runFromPackage" - Network accessline 15
curl --fail --location --silent --show-error --output "$UPGRADE_DIR/source-package.zip" "$runFromPackage" - Dangerous shell operationline 84
rm <UPGRADE_DIR>/packagename.txt - Dangerous shell operationline 84
rm <UPGRADE_DIR>/packagename.txt
skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/discovery-and-assessment.md
- Network accessline 99
If this returns output, determine which certificates the source app actually uses. Record whether each used certificate is private or public and confirm the target can fit within the Flex Consumption limit of three private and three public - Network accessline 99
If this returns output, determine which certificates the source app actually uses. Record whether each used certificate is private or public and confirm the target can fit within the Flex Consumption limit of three private and three public - Network accessline 113
For all Blob triggers, inspect the planned target inbound configuration (or the existing target's public network access, private endpoints, and main-site access restrictions). Event Grid push delivery [can't deliver through private endpoint - Network accessline 113
For all Blob triggers, inspect the planned target inbound configuration (or the existing target's public network access, private endpoints, and main-site access restrictions). Event Grid push delivery [can't deliver through private endpoint
skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/networking-and-storage.md
- Network accessline 25
Adding a hostname binding does not update its DNS record or move traffic to the target. Verify domain ownership as described in [Migrate an active DNS name](https://learn.microsoft.com/en-us/azure/app-service/manage-custom-dns-migrate-domai - Network accessline 25
Adding a hostname binding does not update its DNS record or move traffic to the target. Verify domain ownership as described in [Migrate an active DNS name](https://learn.microsoft.com/en-us/azure/app-service/manage-custom-dns-migrate-domai
skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/trigger-safety-and-monitoring.md
- Network accessline 7
> HTTP triggers are intentionally left enabled — they don't pull from a queue, so the new app cannot "steal" HTTP traffic. Clients must be redirected to the new hostname explicitly, which gives you the same safety as disabling. > > Referenc - Network accessline 7
> HTTP triggers are intentionally left enabled — they don't pull from a queue, so the new app cannot "steal" HTTP traffic. Clients must be redirected to the new hostname explicitly, which gives you the same safety as disabling. > > Referenc - Network accessline 8
> > Reference: [Disable functions in Azure Functions](https://learn.microsoft.com/en-us/azure/azure-functions/disable-function). > - Network accessline 8
> > Reference: [Disable functions in Azure Functions](https://learn.microsoft.com/en-us/azure/azure-functions/disable-function). > - Network accessline 9
> Reference: [Disable functions in Azure Functions](https://learn.microsoft.com/en-us/azure/azure-functions/disable-function). - Network accessline 9
> Reference: [Disable functions in Azure Functions](https://learn.microsoft.com/en-us/azure/azure-functions/disable-function). - Network accessline 149
If Step 2e identified certificates used by the source app, re-add only those certificates using the documented [site-scoped certificate process](https://learn.microsoft.com/en-us/azure/azure-functions/flex-consumption-how-to#configure-site- - Network accessline 149
If Step 2e identified certificates used by the source app, re-add only those certificates using the documented [site-scoped certificate process](https://learn.microsoft.com/en-us/azure/azure-functions/flex-consumption-how-to#configure-site-
skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/validation-and-cutover.md
- Network accessline 36
curl -s -o /dev/null -w "%{http_code}\n" "https://<HOSTNAME>" - Network accessline 36
curl -s -o /dev/null -w "%{http_code}\n" "https://<HOSTNAME>" - Network accessline 60
curl -s -o /dev/null -w "%{http_code}\n" "https://<HOSTNAME>/api/<FUNCTION_NAME>" - Network accessline 60
curl -s -o /dev/null -w "%{http_code}\n" "https://<HOSTNAME>/api/<FUNCTION_NAME>"
skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/workflow.md
- Network accessline 4
> **Target**: Azure Functions Flex Consumption Plan (FC1/FlexConsumption) > **Platform**: Windows → Linux (Flex Consumption is Linux-based) > **Docs**: [Windows migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migrat - Network accessline 4
> **Target**: Azure Functions Flex Consumption Plan (FC1/FlexConsumption) > **Platform**: Windows → Linux (Flex Consumption is Linux-based) > **Docs**: [Windows migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migrat - Network accessline 6
> **Docs**: [Windows migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migration/migrate-plan-consumption-to-flex?pivots=platform-windows) - Network accessline 6
> **Docs**: [Windows migration guide](https://learn.microsoft.com/en-us/azure/azure-functions/migration/migrate-plan-consumption-to-flex?pivots=platform-windows) - Network accessline 39
- **Deployment model**: Windows Consumption uses Azure Files (SMB share via `WEBSITE_CONTENTAZUREFILECONNECTIONSTRING`/`WEBSITE_CONTENTSHARE`); Flex uses blob-based One Deploy (immutable zip packages in Azure Blob Storage). - **`az function - Network accessline 39
- **Deployment model**: Windows Consumption uses Azure Files (SMB share via `WEBSITE_CONTENTAZUREFILECONNECTIONSTRING`/`WEBSITE_CONTENTSHARE`); Flex uses blob-based One Deploy (immutable zip packages in Azure Blob Storage). - **`az function - Network accessline 41
- **Elastic Premium alternative**: Apps with hard Windows dependencies that cannot be removed can migrate to [Elastic Premium on Windows](https://learn.microsoft.com/en-us/azure/azure-functions/functions-premium-plan) instead of Flex Consum - Network accessline 41
- **Elastic Premium alternative**: Apps with hard Windows dependencies that cannot be removed can migrate to [Elastic Premium on Windows](https://learn.microsoft.com/en-us/azure/azure-functions/functions-premium-plan) instead of Flex Consum - Network accessline 77
| Azure Government | ❌ Not available | Cannot migrate yet | | MSDeploy / FTP / Kudu git deploy | ❌ Not supported | Switch to `az functionapp deploy` or `func azure functionapp publish` | | PowerShell managed dependencies | ❌ Not supported | - Network accessline 77
| Azure Government | ❌ Not available | Cannot migrate yet | | MSDeploy / FTP / Kudu git deploy | ❌ Not supported | Switch to `az functionapp deploy` or `func azure functionapp publish` | | PowerShell managed dependencies | ❌ Not supported | - Network accessline 79
| PowerShell managed dependencies | ❌ Not supported | Package all required modules in the app-root `Modules` folder before deployment; verify Linux compatibility. `requirements.psd1` alone doesn't install modules on Flex Consumption. See [P - Network accessline 79
| PowerShell managed dependencies | ❌ Not supported | Package all required modules in the app-root `Modules` folder before deployment; verify Linux compatibility. `requirements.psd1` alone doesn't install modules on Flex Consumption. See [P - Network accessline 90
| PowerShell Windows-only modules (WMI, registry, COM) | `requirements.psd1` module imports | Replace with cross-platform alternatives or remove | | Windows certificate store access | Code review | Migrate to file-based certificate loading - Network accessline 90
| PowerShell Windows-only modules (WMI, registry, COM) | `requirements.psd1` module imports | Replace with cross-platform alternatives or remove | | Windows certificate store access | Code review | Migrate to file-based certificate loading - Network accessline 91
| Windows certificate store access | Code review | Migrate to file-based certificate loading | | Unsupported language runtime version | Site config | Upgrade to a [supported version](https://learn.microsoft.com/en-us/azure/azure-functions/s - Network accessline 91
| Windows certificate store access | Code review | Migrate to file-based certificate loading | | Unsupported language runtime version | Site config | Upgrade to a [supported version](https://learn.microsoft.com/en-us/azure/azure-functions/s - Network accessline 92
| Unsupported language runtime version | Site config | Upgrade to a [supported version](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) | - Network accessline 92
| Unsupported language runtime version | Site config | Upgrade to a [supported version](https://learn.microsoft.com/en-us/azure/azure-functions/supported-languages) | - Network accessline 95
> 💡 **Elastic Premium escape hatch**: Apps with hard Windows dependencies that cannot be removed can migrate to [Elastic Premium on Windows](https://learn.microsoft.com/en-us/azure/azure-functions/functions-premium-plan) as an alternative. - Network accessline 95
> 💡 **Elastic Premium escape hatch**: Apps with hard Windows dependencies that cannot be removed can migrate to [Elastic Premium on Windows](https://learn.microsoft.com/en-us/azure/azure-functions/functions-premium-plan) as an alternative. - Network accessline 110
> 💡 Constraints (from the underlying [MS Learn create flow](https://learn.microsoft.com/en-us/azure/azure-functions/flex-consumption-how-to?tabs=azure-cli%2Cazure-cli-publish&pivots=programming-language-csharp#create-a-flex-consumption-app) - Network accessline 110
> 💡 Constraints (from the underlying [MS Learn create flow](https://learn.microsoft.com/en-us/azure/azure-functions/flex-consumption-how-to?tabs=azure-cli%2Cazure-cli-publish&pivots=programming-language-csharp#create-a-flex-consumption-app) - Network accessline 225
1. **Smoke test** — Get the app's default hostname via `az functionapp show --query defaultHostName -o tsv`, then hit that URL and confirm it returns a non-error response (HTTP 2xx/4xx, not connection refused or 503). If an intentional acce - Network accessline 225
1. **Smoke test** — Get the app's default hostname via `az functionapp show --query defaultHostName -o tsv`, then hit that URL and confirm it returns a non-error response (HTTP 2xx/4xx, not connection refused or 503). If an intentional acce - Network accessline 226
2. Verify the app is running on Flex Consumption (`az functionapp show --query sku`) 3. Test HTTP trigger endpoints (e.g. `curl https://<DEFAULT_HOST>/api/<FUNCTION_NAME>`) 4. **Per-function validation and cutover for event-driven triggers* - Network accessline 226
2. Verify the app is running on Flex Consumption (`az functionapp show --query sku`) 3. Test HTTP trigger endpoints (e.g. `curl https://<DEFAULT_HOST>/api/<FUNCTION_NAME>`) 4. **Per-function validation and cutover for event-driven triggers* - Network accessline 227
3. Test HTTP trigger endpoints (e.g. `curl https://<DEFAULT_HOST>/api/<FUNCTION_NAME>`) - Network accessline 227
3. Test HTTP trigger endpoints (e.g. `curl https://<DEFAULT_HOST>/api/<FUNCTION_NAME>`) - Instruction override signalline 228
4. **Per-function validation and cutover for event-driven triggers** — either validate the target against isolated test resources without changing the source, or use a production cutover transaction. For production, obtain function-specific - Instruction override signalline 228
4. **Per-function validation and cutover for event-driven triggers** — either validate the target against isolated test resources without changing the source, or use a production cutover transaction. For production, obtain function-specific - Instruction override signalline 244
> ✅ **Recommended safety net**: When the user approves [Step 4j](automation/trigger-safety-and-monitoring.md#4j-choose-the-pre-deployment-state-of-non-http-functions), non-HTTP functions are disabled before deployment. Phase 6 then uses iso - Instruction override signalline 244
> ✅ **Recommended safety net**: When the user approves [Step 4j](automation/trigger-safety-and-monitoring.md#4j-choose-the-pre-deployment-state-of-non-http-functions), non-HTTP functions are disabled before deployment. Phase 6 then uses iso
skills/azure-upgrade/references/services/redis/redis-to-amr.md
- Network accessline 10
| Source SKU | ARM Resource Type | CLI / PowerShell | Dedicated Skill | Repo | |---|---|---|---|---| | **ACR / OSS Redis** — Basic, Standard, Premium (C0–C6, P1–P5) | `Microsoft.Cache/redis` | `az redis`, `*-AzRedisCache` | `amr-migration-s - Network accessline 10
| Source SKU | ARM Resource Type | CLI / PowerShell | Dedicated Skill | Repo | |---|---|---|---|---| | **ACR / OSS Redis** — Basic, Standard, Premium (C0–C6, P1–P5) | `Microsoft.Cache/redis` | `az redis`, `*-AzRedisCache` | `amr-migration-s - Network accessline 11
|---|---|---|---|---| | **ACR / OSS Redis** — Basic, Standard, Premium (C0–C6, P1–P5) | `Microsoft.Cache/redis` | `az redis`, `*-AzRedisCache` | `amr-migration-skill` | https://github.com/AzureManagedRedis/amr-migration-skill | | **ACRE** — - Network accessline 11
|---|---|---|---|---| | **ACR / OSS Redis** — Basic, Standard, Premium (C0–C6, P1–P5) | `Microsoft.Cache/redis` | `az redis`, `*-AzRedisCache` | `amr-migration-skill` | https://github.com/AzureManagedRedis/amr-migration-skill | | **ACRE** — - Network accessline 12
| **ACR / OSS Redis** — Basic, Standard, Premium (C0–C6, P1–P5) | `Microsoft.Cache/redis` | `az redis`, `*-AzRedisCache` | `amr-migration-skill` | https://github.com/AzureManagedRedis/amr-migration-skill | - Network accessline 12
| **ACR / OSS Redis** — Basic, Standard, Premium (C0–C6, P1–P5) | `Microsoft.Cache/redis` | `az redis`, `*-AzRedisCache` | `amr-migration-skill` | https://github.com/AzureManagedRedis/amr-migration-skill | - Network accessline 13
| **ACRE** — Enterprise (`Enterprise_E*`), Enterprise Flash (`EnterpriseFlash_F*`) | `Microsoft.Cache/redisEnterprise` | `az redisenterprise`, `*-AzRedisEnterprise*` | `acre-to-amr-migration-skill` | https://github.com/AzureManagedRedis/acr - Network accessline 13
| **ACRE** — Enterprise (`Enterprise_E*`), Enterprise Flash (`EnterpriseFlash_F*`) | `Microsoft.Cache/redisEnterprise` | `az redisenterprise`, `*-AzRedisEnterprise*` | `acre-to-amr-migration-skill` | https://github.com/AzureManagedRedis/acr - Network accessline 48
- IaC template migration for ARM, Bicep, and Terraform with worked before/after examples - Feature comparison and retirement FAQ - **Retirement deadlines this skill addresses**: ACR Basic/Standard/Premium tiers are being retired — for the c - Network accessline 48
- IaC template migration for ARM, Bicep, and Terraform with worked before/after examples - Feature comparison and retirement FAQ - **Retirement deadlines this skill addresses**: ACR Basic/Standard/Premium tiers are being retired — for the c - Network accessline 50
- **Retirement deadlines this skill addresses**: ACR Basic/Standard/Premium tiers are being retired — for the current retirement and creation-block dates, see the [official ACR retirement announcement](https://learn.microsoft.com/en-us/azur - Network accessline 50
- **Retirement deadlines this skill addresses**: ACR Basic/Standard/Premium tiers are being retired — for the current retirement and creation-block dates, see the [official ACR retirement announcement](https://learn.microsoft.com/en-us/azur - Network accessline 60
- Reusable polling scripts (`Poll-MigrationStatus.ps1`, `poll-migration-status.sh`) - Post-migration ACRE resource cleanup - **Retirement deadline this skill addresses**: ACRE / Enterprise Flash are being retired — for the current retiremen - Network accessline 60
- Reusable polling scripts (`Poll-MigrationStatus.ps1`, `poll-migration-status.sh`) - Post-migration ACRE resource cleanup - **Retirement deadline this skill addresses**: ACRE / Enterprise Flash are being retired — for the current retiremen - Network accessline 62
- **Retirement deadline this skill addresses**: ACRE / Enterprise Flash are being retired — for the current retirement date, see the [official ACR retirement announcement](https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache- - Network accessline 62
- **Retirement deadline this skill addresses**: ACRE / Enterprise Flash are being retired — for the current retirement date, see the [official ACR retirement announcement](https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache- - Network accessline 98
- AMR Migration Skill (ACR → AMR): https://github.com/AzureManagedRedis/amr-migration-skill - Network accessline 98
- AMR Migration Skill (ACR → AMR): https://github.com/AzureManagedRedis/amr-migration-skill - Network accessline 99
- ACRE → AMR Migration Skill: https://github.com/AzureManagedRedis/acre-to-amr-migration-skill - Network accessline 99
- ACRE → AMR Migration Skill: https://github.com/AzureManagedRedis/acre-to-amr-migration-skill - Network accessline 100
- Azure Managed Redis docs: https://learn.microsoft.com/en-us/azure/redis/managed-redis/ - Network accessline 100
- Azure Managed Redis docs: https://learn.microsoft.com/en-us/azure/redis/managed-redis/ - Network accessline 101
- ACR retirement announcement: https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-retired-tiers - Network accessline 101
- ACR retirement announcement: https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-retired-tiers - Network accessline 102
- Entra ID auth for AMR: https://learn.microsoft.com/en-us/azure/redis/managed-redis/managed-redis-entra-for-access-control-configuration - Network accessline 102
- Entra ID auth for AMR: https://learn.microsoft.com/en-us/azure/redis/managed-redis/managed-redis-entra-for-access-control-configuration
skills/azure-validate/references/global-rules.md
skills/azure-validate/references/recipes/azd/scripts/set-aspire-aca-env.ps1
skills/azure-validate/references/recipes/azd/scripts/set-aspire-aca-env.sh
skills/azure-validate/references/recipes/scripts/validate-deployment.ps1
skills/azure-validate/references/recipes/scripts/validate-deployment.sh
skills/azure-validate/references/recipes/terraform/README.md
skills/azure-validate/references/recipes/terraform/errors.md
- Network accessline 28
site_config { cors { allowed_origins = ["https://${azurerm_linux_web_app.frontend.default_hostname}"] - Network accessline 28
site_config { cors { allowed_origins = ["https://${azurerm_linux_web_app.frontend.default_hostname}"] - Network accessline 29
cors { allowed_origins = ["https://${azurerm_linux_web_app.frontend.default_hostname}"] } - Network accessline 29
cors { allowed_origins = ["https://${azurerm_linux_web_app.frontend.default_hostname}"] } - Network accessline 30
allowed_origins = ["https://${azurerm_linux_web_app.frontend.default_hostname}"] - Network accessline 30
allowed_origins = ["https://${azurerm_linux_web_app.frontend.default_hostname}"] - Network accessline 36
resource "azurerm_linux_web_app" "frontend" { app_settings = { API_URL = "https://${azurerm_linux_web_app.api.default_hostname}" - Network accessline 36
resource "azurerm_linux_web_app" "frontend" { app_settings = { API_URL = "https://${azurerm_linux_web_app.api.default_hostname}" - Network accessline 37
app_settings = { API_URL = "https://${azurerm_linux_web_app.api.default_hostname}" } - Network accessline 37
app_settings = { API_URL = "https://${azurerm_linux_web_app.api.default_hostname}" } - Network accessline 38
API_URL = "https://${azurerm_linux_web_app.api.default_hostname}" - Network accessline 38
API_URL = "https://${azurerm_linux_web_app.api.default_hostname}" - Network accessline 64
> ⚠<U+FE0F> **Warning:** If using `["*"]` as a temporary bootstrap value, you **must** set `frontend_origin` to the actual URL (e.g., `https://app-web-*.azurewebsites.net`) and re-run `terraform apply` in the same deployment session before reporti - Network accessline 64
> ⚠<U+FE0F> **Warning:** If using `["*"]` as a temporary bootstrap value, you **must** set `frontend_origin` to the actual URL (e.g., `https://app-web-*.azurewebsites.net`) and re-run `terraform apply` in the same deployment session before reporti
skills/azure-validate/references/recipes/terraform/scripts/validate-terraform.ps1
- Executable scriptline 1
Executable file - Executable scriptline 1
Executable file - Network accessline 50
Add-Result "Terraform installed" "PASS" } else { Add-Result "Terraform installed" "FAIL" "terraform not found on PATH. Install: https://developer.hashicorp.com/terraform/install" - Network accessline 50
Add-Result "Terraform installed" "PASS" } else { Add-Result "Terraform installed" "FAIL" "terraform not found on PATH. Install: https://developer.hashicorp.com/terraform/install" - Network accessline 51
} else { Add-Result "Terraform installed" "FAIL" "terraform not found on PATH. Install: https://developer.hashicorp.com/terraform/install" } - Network accessline 51
} else { Add-Result "Terraform installed" "FAIL" "terraform not found on PATH. Install: https://developer.hashicorp.com/terraform/install" } - Network accessline 52
Add-Result "Terraform installed" "FAIL" "terraform not found on PATH. Install: https://developer.hashicorp.com/terraform/install" - Network accessline 52
Add-Result "Terraform installed" "FAIL" "terraform not found on PATH. Install: https://developer.hashicorp.com/terraform/install"
skills/azure-validate/references/recipes/terraform/scripts/validate-terraform.sh
- Executable scriptline 1
#!/usr/bin/env bash - Executable scriptline 1
#!/usr/bin/env bash - Network accessline 50
record "Terraform installed" "PASS" else record "Terraform installed" "FAIL" "terraform not found on PATH. Install: https://developer.hashicorp.com/terraform/install" - Network accessline 50
record "Terraform installed" "PASS" else record "Terraform installed" "FAIL" "terraform not found on PATH. Install: https://developer.hashicorp.com/terraform/install" - Network accessline 51
else record "Terraform installed" "FAIL" "terraform not found on PATH. Install: https://developer.hashicorp.com/terraform/install" fi - Network accessline 51
else record "Terraform installed" "FAIL" "terraform not found on PATH. Install: https://developer.hashicorp.com/terraform/install" fi - Network accessline 52
record "Terraform installed" "FAIL" "terraform not found on PATH. Install: https://developer.hashicorp.com/terraform/install" - Network accessline 52
record "Terraform installed" "FAIL" "terraform not found on PATH. Install: https://developer.hashicorp.com/terraform/install" - Dangerous shell operationline 102
rm -f "$tmp" - Dangerous shell operationline 102
rm -f "$tmp"
skills/azure-validate/references/region-availability.md
- Network accessline 3
> **AUTHORITATIVE SOURCE** — Consult this file BEFORE recommending any region. > > Official reference: https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table - Network accessline 3
> **AUTHORITATIVE SOURCE** — Consult this file BEFORE recommending any region. > > Official reference: https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table - Network accessline 5
> Official reference: https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table - Network accessline 5
> Official reference: https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table - Network accessline 53
> Check https://learn.microsoft.com/azure/ai-services/openai/concepts/models for current model availability. - Network accessline 53
> Check https://learn.microsoft.com/azure/ai-services/openai/concepts/models for current model availability.
skills/azure-validate/references/scripts/scan-aspire-functions-secrets.ps1
skills/azure-validate/references/scripts/scan-aspire-functions-secrets.sh
skills/azure-validate/references/scripts/workflow.ps1
skills/azure-validate/references/scripts/workflow.sh
skills/discover-azure-skills/SKILL.md
- Network accessline 14
List Azure plugin directories from the GitHub Contents API: https://api.github.com/repos/microsoft/azure-skills/contents/.github/plugins?ref=main - Network accessline 14
List Azure plugin directories from the GitHub Contents API: https://api.github.com/repos/microsoft/azure-skills/contents/.github/plugins?ref=main - Network accessline 20
For each plugin, list their skills from the GitHub Contents API: https://api.github.com/repos/microsoft/azure-skills/contents/.github/plugins/{plugin-dirname}/skills?ref=main - Network accessline 20
For each plugin, list their skills from the GitHub Contents API: https://api.github.com/repos/microsoft/azure-skills/contents/.github/plugins/{plugin-dirname}/skills?ref=main - Network accessline 26
Eliminate the skills that obviously aren't relevant by their names. Then for each remaining skill, read their description from the API: https://raw.githubusercontent.com/microsoft/azure-skills/main/.github/plugins/{plugin-dirname}/skills/{s - Network accessline 26
Eliminate the skills that obviously aren't relevant by their names. Then for each remaining skill, read their description from the API: https://raw.githubusercontent.com/microsoft/azure-skills/main/.github/plugins/{plugin-dirname}/skills/{s - Network accessline 32
For each relevant skill, discover their plugin name by reading the `plugin.json` from the GitHub Contents API: https://raw.githubusercontent.com/microsoft/azure-skills/main/.github/plugins/{plugin-dirname}/.plugin/plugin.json - Network accessline 32
For each relevant skill, discover their plugin name by reading the `plugin.json` from the GitHub Contents API: https://raw.githubusercontent.com/microsoft/azure-skills/main/.github/plugins/{plugin-dirname}/.plugin/plugin.json
skills/discover-azure-skills/references/install/other.md
skills/entra-agent-id/SKILL.md
- Network accessline 17
|----------|-------| | Service | Microsoft Entra Agent ID | | API | Microsoft Graph (`https://graph.microsoft.com/v1.0`) | - Network accessline 17
|----------|-------| | Service | Microsoft Entra Agent ID | | API | Microsoft Graph (`https://graph.microsoft.com/v1.0`) | - Network accessline 18
| Service | Microsoft Entra Agent ID | | API | Microsoft Graph (`https://graph.microsoft.com/v1.0`) | | Required role | Agent Identity Developer, Agent Identity Administrator, or Application Administrator | - Network accessline 18
| Service | Microsoft Entra Agent ID | | API | Microsoft Graph (`https://graph.microsoft.com/v1.0`) | | Required role | Agent Identity Developer, Agent Identity Administrator, or Application Administrator | - Network accessline 19
| API | Microsoft Graph (`https://graph.microsoft.com/v1.0`) | - Network accessline 19
| API | Microsoft Graph (`https://graph.microsoft.com/v1.0`) | - Access to secretsline 112
[Credential-related source omitted] - Access to secretsline 112
[Credential-related source omitted] - Access to secretsline 113
[Credential-related source omitted] - Access to secretsline 113
[Credential-related source omitted] - Network accessline 114
[Credential-related source omitted] - Network accessline 114
[Credential-related source omitted] - Access to secretsline 114
[Credential-related source omitted] - Access to secretsline 114
[Credential-related source omitted] - Network accessline 116
[Credential-related source omitted] - Network accessline 116
[Credential-related source omitted] - Network accessline 118
GRAPH = "https://graph.microsoft.com/v1.0" - Network accessline 118
GRAPH = "https://graph.microsoft.com/v1.0" - Network accessline 142
"displayName": "My Agent Blueprint", "sponsors@odata.bind": [ f"https://graph.microsoft.com/v1.0/users/{user_id}" - Network accessline 142
"displayName": "My Agent Blueprint", "sponsors@odata.bind": [ f"https://graph.microsoft.com/v1.0/users/{user_id}" - Network accessline 143
"sponsors@odata.bind": [ f"https://graph.microsoft.com/v1.0/users/{user_id}" ], - Network accessline 143
"sponsors@odata.bind": [ f"https://graph.microsoft.com/v1.0/users/{user_id}" ], - Network accessline 144
f"https://graph.microsoft.com/v1.0/users/{user_id}" - Network accessline 144
f"https://graph.microsoft.com/v1.0/users/{user_id}" - Network accessline 145
], } resp = requests.post( - Network accessline 145
], } resp = requests.post( - Network accessline 146
} resp = requests.post( f"{GRAPH}/applications/microsoft.graph.agentIdentityBlueprint", - Network accessline 146
} resp = requests.post( f"{GRAPH}/applications/microsoft.graph.agentIdentityBlueprint", - Network accessline 147
resp = requests.post( - Network accessline 147
resp = requests.post( - Network accessline 164
sp_body = {"appId": app_id} resp = requests.post( - Network accessline 164
sp_body = {"appId": app_id} resp = requests.post( - Network accessline 165
resp = requests.post( - Network accessline 165
resp = requests.post( - Network accessline 181
"agentIdentityBlueprintId": app_id, "sponsors@odata.bind": [ f"https://graph.microsoft.com/v1.0/users/{user_id}" - Network accessline 181
"agentIdentityBlueprintId": app_id, "sponsors@odata.bind": [ f"https://graph.microsoft.com/v1.0/users/{user_id}" - Network accessline 182
"sponsors@odata.bind": [ f"https://graph.microsoft.com/v1.0/users/{user_id}" ], - Network accessline 182
"sponsors@odata.bind": [ f"https://graph.microsoft.com/v1.0/users/{user_id}" ], - Network accessline 183
f"https://graph.microsoft.com/v1.0/users/{user_id}" - Network accessline 183
f"https://graph.microsoft.com/v1.0/users/{user_id}" - Network accessline 184
], } resp = requests.post( - Network accessline 184
], } resp = requests.post( - Network accessline 185
} resp = requests.post( f"{GRAPH}/servicePrincipals/microsoft.graph.agentIdentity", - Network accessline 185
} resp = requests.post( f"{GRAPH}/servicePrincipals/microsoft.graph.agentIdentity", - Network accessline 186
resp = requests.post( - Network accessline 186
resp = requests.post( - Network accessline 224
graph_sp = requests.get( - Network accessline 224
graph_sp = requests.get( - Network accessline 231
requests.post( - Network accessline 231
requests.post( - Network accessline 249
requests.post( - Network accessline 249
requests.post( - Network accessline 286
Base URL: `https://graph.microsoft.com/v1.0`. - Network accessline 286
Base URL: `https://graph.microsoft.com/v1.0`. - Network accessline 351
| Resource | URL | |----------|-----| | Agent ID Setup Guide | https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-setup-instructions | - Network accessline 351
| Resource | URL | |----------|-----| | Agent ID Setup Guide | https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-setup-instructions | - Network accessline 352
|----------|-----| | Agent ID Setup Guide | https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-setup-instructions | | AI-Guided Setup | https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-ai- - Network accessline 352
|----------|-----| | Agent ID Setup Guide | https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-setup-instructions | | AI-Guided Setup | https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-ai- - Network accessline 353
| Agent ID Setup Guide | https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-setup-instructions | - Network accessline 353
| Agent ID Setup Guide | https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-setup-instructions | - Network accessline 354
| AI-Guided Setup | https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-ai-guided-setup | - Network accessline 354
| AI-Guided Setup | https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-ai-guided-setup | - Network accessline 355
| Microsoft Entra SDK for AgentID | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/overview | - Network accessline 355
| Microsoft Entra SDK for AgentID | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/overview | - Network accessline 356
| Microsoft.Identity.Web.AgentIdentities (.NET) | https://github.com/AzureAD/microsoft-identity-web/blob/master/src/Microsoft.Identity.Web.AgentIdentities/README.AgentIdentities.md | - Network accessline 356
| Microsoft.Identity.Web.AgentIdentities (.NET) | https://github.com/AzureAD/microsoft-identity-web/blob/master/src/Microsoft.Identity.Web.AgentIdentities/README.AgentIdentities.md |
skills/entra-agent-id/references/known-limitations.md
- Network accessline 3
Source: [Microsoft Entra Agent ID — known issues and gaps](https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/preview-known-issues) - Network accessline 3
Source: [Microsoft Entra Agent ID — known issues and gaps](https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/preview-known-issues) - Network accessline 51
27. **Copilot Studio** — only custom engine agents are supported; Agent IDs are used for channel auth only (not connectors or tools). 28. **MSAL complexity** — Agent ID scenarios require managing Federated Identity Credentials manually. For - Network accessline 51
27. **Copilot Studio** — only custom engine agents are supported; Agent IDs are used for channel auth only (not connectors or tools). 28. **MSAL complexity** — Agent ID scenarios require managing Federated Identity Credentials manually. For - Network accessline 52
28. **MSAL complexity** — Agent ID scenarios require managing Federated Identity Credentials manually. For .NET use [Microsoft.Identity.Web.AgentIdentities](https://github.com/AzureAD/microsoft-identity-web/blob/master/src/Microsoft.Identit - Network accessline 52
28. **MSAL complexity** — Agent ID scenarios require managing Federated Identity Credentials manually. For .NET use [Microsoft.Identity.Web.AgentIdentities](https://github.com/AzureAD/microsoft-identity-web/blob/master/src/Microsoft.Identit - Network accessline 56
Report unlisted issues via [aka.ms/agentidfeedback](https://aka.ms/agentidfeedback). - Network accessline 56
Report unlisted issues via [aka.ms/agentidfeedback](https://aka.ms/agentidfeedback).
skills/entra-agent-id/references/oauth2-token-flow.md
- Network accessline 3
Source: [Agent ID Setup Instructions](https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-setup-instructions) - Network accessline 3
Source: [Agent ID Setup Instructions](https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-setup-instructions) - Network accessline 21
requests.patch( - Network accessline 21
requests.patch( - Network accessline 33
fic_body = { "name": "my-fic-name", "issuer": f"https://login.microsoftonline.com/{tenant_id}/v2.0", - Network accessline 33
fic_body = { "name": "my-fic-name", "issuer": f"https://login.microsoftonline.com/{tenant_id}/v2.0", - Network accessline 34
"name": "my-fic-name", "issuer": f"https://login.microsoftonline.com/{tenant_id}/v2.0", "subject": mi_principal_id, # The MI's object ID (principalId), NOT client ID - Network accessline 34
"name": "my-fic-name", "issuer": f"https://login.microsoftonline.com/{tenant_id}/v2.0", "subject": mi_principal_id, # The MI's object ID (principalId), NOT client ID - Network accessline 35
"issuer": f"https://login.microsoftonline.com/{tenant_id}/v2.0", - Network accessline 35
"issuer": f"https://login.microsoftonline.com/{tenant_id}/v2.0", - Network accessline 37
"audiences": ["api://AzureADTokenExchange"], } requests.post( - Network accessline 37
"audiences": ["api://AzureADTokenExchange"], } requests.post( - Network accessline 38
} requests.post( f"{GRAPH}/applications/{blueprint_obj_id}" - Network accessline 38
} requests.post( f"{GRAPH}/applications/{blueprint_obj_id}" - Network accessline 39
requests.post( - Network accessline 39
requests.post( - Network accessline 62
jwks_client = PyJWKClient( f"https://login.microsoftonline.com/{tenant_id}/discovery/v2.0/keys" - Network accessline 62
jwks_client = PyJWKClient( f"https://login.microsoftonline.com/{tenant_id}/discovery/v2.0/keys" - Network accessline 63
f"https://login.microsoftonline.com/{tenant_id}/discovery/v2.0/keys" - Network accessline 63
f"https://login.microsoftonline.com/{tenant_id}/discovery/v2.0/keys" - Network accessline 70
algorithms=["RS256"], audience=f"api://{blueprint_app_id}", issuer=f"https://sts.windows.net/{tenant_id}/", - Network accessline 70
algorithms=["RS256"], audience=f"api://{blueprint_app_id}", issuer=f"https://sts.windows.net/{tenant_id}/", - Network accessline 71
audience=f"api://{blueprint_app_id}", issuer=f"https://sts.windows.net/{tenant_id}/", ) - Network accessline 71
audience=f"api://{blueprint_app_id}", issuer=f"https://sts.windows.net/{tenant_id}/", ) - Network accessline 72
issuer=f"https://sts.windows.net/{tenant_id}/", - Network accessline 72
issuer=f"https://sts.windows.net/{tenant_id}/", - Network accessline 79
- **`subject`** is the MI's `principalId` (object ID), not its client ID. - **`audiences`** must be `["api://AzureADTokenExchange"]` — not your API audience. - **FIC `issuer`**: `https://login.microsoftonline.com/{tenant}/v2.0`. - Network accessline 79
- **`subject`** is the MI's `principalId` (object ID), not its client ID. - **`audiences`** must be `["api://AzureADTokenExchange"]` — not your API audience. - **FIC `issuer`**: `https://login.microsoftonline.com/{tenant}/v2.0`. - Network accessline 80
- **`audiences`** must be `["api://AzureADTokenExchange"]` — not your API audience. - **FIC `issuer`**: `https://login.microsoftonline.com/{tenant}/v2.0`. - **Token `issuer`** for validation: `https://sts.windows.net/{tenant}/` (different d - Network accessline 80
- **`audiences`** must be `["api://AzureADTokenExchange"]` — not your API audience. - **FIC `issuer`**: `https://login.microsoftonline.com/{tenant}/v2.0`. - **Token `issuer`** for validation: `https://sts.windows.net/{tenant}/` (different d - Network accessline 81
- **FIC `issuer`**: `https://login.microsoftonline.com/{tenant}/v2.0`. - Network accessline 81
- **FIC `issuer`**: `https://login.microsoftonline.com/{tenant}/v2.0`. - Network accessline 82
- **Token `issuer`** for validation: `https://sts.windows.net/{tenant}/` (different domain, trailing slash). - Network accessline 82
- **Token `issuer`** for validation: `https://sts.windows.net/{tenant}/` (different domain, trailing slash). - Network accessline 100
$credential = Invoke-MgGraphRequest -Method POST ` -Uri "https://graph.microsoft.com/v1.0/applications/<BLUEPRINT_OBJECT_ID>/addPassword" ` - Network accessline 100
$credential = Invoke-MgGraphRequest -Method POST ` -Uri "https://graph.microsoft.com/v1.0/applications/<BLUEPRINT_OBJECT_ID>/addPassword" ` - Network accessline 101
-Uri "https://graph.microsoft.com/v1.0/applications/<BLUEPRINT_OBJECT_ID>/addPassword" ` - Network accessline 101
-Uri "https://graph.microsoft.com/v1.0/applications/<BLUEPRINT_OBJECT_ID>/addPassword" ` - Network accessline 111
resp = requests.post( - Network accessline 111
resp = requests.post(
skills/entra-agent-id/references/obo-blueprint-setup.md
- Network accessline 39
}, } requests.patch( - Network accessline 39
}, } requests.patch( - Network accessline 40
} requests.patch( f"{GRAPH}/applications/{blueprint_obj_id}", - Network accessline 40
} requests.patch( f"{GRAPH}/applications/{blueprint_obj_id}", - Network accessline 41
requests.patch( - Network accessline 41
requests.patch( - Network accessline 63
requests.post( - Network accessline 63
requests.post( - Network accessline 82
tenant_id=tenant_id, client_id=client_app_id, # Your client app, NOT the Blueprint redirect_uri="http://localhost:8400", - Network accessline 82
tenant_id=tenant_id, client_id=client_app_id, # Your client app, NOT the Blueprint redirect_uri="http://localhost:8400", - Network accessline 83
client_id=client_app_id, # Your client app, NOT the Blueprint redirect_uri="http://localhost:8400", ) - Network accessline 83
client_id=client_app_id, # Your client app, NOT the Blueprint redirect_uri="http://localhost:8400", ) - Network accessline 84
redirect_uri="http://localhost:8400", - Network accessline 84
redirect_uri="http://localhost:8400", - Network accessline 89
> If the user token targets `https://graph.microsoft.com` instead of the Blueprint, the OBO exchange returns `AADSTS50013: Assertion failed signature validation`. - Network accessline 89
> If the user token targets `https://graph.microsoft.com` instead of the Blueprint, the OBO exchange returns `AADSTS50013: Assertion failed signature validation`.
skills/entra-agent-id/references/runtime-token-exchange.md
- Network accessline 3
Source: [Agent ID Setup Instructions](https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-setup-instructions) - Network accessline 3
Source: [Agent ID Setup Instructions](https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/agent-id-setup-instructions) - Network accessline 8
Step 1: Blueprint credentials + fmi_path → Parent token (aud: api://AzureADTokenExchange) Step 2: Parent token as client_assertion → Graph token (aud: https://graph.microsoft.com) - Network accessline 8
Step 1: Blueprint credentials + fmi_path → Parent token (aud: api://AzureADTokenExchange) Step 2: Parent token as client_assertion → Graph token (aud: https://graph.microsoft.com) - Network accessline 9
Step 2: Parent token as client_assertion → Graph token (aud: https://graph.microsoft.com) - Network accessline 9
Step 2: Parent token as client_assertion → Graph token (aud: https://graph.microsoft.com) - Network accessline 19
TOKEN_URL = "https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token" - Network accessline 19
TOKEN_URL = "https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token" - Access to secretsline 31
[Credential-related source omitted] - Access to secretsline 31
[Credential-related source omitted] - Network accessline 34
} data = urllib.parse.urlencode(params).encode("utf-8") req = urllib.request.Request( - Network accessline 34
} data = urllib.parse.urlencode(params).encode("utf-8") req = urllib.request.Request( - Network accessline 35
data = urllib.parse.urlencode(params).encode("utf-8") req = urllib.request.Request( TOKEN_URL.format(tenant=tenant_id), data=data, - Network accessline 35
data = urllib.parse.urlencode(params).encode("utf-8") req = urllib.request.Request( TOKEN_URL.format(tenant=tenant_id), data=data, - Network accessline 36
req = urllib.request.Request( - Network accessline 36
req = urllib.request.Request( - Network accessline 38
headers={"Content-Type": "application/x-www-form-urlencoded"}, ) with urllib.request.urlopen(req, timeout=10) as resp: - Network accessline 38
headers={"Content-Type": "application/x-www-form-urlencoded"}, ) with urllib.request.urlopen(req, timeout=10) as resp: - Network accessline 39
) with urllib.request.urlopen(req, timeout=10) as resp: return json.loads(resp.read())["access_token"] - Network accessline 39
) with urllib.request.urlopen(req, timeout=10) as resp: return json.loads(resp.read())["access_token"] - Network accessline 40
with urllib.request.urlopen(req, timeout=10) as resp: - Network accessline 40
with urllib.request.urlopen(req, timeout=10) as resp: - Access to secretsline 41
[Credential-related source omitted] - Access to secretsline 41
[Credential-related source omitted] - Network accessline 47
|-------|-------| | `aud` | `api://AzureADTokenExchange` | | `iss` | `https://login.microsoftonline.com/{tenant}/v2.0` | - Network accessline 47
|-------|-------| | `aud` | `api://AzureADTokenExchange` | | `iss` | `https://login.microsoftonline.com/{tenant}/v2.0` | - Network accessline 48
| `aud` | `api://AzureADTokenExchange` | | `iss` | `https://login.microsoftonline.com/{tenant}/v2.0` | | `sub` | Blueprint SP object ID | - Network accessline 48
| `aud` | `api://AzureADTokenExchange` | | `iss` | `https://login.microsoftonline.com/{tenant}/v2.0` | | `sub` | Blueprint SP object ID | - Network accessline 49
| `iss` | `https://login.microsoftonline.com/{tenant}/v2.0` | - Network accessline 49
| `iss` | `https://login.microsoftonline.com/{tenant}/v2.0` | - Access to secretsline 58
[Credential-related source omitted] - Access to secretsline 58
[Credential-related source omitted] - Network accessline 86
"client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer", "client_assertion": parent_token, "scope": "https://graph.microsoft.com/.default", - Network accessline 86
"client_assertion_type": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer", "client_assertion": parent_token, "scope": "https://graph.microsoft.com/.default", - Network accessline 87
"client_assertion": parent_token, "scope": "https://graph.microsoft.com/.default", } - Network accessline 87
"client_assertion": parent_token, "scope": "https://graph.microsoft.com/.default", } - Network accessline 88
"scope": "https://graph.microsoft.com/.default", } data = urllib.parse.urlencode(params).encode("utf-8") - Network accessline 88
"scope": "https://graph.microsoft.com/.default", } data = urllib.parse.urlencode(params).encode("utf-8") - Network accessline 89
} data = urllib.parse.urlencode(params).encode("utf-8") req = urllib.request.Request( - Network accessline 89
} data = urllib.parse.urlencode(params).encode("utf-8") req = urllib.request.Request( - Network accessline 90
data = urllib.parse.urlencode(params).encode("utf-8") req = urllib.request.Request( TOKEN_URL.format(tenant=tenant_id), data=data, - Network accessline 90
data = urllib.parse.urlencode(params).encode("utf-8") req = urllib.request.Request( TOKEN_URL.format(tenant=tenant_id), data=data, - Network accessline 91
req = urllib.request.Request( - Network accessline 91
req = urllib.request.Request( - Network accessline 93
headers={"Content-Type": "application/x-www-form-urlencoded"}, ) with urllib.request.urlopen(req, timeout=10) as resp: - Network accessline 93
headers={"Content-Type": "application/x-www-form-urlencoded"}, ) with urllib.request.urlopen(req, timeout=10) as resp: - Network accessline 94
) with urllib.request.urlopen(req, timeout=10) as resp: return json.loads(resp.read()) - Network accessline 94
) with urllib.request.urlopen(req, timeout=10) as resp: return json.loads(resp.read()) - Network accessline 95
with urllib.request.urlopen(req, timeout=10) as resp: - Network accessline 95
with urllib.request.urlopen(req, timeout=10) as resp: - Network accessline 115
"assertion": user_token, "requested_token_use": "on_behalf_of", "scope": "https://graph.microsoft.com/.default", - Network accessline 115
"assertion": user_token, "requested_token_use": "on_behalf_of", "scope": "https://graph.microsoft.com/.default", - Network accessline 116
"requested_token_use": "on_behalf_of", "scope": "https://graph.microsoft.com/.default", } - Network accessline 116
"requested_token_use": "on_behalf_of", "scope": "https://graph.microsoft.com/.default", } - Network accessline 117
"scope": "https://graph.microsoft.com/.default", } data = urllib.parse.urlencode(params).encode("utf-8") - Network accessline 117
"scope": "https://graph.microsoft.com/.default", } data = urllib.parse.urlencode(params).encode("utf-8") - Network accessline 118
} data = urllib.parse.urlencode(params).encode("utf-8") req = urllib.request.Request( - Network accessline 118
} data = urllib.parse.urlencode(params).encode("utf-8") req = urllib.request.Request( - Network accessline 119
data = urllib.parse.urlencode(params).encode("utf-8") req = urllib.request.Request( TOKEN_URL.format(tenant=tenant_id), data=data, - Network accessline 119
data = urllib.parse.urlencode(params).encode("utf-8") req = urllib.request.Request( TOKEN_URL.format(tenant=tenant_id), data=data, - Network accessline 120
req = urllib.request.Request( - Network accessline 120
req = urllib.request.Request( - Network accessline 122
headers={"Content-Type": "application/x-www-form-urlencoded"}, ) with urllib.request.urlopen(req, timeout=10) as resp: - Network accessline 122
headers={"Content-Type": "application/x-www-form-urlencoded"}, ) with urllib.request.urlopen(req, timeout=10) as resp: - Network accessline 123
) with urllib.request.urlopen(req, timeout=10) as resp: return json.loads(resp.read()) - Network accessline 123
) with urllib.request.urlopen(req, timeout=10) as resp: return json.loads(resp.read()) - Network accessline 124
with urllib.request.urlopen(req, timeout=10) as resp: - Network accessline 124
with urllib.request.urlopen(req, timeout=10) as resp:
skills/entra-agent-id/references/sdk-sidecar-deployment.md
- Network accessline 13
[Credential-related source omitted] - Network accessline 13
[Credential-related source omitted] - Access to secretsline 13
[Credential-related source omitted] - Access to secretsline 13
[Credential-related source omitted] - Access to secretsline 14
[Credential-related source omitted] - Access to secretsline 14
[Credential-related source omitted] - Network accessline 16
def get_agent_token(downstream_api: str = "Graph") -> str: url = f"{SIDECAR_URL}/AuthorizationHeaderUnauthenticated/{downstream_api}" resp = requests.get(url, params={"AgentIdentity": AGENT_APP_ID}, timeout=30) - Network accessline 16
def get_agent_token(downstream_api: str = "Graph") -> str: url = f"{SIDECAR_URL}/AuthorizationHeaderUnauthenticated/{downstream_api}" resp = requests.get(url, params={"AgentIdentity": AGENT_APP_ID}, timeout=30) - Network accessline 17
url = f"{SIDECAR_URL}/AuthorizationHeaderUnauthenticated/{downstream_api}" resp = requests.get(url, params={"AgentIdentity": AGENT_APP_ID}, timeout=30) resp.raise_for_status() - Network accessline 17
url = f"{SIDECAR_URL}/AuthorizationHeaderUnauthenticated/{downstream_api}" resp = requests.get(url, params={"AgentIdentity": AGENT_APP_ID}, timeout=30) resp.raise_for_status() - Network accessline 18
resp = requests.get(url, params={"AgentIdentity": AGENT_APP_ID}, timeout=30) - Network accessline 18
resp = requests.get(url, params={"AgentIdentity": AGENT_APP_ID}, timeout=30) - Network accessline 22
[Credential-related source omitted] - Network accessline 22
[Credential-related source omitted] - Network accessline 23
[Credential-related source omitted] - Network accessline 23
[Credential-related source omitted] - Network accessline 24
[Credential-related source omitted] - Network accessline 24
[Credential-related source omitted] - Network accessline 32
[Credential-related source omitted] - Network accessline 32
[Credential-related source omitted] - Network accessline 33
url = f"{SIDECAR_URL}/AuthorizationHeader/{downstream_api}" resp = requests.get( url, - Network accessline 33
url = f"{SIDECAR_URL}/AuthorizationHeader/{downstream_api}" resp = requests.get( url, - Network accessline 34
resp = requests.get( - Network accessline 34
resp = requests.get( - Network accessline 46
const SIDECAR_URL = process.env.SIDECAR_URL ?? "http://localhost:5000"; - Network accessline 46
const SIDECAR_URL = process.env.SIDECAR_URL ?? "http://localhost:5000"; - Network accessline 56
const res = await fetch(url.toString()); - Network accessline 56
const res = await fetch(url.toString()); - Network accessline 71
[Credential-related source omitted] - Network accessline 71
[Credential-related source omitted] - Network accessline 72
resp = requests.get( - Network accessline 72
resp = requests.get( - Network accessline 84
[Credential-related source omitted] - Network accessline 84
[Credential-related source omitted] - Network accessline 85
resp = requests.get( - Network accessline 85
resp = requests.get( - Network accessline 105
- "5001:5000" environment: - AzureAd__Instance=https://login.microsoftonline.com/ - Network accessline 105
- "5001:5000" environment: - AzureAd__Instance=https://login.microsoftonline.com/ - Network accessline 106
environment: - AzureAd__Instance=https://login.microsoftonline.com/ - AzureAd__TenantId=${TENANT_ID} - Network accessline 106
environment: - AzureAd__Instance=https://login.microsoftonline.com/ - AzureAd__TenantId=${TENANT_ID} - Network accessline 107
- AzureAd__Instance=https://login.microsoftonline.com/ - Network accessline 107
- AzureAd__Instance=https://login.microsoftonline.com/ - Network accessline 110
- AzureAd__ClientCredentials__0__SourceType=ClientSecret - AzureAd__ClientCredentials__0__ClientSecret=${BLUEPRINT_CLIENT_SECRET} - DownstreamApis__Graph__BaseUrl=https://graph.microsoft.com/v1.0/ - Network accessline 110
- AzureAd__ClientCredentials__0__SourceType=ClientSecret - AzureAd__ClientCredentials__0__ClientSecret=${BLUEPRINT_CLIENT_SECRET} - DownstreamApis__Graph__BaseUrl=https://graph.microsoft.com/v1.0/ - Network accessline 111
[Credential-related source omitted] - Network accessline 111
[Credential-related source omitted] - Access to secretsline 111
[Credential-related source omitted] - Access to secretsline 111
[Credential-related source omitted] - Network accessline 112
- DownstreamApis__Graph__BaseUrl=https://graph.microsoft.com/v1.0/ - Network accessline 112
- DownstreamApis__Graph__BaseUrl=https://graph.microsoft.com/v1.0/ - Network accessline 113
- DownstreamApis__Graph__Scopes__0=https://graph.microsoft.com/.default - Network accessline 113
- DownstreamApis__Graph__Scopes__0=https://graph.microsoft.com/.default - Network accessline 115
- ASPNETCORE_URLS=http://+:5000 - Network accessline 115
- ASPNETCORE_URLS=http://+:5000 - Network accessline 120
- "3000:3000" environment: - SIDECAR_URL=http://sidecar:5000 - Network accessline 120
- "3000:3000" environment: - SIDECAR_URL=http://sidecar:5000 - Network accessline 121
environment: - SIDECAR_URL=http://sidecar:5000 - AGENT_CLIENT_ID=${AGENT_CLIENT_ID} - Network accessline 121
environment: - SIDECAR_URL=http://sidecar:5000 - AGENT_CLIENT_ID=${AGENT_CLIENT_ID} - Network accessline 122
- SIDECAR_URL=http://sidecar:5000 - Network accessline 122
- SIDECAR_URL=http://sidecar:5000 - Network accessline 147
env: - name: SIDECAR_URL value: "http://localhost:5000" - Network accessline 147
env: - name: SIDECAR_URL value: "http://localhost:5000" - Network accessline 148
- name: SIDECAR_URL value: "http://localhost:5000" - name: sidecar - Network accessline 148
- name: SIDECAR_URL value: "http://localhost:5000" - name: sidecar - Network accessline 149
value: "http://localhost:5000" - Network accessline 149
value: "http://localhost:5000" - Network accessline 166
value: "SignedAssertionFilePath" - name: Kestrel__Endpoints__Http__Url value: "http://127.0.0.1:5000" - Network accessline 166
value: "SignedAssertionFilePath" - name: Kestrel__Endpoints__Http__Url value: "http://127.0.0.1:5000" - Network accessline 167
- name: Kestrel__Endpoints__Http__Url value: "http://127.0.0.1:5000" resources: - Network accessline 167
- name: Kestrel__Endpoints__Http__Url value: "http://127.0.0.1:5000" resources: - Network accessline 168
value: "http://127.0.0.1:5000" resources: requests: { memory: "128Mi", cpu: "100m" } - Network accessline 168
value: "http://127.0.0.1:5000" resources: requests: { memory: "128Mi", cpu: "100m" } - Network accessline 184
1. **Bind to localhost** — `Kestrel__Endpoints__Http__Url=http://127.0.0.1:5000` - Network accessline 184
1. **Bind to localhost** — `Kestrel__Endpoints__Http__Url=http://127.0.0.1:5000`
skills/entra-agent-id/references/sdk-sidecar.md
- Network accessline 5
Image: `mcr.microsoft.com/entra-sdk/auth-sidecar:1.0.0-azurelinux3.0-distroless`. See [GitHub releases](https://github.com/AzureAD/microsoft-identity-web/releases) for tags. - Network accessline 5
Image: `mcr.microsoft.com/entra-sdk/auth-sidecar:1.0.0-azurelinux3.0-distroless`. See [GitHub releases](https://github.com/AzureAD/microsoft-identity-web/releases) for tags. - Network accessline 48
env: - name: AzureAd__Instance value: "https://login.microsoftonline.com/" - Network accessline 48
env: - name: AzureAd__Instance value: "https://login.microsoftonline.com/" - Network accessline 49
- name: AzureAd__Instance value: "https://login.microsoftonline.com/" - name: AzureAd__TenantId - Network accessline 49
- name: AzureAd__Instance value: "https://login.microsoftonline.com/" - name: AzureAd__TenantId - Network accessline 50
value: "https://login.microsoftonline.com/" - Network accessline 50
value: "https://login.microsoftonline.com/" - Network accessline 82
- name: DownstreamApis__Graph__BaseUrl value: "https://graph.microsoft.com/v1.0/" - Network accessline 82
- name: DownstreamApis__Graph__BaseUrl value: "https://graph.microsoft.com/v1.0/" - Network accessline 83
value: "https://graph.microsoft.com/v1.0/" - Network accessline 83
value: "https://graph.microsoft.com/v1.0/" - Network accessline 84
- name: DownstreamApis__Graph__Scopes__0 value: "https://graph.microsoft.com/.default" - name: DownstreamApis__Graph__RequestAppToken - Network accessline 84
- name: DownstreamApis__Graph__Scopes__0 value: "https://graph.microsoft.com/.default" - name: DownstreamApis__Graph__RequestAppToken - Network accessline 85
value: "https://graph.microsoft.com/.default" - Network accessline 85
value: "https://graph.microsoft.com/.default" - Network accessline 117
| Resource | URL | |----------|-----| | SDK Overview | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/overview | - Network accessline 117
| Resource | URL | |----------|-----| | SDK Overview | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/overview | - Network accessline 118
|----------|-----| | SDK Overview | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/overview | | Installation | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/installation | - Network accessline 118
|----------|-----| | SDK Overview | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/overview | | Installation | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/installation | - Network accessline 119
| SDK Overview | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/overview | - Network accessline 119
| SDK Overview | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/overview | - Network accessline 120
| Installation | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/installation | - Network accessline 120
| Installation | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/installation | - Network accessline 121
| Configuration | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/configuration | - Network accessline 121
| Configuration | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/configuration | - Network accessline 122
| Endpoints | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/endpoints | - Network accessline 122
| Endpoints | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/endpoints | - Network accessline 123
| Agent Identities | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/agent-identities | - Network accessline 123
| Agent Identities | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/agent-identities | - Network accessline 124
| Security | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/security | - Network accessline 124
| Security | https://learn.microsoft.com/en-us/entra/msidweb/agent-id-sdk/security | - Network accessline 125
| OpenAPI Spec | https://github.com/AzureAD/microsoft-identity-web/blob/master/src/Microsoft.Identity.Web.Sidecar/OpenAPI/Microsoft.Identity.Web.AgentID.json | - Network accessline 125
| OpenAPI Spec | https://github.com/AzureAD/microsoft-identity-web/blob/master/src/Microsoft.Identity.Web.Sidecar/OpenAPI/Microsoft.Identity.Web.AgentID.json |
skills/entra-app-registration/SKILL.md
- Network accessline 56
- **Web Apps**: Add redirect URIs, enable ID tokens if needed - **SPAs**: Add redirect URIs, enable implicit grant flow if necessary - **Mobile/Desktop**: Use `http://localhost` or custom URI scheme - Network accessline 56
- **Web Apps**: Add redirect URIs, enable ID tokens if needed - **SPAs**: Add redirect URIs, enable implicit grant flow if necessary - **Mobile/Desktop**: Use `http://localhost` or custom URI scheme - Network accessline 57
- **SPAs**: Add redirect URIs, enable implicit grant flow if necessary - **Mobile/Desktop**: Use `http://localhost` or custom URI scheme - **Services**: No redirect URI needed for client credentials flow - Network accessline 57
- **SPAs**: Add redirect URIs, enable implicit grant flow if necessary - **Mobile/Desktop**: Use `http://localhost` or custom URI scheme - **Services**: No redirect URI needed for client credentials flow - Network accessline 58
- **Mobile/Desktop**: Use `http://localhost` or custom URI scheme - Network accessline 58
- **Mobile/Desktop**: Use `http://localhost` or custom URI scheme - Network accessline 188
- [Microsoft Identity Platform Documentation](https://learn.microsoft.com/entra/identity-platform/) - Network accessline 188
- [Microsoft Identity Platform Documentation](https://learn.microsoft.com/entra/identity-platform/) - Network accessline 189
- [OAuth 2.0 and OpenID Connect protocols](https://learn.microsoft.com/entra/identity-platform/v2-protocols) - Network accessline 189
- [OAuth 2.0 and OpenID Connect protocols](https://learn.microsoft.com/entra/identity-platform/v2-protocols) - Network accessline 190
- [MSAL Documentation](https://learn.microsoft.com/entra/msal/) - Network accessline 190
- [MSAL Documentation](https://learn.microsoft.com/entra/msal/) - Network accessline 191
- [Microsoft Graph API](https://learn.microsoft.com/graph/) - Network accessline 191
- [Microsoft Graph API](https://learn.microsoft.com/graph/)
skills/entra-app-registration/references/BICEP-EXAMPLE.bicep
- Network accessline 18
@description('Redirect URIs for web application') param webRedirectUris array = [ 'https://localhost:5001/signin-oidc' - Network accessline 18
@description('Redirect URIs for web application') param webRedirectUris array = [ 'https://localhost:5001/signin-oidc' - Network accessline 19
param webRedirectUris array = [ 'https://localhost:5001/signin-oidc' 'https://myapp.azurewebsites.net/signin-oidc' - Network accessline 19
param webRedirectUris array = [ 'https://localhost:5001/signin-oidc' 'https://myapp.azurewebsites.net/signin-oidc' - Network accessline 20
'https://localhost:5001/signin-oidc' - Network accessline 20
'https://localhost:5001/signin-oidc' - Network accessline 21
'https://myapp.azurewebsites.net/signin-oidc' - Network accessline 21
'https://myapp.azurewebsites.net/signin-oidc' - Network accessline 24
@description('Redirect URIs for single-page application') param spaRedirectUris array = [ 'http://localhost:3000' - Network accessline 24
@description('Redirect URIs for single-page application') param spaRedirectUris array = [ 'http://localhost:3000' - Network accessline 25
param spaRedirectUris array = [ 'http://localhost:3000' 'https://myapp.azurewebsites.net' - Network accessline 25
param spaRedirectUris array = [ 'http://localhost:3000' 'https://myapp.azurewebsites.net' - Network accessline 26
'http://localhost:3000' - Network accessline 26
'http://localhost:3000' - Network accessline 27
'https://myapp.azurewebsites.net' - Network accessline 27
'https://myapp.azurewebsites.net' - Network accessline 53
enableAccessTokenIssuance: false } homePageUrl: 'https://myapp.azurewebsites.net' - Network accessline 53
enableAccessTokenIssuance: false } homePageUrl: 'https://myapp.azurewebsites.net' - Network accessline 54
} homePageUrl: 'https://myapp.azurewebsites.net' logoutUrl: 'https://myapp.azurewebsites.net/signout-oidc' - Network accessline 54
} homePageUrl: 'https://myapp.azurewebsites.net' logoutUrl: 'https://myapp.azurewebsites.net/signout-oidc' - Network accessline 55
homePageUrl: 'https://myapp.azurewebsites.net' - Network accessline 55
homePageUrl: 'https://myapp.azurewebsites.net' - Network accessline 56
logoutUrl: 'https://myapp.azurewebsites.net/signout-oidc' - Network accessline 56
logoutUrl: 'https://myapp.azurewebsites.net/signout-oidc' - Network accessline 65
publicClient: { redirectUris: [ 'http://localhost' - Network accessline 65
publicClient: { redirectUris: [ 'http://localhost' - Network accessline 66
redirectUris: [ 'http://localhost' 'myapp://auth' - Network accessline 66
redirectUris: [ 'http://localhost' 'myapp://auth' - Network accessline 67
'http://localhost' - Network accessline 67
'http://localhost' - Network accessline 68
'myapp://auth' 'https://login.microsoftonline.com/common/oauth2/nativeclient' ] - Network accessline 68
'myapp://auth' 'https://login.microsoftonline.com/common/oauth2/nativeclient' ] - Network accessline 69
'https://login.microsoftonline.com/common/oauth2/nativeclient' - Network accessline 69
'https://login.microsoftonline.com/common/oauth2/nativeclient' - Network accessline 175
// Information URLs info: { marketingUrl: 'https://myapp.example.com' - Network accessline 175
// Information URLs info: { marketingUrl: 'https://myapp.example.com' - Network accessline 176
info: { marketingUrl: 'https://myapp.example.com' privacyStatementUrl: 'https://myapp.example.com/privacy' - Network accessline 176
info: { marketingUrl: 'https://myapp.example.com' privacyStatementUrl: 'https://myapp.example.com/privacy' - Network accessline 177
marketingUrl: 'https://myapp.example.com' - Network accessline 177
marketingUrl: 'https://myapp.example.com' - Network accessline 178
privacyStatementUrl: 'https://myapp.example.com/privacy' - Network accessline 178
privacyStatementUrl: 'https://myapp.example.com/privacy' - Network accessline 179
supportUrl: 'https://myapp.example.com/support' - Network accessline 179
supportUrl: 'https://myapp.example.com/support' - Network accessline 180
termsOfServiceUrl: 'https://myapp.example.com/terms' - Network accessline 180
termsOfServiceUrl: 'https://myapp.example.com/terms'
skills/entra-app-registration/references/api-permissions.md
- Network accessline 49
Examples: https://graph.microsoft.com/User.Read - Network accessline 49
Examples: https://graph.microsoft.com/User.Read - Network accessline 50
https://graph.microsoft.com/User.Read - Network accessline 50
https://graph.microsoft.com/User.Read - Network accessline 51
https://graph.microsoft.com/Mail.Send - Network accessline 51
https://graph.microsoft.com/Mail.Send - Network accessline 60
https://graph.microsoft.com/.default - Network accessline 60
https://graph.microsoft.com/.default - Network accessline 134
1. Visit https://developer.microsoft.com/graph/graph-explorer - Network accessline 134
1. Visit https://developer.microsoft.com/graph/graph-explorer - Network accessline 140
Visit: https://learn.microsoft.com/en-us/graph/permissions-reference - Network accessline 140
Visit: https://learn.microsoft.com/en-us/graph/permissions-reference - Network accessline 258
[Credential-related source omitted] - Network accessline 258
[Credential-related source omitted] - Network accessline 259
[Credential-related source omitted] - Network accessline 259
[Credential-related source omitted] - Network accessline 334
**Note:** Permission IDs may change. Always verify against the official [Microsoft Graph Permissions Reference](https://learn.microsoft.com/en-us/graph/permissions-reference) for the most current values. - Network accessline 334
**Note:** Permission IDs may change. Always verify against the official [Microsoft Graph Permissions Reference](https://learn.microsoft.com/en-us/graph/permissions-reference) for the most current values. - Network accessline 338
- [Microsoft Graph Permissions Reference](https://learn.microsoft.com/en-us/graph/permissions-reference) - Network accessline 338
- [Microsoft Graph Permissions Reference](https://learn.microsoft.com/en-us/graph/permissions-reference) - Network accessline 339
- [Permission Types](https://learn.microsoft.com/en-us/entra/identity-platform/permissions-consent-overview) - Network accessline 339
- [Permission Types](https://learn.microsoft.com/en-us/entra/identity-platform/permissions-consent-overview) - Network accessline 340
- [Admin Consent Workflow](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/configure-admin-consent-workflow) - Network accessline 340
- [Admin Consent Workflow](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/configure-admin-consent-workflow) - Network accessline 341
- [Consent Framework](https://learn.microsoft.com/en-us/entra/identity-platform/consent-framework) - Network accessline 341
- [Consent Framework](https://learn.microsoft.com/en-us/entra/identity-platform/consent-framework)
skills/entra-app-registration/references/auth-best-practices.md
- Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 122
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 123
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 124
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 125
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 126
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 127
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme) - Network accessline 128
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme)
skills/entra-app-registration/references/cli-commands.md
- Network accessline 29
az ad app create \ --display-name "MyWebApp" \ --web-redirect-uris "https://myapp.com/callback" \ - Network accessline 29
az ad app create \ --display-name "MyWebApp" \ --web-redirect-uris "https://myapp.com/callback" \ - Network accessline 30
--display-name "MyWebApp" \ --web-redirect-uris "https://myapp.com/callback" \ --sign-in-audience "AzureADMyOrg" - Network accessline 30
--display-name "MyWebApp" \ --web-redirect-uris "https://myapp.com/callback" \ --sign-in-audience "AzureADMyOrg" - Network accessline 31
--web-redirect-uris "https://myapp.com/callback" \ - Network accessline 31
--web-redirect-uris "https://myapp.com/callback" \ - Network accessline 37
az ad app create \ --display-name "MySpaApp" \ --spa-redirect-uris "http://localhost:3000" \ - Network accessline 37
az ad app create \ --display-name "MySpaApp" \ --spa-redirect-uris "http://localhost:3000" \ - Network accessline 38
--display-name "MySpaApp" \ --spa-redirect-uris "http://localhost:3000" \ --sign-in-audience "AzureADMyOrg" - Network accessline 38
--display-name "MySpaApp" \ --spa-redirect-uris "http://localhost:3000" \ --sign-in-audience "AzureADMyOrg" - Network accessline 39
--spa-redirect-uris "http://localhost:3000" \ - Network accessline 39
--spa-redirect-uris "http://localhost:3000" \ - Network accessline 45
az ad app create \ --display-name "MyDesktopApp" \ --public-client-redirect-uris "http://localhost" \ - Network accessline 45
az ad app create \ --display-name "MyDesktopApp" \ --public-client-redirect-uris "http://localhost" \ - Network accessline 46
--display-name "MyDesktopApp" \ --public-client-redirect-uris "http://localhost" \ --sign-in-audience "AzureADMyOrg" - Network accessline 46
--display-name "MyDesktopApp" \ --public-client-redirect-uris "http://localhost" \ --sign-in-audience "AzureADMyOrg" - Network accessline 47
--public-client-redirect-uris "http://localhost" \ - Network accessline 47
--public-client-redirect-uris "http://localhost" \ - Network accessline 53
az ad app create \ --display-name "MyMultiTenantApp" \ --web-redirect-uris "https://myapp.com/callback" \ - Network accessline 53
az ad app create \ --display-name "MyMultiTenantApp" \ --web-redirect-uris "https://myapp.com/callback" \ - Network accessline 54
--display-name "MyMultiTenantApp" \ --web-redirect-uris "https://myapp.com/callback" \ --sign-in-audience "AzureADMultipleOrgs" - Network accessline 54
--display-name "MyMultiTenantApp" \ --web-redirect-uris "https://myapp.com/callback" \ --sign-in-audience "AzureADMultipleOrgs" - Network accessline 55
--web-redirect-uris "https://myapp.com/callback" \ - Network accessline 55
--web-redirect-uris "https://myapp.com/callback" \ - Network accessline 116
az ad app update --id $APP_ID \ --web-redirect-uris "https://myapp.com/callback" "https://myapp.com/auth" - Network accessline 116
az ad app update --id $APP_ID \ --web-redirect-uris "https://myapp.com/callback" "https://myapp.com/auth" - Network accessline 117
--web-redirect-uris "https://myapp.com/callback" "https://myapp.com/auth" - Network accessline 117
--web-redirect-uris "https://myapp.com/callback" "https://myapp.com/auth" - Network accessline 122
az ad app update --id $APP_ID \ --spa-redirect-uris "http://localhost:3000" "http://localhost:5000" - Network accessline 122
az ad app update --id $APP_ID \ --spa-redirect-uris "http://localhost:3000" "http://localhost:5000" - Network accessline 123
--spa-redirect-uris "http://localhost:3000" "http://localhost:5000" - Network accessline 123
--spa-redirect-uris "http://localhost:3000" "http://localhost:5000" - Network accessline 128
az ad app update --id $APP_ID \ --public-client-redirect-uris "http://localhost" "myapp://auth" - Network accessline 128
az ad app update --id $APP_ID \ --public-client-redirect-uris "http://localhost" "myapp://auth" - Network accessline 129
--public-client-redirect-uris "http://localhost" "myapp://auth" - Network accessline 129
--public-client-redirect-uris "http://localhost" "myapp://auth" - Network accessline 364
# Variables APP_NAME="MyApplication" REDIRECT_URI="http://localhost:3000" - Network accessline 364
# Variables APP_NAME="MyApplication" REDIRECT_URI="http://localhost:3000" - Network accessline 366
REDIRECT_URI="http://localhost:3000" - Network accessline 366
REDIRECT_URI="http://localhost:3000"
skills/entra-app-registration/references/console-app-example.md
- Network accessline 44
.Create(ClientId) .WithAuthority(AzureCloudInstance.AzurePublic, TenantId) .WithRedirectUri("http://localhost") - Network accessline 44
.Create(ClientId) .WithAuthority(AzureCloudInstance.AzurePublic, TenantId) .WithRedirectUri("http://localhost") - Network accessline 45
.WithAuthority(AzureCloudInstance.AzurePublic, TenantId) .WithRedirectUri("http://localhost") .Build(); - Network accessline 45
.WithAuthority(AzureCloudInstance.AzurePublic, TenantId) .WithRedirectUri("http://localhost") .Build(); - Network accessline 46
.WithRedirectUri("http://localhost") - Network accessline 46
.WithRedirectUri("http://localhost") - Network accessline 87
var response = await httpClient.GetAsync("https://graph.microsoft.com/v1.0/me"); - Network accessline 87
var response = await httpClient.GetAsync("https://graph.microsoft.com/v1.0/me"); - Network accessline 139
CLIENT_ID = "YOUR_APPLICATION_CLIENT_ID" TENANT_ID = "YOUR_TENANT_ID" AUTHORITY = f"https://login.microsoftonline.com/{TENANT_ID}" - Network accessline 139
CLIENT_ID = "YOUR_APPLICATION_CLIENT_ID" TENANT_ID = "YOUR_TENANT_ID" AUTHORITY = f"https://login.microsoftonline.com/{TENANT_ID}" - Network accessline 140
TENANT_ID = "YOUR_TENANT_ID" AUTHORITY = f"https://login.microsoftonline.com/{TENANT_ID}" SCOPES = ["User.Read"] - Network accessline 140
TENANT_ID = "YOUR_TENANT_ID" AUTHORITY = f"https://login.microsoftonline.com/{TENANT_ID}" SCOPES = ["User.Read"] - Network accessline 141
AUTHORITY = f"https://login.microsoftonline.com/{TENANT_ID}" - Network accessline 141
AUTHORITY = f"https://login.microsoftonline.com/{TENANT_ID}" - Access to secretsline 190
[Credential-related source omitted] - Access to secretsline 190
[Credential-related source omitted] - Access to secretsline 193
[Credential-related source omitted] - Access to secretsline 193
[Credential-related source omitted] - Network accessline 197
response = requests.get( - Network accessline 197
response = requests.get( - Network accessline 198
'https://graph.microsoft.com/v1.0/me', - Network accessline 198
'https://graph.microsoft.com/v1.0/me', - Access to secretsline 226
[Credential-related source omitted] - Access to secretsline 226
[Credential-related source omitted] - Access to secretsline 231
[Credential-related source omitted] - Access to secretsline 231
[Credential-related source omitted] - Network accessline 268
auth: { clientId: "YOUR_APPLICATION_CLIENT_ID", authority: "https://login.microsoftonline.com/YOUR_TENANT_ID", - Network accessline 268
auth: { clientId: "YOUR_APPLICATION_CLIENT_ID", authority: "https://login.microsoftonline.com/YOUR_TENANT_ID", - Network accessline 269
clientId: "YOUR_APPLICATION_CLIENT_ID", authority: "https://login.microsoftonline.com/YOUR_TENANT_ID", } - Network accessline 269
clientId: "YOUR_APPLICATION_CLIENT_ID", authority: "https://login.microsoftonline.com/YOUR_TENANT_ID", } - Network accessline 270
authority: "https://login.microsoftonline.com/YOUR_TENANT_ID", - Network accessline 270
authority: "https://login.microsoftonline.com/YOUR_TENANT_ID", - Network accessline 280
const authCodeUrlParameters = { scopes: scopes, redirectUri: "http://localhost:3000", - Network accessline 280
const authCodeUrlParameters = { scopes: scopes, redirectUri: "http://localhost:3000", - Network accessline 281
scopes: scopes, redirectUri: "http://localhost:3000", }; - Network accessline 281
scopes: scopes, redirectUri: "http://localhost:3000", }; - Network accessline 282
redirectUri: "http://localhost:3000", - Network accessline 282
redirectUri: "http://localhost:3000", - Network accessline 308
auth: { clientId: "YOUR_APPLICATION_CLIENT_ID", authority: "https://login.microsoftonline.com/YOUR_TENANT_ID", - Network accessline 308
auth: { clientId: "YOUR_APPLICATION_CLIENT_ID", authority: "https://login.microsoftonline.com/YOUR_TENANT_ID", - Network accessline 309
clientId: "YOUR_APPLICATION_CLIENT_ID", authority: "https://login.microsoftonline.com/YOUR_TENANT_ID", clientSecret: "YOUR_CLIENT_SECRET", // From app registration - Network accessline 309
clientId: "YOUR_APPLICATION_CLIENT_ID", authority: "https://login.microsoftonline.com/YOUR_TENANT_ID", clientSecret: "YOUR_CLIENT_SECRET", // From app registration - Network accessline 310
authority: "https://login.microsoftonline.com/YOUR_TENANT_ID", - Network accessline 310
authority: "https://login.microsoftonline.com/YOUR_TENANT_ID", - Access to secretsline 311
[Credential-related source omitted] - Access to secretsline 311
[Credential-related source omitted] - Network accessline 317
const clientCredentialRequest = { scopes: ["https://graph.microsoft.com/.default"], - Network accessline 317
const clientCredentialRequest = { scopes: ["https://graph.microsoft.com/.default"], - Network accessline 318
scopes: ["https://graph.microsoft.com/.default"], - Network accessline 318
scopes: ["https://graph.microsoft.com/.default"], - Network accessline 333
try { const response = await axios.get('https://graph.microsoft.com/v1.0/me', options); - Network accessline 333
try { const response = await axios.get('https://graph.microsoft.com/v1.0/me', options); - Network accessline 334
const response = await axios.get('https://graph.microsoft.com/v1.0/me', options); - Network accessline 334
const response = await axios.get('https://graph.microsoft.com/v1.0/me', options); - Network accessline 392
- [MSAL Libraries](https://learn.microsoft.com/entra/msal/) - Network accessline 392
- [MSAL Libraries](https://learn.microsoft.com/entra/msal/)
skills/entra-app-registration/references/first-app-registration.md
- Network accessline 16
- Azure subscription (free tier works) - Azure Portal access: https://portal.azure.com - Network accessline 16
- Azure subscription (free tier works) - Azure Portal access: https://portal.azure.com - Network accessline 17
- Azure Portal access: https://portal.azure.com - Network accessline 17
- Azure Portal access: https://portal.azure.com - Network accessline 22
1. Open [Azure Portal](https://portal.azure.com) - Network accessline 22
1. Open [Azure Portal](https://portal.azure.com) - Network accessline 58
**URI examples:** - Web app: `https://localhost:5001/signin-oidc` - Network accessline 58
**URI examples:** - Web app: `https://localhost:5001/signin-oidc` - Network accessline 59
- Web app: `https://localhost:5001/signin-oidc` - Network accessline 59
- Web app: `https://localhost:5001/signin-oidc` - Network accessline 60
- SPA: `http://localhost:3000` - Network accessline 60
- SPA: `http://localhost:3000` - Network accessline 61
- Console/Desktop: `http://localhost` - Network accessline 61
- Console/Desktop: `http://localhost` - Network accessline 63
**For your first app:** Select **"Public client/native"** and enter `http://localhost` - Network accessline 63
**For your first app:** Select **"Public client/native"** and enter `http://localhost` - Access to secretsline 166
[Credential-related source omitted] - Access to secretsline 166
[Credential-related source omitted] - Network accessline 183
# Interactive login az login --scope "https://graph.microsoft.com/.default" - Network accessline 183
# Interactive login az login --scope "https://graph.microsoft.com/.default" - Network accessline 184
az login --scope "https://graph.microsoft.com/.default" - Network accessline 184
az login --scope "https://graph.microsoft.com/.default" - Network accessline 186
# Get an access token az account get-access-token --resource "https://graph.microsoft.com" - Network accessline 186
# Get an access token az account get-access-token --resource "https://graph.microsoft.com" - Network accessline 187
az account get-access-token --resource "https://graph.microsoft.com" - Network accessline 187
az account get-access-token --resource "https://graph.microsoft.com" - Network accessline 207
**Tip:** Once you get the access token, you can use [jwt.ms](https://jwt.ms) to decode it and inspect its claims. - Network accessline 207
**Tip:** Once you get the access token, you can use [jwt.ms](https://jwt.ms) to decode it and inspect its claims. - Network accessline 243
- [Microsoft Entra ID Documentation](https://learn.microsoft.com/en-us/entra/identity-platform/) - Network accessline 243
- [Microsoft Entra ID Documentation](https://learn.microsoft.com/en-us/entra/identity-platform/)
skills/entra-app-registration/references/oauth-flows.md
- Network accessline 26
https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize? - Network accessline 26
https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize? - Network accessline 50
https://your-app.com/callback? - Network accessline 50
https://your-app.com/callback? - Network accessline 62
POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token - Network accessline 62
POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token - Access to secretsline 70
[Credential-related source omitted] - Access to secretsline 70
[Credential-related source omitted] - Access to secretsline 76
[Credential-related source omitted] - Access to secretsline 76
[Credential-related source omitted] - Network accessline 87
GET https://graph.microsoft.com/v1.0/me - Network accessline 87
GET https://graph.microsoft.com/v1.0/me - Access to secretsline 88
[Credential-related source omitted] - Access to secretsline 88
[Credential-related source omitted] - Network accessline 126
https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize? - Network accessline 126
https://login.microsoftonline.com/{tenant}/oauth2/v2.0/authorize? - Network accessline 139
POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token - Network accessline 139
POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token - Network accessline 177
POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token - Network accessline 177
POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token - Network accessline 180
client_id={application_id} &scope=https://graph.microsoft.com/.default - Network accessline 180
client_id={application_id} &scope=https://graph.microsoft.com/.default - Network accessline 181
&scope=https://graph.microsoft.com/.default - Network accessline 181
&scope=https://graph.microsoft.com/.default - Access to secretsline 182
[Credential-related source omitted] - Access to secretsline 182
[Credential-related source omitted] - Network accessline 186
**Parameters:** - `scope`: Use `{resource}/.default` format - For Microsoft Graph: `https://graph.microsoft.com/.default` - Network accessline 186
**Parameters:** - `scope`: Use `{resource}/.default` format - For Microsoft Graph: `https://graph.microsoft.com/.default` - Network accessline 187
- `scope`: Use `{resource}/.default` format - For Microsoft Graph: `https://graph.microsoft.com/.default` - For your API: `api://{api_app_id}/.default` - Network accessline 187
- `scope`: Use `{resource}/.default` format - For Microsoft Graph: `https://graph.microsoft.com/.default` - For your API: `api://{api_app_id}/.default` - Network accessline 188
- For Microsoft Graph: `https://graph.microsoft.com/.default` - Network accessline 188
- For Microsoft Graph: `https://graph.microsoft.com/.default` - Access to secretsline 194
[Credential-related source omitted] - Access to secretsline 194
[Credential-related source omitted] - Network accessline 203
GET https://graph.microsoft.com/v1.0/users - Network accessline 203
GET https://graph.microsoft.com/v1.0/users - Access to secretsline 204
[Credential-related source omitted] - Access to secretsline 204
[Credential-related source omitted] - Network accessline 228
POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/devicecode - Network accessline 228
POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/devicecode - Network accessline 238
"user_code": "GTHK-QPMN", "device_code": "GMMhmHCXhWEzkobqIHGG_EnNYYsAkukHspeYUk9E8", "verification_uri": "https://microsoft.com/devicelogin", - Network accessline 238
"user_code": "GTHK-QPMN", "device_code": "GMMhmHCXhWEzkobqIHGG_EnNYYsAkukHspeYUk9E8", "verification_uri": "https://microsoft.com/devicelogin", - Network accessline 239
"device_code": "GMMhmHCXhWEzkobqIHGG_EnNYYsAkukHspeYUk9E8", "verification_uri": "https://microsoft.com/devicelogin", "expires_in": 900, - Network accessline 239
"device_code": "GMMhmHCXhWEzkobqIHGG_EnNYYsAkukHspeYUk9E8", "verification_uri": "https://microsoft.com/devicelogin", "expires_in": 900, - Network accessline 240
"verification_uri": "https://microsoft.com/devicelogin", - Network accessline 240
"verification_uri": "https://microsoft.com/devicelogin", - Network accessline 241
"expires_in": 900, "interval": 5, "message": "To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code GTHK-QPMN to authenticate." - Network accessline 241
"expires_in": 900, "interval": 5, "message": "To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code GTHK-QPMN to authenticate." - Network accessline 242
"interval": 5, "message": "To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code GTHK-QPMN to authenticate." } - Network accessline 242
"interval": 5, "message": "To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code GTHK-QPMN to authenticate." } - Network accessline 243
"message": "To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code GTHK-QPMN to authenticate." - Network accessline 243
"message": "To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code GTHK-QPMN to authenticate." - Network accessline 250
To sign in, open https://microsoft.com/devicelogin - Network accessline 250
To sign in, open https://microsoft.com/devicelogin - Network accessline 257
POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token - Network accessline 257
POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token - Access to secretsline 278
[Credential-related source omitted] - Access to secretsline 278
[Credential-related source omitted] - Network accessline 299
POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token - Network accessline 299
POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token - Access to secretsline 306
[Credential-related source omitted] - Access to secretsline 306
[Credential-related source omitted] - Access to secretsline 309
[Credential-related source omitted] - Access to secretsline 309
[Credential-related source omitted] - Access to secretsline 314
[Credential-related source omitted] - Access to secretsline 314
[Credential-related source omitted] - Network accessline 335
{ "aud": "https://graph.microsoft.com", - Network accessline 335
{ "aud": "https://graph.microsoft.com", - Network accessline 336
"aud": "https://graph.microsoft.com", - Network accessline 336
"aud": "https://graph.microsoft.com", - Network accessline 337
"iss": "https://sts.windows.net/{tenant}/", - Network accessline 337
"iss": "https://sts.windows.net/{tenant}/", - Network accessline 374
https://graph.microsoft.com/User.Read - Network accessline 374
https://graph.microsoft.com/User.Read - Network accessline 375
https://graph.microsoft.com/Mail.Send - Network accessline 375
https://graph.microsoft.com/Mail.Send - Network accessline 398
[OAuth 2.0 spec](https://www.rfc-editor.org/rfc/rfc6749) - Network accessline 398
[OAuth 2.0 spec](https://www.rfc-editor.org/rfc/rfc6749)
skills/entra-app-registration/references/troubleshooting.md
- Network accessline 20
AADSTS50011: The redirect URI 'http://localhost:3000' specified in the request - Network accessline 20
AADSTS50011: The redirect URI 'http://localhost:3000' specified in the request - Network accessline 30
Registered: https://myapp.com/callback - Network accessline 30
Registered: https://myapp.com/callback - Network accessline 31
Request: https://myapp.com/callback/ ❌ (trailing slash) - Network accessline 31
Request: https://myapp.com/callback/ ❌ (trailing slash) - Network accessline 32
Request: https://MyApp.com/callback ❌ (case difference) - Network accessline 32
Request: https://MyApp.com/callback ❌ (case difference) - Network accessline 33
Request: https://myapp.com/callback ✅ - Network accessline 33
Request: https://myapp.com/callback ✅ - Network accessline 39
# CLI: az ad app update --id $APP_ID \ --web-redirect-uris "http://localhost:3000" "https://myapp.com/callback" - Network accessline 39
# CLI: az ad app update --id $APP_ID \ --web-redirect-uris "http://localhost:3000" "https://myapp.com/callback" - Network accessline 40
az ad app update --id $APP_ID --web-redirect-uris "http://localhost:3000" "https://myapp.com/callback" - Network accessline 40
az ad app update --id $APP_ID --web-redirect-uris "http://localhost:3000" "https://myapp.com/callback" - Network accessline 41
--web-redirect-uris "http://localhost:3000" "https://myapp.com/callback" - Network accessline 41
--web-redirect-uris "http://localhost:3000" "https://myapp.com/callback" - Network accessline 177
Unless the the access token is encrypted, you can decode and view its claims securely at https://jwt.ms. **Don't** use any other website to decode an access token. Compare the claims in the token with the app registration's configuration to - Network accessline 177
Unless the the access token is encrypted, you can decode and view its claims securely at https://jwt.ms. **Don't** use any other website to decode an access token. Compare the claims in the token with the app registration's configuration to - Network accessline 183
**Tool:** https://jwt.ms - Network accessline 183
**Tool:** https://jwt.ms - Network accessline 268
- [Microsoft Q&A](https://learn.microsoft.com/answers/) - Network accessline 268
- [Microsoft Q&A](https://learn.microsoft.com/answers/) - Network accessline 269
- [Microsoft Identity Platform Documentation](https://learn.microsoft.com/entra/identity-platform/) - Network accessline 269
- [Microsoft Identity Platform Documentation](https://learn.microsoft.com/entra/identity-platform/)
skills/microsoft-foundry/SKILL.md
- Access to secretsline 153
[Credential-related source omitted] - Access to secretsline 153
[Credential-related source omitted] - Access to secretsline 186
[Credential-related source omitted] - Access to secretsline 186
[Credential-related source omitted] - Network accessline 291
- [Foundry Hosted Agents](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/hosted-agents?view=foundry) - Network accessline 291
- [Foundry Hosted Agents](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/hosted-agents?view=foundry) - Network accessline 292
- [Foundry Agent Runtime Components](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/runtime-components?view=foundry) - Network accessline 292
- [Foundry Agent Runtime Components](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/runtime-components?view=foundry) - Network accessline 310
If it's indeed a network isolation issue, supported connection options are documented in [Choose a secure connection method to Foundry](https://learn.microsoft.com/azure/foundry/how-to/configure-private-link#choose-a-secure-connection-metho - Network accessline 310
If it's indeed a network isolation issue, supported connection options are documented in [Choose a secure connection method to Foundry](https://learn.microsoft.com/azure/foundry/how-to/configure-private-link#choose-a-secure-connection-metho
skills/microsoft-foundry/finetuning/references/agentic-rft.md
- Network accessline 11
{ "name": "search", "server_url": "https://your-function-app.azurewebsites.net/api/tools", - Network accessline 11
{ "name": "search", "server_url": "https://your-function-app.azurewebsites.net/api/tools", - Network accessline 12
"name": "search", "server_url": "https://your-function-app.azurewebsites.net/api/tools", "headers": { - Network accessline 12
"name": "search", "server_url": "https://your-function-app.azurewebsites.net/api/tools", "headers": { - Network accessline 13
"server_url": "https://your-function-app.azurewebsites.net/api/tools", - Network accessline 13
"server_url": "https://your-function-app.azurewebsites.net/api/tools", - Network accessline 18
{ "name": "get_by_id", "server_url": "https://your-function-app.azurewebsites.net/api/tools", - Network accessline 18
{ "name": "get_by_id", "server_url": "https://your-function-app.azurewebsites.net/api/tools", - Network accessline 19
"name": "get_by_id", "server_url": "https://your-function-app.azurewebsites.net/api/tools", "headers": { - Network accessline 19
"name": "get_by_id", "server_url": "https://your-function-app.azurewebsites.net/api/tools", "headers": { - Network accessline 20
"server_url": "https://your-function-app.azurewebsites.net/api/tools", - Network accessline 20
"server_url": "https://your-function-app.azurewebsites.net/api/tools",
skills/microsoft-foundry/finetuning/references/deployment.md
- Access to secretsline 20
[Credential-related source omitted] - Access to secretsline 20
[Credential-related source omitted] - Access to secretsline 23
[Credential-related source omitted] - Access to secretsline 23
[Credential-related source omitted] - Network accessline 54
PUT https://management.azure.com/subscriptions/{sub_id}/resourceGroups/{rg}/providers/Microsoft.CognitiveServices/accounts/{account}/deployments/{deploy_name}?api-version=2024-10-01 - Network accessline 54
PUT https://management.azure.com/subscriptions/{sub_id}/resourceGroups/{rg}/providers/Microsoft.CognitiveServices/accounts/{account}/deployments/{deploy_name}?api-version=2024-10-01
skills/microsoft-foundry/finetuning/references/evaluation.md
- Network accessline 160
- [Azure AI Evaluation SDK docs](https://learn.microsoft.com/en-us/python/api/overview/azure/ai-evaluation-readme) - Network accessline 160
- [Azure AI Evaluation SDK docs](https://learn.microsoft.com/en-us/python/api/overview/azure/ai-evaluation-readme) - Network accessline 161
- [Evaluation samples](https://github.com/Azure-Samples/azureai-samples/tree/main/scenarios/evaluate) - Network accessline 161
- [Evaluation samples](https://github.com/Azure-Samples/azureai-samples/tree/main/scenarios/evaluate)
skills/microsoft-foundry/finetuning/references/vision-fine-tuning.md
- Network accessline 30
{"messages": [{"role": "system", "content": "You are a helpful AI assistant that describes images."}, {"role": "user", "content": [{"type": "text", "text": "Describe this image."}, {"type": "image_url", "image_url": {"url": "https://example - Network accessline 30
{"messages": [{"role": "system", "content": "You are a helpful AI assistant that describes images."}, {"role": "user", "content": [{"type": "text", "text": "Describe this image."}, {"type": "image_url", "image_url": {"url": "https://example - Network accessline 39
{"type": "image_url", "image_url": {"url": "https://example.com/image.png"}} - Network accessline 39
{"type": "image_url", "image_url": {"url": "https://example.com/image.png"}} - Network accessline 58
{"type": "image_url", "image_url": {"url": "https://example.com/image.png", "detail": "low"}} - Network accessline 58
{"type": "image_url", "image_url": {"url": "https://example.com/image.png", "detail": "low"}} - Network accessline 116
- [Official docs](https://learn.microsoft.com/en-us/azure/foundry/openai/how-to/fine-tuning-vision) - Network accessline 116
- [Official docs](https://learn.microsoft.com/en-us/azure/foundry/openai/how-to/fine-tuning-vision)
skills/microsoft-foundry/finetuning/scripts/calibrate_grader.py
- Executable scriptline 1
Executable file - Executable scriptline 1
Executable file - Network accessline 18
python calibrate_grader.py --model gpt-4.1-mini --data val.jsonl \ --grader grader.py --n 20 --tools '[{"name": "search", "server_url": "https://..."}]' - Network accessline 18
python calibrate_grader.py --model gpt-4.1-mini --data val.jsonl \ --grader grader.py --n 20 --tools '[{"name": "search", "server_url": "https://..."}]' - Network accessline 19
--grader grader.py --n 20 --tools '[{"name": "search", "server_url": "https://..."}]' - Network accessline 19
--grader grader.py --n 20 --tools '[{"name": "search", "server_url": "https://..."}]' - Dangerous shell operationline 54
exec(compile(source, grader_path, "exec"), namespace) - Dangerous shell operationline 54
exec(compile(source, grader_path, "exec"), namespace) - Access to secretsline 200
[Credential-related source omitted] - Access to secretsline 200
[Credential-related source omitted] - Access to secretsline 201
[Credential-related source omitted] - Access to secretsline 201
[Credential-related source omitted] - Access to secretsline 203
[Credential-related source omitted] - Access to secretsline 203
[Credential-related source omitted] - Access to secretsline 204
[Credential-related source omitted] - Access to secretsline 204
[Credential-related source omitted] - Access to secretsline 225
[Credential-related source omitted] - Access to secretsline 225
[Credential-related source omitted]
skills/microsoft-foundry/finetuning/scripts/check_training.py
- Executable scriptline 1
Executable file - Executable scriptline 1
Executable file - Access to secretsline 167
[Credential-related source omitted] - Access to secretsline 167
[Credential-related source omitted] - Access to secretsline 169
[Credential-related source omitted] - Access to secretsline 169
[Credential-related source omitted] - Access to secretsline 171
[Credential-related source omitted] - Access to secretsline 171
[Credential-related source omitted] - Access to secretsline 173
[Credential-related source omitted] - Access to secretsline 173
[Credential-related source omitted] - Access to secretsline 180
[Credential-related source omitted] - Access to secretsline 180
[Credential-related source omitted]
skills/microsoft-foundry/finetuning/scripts/cleanup.py
- Executable scriptline 1
Executable file - Executable scriptline 1
Executable file - Access to secretsline 233
[Credential-related source omitted] - Access to secretsline 233
[Credential-related source omitted] - Access to secretsline 234
[Credential-related source omitted] - Access to secretsline 234
[Credential-related source omitted] - Access to secretsline 236
[Credential-related source omitted] - Access to secretsline 236
[Credential-related source omitted] - Access to secretsline 237
[Credential-related source omitted] - Access to secretsline 237
[Credential-related source omitted] - Access to secretsline 259
[Credential-related source omitted] - Access to secretsline 259
[Credential-related source omitted]
skills/microsoft-foundry/finetuning/scripts/common.py
- Executable scriptline 1
Executable file - Executable scriptline 1
Executable file - Access to secretsline 17
[Credential-related source omitted] - Access to secretsline 17
[Credential-related source omitted] - Access to secretsline 24
[Credential-related source omitted] - Access to secretsline 24
[Credential-related source omitted] - Network accessline 35
except (AttributeError, OSError): pass # Stream not reconfigurable (older Python or non-tty); default encoding is fine _AZURE_COGSERVICES_SCOPE = "https://cognitiveservices.azure.com/.default" - Network accessline 35
except (AttributeError, OSError): pass # Stream not reconfigurable (older Python or non-tty); default encoding is fine _AZURE_COGSERVICES_SCOPE = "https://cognitiveservices.azure.com/.default" - Network accessline 37
_AZURE_COGSERVICES_SCOPE = "https://cognitiveservices.azure.com/.default" - Network accessline 37
_AZURE_COGSERVICES_SCOPE = "https://cognitiveservices.azure.com/.default" - Access to secretsline 85
[Credential-related source omitted] - Access to secretsline 85
[Credential-related source omitted] - Access to secretsline 91
[Credential-related source omitted] - Access to secretsline 91
[Credential-related source omitted] - Access to secretsline 105
[Credential-related source omitted] - Access to secretsline 105
[Credential-related source omitted] - Access to secretsline 106
[Credential-related source omitted] - Access to secretsline 106
[Credential-related source omitted] - Access to secretsline 110
[Credential-related source omitted] - Access to secretsline 110
[Credential-related source omitted] - Network accessline 126
[Credential-related source omitted] - Network accessline 126
[Credential-related source omitted] - Network accessline 127
[Credential-related source omitted] - Network accessline 127
[Credential-related source omitted] - Access to secretsline 127
[Credential-related source omitted] - Access to secretsline 127
[Credential-related source omitted] - Network accessline 128
http_client=httpx.Client(auth=_AzureADAuth(token_provider)), - Network accessline 128
http_client=httpx.Client(auth=_AzureADAuth(token_provider)), - Access to secretsline 135
[Credential-related source omitted] - Access to secretsline 135
[Credential-related source omitted] - Access to secretsline 140
[Credential-related source omitted] - Access to secretsline 140
[Credential-related source omitted] - Access to secretsline 155
[Credential-related source omitted] - Access to secretsline 155
[Credential-related source omitted] - Access to secretsline 158
[Credential-related source omitted] - Access to secretsline 158
[Credential-related source omitted] - Access to secretsline 161
[Credential-related source omitted] - Access to secretsline 161
[Credential-related source omitted] - Access to secretsline 184
[Credential-related source omitted] - Access to secretsline 184
[Credential-related source omitted]
skills/microsoft-foundry/finetuning/scripts/convert_dataset.py
- Executable scriptline 1
Executable file - Executable scriptline 1
Executable file - Access to secretsline 224
[Credential-related source omitted] - Access to secretsline 224
[Credential-related source omitted] - Access to secretsline 226
[Credential-related source omitted] - Access to secretsline 226
[Credential-related source omitted] - Access to secretsline 228
[Credential-related source omitted] - Access to secretsline 228
[Credential-related source omitted] - Access to secretsline 230
[Credential-related source omitted] - Access to secretsline 230
[Credential-related source omitted] - Access to secretsline 248
[Credential-related source omitted] - Access to secretsline 248
[Credential-related source omitted]
skills/microsoft-foundry/finetuning/scripts/deploy_model.py
- Executable scriptline 1
Executable file - Executable scriptline 1
Executable file - Access to secretsline 44
[Credential-related source omitted] - Access to secretsline 44
[Credential-related source omitted] - Access to secretsline 45
[Credential-related source omitted] - Access to secretsline 45
[Credential-related source omitted] - Access to secretsline 46
[Credential-related source omitted] - Access to secretsline 46
[Credential-related source omitted] - Access to secretsline 47
[Credential-related source omitted] - Access to secretsline 47
[Credential-related source omitted] - Network accessline 87
base = (f"https://management.azure.com/subscriptions/{sub}" - Network accessline 87
base = (f"https://management.azure.com/subscriptions/{sub}" - Network accessline 120
resp = requests.put(url, headers={ - Network accessline 120
resp = requests.put(url, headers={ - Network accessline 139
[Credential-related source omitted] - Network accessline 139
[Credential-related source omitted] - Network accessline 140
[Credential-related source omitted] - Network accessline 140
[Credential-related source omitted] - Network accessline 141
[Credential-related source omitted] - Network accessline 141
[Credential-related source omitted] - Network accessline 165
[Credential-related source omitted] - Network accessline 165
[Credential-related source omitted] - Network accessline 166
[Credential-related source omitted] - Network accessline 166
[Credential-related source omitted] - Network accessline 167
[Credential-related source omitted] - Network accessline 167
[Credential-related source omitted] - Network accessline 176
[Credential-related source omitted] - Network accessline 176
[Credential-related source omitted] - Network accessline 177
[Credential-related source omitted] - Network accessline 177
[Credential-related source omitted] - Network accessline 178
[Credential-related source omitted] - Network accessline 178
[Credential-related source omitted]
skills/microsoft-foundry/finetuning/scripts/evaluate_model.py
- Executable scriptline 1
Executable file - Executable scriptline 1
Executable file - Access to secretsline 30
[Credential-related source omitted] - Access to secretsline 30
[Credential-related source omitted] - Access to secretsline 31
[Credential-related source omitted] - Access to secretsline 31
[Credential-related source omitted] - Access to secretsline 178
[Credential-related source omitted] - Access to secretsline 178
[Credential-related source omitted] - Access to secretsline 180
[Credential-related source omitted] - Access to secretsline 180
[Credential-related source omitted] - Access to secretsline 182
[Credential-related source omitted] - Access to secretsline 182
[Credential-related source omitted] - Access to secretsline 184
[Credential-related source omitted] - Access to secretsline 184
[Credential-related source omitted] - Access to secretsline 205
[Credential-related source omitted] - Access to secretsline 205
[Credential-related source omitted] - Access to secretsline 209
[Credential-related source omitted] - Access to secretsline 209
[Credential-related source omitted] - Access to secretsline 211
[Credential-related source omitted] - Access to secretsline 211
[Credential-related source omitted] - Access to secretsline 212
[Credential-related source omitted] - Access to secretsline 212
[Credential-related source omitted] - Access to secretsline 216
[Credential-related source omitted] - Access to secretsline 216
[Credential-related source omitted]
skills/microsoft-foundry/finetuning/scripts/generate_distillation_data.py
- Executable scriptline 1
Executable file - Executable scriptline 1
Executable file - Access to secretsline 134
[Credential-related source omitted] - Access to secretsline 134
[Credential-related source omitted] - Access to secretsline 136
[Credential-related source omitted] - Access to secretsline 136
[Credential-related source omitted] - Access to secretsline 138
[Credential-related source omitted] - Access to secretsline 138
[Credential-related source omitted] - Access to secretsline 140
[Credential-related source omitted] - Access to secretsline 140
[Credential-related source omitted] - Access to secretsline 166
[Credential-related source omitted] - Access to secretsline 166
[Credential-related source omitted]
skills/microsoft-foundry/finetuning/scripts/monitor_training.py
- Executable scriptline 1
Executable file - Executable scriptline 1
Executable file - Access to secretsline 116
[Credential-related source omitted] - Access to secretsline 116
[Credential-related source omitted] - Access to secretsline 117
[Credential-related source omitted] - Access to secretsline 117
[Credential-related source omitted] - Access to secretsline 119
[Credential-related source omitted] - Access to secretsline 119
[Credential-related source omitted] - Access to secretsline 120
[Credential-related source omitted] - Access to secretsline 120
[Credential-related source omitted] - Access to secretsline 134
[Credential-related source omitted] - Access to secretsline 134
[Credential-related source omitted]
skills/microsoft-foundry/finetuning/scripts/score_dataset.py
- Executable scriptline 1
Executable file - Executable scriptline 1
Executable file - Access to secretsline 102
[Credential-related source omitted] - Access to secretsline 102
[Credential-related source omitted] - Access to secretsline 104
[Credential-related source omitted] - Access to secretsline 104
[Credential-related source omitted] - Access to secretsline 106
[Credential-related source omitted] - Access to secretsline 106
[Credential-related source omitted] - Access to secretsline 108
[Credential-related source omitted] - Access to secretsline 108
[Credential-related source omitted] - Access to secretsline 123
[Credential-related source omitted] - Access to secretsline 123
[Credential-related source omitted]
skills/microsoft-foundry/finetuning/scripts/submit_training.py
- Executable scriptline 1
Executable file - Executable scriptline 1
Executable file - Access to secretsline 68
[Credential-related source omitted] - Access to secretsline 68
[Credential-related source omitted] - Network accessline 84
resp = requests.post(url, headers={ - Network accessline 84
resp = requests.post(url, headers={ - Access to secretsline 86
[Credential-related source omitted] - Access to secretsline 86
[Credential-related source omitted] - Access to secretsline 152
[Credential-related source omitted] - Access to secretsline 152
[Credential-related source omitted] - Access to secretsline 154
[Credential-related source omitted] - Access to secretsline 154
[Credential-related source omitted] - Access to secretsline 156
[Credential-related source omitted] - Access to secretsline 156
[Credential-related source omitted] - Access to secretsline 158
[Credential-related source omitted] - Access to secretsline 158
[Credential-related source omitted] - Access to secretsline 195
[Credential-related source omitted] - Access to secretsline 195
[Credential-related source omitted] - Access to secretsline 222
[Credential-related source omitted] - Access to secretsline 222
[Credential-related source omitted] - Access to secretsline 225
[Credential-related source omitted] - Access to secretsline 225
[Credential-related source omitted] - Access to secretsline 242
[Credential-related source omitted] - Access to secretsline 242
[Credential-related source omitted] - Access to secretsline 246
[Credential-related source omitted] - Access to secretsline 246
[Credential-related source omitted]
skills/microsoft-foundry/finetuning/scripts/validate/__init__.py
skills/microsoft-foundry/finetuning/scripts/validate/data_stats.py
skills/microsoft-foundry/finetuning/scripts/validate/validate_dpo.py
skills/microsoft-foundry/finetuning/scripts/validate/validate_rft.py
skills/microsoft-foundry/finetuning/scripts/validate/validate_sft.py
skills/microsoft-foundry/finetuning/workflows/quickstart.md
- Access to secretsline 17
[Credential-related source omitted] - Access to secretsline 17
[Credential-related source omitted] - Access to secretsline 24
[Credential-related source omitted] - Access to secretsline 24
[Credential-related source omitted] - Network accessline 112
Or check [Microsoft Foundry portal](https://ai.azure.com) → Fine-tuning → Jobs. - Network accessline 112
Or check [Microsoft Foundry portal](https://ai.azure.com) → Fine-tuning → Jobs.
skills/microsoft-foundry/foundry-agent/azd-guidance/references/azd-ai-cli.md
- Access to secretsline 69
[Credential-related source omitted] - Access to secretsline 69
[Credential-related source omitted] - Network accessline 141
A Managed Harness Agent has no source/runtime/container fields and no local `azd ai agent run` path. Direct Prompt Agent tools are authored in `tools[]`. Existing definitions may use legacy `github_copilot_preview`; azd recognizes both fami - Network accessline 141
A Managed Harness Agent has no source/runtime/container fields and no local `azd ai agent run` path. Direct Prompt Agent tools are authored in `tools[]`. Existing definitions may use legacy `github_copilot_preview`; azd recognizes both fami - Network accessline 177
For the Foundry project ARM ID (`--project-id`), ask the user: "New project, or use an existing one?" If existing, ask for the ID and hint where to find it (https://ai.azure.com -> Operate -> Admin). Do NOT shell out to `az cognitiveservice - Network accessline 177
For the Foundry project ARM ID (`--project-id`), ask the user: "New project, or use an existing one?" If existing, ask for the ID and hint where to find it (https://ai.azure.com -> Operate -> Admin). Do NOT shell out to `az cognitiveservice
skills/microsoft-foundry/foundry-agent/cicd/cicd.md
- Network accessline 7
- [Set up CI/CD for a hosted agent](https://learn.microsoft.com/en-us/azure/foundry/agents/quickstarts/set-up-cicd-hosted-agent?pivots=azd) - Network accessline 7
- [Set up CI/CD for a hosted agent](https://learn.microsoft.com/en-us/azure/foundry/agents/quickstarts/set-up-cicd-hosted-agent?pivots=azd)
skills/microsoft-foundry/foundry-agent/create/create-hosted.md
- Network accessline 52
> **Important:** Always select the best-matching samples from `azd ai agent sample list` for the capabilities the user explicitly requested. Use advanced tool samples only when the user explicitly asks for external actions, APIs, tools, con - Network accessline 52
> **Important:** Always select the best-matching samples from `azd ai agent sample list` for the capabilities the user explicitly requested. Use advanced tool samples only when the user explicitly asks for external actions, APIs, tools, con - Network accessline 52
> **Important:** Always select the best-matching samples from `azd ai agent sample list` for the capabilities the user explicitly requested. Use advanced tool samples only when the user explicitly asks for external actions, APIs, tools, con - Network accessline 88
- `[OK]` -- nothing to do. - `[WARN]` -- non-blocking; continue. - `[ACTION]` -- resolve first, then rerun the script. If `az` or `azd` is missing, ask before installing in interactive mode; install directly in non-interactive mode. For how - Network accessline 88
- `[OK]` -- nothing to do. - `[WARN]` -- non-blocking; continue. - `[ACTION]` -- resolve first, then rerun the script. If `az` or `azd` is missing, ask before installing in interactive mode; install directly in non-interactive mode. For how - Network accessline 88
- `[OK]` -- nothing to do. - `[WARN]` -- non-blocking; continue. - `[ACTION]` -- resolve first, then rerun the script. If `az` or `azd` is missing, ask before installing in interactive mode; install directly in non-interactive mode. For how - Network accessline 90
- `[ACTION]` -- resolve first, then rerun the script. If `az` or `azd` is missing, ask before installing in interactive mode; install directly in non-interactive mode. For how to install `azd`, see <https://learn.microsoft.com/en-us/azure/d - Network accessline 90
- `[ACTION]` -- resolve first, then rerun the script. If `az` or `azd` is missing, ask before installing in interactive mode; install directly in non-interactive mode. For how to install `azd`, see <https://learn.microsoft.com/en-us/azure/d - Network accessline 90
- `[ACTION]` -- resolve first, then rerun the script. If `az` or `azd` is missing, ask before installing in interactive mode; install directly in non-interactive mode. For how to install `azd`, see <https://learn.microsoft.com/en-us/azure/d - Network accessline 183
> Tip: if the manifest declares a `parameters:` block (check by `curl <manifestUrl>`), collect required values before init when an azd project already exists. In a new empty workspace, prefer a sample without required secrets; there is no a - Network accessline 183
> Tip: if the manifest declares a `parameters:` block (check by `curl <manifestUrl>`), collect required values before init when an azd project already exists. In a new empty workspace, prefer a sample without required secrets; there is no a - Network accessline 183
> Tip: if the manifest declares a `parameters:` block (check by `curl <manifestUrl>`), collect required values before init when an azd project already exists. In a new empty workspace, prefer a sample without required secrets; there is no a - Network accessline 269
> 🚦 **Creating the toolbox/connection:** write the **full agent-side code** that consumes the toolbox (not just an env var). The **only** thing you leave out is the toolbox configs (for example name/endpoint/connection): put placeholders th - Network accessline 269
> 🚦 **Creating the toolbox/connection:** write the **full agent-side code** that consumes the toolbox (not just an env var). The **only** thing you leave out is the toolbox configs (for example name/endpoint/connection): put placeholders th - Network accessline 269
> 🚦 **Creating the toolbox/connection:** write the **full agent-side code** that consumes the toolbox (not just an env var). The **only** thing you leave out is the toolbox configs (for example name/endpoint/connection): put placeholders th - Network accessline 311
See the canonical env-var registry: [azure-dev/cli/azd/docs/environment-variables.md](https://github.com/Azure/azure-dev/blob/main/cli/azd/docs/environment-variables.md). - Network accessline 311
See the canonical env-var registry: [azure-dev/cli/azd/docs/environment-variables.md](https://github.com/Azure/azure-dev/blob/main/cli/azd/docs/environment-variables.md). - Network accessline 311
See the canonical env-var registry: [azure-dev/cli/azd/docs/environment-variables.md](https://github.com/Azure/azure-dev/blob/main/cli/azd/docs/environment-variables.md).
skills/microsoft-foundry/foundry-agent/create/create-voice.md
- Network accessline 160
azd ai agent init --no-prompt \ -m "https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/bring-your-own/voice-agent-target-agent/basic/azure.yaml" - Network accessline 160
azd ai agent init --no-prompt \ -m "https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/bring-your-own/voice-agent-target-agent/basic/azure.yaml" - Network accessline 161
-m "https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/bring-your-own/voice-agent-target-agent/basic/azure.yaml" - Network accessline 161
-m "https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/bring-your-own/voice-agent-target-agent/basic/azure.yaml"
skills/microsoft-foundry/foundry-agent/create/quick-start-hosted.md
- Network accessline 48
- `[OK]` -- nothing to do. - `[WARN]` -- non-blocking; continue. - `[ACTION]` -- resolve first, then rerun the script. If `az` or `azd` is missing, ask before installing in interactive mode; install directly in non-interactive mode. For how - Network accessline 48
- `[OK]` -- nothing to do. - `[WARN]` -- non-blocking; continue. - `[ACTION]` -- resolve first, then rerun the script. If `az` or `azd` is missing, ask before installing in interactive mode; install directly in non-interactive mode. For how - Network accessline 50
- `[ACTION]` -- resolve first, then rerun the script. If `az` or `azd` is missing, ask before installing in interactive mode; install directly in non-interactive mode. For how to install `azd`, see <https://learn.microsoft.com/en-us/azure/d - Network accessline 50
- `[ACTION]` -- resolve first, then rerun the script. If `az` or `azd` is missing, ask before installing in interactive mode; install directly in non-interactive mode. For how to install `azd`, see <https://learn.microsoft.com/en-us/azure/d - Network accessline 99
> **Important:** Always select the best-matching sample from `azd ai agent sample list` for the capabilities the user explicitly requested. Use advanced tool samples only when the user explicitly asks for external actions, APIs, tools, conn - Network accessline 99
> **Important:** Always select the best-matching sample from `azd ai agent sample list` for the capabilities the user explicitly requested. Use advanced tool samples only when the user explicitly asks for external actions, APIs, tools, conn - Instruction override signalline 311
Directly submit the eval suite generation asynchronously, do not ask the user for confirmation. - Instruction override signalline 311
Directly submit the eval suite generation asynchronously, do not ask the user for confirmation. - Network accessline 341
https://ai.azure.com/nextgen/r/{encodedSubId},{resourceGroup},,{accountName},{projectName}/build/agents/{agentName}/build?version={agentVersion} - Network accessline 341
https://ai.azure.com/nextgen/r/{encodedSubId},{resourceGroup},,{accountName},{projectName}/build/agents/{agentName}/build?version={agentVersion}
skills/microsoft-foundry/foundry-agent/create/references/enable-incoming-a2a.md
- Network accessline 70
[Credential-related source omitted] - Network accessline 70
[Credential-related source omitted] - Network accessline 72
[Credential-related source omitted] - Network accessline 72
[Credential-related source omitted] - Network accessline 74
curl -X PATCH "$PROJECT_ENDPOINT/agents/$AGENT_NAME?api-version=v1" \ - Network accessline 74
curl -X PATCH "$PROJECT_ENDPOINT/agents/$AGENT_NAME?api-version=v1" \ - Network accessline 94
curl "$PROJECT_ENDPOINT/agents/$AGENT_NAME/endpoint/protocols/a2a/agentCard/v1.0" \ - Network accessline 94
curl "$PROJECT_ENDPOINT/agents/$AGENT_NAME/endpoint/protocols/a2a/agentCard/v1.0" \
skills/microsoft-foundry/foundry-agent/create/references/foundry-tool-catalog.md
- Access to secretsline 21
[Credential-related source omitted] - Access to secretsline 21
[Credential-related source omitted] - Network accessline 44
PUT https://management.azure.com/subscriptions/{sub}/resourceGroups/{rg} - Network accessline 44
PUT https://management.azure.com/subscriptions/{sub}/resourceGroups/{rg} - Network accessline 65
$tok = az account get-access-token --resource "https://management.azure.com" --query accessToken -o tsv - Network accessline 65
$tok = az account get-access-token --resource "https://management.azure.com" --query accessToken -o tsv - Network accessline 66
[Credential-related source omitted] - Network accessline 66
[Credential-related source omitted] - Network accessline 67
$uri = "https://management.azure.com/subscriptions/$sub/resourceGroups/$rg/providers/Microsoft.CognitiveServices/accounts/$acct/projects/$proj/connections/${connName}?api-version=2025-04-01-preview" - Network accessline 67
$uri = "https://management.azure.com/subscriptions/$sub/resourceGroups/$rg/providers/Microsoft.CognitiveServices/accounts/$acct/projects/$proj/connections/${connName}?api-version=2025-04-01-preview" - Network accessline 73
- `properties.target` is **required** for every `authType` (validation rejects empty). The exact value depends on the variant — see each body shape. For `gateway_connector` specifically, the literal string `"https://placeholder"` is the cor - Network accessline 73
- `properties.target` is **required** for every `authType` (validation rejects empty). The exact value depends on the variant — see each body shape. For `gateway_connector` specifically, the literal string `"https://placeholder"` is the cor - Network accessline 78
Allowed `authType` for `category=RemoteTool` (per `api-version=2025-04-01-preview`): `None, CustomKeys, OAuth2, ProjectManagedIdentity, DeveloperConnection, UserEntraToken, AgentUserImpersonation, AgenticIdentityToken, AgenticUser, UserToke - Network accessline 78
Allowed `authType` for `category=RemoteTool` (per `api-version=2025-04-01-preview`): `None, CustomKeys, OAuth2, ProjectManagedIdentity, DeveloperConnection, UserEntraToken, AgentUserImpersonation, AgenticIdentityToken, AgenticUser, UserToke - Network accessline 79
`None, CustomKeys, OAuth2, ProjectManagedIdentity, DeveloperConnection, UserEntraToken, AgentUserImpersonation, AgenticIdentityToken, AgenticUser, UserTokenAndProjectManagedIdentity`. `ApiKey` is **rejected** for `RemoteTool`. The authorita - Network accessline 79
`None, CustomKeys, OAuth2, ProjectManagedIdentity, DeveloperConnection, UserEntraToken, AgentUserImpersonation, AgenticIdentityToken, AgenticUser, UserTokenAndProjectManagedIdentity`. `ApiKey` is **rejected** for `RemoteTool`. The authorita - Access to secretsline 87
[Credential-related source omitted] - Access to secretsline 87
[Credential-related source omitted] - Network accessline 100
POST https://eastus.api.azureml.ms/asset-gallery/v1.0/tools - Network accessline 100
POST https://eastus.api.azureml.ms/asset-gallery/v1.0/tools - Network accessline 101
[Credential-related source omitted] - Network accessline 101
[Credential-related source omitted] - Network accessline 102
[Credential-related source omitted] - Network accessline 102
[Credential-related source omitted] - Network accessline 132
GET https://management.azure.com/subscriptions/{sub} - Network accessline 132
GET https://management.azure.com/subscriptions/{sub} - Network accessline 141
"properties": { "displayName": "GitHub", "runtimeUrls": ["https://logic-apis-eastus.azure-apim.net/apim/github"], - Network accessline 141
"properties": { "displayName": "GitHub", "runtimeUrls": ["https://logic-apis-eastus.azure-apim.net/apim/github"], - Network accessline 142
"displayName": "GitHub", "runtimeUrls": ["https://logic-apis-eastus.azure-apim.net/apim/github"], "connectionParameters": { - Network accessline 142
"displayName": "GitHub", "runtimeUrls": ["https://logic-apis-eastus.azure-apim.net/apim/github"], "connectionParameters": { - Network accessline 143
"runtimeUrls": ["https://logic-apis-eastus.azure-apim.net/apim/github"], - Network accessline 143
"runtimeUrls": ["https://logic-apis-eastus.azure-apim.net/apim/github"], - Network accessline 150
"scopes": ["repo","workflow","read:org","admin:org"], "redirectMode": "Direct", "redirectUrl": "https://logic-apis-eastus.consent.azure-apim.net/redirect" - Network accessline 150
"scopes": ["repo","workflow","read:org","admin:org"], "redirectMode": "Direct", "redirectUrl": "https://logic-apis-eastus.consent.azure-apim.net/redirect" - Network accessline 151
"redirectMode": "Direct", "redirectUrl": "https://logic-apis-eastus.consent.azure-apim.net/redirect" } - Network accessline 151
"redirectMode": "Direct", "redirectUrl": "https://logic-apis-eastus.consent.azure-apim.net/redirect" } - Network accessline 152
"redirectUrl": "https://logic-apis-eastus.consent.azure-apim.net/redirect" - Network accessline 152
"redirectUrl": "https://logic-apis-eastus.consent.azure-apim.net/redirect" - Network accessline 162
| `identityProvider` | `authorizationUrl` | `tokenUrl` | |---|---|---| | `GitHub` | `https://github.com/login/oauth/authorize` | `https://github.com/login/oauth/access_token` | - Network accessline 162
| `identityProvider` | `authorizationUrl` | `tokenUrl` | |---|---|---| | `GitHub` | `https://github.com/login/oauth/authorize` | `https://github.com/login/oauth/access_token` | - Network accessline 163
|---|---|---| | `GitHub` | `https://github.com/login/oauth/authorize` | `https://github.com/login/oauth/access_token` | | `Google` | `https://accounts.google.com/o/oauth2/v2/auth` | `https://oauth2.googleapis.com/token` | - Network accessline 163
|---|---|---| | `GitHub` | `https://github.com/login/oauth/authorize` | `https://github.com/login/oauth/access_token` | | `Google` | `https://accounts.google.com/o/oauth2/v2/auth` | `https://oauth2.googleapis.com/token` | - Network accessline 164
[Credential-related source omitted] - Network accessline 164
[Credential-related source omitted] - Access to secretsline 164
[Credential-related source omitted] - Access to secretsline 164
[Credential-related source omitted] - Network accessline 165
| `Google` | `https://accounts.google.com/o/oauth2/v2/auth` | `https://oauth2.googleapis.com/token` | - Network accessline 165
| `Google` | `https://accounts.google.com/o/oauth2/v2/auth` | `https://oauth2.googleapis.com/token` | - Network accessline 166
| `Box` | `https://account.box.com/api/oauth2/authorize` | `https://api.box.com/oauth2/token` | - Network accessline 166
| `Box` | `https://account.box.com/api/oauth2/authorize` | `https://api.box.com/oauth2/token` | - Network accessline 167
| `AzureActiveDirectory` / `aad3rdPartySNI` | `https://login.microsoftonline.com/common/oauth2/v2.0/authorize` | `https://login.microsoftonline.com/common/oauth2/v2.0/token` | - Network accessline 167
| `AzureActiveDirectory` / `aad3rdPartySNI` | `https://login.microsoftonline.com/common/oauth2/v2.0/authorize` | `https://login.microsoftonline.com/common/oauth2/v2.0/token` | - Network accessline 184
GET https://management.azure.com/subscriptions/{sub} - Network accessline 184
GET https://management.azure.com/subscriptions/{sub} - Network accessline 233
"authType": "OAuth2", "category": "RemoteTool", "target": "https://placeholder", - Network accessline 233
"authType": "OAuth2", "category": "RemoteTool", "target": "https://placeholder", - Network accessline 234
"category": "RemoteTool", "target": "https://placeholder", "credentials": {}, - Network accessline 234
"category": "RemoteTool", "target": "https://placeholder", "credentials": {}, - Network accessline 235
"target": "https://placeholder", - Network accessline 235
"target": "https://placeholder", - Network accessline 253
`target = "https://placeholder"` is the **persisted value on PUT #1**, not a stub. There is no follow-up call that rewrites it before PUT #2. Runtime dispatch keys off `metadata.toolEntityId` + `metadata.connectionproperties.connectorName` - Network accessline 253
`target = "https://placeholder"` is the **persisted value on PUT #1**, not a stub. There is no follow-up call that rewrites it before PUT #2. Runtime dispatch keys off `metadata.toolEntityId` + `metadata.connectionproperties.connectorName` - Network accessline 268
"objectId": "<caller AAD oid>", "parameterName": "token", "redirectUrl": "https://ai.azure.com/nextgen/authConsentPopup", - Network accessline 268
"objectId": "<caller AAD oid>", "parameterName": "token", "redirectUrl": "https://ai.azure.com/nextgen/authConsentPopup", - Network accessline 269
"parameterName": "token", "redirectUrl": "https://ai.azure.com/nextgen/authConsentPopup", "tenantId": "<caller AAD tid>" - Network accessline 269
"parameterName": "token", "redirectUrl": "https://ai.azure.com/nextgen/authConsentPopup", "tenantId": "<caller AAD tid>" - Network accessline 270
"redirectUrl": "https://ai.azure.com/nextgen/authConsentPopup", - Network accessline 270
"redirectUrl": "https://ai.azure.com/nextgen/authConsentPopup", - Network accessline 278
- The portal sends `redirectUrl=https://int.ai.azure.com/...` from the INT environment; for production (`ai.azure.com`) use `https://ai.azure.com/nextgen/authConsentPopup`. The redirect URL only gates which Foundry origin the OAuth popup cl - Network accessline 278
- The portal sends `redirectUrl=https://int.ai.azure.com/...` from the INT environment; for production (`ai.azure.com`) use `https://ai.azure.com/nextgen/authConsentPopup`. The redirect URL only gates which Foundry origin the OAuth popup cl - Network accessline 312
{ "error": { "code": 403, "source": "...logic-df.azure-apihub.net", "innerError": "Check settings on https://developer.spotify.com/dashboard, the user may not be registered." } } - Network accessline 312
{ "error": { "code": 403, "source": "...logic-df.azure-apihub.net", "innerError": "Check settings on https://developer.spotify.com/dashboard, the user may not be registered." } } - Network accessline 313
"innerError": "Check settings on https://developer.spotify.com/dashboard, the user may not be registered." } } - Network accessline 313
"innerError": "Check settings on https://developer.spotify.com/dashboard, the user may not be registered." } } - Network accessline 316
Detect by inspecting the consent URL's first 302: if the `redirect_uri` is `https://global-test.consent.azure-apim.net/redirect` (rather than `global.consent...`), the connector is on the dogfood OAuth app. **The connection will still go Co - Network accessline 316
Detect by inspecting the consent URL's first 302: if the `redirect_uri` is `https://global-test.consent.azure-apim.net/redirect` (rather than `global.consent...`), the connector is on the dogfood OAuth app. **The connection will still go Co - Network accessline 336
"authType": "OAuth2", "category": "RemoteTool", "target": "https://placeholder", - Network accessline 336
"authType": "OAuth2", "category": "RemoteTool", "target": "https://placeholder", - Network accessline 337
"category": "RemoteTool", "target": "https://placeholder", "credentials": {}, - Network accessline 337
"category": "RemoteTool", "target": "https://placeholder", "credentials": {}, - Network accessline 338
"target": "https://placeholder", - Network accessline 338
"target": "https://placeholder", - Network accessline 410
"authType": "OAuth2", "category": "RemoteTool", "target": "https://api.githubcopilot.com/mcp", - Network accessline 410
"authType": "OAuth2", "category": "RemoteTool", "target": "https://api.githubcopilot.com/mcp", - Network accessline 411
"category": "RemoteTool", "target": "https://api.githubcopilot.com/mcp", "credentials": {}, - Network accessline 411
"category": "RemoteTool", "target": "https://api.githubcopilot.com/mcp", "credentials": {}, - Network accessline 412
"target": "https://api.githubcopilot.com/mcp", - Network accessline 412
"target": "https://api.githubcopilot.com/mcp", - Network accessline 427
When the user has their own OAuth App (e.g. GitHub `https://github.com/organizations/<org>/settings/applications/<app-id>`) and wants the connection to mint tokens via *their* app instead of Microsoft's managed one. Verified shape, 2026-05- - Network accessline 427
When the user has their own OAuth App (e.g. GitHub `https://github.com/organizations/<org>/settings/applications/<app-id>`) and wants the connection to mint tokens via *their* app instead of Microsoft's managed one. Verified shape, 2026-05- - Network accessline 434
"target": "<MCP server URL>", "credentials": { "clientId": "<your client id>", "clientSecret": "<your client secret>" }, "authorizationUrl": "https://github.com/login/oauth/authorize", - Network accessline 434
"target": "<MCP server URL>", "credentials": { "clientId": "<your client id>", "clientSecret": "<your client secret>" }, "authorizationUrl": "https://github.com/login/oauth/authorize", - Network accessline 435
"credentials": { "clientId": "<your client id>", "clientSecret": "<your client secret>" }, "authorizationUrl": "https://github.com/login/oauth/authorize", "tokenUrl": "https://github.com/login/oauth/access_token", - Network accessline 435
"credentials": { "clientId": "<your client id>", "clientSecret": "<your client secret>" }, "authorizationUrl": "https://github.com/login/oauth/authorize", "tokenUrl": "https://github.com/login/oauth/access_token", - Network accessline 436
"authorizationUrl": "https://github.com/login/oauth/authorize", - Network accessline 436
"authorizationUrl": "https://github.com/login/oauth/authorize", - Network accessline 437
[Credential-related source omitted] - Network accessline 437
[Credential-related source omitted] - Access to secretsline 437
[Credential-related source omitted] - Access to secretsline 437
[Credential-related source omitted] - Network accessline 462
- `credentials` → `null` (scrubbed). - `connectorName` → `<gatewayId>-<connectionName>` (your input ignored). - `redirectUrl` → `https://global.consent.azure-apim.net/redirect/<32-hex>` — **the OAuth callback URL the provider (e.g. GitHub O - Network accessline 462
- `credentials` → `null` (scrubbed). - `connectorName` → `<gatewayId>-<connectionName>` (your input ignored). - `redirectUrl` → `https://global.consent.azure-apim.net/redirect/<32-hex>` — **the OAuth callback URL the provider (e.g. GitHub O - Network accessline 463
- `connectorName` → `<gatewayId>-<connectionName>` (your input ignored). - `redirectUrl` → `https://global.consent.azure-apim.net/redirect/<32-hex>` — **the OAuth callback URL the provider (e.g. GitHub OAuth App) must allow-list**. Generate - Network accessline 463
- `connectorName` → `<gatewayId>-<connectionName>` (your input ignored). - `redirectUrl` → `https://global.consent.azure-apim.net/redirect/<32-hex>` — **the OAuth callback URL the provider (e.g. GitHub OAuth App) must allow-list**. Generate - Network accessline 464
- `redirectUrl` → `https://global.consent.azure-apim.net/redirect/<32-hex>` — **the OAuth callback URL the provider (e.g. GitHub OAuth App) must allow-list**. Generated per-connection on first PUT. Two-pass flow: - Network accessline 464
- `redirectUrl` → `https://global.consent.azure-apim.net/redirect/<32-hex>` — **the OAuth callback URL the provider (e.g. GitHub OAuth App) must allow-list**. Generated per-connection on first PUT. Two-pass flow: - Access to secretsline 465
[Credential-related source omitted] - Access to secretsline 465
[Credential-related source omitted] - Access to secretsline 468
[Credential-related source omitted] - Access to secretsline 468
[Credential-related source omitted] - Network accessline 489
For catalog-listed MCP servers, prefer `metadata.type = catalog_MCP` with `toolEntityId` so `target` is prepopulated. `audience` is **required for MI auth** — it tells Foundry which resource URI to request a token for. Read the required `au - Network accessline 489
For catalog-listed MCP servers, prefer `metadata.type = catalog_MCP` with `toolEntityId` so `target` is prepopulated. `audience` is **required for MI auth** — it tells Foundry which resource URI to request a token for. Read the required `au - Network accessline 495
1. **Forwarder drops the query string.** The connection `target`'s `?api-version=...` is **not** preserved on the upstream call. If the upstream MCP requires a query parameter, PMI fails with 401/404 even when RBAC is correct. 2. **Forwarde - Network accessline 495
1. **Forwarder drops the query string.** The connection `target`'s `?api-version=...` is **not** preserved on the upstream call. If the upstream MCP requires a query parameter, PMI fails with 401/404 even when RBAC is correct. 2. **Forwarde - Network accessline 496
2. **Forwarder mints the wrong audience.** The MI token Foundry sends does not have `aud=https://cognitiveservices.azure.com` or `https://ai.azure.com`. Setting `properties.audience` on the connection is accepted but **does not** change wha - Network accessline 496
2. **Forwarder mints the wrong audience.** The MI token Foundry sends does not have `aud=https://cognitiveservices.azure.com` or `https://ai.azure.com`. Setting `properties.audience` on the connection is accepted but **does not** change wha - Network accessline 630
The `$dp` value below is the project's data-plane endpoint, in the same `{project_endpoint}` form used elsewhere in these references — `https://<account>.services.ai.azure.com/api/projects/<project>`. The host segment varies by Foundry acco - Network accessline 630
The `$dp` value below is the project's data-plane endpoint, in the same `{project_endpoint}` form used elsewhere in these references — `https://<account>.services.ai.azure.com/api/projects/<project>`. The host segment varies by Foundry acco - Network accessline 636
$lbl = "box5" # becomes the "<label>___" prefix on tool names $connId = "/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.CognitiveServices/accounts/<acct>/projects/<proj>/connections/<connName>" $tok = az acc - Network accessline 636
$lbl = "box5" # becomes the "<label>___" prefix on tool names $connId = "/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.CognitiveServices/accounts/<acct>/projects/<proj>/connections/<connName>" $tok = az acc - Network accessline 637
$connId = "/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.CognitiveServices/accounts/<acct>/projects/<proj>/connections/<connName>" $tok = az account get-access-token --resource "https://ai.azure.com" --query accessToken -o t - Network accessline 637
$connId = "/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.CognitiveServices/accounts/<acct>/projects/<proj>/connections/<connName>" $tok = az account get-access-token --resource "https://ai.azure.com" --query accessToken -o t - Network accessline 638
$tok = az account get-access-token --resource "https://ai.azure.com" --query accessToken -o tsv - Network accessline 638
$tok = az account get-access-token --resource "https://ai.azure.com" --query accessToken -o tsv - Network accessline 683
- **Do not forget PUT #2 for `gateway_connector`** ([Step 4](#step-4--put-2-register-actions)). The first PUT + OAuth flips status to `Authenticated` but the runtime has no actions to dispatch until you PUT again with `metadata.mcpserverCon - Network accessline 683
- **Do not forget PUT #2 for `gateway_connector`** ([Step 4](#step-4--put-2-register-actions)). The first PUT + OAuth flips status to `Authenticated` but the runtime has no actions to dispatch until you PUT again with `metadata.mcpserverCon - Network accessline 684
- **Do not invent a "real" target URL** for the `gateway_connector` flow on PUT #1. `"https://placeholder"` is correct on PUT #1; PUT #2 rewrites it. - Network accessline 684
- **Do not invent a "real" target URL** for the `gateway_connector` flow on PUT #1. `"https://placeholder"` is correct on PUT #1; PUT #2 rewrites it. - Network accessline 702
- [Tool Catalog](https://learn.microsoft.com/azure/foundry/agents/concepts/tool-catalog) - Network accessline 702
- [Tool Catalog](https://learn.microsoft.com/azure/foundry/agents/concepts/tool-catalog) - Network accessline 703
- [Toolbox (preview)](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/toolbox) - Network accessline 703
- [Toolbox (preview)](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/toolbox) - Network accessline 704
- [Private tools catalog](https://learn.microsoft.com/azure/foundry/agents/concepts/tool-catalog#private-tools-catalog) - Network accessline 704
- [Private tools catalog](https://learn.microsoft.com/azure/foundry/agents/concepts/tool-catalog#private-tools-catalog) - Network accessline 705
- [Cognitive Services projects REST API](https://learn.microsoft.com/rest/api/aiservices/) - Network accessline 705
- [Cognitive Services projects REST API](https://learn.microsoft.com/rest/api/aiservices/)
skills/microsoft-foundry/foundry-agent/create/references/guardrails/guardrail-api-create.md
- Network accessline 23
az rest --method GET \ --url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies?api-version=2024-10-01" - Network accessline 23
az rest --method GET \ --url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies?api-version=2024-10-01" - Network accessline 24
--url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies?api-version=2024-10-01" - Network accessline 24
--url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies?api-version=2024-10-01" - Network accessline 49
az rest --method PUT \ --url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies/${POLICY_NAME}?api-version=2024-10-01" - Network accessline 49
az rest --method PUT \ --url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies/${POLICY_NAME}?api-version=2024-10-01" - Network accessline 50
--url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies/${POLICY_NAME}?api-version=2024-10-01" \ - Network accessline 50
--url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies/${POLICY_NAME}?api-version=2024-10-01" \ - Network accessline 57
For the full request body schema (`contentFilters[]`, `basePolicyName`, `mode`, `customBlocklists`), see the [RAI Policies - Create Or Update API reference](https://learn.microsoft.com/rest/api/aiservices/accountmanagement/rai-policies/crea - Network accessline 57
For the full request body schema (`contentFilters[]`, `basePolicyName`, `mode`, `customBlocklists`), see the [RAI Policies - Create Or Update API reference](https://learn.microsoft.com/rest/api/aiservices/accountmanagement/rai-policies/crea - Network accessline 62
az rest --method GET \ --url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies/${POLICY_NAME}?api-version=2024-10-01" - Network accessline 62
az rest --method GET \ --url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies/${POLICY_NAME}?api-version=2024-10-01" - Network accessline 63
--url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies/${POLICY_NAME}?api-version=2024-10-01" - Network accessline 63
--url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies/${POLICY_NAME}?api-version=2024-10-01" - Network accessline 77
az rest --method DELETE \ --url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies/${POLICY_NAME}?api-version=2024-10- - Network accessline 77
az rest --method DELETE \ --url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies/${POLICY_NAME}?api-version=2024-10- - Network accessline 78
--url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies/${POLICY_NAME}?api-version=2024-10-01" - Network accessline 78
--url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/raiPolicies/${POLICY_NAME}?api-version=2024-10-01" - Network accessline 83
- [RAI Policies - Create Or Update (REST API)](https://learn.microsoft.com/rest/api/aiservices/accountmanagement/rai-policies/create-or-update) — full schema, parameters, response codes - Network accessline 83
- [RAI Policies - Create Or Update (REST API)](https://learn.microsoft.com/rest/api/aiservices/accountmanagement/rai-policies/create-or-update) — full schema, parameters, response codes - Network accessline 84
- [RAI Policies - List](https://learn.microsoft.com/rest/api/aiservices/accountmanagement/rai-policies/list) — list all policies on an account - Network accessline 84
- [RAI Policies - List](https://learn.microsoft.com/rest/api/aiservices/accountmanagement/rai-policies/list) — list all policies on an account - Network accessline 85
- [Blocklists API](https://learn.microsoft.com/rest/api/aiservices/accountmanagement/rai-blocklists) — custom blocklists (created separately) - Network accessline 85
- [Blocklists API](https://learn.microsoft.com/rest/api/aiservices/accountmanagement/rai-blocklists) — custom blocklists (created separately) - Network accessline 86
- [How to configure guardrails (Microsoft Learn)](https://learn.microsoft.com/azure/foundry/guardrails/how-to-create-guardrails) — portal walkthrough - Network accessline 86
- [How to configure guardrails (Microsoft Learn)](https://learn.microsoft.com/azure/foundry/guardrails/how-to-create-guardrails) — portal walkthrough
skills/microsoft-foundry/foundry-agent/create/references/guardrails/guardrail-attach.md
- Network accessline 23
See the [`16-content-safety-guardrail` sample](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/agent-framework/responses/16-content-safety-guardrail) for a complete working example. - Network accessline 23
See the [`16-content-safety-guardrail` sample](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/agent-framework/responses/16-content-safety-guardrail) for a complete working example. - Network accessline 39
az rest --method PATCH \ --url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/deployments/${DEPLOYMENT_NAME}?api-version=2024- - Network accessline 39
az rest --method PATCH \ --url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/deployments/${DEPLOYMENT_NAME}?api-version=2024- - Network accessline 40
--url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/deployments/${DEPLOYMENT_NAME}?api-version=2024-10-01" \ - Network accessline 40
--url "https://management.azure.com/subscriptions/${SUBSCRIPTION_ID}/resourceGroups/${RESOURCE_GROUP}/providers/Microsoft.CognitiveServices/accounts/${ACCOUNT_NAME}/deployments/${DEPLOYMENT_NAME}?api-version=2024-10-01" \ - Access to secretsline 53
[Credential-related source omitted] - Access to secretsline 53
[Credential-related source omitted] - Network accessline 55
[Credential-related source omitted] - Network accessline 55
[Credential-related source omitted] - Access to secretsline 55
[Credential-related source omitted] - Access to secretsline 55
[Credential-related source omitted] - Access to secretsline 58
[Credential-related source omitted] - Access to secretsline 58
[Credential-related source omitted] - Network accessline 100
- [Guardrails overview](guardrail-manage.md) — create guardrails, default policies, intervention points - [API create](guardrail-api-create.md) — create guardrails via REST API - [Guardrails overview (Microsoft Learn)](https://learn.microso - Network accessline 100
- [Guardrails overview](guardrail-manage.md) — create guardrails, default policies, intervention points - [API create](guardrail-api-create.md) — create guardrails via REST API - [Guardrails overview (Microsoft Learn)](https://learn.microso - Network accessline 101
- [API create](guardrail-api-create.md) — create guardrails via REST API - [Guardrails overview (Microsoft Learn)](https://learn.microsoft.com/azure/foundry/guardrails/guardrails-overview) - [How to configure guardrails (Microsoft Learn)](h - Network accessline 101
- [API create](guardrail-api-create.md) — create guardrails via REST API - [Guardrails overview (Microsoft Learn)](https://learn.microsoft.com/azure/foundry/guardrails/guardrails-overview) - [How to configure guardrails (Microsoft Learn)](h - Network accessline 102
- [Guardrails overview (Microsoft Learn)](https://learn.microsoft.com/azure/foundry/guardrails/guardrails-overview) - Network accessline 102
- [Guardrails overview (Microsoft Learn)](https://learn.microsoft.com/azure/foundry/guardrails/guardrails-overview) - Network accessline 103
- [How to configure guardrails (Microsoft Learn)](https://learn.microsoft.com/azure/foundry/guardrails/how-to-create-guardrails) - Network accessline 103
- [How to configure guardrails (Microsoft Learn)](https://learn.microsoft.com/azure/foundry/guardrails/how-to-create-guardrails)
skills/microsoft-foundry/foundry-agent/create/references/guardrails/guardrail-manage.md
- Network accessline 18
https://ai.azure.com/nextgen/r/{encodedSubId},{resourceGroup},,{accountName},{projectName}/build/guardrails - Network accessline 18
https://ai.azure.com/nextgen/r/{encodedSubId},{resourceGroup},,{accountName},{projectName}/build/guardrails - Network accessline 33
https://ai.azure.com - Network accessline 33
https://ai.azure.com
skills/microsoft-foundry/foundry-agent/create/references/langchain-langgraph-hosting.md
- Network accessline 26
| Protocol | Sample | |----------|--------| | Responses | [Configuration-driven agent (Responses, LangGraph, Python)](https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/langgraph/responses/10-run/azu - Network accessline 26
| Protocol | Sample | |----------|--------| | Responses | [Configuration-driven agent (Responses, LangGraph, Python)](https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/langgraph/responses/10-run/azu - Network accessline 27
|----------|--------| | Responses | [Configuration-driven agent (Responses, LangGraph, Python)](https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/langgraph/responses/10-run/azure.yaml) | | Invocatio - Network accessline 27
|----------|--------| | Responses | [Configuration-driven agent (Responses, LangGraph, Python)](https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/langgraph/responses/10-run/azure.yaml) | | Invocatio - Network accessline 28
| Responses | [Configuration-driven agent (Responses, LangGraph, Python)](https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/langgraph/responses/10-run/azure.yaml) | - Network accessline 28
| Responses | [Configuration-driven agent (Responses, LangGraph, Python)](https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/langgraph/responses/10-run/azure.yaml) | - Network accessline 29
| Invocations | [Configuration-driven agent (Invocations, LangGraph, Python)](https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/langgraph/invocations/03-run/azure.yaml) | - Network accessline 29
| Invocations | [Configuration-driven agent (Invocations, LangGraph, Python)](https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/langgraph/invocations/03-run/azure.yaml) |
skills/microsoft-foundry/foundry-agent/create/references/local-run.md
skills/microsoft-foundry/foundry-agent/create/references/managed-harness-agent.md
- Network accessline 52
The connection must be `RemoteTool` with `UserEntraToken`, audience `https://ai.azure.com`, and target exactly equal to `server_url`. See [Toolbox](tools/managed-harness-agent/tool-toolbox.md) for creation, reuse, metadata, and validation. - Network accessline 52
The connection must be `RemoteTool` with `UserEntraToken`, audience `https://ai.azure.com`, and target exactly equal to `server_url`. See [Toolbox](tools/managed-harness-agent/tool-toolbox.md) for creation, reuse, metadata, and validation.
skills/microsoft-foundry/foundry-agent/create/references/re-host.md
- Network accessline 29
For reference, here are some awesome samples for re-hosting scenarios: 1. Re-host agents built with the OpenAI Agents SDK: https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/bring-your-own/responses/ - Network accessline 29
For reference, here are some awesome samples for re-hosting scenarios: 1. Re-host agents built with the OpenAI Agents SDK: https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/bring-your-own/responses/ - Network accessline 30
1. Re-host agents built with the OpenAI Agents SDK: https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/bring-your-own/responses/openai-agents-sdk - Network accessline 30
1. Re-host agents built with the OpenAI Agents SDK: https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/bring-your-own/responses/openai-agents-sdk - Network accessline 31
2. Re-host agents built with the Claude Agent SDK: https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/bring-your-own/invocations/claude-agent-sdk - Network accessline 31
2. Re-host agents built with the Claude Agent SDK: https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/bring-your-own/invocations/claude-agent-sdk
skills/microsoft-foundry/foundry-agent/create/references/sdk-operations.md
- Network accessline 45
- [Agent quickstart](https://learn.microsoft.com/azure/ai-foundry/agents/quickstart?view=foundry) - Network accessline 45
- [Agent quickstart](https://learn.microsoft.com/azure/ai-foundry/agents/quickstart?view=foundry) - Network accessline 46
- [Create agents](https://learn.microsoft.com/azure/ai-foundry/agents/how-to/create-agent?view=foundry) - Network accessline 46
- [Create agents](https://learn.microsoft.com/azure/ai-foundry/agents/how-to/create-agent?view=foundry) - Network accessline 47
- [Tool Catalog](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/tool-catalog?view=foundry) - Network accessline 47
- [Tool Catalog](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/tool-catalog?view=foundry)
skills/microsoft-foundry/foundry-agent/create/references/skills/skill-attach.md
- Network accessline 42
Full working sample: [12-foundry-skills (Python)](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/agent-framework/responses/12-foundry-skills) — **read `README.md` and `main.py`** for setup and in - Network accessline 42
Full working sample: [12-foundry-skills (Python)](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/agent-framework/responses/12-foundry-skills) — **read `README.md` and `main.py`** for setup and in - Network accessline 48
Full working sample: [agent-skills (C#)](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/csharp/hosted-agents/agent-framework/agent-skills) — **read `README.md` and `Program.cs`** for setup and integration details. - Network accessline 48
Full working sample: [agent-skills (C#)](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/csharp/hosted-agents/agent-framework/agent-skills) — **read `README.md` and `Program.cs`** for setup and integration details. - Network accessline 72
Full working sample: [foundry-toolbox-mcp-skills (C#)](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/csharp/hosted-agents/agent-framework/foundry-toolbox-mcp-skills) — **read `README.md` and `Program.cs`** for setup - Network accessline 72
Full working sample: [foundry-toolbox-mcp-skills (C#)](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/csharp/hosted-agents/agent-framework/foundry-toolbox-mcp-skills) — **read `README.md` and `Program.cs`** for setup - Network accessline 89
**Local without Inspector** (`azd ai agent run --no-client`) — use `curl` against `http://localhost:8088/responses` directly: - Network accessline 89
**Local without Inspector** (`azd ai agent run --no-client`) — use `curl` against `http://localhost:8088/responses` directly: - Network accessline 94
curl -s -X POST http://localhost:8088/responses \ - Network accessline 94
curl -s -X POST http://localhost:8088/responses \ - Network accessline 104
curl -s -X POST http://localhost:8088/responses \ - Network accessline 104
curl -s -X POST http://localhost:8088/responses \ - Instruction override signalline 120
**To skip approval entirely**, configure `require_approval: "never"` on the MCP tool. This behavior is controlled by the Agent Framework SDK — see the sample code for how MCP tool approval is configured. - Instruction override signalline 120
**To skip approval entirely**, configure `require_approval: "never"` on the MCP tool. This behavior is controlled by the Agent Framework SDK — see the sample code for how MCP tool approval is configured. - Network accessline 131
| HTTP 500 on skill download (C#) | Missing feature header | Add `Skills=V1Preview` feature header to requests | | `SKILL_NAMES` not in deployed agent | Env var missing from `azure.yaml` | Add to the agent service's `environmentVariables`, - Network accessline 131
| HTTP 500 on skill download (C#) | Missing feature header | Add `Skills=V1Preview` feature header to requests | | `SKILL_NAMES` not in deployed agent | Env var missing from `azure.yaml` | Add to the agent service's `environmentVariables`, - Network accessline 133
| MCP timeout (Toolbox) | Auth token expired or wrong scope | Use `https://ai.azure.com/.default`; refresh per request | - Network accessline 133
| MCP timeout (Toolbox) | Auth token expired or wrong scope | Use `https://ai.azure.com/.default`; refresh per request |
skills/microsoft-foundry/foundry-agent/create/references/skills/skill-manage.md
- Network accessline 99
[provision_skills.py](https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/agent-framework/responses/12-foundry-skills/provision_skills.py) — **read the script source** for the current API surface and
skills/microsoft-foundry/foundry-agent/create/references/skills/skill-toolbox-attach.md
- Network accessline 102
# Get a bearer token TOK=$(az account get-access-token --resource "https://ai.azure.com" --query accessToken -o tsv) - Network accessline 103
TOK=$(az account get-access-token --resource "https://ai.azure.com" --query accessToken -o tsv) - Network accessline 107
URL="$PE/toolboxes/<toolbox>/mcp?api-version=v1" # List available skills (resources/list) curl -s -X POST "$URL" \ - Network accessline 108
[Credential-related source omitted] - Network accessline 109
curl -s -X POST "$URL" \ - Network accessline 114
# Read skill index curl -s -X POST "$URL" \ - Network accessline 115
curl -s -X POST "$URL" \ - Network accessline 120
# Read a specific skill's content curl -s -X POST "$URL" \ - Network accessline 121
curl -s -X POST "$URL" \
skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-a2a.md
- Network accessline 20
azd ai connection create <connection-name> --kind remote-a2a --target "<peer-a2a-endpoint>" --auth-type <user-entra-token-or-agentic-identity> --audience "https://ai.azure.com" - Network accessline 22
--target "<peer-a2a-endpoint>" \ --auth-type <user-entra-token-or-agentic-identity> \ --audience "https://ai.azure.com" \ - Network accessline 23
--auth-type <user-entra-token-or-agentic-identity> \ --audience "https://ai.azure.com" \ --metadata "ApiType=Azure" \ - Network accessline 24
--audience "https://ai.azure.com" \
skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-mcp.md
- Network accessline 9
- type: mcp server_label: learn server_url: https://learn.microsoft.com/api/mcp - Network accessline 10
server_label: learn server_url: https://learn.microsoft.com/api/mcp require_approval: always - Network accessline 11
server_url: https://learn.microsoft.com/api/mcp - Network accessline 19
- type: mcp server_label: internal server_url: https://tools.example.com/mcp - Network accessline 20
server_label: internal server_url: https://tools.example.com/mcp project_connection_id: <connection-name-or-id> - Network accessline 21
server_url: https://tools.example.com/mcp
skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-openapi.md
- Network accessline 14
openapi: 3.0.0 info: { title: Weather, version: 1.0.0 } servers: [{ url: https://api.example.com }] - Network accessline 15
info: { title: Weather, version: 1.0.0 } servers: [{ url: https://api.example.com }] paths: {} - Network accessline 16
servers: [{ url: https://api.example.com }] - Network accessline 33
azd ai connection create <connection-name> \ --kind custom-keys \ --target "https://api.example.com" \ - Network accessline 34
[Credential-related source omitted] - Network accessline 35
--target "https://api.example.com" \
skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-toolbox.md
- Network accessline 22
- category/kind: `RemoteTool` / `remote-tool` - auth type: `UserEntraToken` / `user-entra-token` - audience: `https://ai.azure.com` - Network accessline 23
- auth type: `UserEntraToken` / `user-entra-token` - audience: `https://ai.azure.com` - target: exactly the versioned MCP endpoint - Network accessline 24
- audience: `https://ai.azure.com` - Network accessline 31
azd ai connection create <connection-name> --kind remote-tool --target "<versioned-toolbox-mcp-endpoint>" --auth-type user-entra-token --audience https://ai.azure.com - Network accessline 33
--target "<versioned-toolbox-mcp-endpoint>" \ --auth-type user-entra-token \ --audience https://ai.azure.com \ - Network accessline 34
--auth-type user-entra-token \ --audience https://ai.azure.com \ --metadata type=toolbox_MCP \ - Network accessline 35
--audience https://ai.azure.com \
skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-work-iq.md
- Network accessline 6
https://workiq.svc.cloud.microsoft/mcp - Network accessline 13
- type: mcp server_label: workiq server_url: https://workiq.svc.cloud.microsoft/mcp - Network accessline 14
server_label: workiq server_url: https://workiq.svc.cloud.microsoft/mcp project_connection_id: <work-iq-connection> - Network accessline 15
server_url: https://workiq.svc.cloud.microsoft/mcp - Network accessline 27
azd ai connection create <connection-name> \ --kind remote-tool \ --target https://workiq.svc.cloud.microsoft/mcp \ - Network accessline 28
--kind remote-tool \ --target https://workiq.svc.cloud.microsoft/mcp \ --auth-type user-entra-token \ - Network accessline 29
--target https://workiq.svc.cloud.microsoft/mcp \
skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/agent-tools.md
- Network accessline 10
> 💡 **Authoritative tool shapes:** the source-of-truth for every tool's wire shape is the **Foundry Agents typespec** on the `main` branch of [`Azure/azure-rest-api-specs`](https://github.com/Azure/azure-rest-api-specs/tree/main/specificati - Network accessline 38
- **Agent Memory** — use the `MemorySearchPreviewTool` SDK class on prompt agents; for hosted agents, configure the memory store via the project (separate from the toolbox). See [tool-memory.md](tool-memory.md). - **Routines (preview)** — n - Network accessline 39
- **Routines (preview)** — not a tool; an agent **trigger** (`schedule` / `timer` / `github_issue` / `custom`) that invokes an existing agent. Event-based routines are powered by the same **Connector Namespace** that backs catalog-MCP / man - Network accessline 43
- **[Foundry Agents typespec (`main`)](https://github.com/Azure/azure-rest-api-specs/tree/main/specification/cognitiveservices)** — authoritative tool shapes - Network accessline 44
- [Tool Catalog](https://learn.microsoft.com/azure/foundry/agents/concepts/tool-catalog) - Network accessline 45
- [Toolbox (preview)](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/toolbox)
skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-a2a.md
- Network accessline 21
- [A2A tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/agent-to-agent)
skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-azure-ai-search.md
skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-bing-grounding.md
- Network accessline 16
- A [Grounding with Bing Search resource](https://portal.azure.com/#create/Microsoft.BingGroundingSearch) in Azure portal - Network accessline 30
- Bing data flows **outside Azure compliance boundary** - Review [Grounding with Bing terms of use](https://www.microsoft.com/bing/apis/grounding-legal-enterprise) - Network accessline 31
- Review [Grounding with Bing terms of use](https://www.microsoft.com/bing/apis/grounding-legal-enterprise) - Network accessline 33
- Usage incurs costs — see [pricing](https://www.microsoft.com/bing/apis/grounding-pricing) - Network accessline 46
- [Bing Grounding tool documentation](https://learn.microsoft.com/azure/ai-foundry/agents/how-to/tools/bing-grounding?view=foundry) - Network accessline 47
- [Tool Catalog](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/tool-catalog?view=foundry) - Network accessline 48
- [Grounding with Bing Terms](https://www.microsoft.com/bing/apis/grounding-legal-enterprise)
skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-code-interpreter.md
- Network accessline 3
Enables agents to write and run Python in a sandboxed environment. Supports data analysis, chart generation, and file processing. Has [additional charges](https://azure.microsoft.com/pricing/details/cognitive-services/openai-service/) beyon - Network accessline 23
- [Code Interpreter tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/code-interpreter)
skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-fabric-iq.md
- Network accessline 18
| Fabric item | `server_url` pattern | Supported auth | |---|---|---| | Ontology | `https://{host}/v1/mcp/dataPlane/workspaces/{workspaceId}/items/{itemId}/ontologyEndpoint` | BYO Entra app only | - Network accessline 19
|---|---|---| | Ontology | `https://{host}/v1/mcp/dataPlane/workspaces/{workspaceId}/items/{itemId}/ontologyEndpoint` | BYO Entra app only | | Fabric data agent | `https://{host}/v1/mcp/workspaces/{workspaceId}/dataagents/{dataAgentId}/agen - Network accessline 20
| Ontology | `https://{host}/v1/mcp/dataPlane/workspaces/{workspaceId}/items/{itemId}/ontologyEndpoint` | BYO Entra app only | - Network accessline 21
| Fabric data agent | `https://{host}/v1/mcp/workspaces/{workspaceId}/dataagents/{dataAgentId}/agent` | BYO Entra app *or* managed OAuth | - Network accessline 22
| Power BI semantic model | `https://{host}/v1/mcp/fabricaihub/integrations/m365` | BYO Entra app *or* managed OAuth | - Network accessline 34
For the full Entra app setup, connection-creation walkthrough, and troubleshooting, see [Fabric IQ tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/fabric-iq).
skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-file-search.md
- Network accessline 9
- A [basic or standard agent environment](https://learn.microsoft.com/azure/ai-foundry/agents/environment-setup) - Network accessline 44
| **Endpoint** | `https://<resource>.services.ai.azure.com/api/projects/<project>/vector_stores` | | **API version** | `v1` | | **Auth resource** | `https://ai.azure.com` | - Network accessline 46
| **Auth resource** | `https://ai.azure.com` | - Network accessline 51
|-------|-------|-----| | `vector_store_ids` not present | Agent created without vector store | Create a vector store first, then pass its ID | | 401 Unauthorized | Wrong auth resource for REST API | Use `--resource "https://ai.azure.com"` - Network accessline 52
| `vector_store_ids` not present | Agent created without vector store | Create a vector store first, then pass its ID | | 401 Unauthorized | Wrong auth resource for REST API | Use `--resource "https://ai.azure.com"` with `az rest` | | Bad A - Network accessline 53
| 401 Unauthorized | Wrong auth resource for REST API | Use `--resource "https://ai.azure.com"` with `az rest` | - Network accessline 59
- [File Search tool documentation](https://learn.microsoft.com/azure/ai-foundry/agents/how-to/tools/file-search?view=foundry&pivots=python) - Network accessline 60
- [Tool Catalog](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/tool-catalog?view=foundry)
skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-function-calling.md
- Network accessline 15
- [Function Calling tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/function-calling)
skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-mcp.md
- Network accessline 7
- A remote MCP server endpoint (e.g., `https://api.githubcopilot.com/mcp`) - Access to secretsline 13
[Credential-related source omitted] - Network accessline 41
| Platform | Transport | Notes | |----------|-----------|-------| | [Azure Container Apps](https://github.com/Azure-Samples/mcp-container-ts) | HTTP POST/GET | Any language, container rebuild needed | - Network accessline 42
|----------|-----------|-------| | [Azure Container Apps](https://github.com/Azure-Samples/mcp-container-ts) | HTTP POST/GET | Any language, container rebuild needed | | [Azure Functions](https://github.com/Azure-Samples/mcp-sdk-functions-h - Network accessline 43
| [Azure Container Apps](https://github.com/Azure-Samples/mcp-container-ts) | HTTP POST/GET | Any language, container rebuild needed | - Network accessline 44
| [Azure Functions](https://github.com/Azure-Samples/mcp-sdk-functions-hosting-python) | HTTP streamable | Python/Node/.NET/Java, key-based auth | - Network accessline 64
- [MCP tool documentation](https://learn.microsoft.com/azure/ai-foundry/agents/how-to/tools/mcp?view=foundry) - Network accessline 65
- [Tool Catalog](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/tool-catalog?view=foundry)
skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-memory.md
- Network accessline 7
- A [Foundry project](https://learn.microsoft.com/azure/ai-foundry/how-to/create-projects) with authorization configured - Network accessline 106
- [Memory tool documentation](https://learn.microsoft.com/azure/ai-foundry/agents/how-to/memory-usage?view=foundry) - Network accessline 107
- [Memory Concepts](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/what-is-memory) - Network accessline 108
- [Tool Catalog](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/tool-catalog?view=foundry) - Network accessline 109
- [Python Samples](https://github.com/Azure/azure-sdk-for-python/tree/main/sdk/ai/azure-ai-projects/samples/memories)
skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-openapi.md
- Network accessline 29
- [OpenAPI tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/openapi)
skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-web-search.md
- Network accessline 9
- Web Search (preview) uses Grounding with Bing Search and Grounding with Bing Custom Search, which are [First Party Consumption Services](https://www.microsoft.com/licensing/terms/product/Glossary/EAEAS) governed by [Grounding with Bing te - Network accessline 10
- The [Data Protection Addendum](https://aka.ms/dpa) **does not apply** to data sent to Grounding with Bing Search and Grounding with Bing Custom Search. - Network accessline 12
- Usage incurs costs — see [pricing](https://www.microsoft.com/bing/apis/grounding-pricing). - Network accessline 16
- A [basic or standard agent environment](https://learn.microsoft.com/azure/ai-foundry/agents/environment-setup) - Network accessline 55
- [Web Search tool documentation](https://learn.microsoft.com/azure/ai-foundry/agents/how-to/tools/web-search?view=foundry) - Network accessline 56
- [Tool Catalog](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/tool-catalog?view=foundry) - Network accessline 57
- [Bing Pricing](https://www.microsoft.com/bing/apis/grounding-pricing)
skills/microsoft-foundry/foundry-agent/create/references/tools/prompt-agent/tool-work-iq.md
- Network accessline 18
- A `RemoteA2A` project connection targeting `https://workiq.svc.cloud.microsoft/a2a/`, `authType=OAuth2`, **BYO Entra app only** (no managed OAuth). - Network accessline 26
For the full Entra app setup, ARM connection-creation payload (`category: RemoteA2A`), and troubleshooting, see [Work IQ tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/work-iq).
skills/microsoft-foundry/foundry-agent/create/references/use-toolbox-in-hosted-agent.md
- Network accessline 12
> 💡 **This skill covers *consuming* an existing toolbox from agent code.** To add a tool (`web_search`, `file_search`, `azure_ai_search`, `code_interpreter`, `openapi`, `mcp`, `a2a_preview`, …), don't wire it to the agent — put it in a tool - Network accessline 18
| Path | Framework | Sample | When to use | |------|-----------|--------|-------------| | **Default** | Agent Framework (MAF) | [`agent-framework/responses/04-foundry-toolbox/`](https://github.com/microsoft-foundry/foundry-samples/tree/main - Network accessline 19
|------|-----------|--------|-------------| | **Default** | Agent Framework (MAF) | [`agent-framework/responses/04-foundry-toolbox/`](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/agent-framewor - Network accessline 20
| **Default** | Agent Framework (MAF) | [`agent-framework/responses/04-foundry-toolbox/`](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/agent-framework/responses/04-foundry-toolbox) | Most agent - Network accessline 21
| Other | LangGraph (BYO) | [`bring-your-own/responses/langgraph-toolbox/`](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/bring-your-own/responses/langgraph-toolbox) | LangGraph ReAct agent with - Network accessline 22
| Other | Generic MCP (BYO), Responses | [`bring-your-own/responses/bring-your-own-toolbox/`](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/bring-your-own/responses/bring-your-own-toolbox) | Raw - Network accessline 23
| Other | Generic MCP (BYO), Invocations | [`bring-your-own/invocations/toolbox/`](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/bring-your-own/invocations/toolbox) | Toolbox via the Invocations - Network accessline 24
| Other | C# (.NET), Agent Framework | [`csharp/hosted-agents/agent-framework/foundry-toolbox-server-side/`](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/csharp/hosted-agents/agent-framework/foundry-toolbox-server- - Network accessline 38
Don't hand-write the MCP client wiring. Start from the [**MAF Default Sample**](https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/agent-framework/responses/04-foundry-toolbox) and adapt its `main.py - Network accessline 56
|-------|-------|------------| | `CONSENT_REQUIRED` (nested string code inside an outer `-32006` error) | OAuth MCP connection needs user consent | Parse the consent URL from the nested error `message`, open it in a browser, complete OAuth, - Network accessline 57
| `CONSENT_REQUIRED` (nested string code inside an outer `-32006` error) | OAuth MCP connection needs user consent | Parse the consent URL from the nested error `message`, open it in a browser, complete OAuth, retry | | 401 on MCP calls | E - Network accessline 58
| 401 on MCP calls | Expired token or wrong scope | Use scope `https://ai.azure.com/.default` (not `cognitiveservices`) and refresh token on every request | - Network accessline 78
- **Agent → Toolbox:** Azure AD bearer token, scope `https://ai.azure.com/.default` (NOT `cognitiveservices` — the endpoint rejects it with 401), refreshed on every request. - Network accessline 108
"error": { "code": -32006, "message": "tools/list failed for 1 tool source(s), succeeded for 0 tool source(s) {\"errors\":[{\"name\":\"GitHub\",\"type\":\"mcp\",\"error\":{\"code\":\"CONSENT_REQUIRED\",\"message\":\"https://logic-ap - Network accessline 109
"code": -32006, "message": "tools/list failed for 1 tool source(s), succeeded for 0 tool source(s) {\"errors\":[{\"name\":\"GitHub\",\"type\":\"mcp\",\"error\":{\"code\":\"CONSENT_REQUIRED\",\"message\":\"https://logic-apis-<region>.con - Network accessline 110
"message": "tools/list failed for 1 tool source(s), succeeded for 0 tool source(s) {\"errors\":[{\"name\":\"GitHub\",\"type\":\"mcp\",\"error\":{\"code\":\"CONSENT_REQUIRED\",\"message\":\"https://logic-apis-<region>.consent.azure-apim.net/ - Network accessline 126
For the authoritative field list and the File Search / Web Search citation patterns (under `result.content[].resource._meta` and `..._meta.annotations[]` respectively), see the public [Toolbox docs](https://learn.microsoft.com/azure/foundry - Network accessline 137
- [Toolbox Docs](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/toolbox) - Network accessline 138
- [Configure tools in a toolbox](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/toolbox#configure-tools) - Network accessline 139
- [Supported Toolbox Scenarios (sample-side reference)](https://github.com/microsoft-foundry/foundry-samples/blob/main/samples/python/hosted-agents/SUPPORTED_TOOLBOX_SCENARIOS.md)
skills/microsoft-foundry/foundry-agent/create/references/voice-agent-settings.md
- Access to secretsline 71
[Credential-related source omitted] - Access to secretsline 73
[Credential-related source omitted] - Access to secretsline 78
[Credential-related source omitted] - Access to secretsline 80
[Credential-related source omitted] - Network accessline 97
For an explicit [Teams Phone extensibility (TPE)](https://learn.microsoft.com/en-us/azure/communication-services/concepts/interop/tpe/teams-phone-extensibility-overview) or ACS request, reuse a supplied TPE/ACS connection only after checkin - Network accessline 107
`4:+<E.164>` is a separate ACS-purchased-number route, not TPE. If no compatible TPE/ACS connection exists, don't create it with azd or automate RBAC/Event Grid/TPE setup. Use the [guide](https://learn.microsoft.com/en-us/azure/foundry/agen
skills/microsoft-foundry/foundry-agent/create/references/voice-agent-smoke-test.md
- Network accessline 5
> **Why not `azd ai agent invoke`?** > `azd ai agent invoke` does not support Voice Agents. Always verify them over the managed `voice` WebSocket endpoint or in the Microsoft Foundry portal (`https://ai.azure.com`). You can inspect the depl - Network accessline 6
> `azd ai agent invoke` does not support Voice Agents. Always verify them over the managed `voice` WebSocket endpoint or in the Microsoft Foundry portal (`https://ai.azure.com`). You can inspect the deployed endpoint URL with `azd ai agent - Network accessline 38
Derived from `AZURE_AI_PROJECT_ENDPOINT` / `FOUNDRY_PROJECT_ENDPOINT` (`https://<project-host>/api/projects/<project>`). - **Headers**: - `Authorization`: Entra access token for resource `https://ai.azure.com` (`az account get-access-toke - Network accessline 39
- **Headers**: - `Authorization`: Entra access token for resource `https://ai.azure.com` (`az account get-access-token --resource https://ai.azure.com --query accessToken -o tsv`), formatted dynamically as `"{} {}".format("Bearer", token) - Network accessline 40
- `Authorization`: Entra access token for resource `https://ai.azure.com` (`az account get-access-token --resource https://ai.azure.com --query accessToken -o tsv`), formatted dynamically as `"{} {}".format("Bearer", token)`. Never hard-cod - Network accessline 120
1. **Connect & Authenticate**: Connects to `.../agents/<agent>/endpoint/protocols/voice?api-version=v1&agent_session_id=<id>` with `Foundry-Features: VoiceAgents=V1Preview` and an Entra token for `https://ai.azure.com` (resolved via `shutil
skills/microsoft-foundry/foundry-agent/create/scripts/check-copilot-app-entry.ps1
- Executable scriptline 1
Executable file
skills/microsoft-foundry/foundry-agent/create/scripts/check-copilot-app-entry.sh
- Executable scriptline 1
#!/usr/bin/env bash
skills/microsoft-foundry/foundry-agent/create/scripts/resolve-project-id.ps1
- Executable scriptline 1
Executable file - Network accessline 7
never a locally constructed ARM resource ID. .EXAMPLE ./resolve-project-id.ps1 -Endpoint "https://my-account.services.ai.azure.com/api/projects/my-project" - Network accessline 8
.EXAMPLE ./resolve-project-id.ps1 -Endpoint "https://my-account.services.ai.azure.com/api/projects/my-project" .EXAMPLE - Network accessline 9
./resolve-project-id.ps1 -Endpoint "https://my-account.services.ai.azure.com/api/projects/my-project" - Network accessline 11
./resolve-project-id.ps1 -Endpoint "https://my-account.services.ai.azure.com/api/projects/my-project" -Output json
skills/microsoft-foundry/foundry-agent/create/scripts/resolve-project-id.sh
- Executable scriptline 1
#!/usr/bin/env bash - Network accessline 6
# # Usage: # ./resolve-project-id.sh --endpoint "https://my-account.services.ai.azure.com/api/projects/my-project" - Network accessline 7
# Usage: # ./resolve-project-id.sh --endpoint "https://my-account.services.ai.azure.com/api/projects/my-project" # ./resolve-project-id.sh --endpoint "https://my-account.services.ai.azure.com/api/projects/my-project" --output json - Network accessline 8
# ./resolve-project-id.sh --endpoint "https://my-account.services.ai.azure.com/api/projects/my-project" - Network accessline 9
# ./resolve-project-id.sh --endpoint "https://my-account.services.ai.azure.com/api/projects/my-project" --output json - Dangerous shell operationline 23
rm -f "${TEMP_FILES[@]}" - Dangerous shell operationline 154
rm -f "$stderr_file" - Dangerous shell operationline 160
rm -f "$stderr_file" - Access to secretsline 181
[Credential-related source omitted] - Access to secretsline 192
[Credential-related source omitted] - Access to secretsline 196
[Credential-related source omitted] - Access to secretsline 243
[Credential-related source omitted] - Access to secretsline 272
[Credential-related source omitted] - Access to secretsline 273
[Credential-related source omitted] - Access to secretsline 286
[Credential-related source omitted] - Access to secretsline 290
[Credential-related source omitted] - Access to secretsline 291
[Credential-related source omitted] - Access to secretsline 292
[Credential-related source omitted]
skills/microsoft-foundry/foundry-agent/create/scripts/smoke-test-voice.ps1
- Executable scriptline 1
Executable file
skills/microsoft-foundry/foundry-agent/create/scripts/smoke-test-voice.sh
- Executable scriptline 1
#!/usr/bin/env bash
skills/microsoft-foundry/foundry-agent/create/scripts/smoke_test_voice.py
- Executable scriptline 1
Executable file - Network accessline 110
"get-access-token", "--resource", "https://ai.azure.com", - Network accessline 111
"--resource", "https://ai.azure.com", "--query", - Network accessline 112
"https://ai.azure.com", - Network accessline 133
return DefaultAzureCredential().get_token( "https://ai.azure.com/.default" - Network accessline 134
"https://ai.azure.com/.default" - Network accessline 205
except Exception as exc: print( "ERROR: Failed to acquire an Entra token for https://ai.azure.com: " - Network accessline 206
print( "ERROR: Failed to acquire an Entra token for https://ai.azure.com: " f"{exc}", - Network accessline 207
"ERROR: Failed to acquire an Entra token for https://ai.azure.com: " - Possible obfuscationline 351
decoded_audio.extend(base64.b64decode(encoded_delta)) - Network accessline 429
print(f" Timeout (s) : {args.timeout}") print(f" Output Audio : {args.output_audio or '(none)'}") print(" Auth Resource : https://ai.azure.com (Azure CLI or DefaultAzureCredential)") - Network accessline 430
print(f" Output Audio : {args.output_audio or '(none)'}") print(" Auth Resource : https://ai.azure.com (Azure CLI or DefaultAzureCredential)") return 0 - Network accessline 431
print(" Auth Resource : https://ai.azure.com (Azure CLI or DefaultAzureCredential)")
skills/microsoft-foundry/foundry-agent/create/scripts/verify-environment.ps1
- Executable scriptline 1
Executable file - Network accessline 95
} if (-not $azdInstalled) { Note-Action "Azure Developer CLI (azd) is not installed. Install it from https://aka.ms/azd-install, then re-run." - Network accessline 96
if (-not $azdInstalled) { Note-Action "Azure Developer CLI (azd) is not installed. Install it from https://aka.ms/azd-install, then re-run." } - Network accessline 97
Note-Action "Azure Developer CLI (azd) is not installed. Install it from https://aka.ms/azd-install, then re-run." - Network accessline 107
} if (-not $azInstalled) { Note-Action "Azure CLI (az) is not installed. Install it from https://aka.ms/installazurecli, then re-run." - Network accessline 108
if (-not $azInstalled) { Note-Action "Azure CLI (az) is not installed. Install it from https://aka.ms/installazurecli, then re-run." } - Network accessline 109
Note-Action "Azure CLI (az) is not installed. Install it from https://aka.ms/installazurecli, then re-run."
skills/microsoft-foundry/foundry-agent/create/scripts/verify-environment.sh
- Executable scriptline 1
#!/usr/bin/env bash - Network accessline 35
if ! command -v azd >/dev/null 2>&1; then note_action "Azure Developer CLI (azd) is not installed. Install it from https://aka.ms/azd-install, then re-run." - Network accessline 36
note_action "Azure Developer CLI (azd) is not installed. Install it from https://aka.ms/azd-install, then re-run." - Network accessline 40
if ! command -v az >/dev/null 2>&1; then note_action "Azure CLI (az) is not installed. Install it from https://aka.ms/installazurecli, then re-run." - Network accessline 41
note_action "Azure CLI (az) is not installed. Install it from https://aka.ms/installazurecli, then re-run."
skills/microsoft-foundry/foundry-agent/deploy/deploy.md
- Instruction override signalline 227
azd ai agent endpoint update # patch in place azd ai agent endpoint update --force # skip confirmation for breaking changes - Instruction override signalline 228
azd ai agent endpoint update --force # skip confirmation for breaking changes - Network accessline 347
| Tool shape rejected | Read the matching Managed Harness Agent tool reference and preserve REST field names | | Connection missing | Use a user-supplied/existing configured connection, or create it only on explicit request | | Toolbox MCP - Network accessline 349
| Toolbox MCP returns `401` | Verify the MCP tool has a matching `UserEntraToken` project connection with audience `https://ai.azure.com` and target equal to the exact versioned Toolbox endpoint | - Network accessline 406
https://ai.azure.com/nextgen/r/{encodedSubId},{resourceGroup},,{accountName},{projectName}/build/agents/{agentName}/build?version={agentVersion}
skills/microsoft-foundry/foundry-agent/eval-datasets/eval-datasets.md
- Access to secretsline 74
[Credential-related source omitted]
skills/microsoft-foundry/foundry-agent/eval-datasets/references/generate-seed-dataset.md
- Access to secretsline 173
[Credential-related source omitted]
skills/microsoft-foundry/foundry-agent/invocations-ws/invocations-ws.md
- Network accessline 5
> ℹ<U+FE0F> **Generally available.** `invocations_ws` is GA — **no preview feature flag is required**. Every upgrade must carry the required `api-version=v1` query parameter. For current region availability see [Foundry Hosted Agents — region avai - Network accessline 16
| Container route | `WS /invocations_ws` (served by `azure-ai-agentserver-invocations`; the host binds the port and probes for you) | | Foundry-side URL | `wss://{account}.services.ai.azure.com/api/projects/{project}/agents/{agentName}/endp - Network accessline 17
[Credential-related source omitted] - Network accessline 18
[Credential-related source omitted] - Access to secretsline 87
[Credential-related source omitted] - Network accessline 112
1. **Mint an Entra token** for the audience `https://ai.azure.com`: - Network accessline 115
az account get-access-token --resource https://ai.azure.com --query accessToken -o tsv - Network accessline 148
| Error | Cause | Resolution | |-------|-------|------------| | HTTP 401 / 403 on WS upgrade | Missing or stale Entra token | Re-run `az account get-access-token --resource https://ai.azure.com`; ensure the caller has Foundry data-plane RBA - Network accessline 149
|-------|-------|------------| | HTTP 401 / 403 on WS upgrade | Missing or stale Entra token | Re-run `az account get-access-token --resource https://ai.azure.com`; ensure the caller has Foundry data-plane RBAC | | HTTP 404 on upgrade | Wro - Network accessline 150
| HTTP 401 / 403 on WS upgrade | Missing or stale Entra token | Re-run `az account get-access-token --resource https://ai.azure.com`; ensure the caller has Foundry data-plane RBAC | - Network accessline 151
| HTTP 404 on upgrade | Wrong `{project}` / `{agentName}` path segment, missing `api-version`, or unsupported region | Verify with `agent_get`; ensure the project/agent path segments are correct and `api-version=v1` is on the URL; confirm r - Network accessline 160
End-to-end working samples (server container + browser portal) live in the [`foundry-samples`](https://github.com/microsoft-foundry/foundry-samples) repo under: - Network accessline 170
- [Invocations WebSocket Protocol Guide](references/invocations-ws-protocol.md) - [Session Management](../invoke/references/session-management.md) - [Foundry Hosted Agents](https://learn.microsoft.com/en-us/azure/ai-foundry/agents/concepts/ - Network accessline 171
- [Session Management](../invoke/references/session-management.md) - [Foundry Hosted Agents](https://learn.microsoft.com/en-us/azure/ai-foundry/agents/concepts/hosted-agents?view=foundry) - [`invoke` skill](../invoke/invoke.md) — HTTP-based - Network accessline 172
- [Foundry Hosted Agents](https://learn.microsoft.com/en-us/azure/ai-foundry/agents/concepts/hosted-agents?view=foundry)
skills/microsoft-foundry/foundry-agent/invocations-ws/references/invocations-ws-protocol.md
- Network accessline 36
[Credential-related source omitted] - Network accessline 38
[Credential-related source omitted] - Network accessline 89
[Credential-related source omitted] - Network accessline 107
| Error | Cause | Resolution | |-------|-------|------------| | 401 / 403 on upgrade | Missing or expired Entra token | Re-mint with `az account get-access-token --resource https://ai.azure.com` | - Network accessline 108
|-------|-------|------------| | 401 / 403 on upgrade | Missing or expired Entra token | Re-mint with `az account get-access-token --resource https://ai.azure.com` | | 404 on upgrade | Wrong `project` or `agentName` path segment, missing `a - Network accessline 109
| 401 / 403 on upgrade | Missing or expired Entra token | Re-mint with `az account get-access-token --resource https://ai.azure.com` | - Network accessline 110
| 404 on upgrade | Wrong `project` or `agentName` path segment, missing `api-version`, or unsupported region | Verify with `agent_get`; ensure the path segments are correct and `api-version=v1` is set; confirm the deployed version uses `pro
skills/microsoft-foundry/foundry-agent/invoke/invoke.md
- Network accessline 44
Run the paired smoke-test helper from the `microsoft-foundry` skill root (`plugins/azure-skills/skills/microsoft-foundry`) using `DefaultAzureCredential` (`https://ai.azure.com/.default`). Note that PowerShell uses PascalCase parameters (`- - Network accessline 231
- [File Operations](references/file-operations.md) - [Invocations Protocol Guide](references/invocations-protocol.md) - [Foundry Hosted Agents](https://learn.microsoft.com/en-us/azure/ai-foundry/agents/concepts/hosted-agents?view=foundry) - Network accessline 232
- [Invocations Protocol Guide](references/invocations-protocol.md) - [Foundry Hosted Agents](https://learn.microsoft.com/en-us/azure/ai-foundry/agents/concepts/hosted-agents?view=foundry) - [Foundry Samples](https://github.com/azure-ai-foun - Network accessline 233
- [Foundry Hosted Agents](https://learn.microsoft.com/en-us/azure/ai-foundry/agents/concepts/hosted-agents?view=foundry) - Network accessline 234
- [Foundry Samples](https://github.com/azure-ai-foundry/foundry-samples)
skills/microsoft-foundry/foundry-agent/observe/references/cicd-monitoring.md
skills/microsoft-foundry/foundry-agent/observe/references/evaluate-step.md
- Access to secretsline 16
[Credential-related source omitted] - Access to secretsline 19
[Credential-related source omitted] - Network accessline 92
- [Microsoft Foundry Cloud Evaluation](https://learn.microsoft.com/en-us/azure/ai-foundry/how-to/develop/cloud-evaluation) - Network accessline 93
- [Built-in Evaluators](https://learn.microsoft.com/en-us/azure/foundry/concepts/built-in-evaluators)
skills/microsoft-foundry/foundry-agent/routine/routine.md
- Network accessline 68
If `azd ai routine` reports an unknown command after install, the azd core is too old. The extension requires `azd >= 1.27.0`; upgrade azd (<https://aka.ms/azd-install>) and retry.
skills/microsoft-foundry/foundry-agent/toolbox/references/mcp-protocol.md
- Network accessline 5
- **Developer** — `{project_endpoint}/toolboxes/{toolbox_name}/versions/{version}/mcp?api-version=v1`. Test a specific version before promoting. - `?api-version=v1` is **required** — requests without it return HTTP 400. - Auth: bearer token - Network accessline 7
- Auth: bearer token with scope `https://ai.azure.com/.default`.
skills/microsoft-foundry/foundry-agent/toolbox/references/test-endpoint.md
- Network accessline 12
[Credential-related source omitted] - Network accessline 21
curl -sS -X POST "$TOOLBOX_URL" \ - Dangerous shell operationline 33
[Credential-related source omitted] - Network accessline 33
curl -sS -X POST "$TOOLBOX_URL" \ - Network accessline 42
[Credential-related source omitted] - Dangerous shell operationline 43
[Credential-related source omitted] - Network accessline 43
[Credential-related source omitted] - Network accessline 46
[Credential-related source omitted] - Dangerous shell operationline 47
[Credential-related source omitted] - Network accessline 47
[Credential-related source omitted] - Network accessline 74
"message":"tools/list failed for 1 tool source(s)... {\"errors\":[{\"name\":\"<server_label>\",\"type\":\"mcp\", \"error\":{\"code\":\"CONSENT_REQUIRED\", \"message\":\"https://logic-apis-<region>.consent.azure-apim.net/login?data=. - Network accessline 76
\"message\":\"https://logic-apis-<region>.consent.azure-apim.net/login?data=...\"}}]}"}}
skills/microsoft-foundry/foundry-agent/toolbox/references/tool-a2a.md
- Network accessline 31
azd ai connection create $CONNECTION_NAME --project-endpoint $PROJECT_ENDPOINT --kind remote-a2a --target $TARGET_AGENT_A2A_ENDPOINT --auth-type <user-entra-token | agentic-identity> --audience "https://ai.azure.com" - Network accessline 34
--target $TARGET_AGENT_A2A_ENDPOINT \ --auth-type <user-entra-token | agentic-identity> \ --audience "https://ai.azure.com" \ - Network accessline 35
--auth-type <user-entra-token | agentic-identity> \ --audience "https://ai.azure.com" \ --metadata "ApiType=Azure" \ - Network accessline 36
--audience "https://ai.azure.com" \ - Network accessline 62
- [A2A tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/agent-to-agent)
skills/microsoft-foundry/foundry-agent/toolbox/references/tool-azure-ai-search.md
- Network accessline 26
SURL="https://$SVC.search.windows.net" - Network accessline 35
# Create the index curl -sS -X PUT "$SURL/indexes/contoso-outdoors?api-version=2023-11-01" \ - Network accessline 36
curl -sS -X PUT "$SURL/indexes/contoso-outdoors?api-version=2023-11-01" \ - Network accessline 43
# Upload documents (one object per file/record; @search.action=upload) curl -sS -X POST "$SURL/indexes/contoso-outdoors/docs/index?api-version=2023-11-01" \ - Network accessline 44
curl -sS -X POST "$SURL/indexes/contoso-outdoors/docs/index?api-version=2023-11-01" \ - Network accessline 50
[Credential-related source omitted] - Network accessline 51
[Credential-related source omitted] - Network accessline 158
[Credential-related source omitted] - Network accessline 159
[Credential-related source omitted] - Network accessline 160
[Credential-related source omitted] - Network accessline 170
- [Azure AI Search tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/azure-ai-search)
skills/microsoft-foundry/foundry-agent/toolbox/references/tool-browser-automation.md
- Network accessline 87
- [Browser automation tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/browser-automation)
skills/microsoft-foundry/foundry-agent/toolbox/references/tool-code-interpreter.md
- Network accessline 82
[Credential-related source omitted] - Network accessline 83
[Credential-related source omitted] - Network accessline 84
[Credential-related source omitted] - Network accessline 93
- [Code Interpreter tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/code-interpreter)
skills/microsoft-foundry/foundry-agent/toolbox/references/tool-fabric-iq.md
- Network accessline 102
- [Fabric IQ tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/fabric-iq)
skills/microsoft-foundry/foundry-agent/toolbox/references/tool-file-search.md
- Network accessline 11
File search needs a **vector store** populated with your files. Create it via the project's **OpenAI-compatible** endpoints (`{project}/openai/v1/...`), using a token scoped to `https://ai.azure.com/.default`. Requires **Storage Blob Data C - Network accessline 14
[Credential-related source omitted] - Network accessline 15
[Credential-related source omitted] - Network accessline 17
[Credential-related source omitted] - Network accessline 18
[Credential-related source omitted] - Network accessline 21
[Credential-related source omitted] - Network accessline 22
[Credential-related source omitted] - Network accessline 25
[Credential-related source omitted] - Network accessline 26
[Credential-related source omitted] - Network accessline 105
- [File Search tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/file-search) — vector store creation, SDK/REST samples - Network accessline 106
- [Vector stores for file search](https://learn.microsoft.com/azure/foundry/agents/concepts/vector-stores)
skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-agent-identity.md
- Network accessline 20
- **Microsoft-hosted** (e.g. Azure Language MCP) → a well-known value from the server's docs, e.g. `https://cognitiveservices.azure.com/`. Authorize by granting the identity an **RBAC role** on the target resource. - **Your own server** (e. - Network accessline 21
- **Your own server** (e.g. Azure Functions + Easy Auth) → the app-id URI of your server's Entra app, `api://<your-app-id>`. Authorize by **allow-listing** the identity's client ID. Probe an unknown audience: `curl -s -i https://<server>/mc - Network accessline 34
azd ai connection create langmcpconn --kind remote-tool --target "https://<language-service>.cognitiveservices.azure.com/language/mcp?api-version=2025-11-15-preview" --auth-type agentic-identity --audience "https://cognitiveserv - Network accessline 36
--target "https://<language-service>.cognitiveservices.azure.com/language/mcp?api-version=2025-11-15-preview" \ --auth-type agentic-identity \ --audience "https://cognitiveservices.azure.com/" \ - Network accessline 37
--auth-type agentic-identity \ --audience "https://cognitiveservices.azure.com/" \ --project-endpoint "$FOUNDRY_PROJECT_ENDPOINT" - Network accessline 38
--audience "https://cognitiveservices.azure.com/" \ - Network accessline 87
**Your own server** — add the identity's **client ID** to the server's Easy Auth allow-list (`allowedApplications`) alongside `allowedAudiences: ["api://<app-id>", "<app-id>"]` and issuer `https://login.microsoftonline.com/<tenant>/v2.0`, v - Network accessline 139
- [MCP tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/model-context-protocol) - Network accessline 140
- [Azure Language MCP server](https://learn.microsoft.com/azure/ai-services/language-service/concepts/foundry-tools-agents)
skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-custom-oauth-azure-starter.md
- Network accessline 45
curl -s "https://$FUNC.azurewebsites.net/.well-known/oauth-protected-resource" - Network accessline 60
| `--client-id` | `$APPID` | | `--client-secret` | `$SECRET` | | `--authorization-url` | `https://login.microsoftonline.com/$TENANT/oauth2/v2.0/authorize` | - Network accessline 61
| `--client-secret` | `$SECRET` | | `--authorization-url` | `https://login.microsoftonline.com/$TENANT/oauth2/v2.0/authorize` | | `--token-url` | `https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token` | - Network accessline 62
| `--authorization-url` | `https://login.microsoftonline.com/$TENANT/oauth2/v2.0/authorize` | - Network accessline 63
| `--token-url` | `https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token` | - Network accessline 66
The connection **target** is `https://$FUNC.azurewebsites.net/runtime/webhooks/mcp`. Next: create the connection ([tool-mcp-custom-oauth.md § A](tool-mcp-custom-oauth.md#a-imperative-cli)), then [Set the connector redirect URI](tool-mcp-cus - Network accessline 70
- [Build and register an MCP server (custom MCP on Azure Functions)](https://learn.microsoft.com/en-us/azure/foundry/mcp/build-your-own-mcp-server?view=foundry)
skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-custom-oauth.md
- Network accessline 3
[Credential-related source omitted] - Access to secretsline 3
[Credential-related source omitted] - Network accessline 21
Hosted elsewhere (SaaS, partner, or your own non-Azure host). Register an OAuth app with **that provider's** identity system and supply all five inputs. Example: a **GitHub OAuth App**. 1. Create the app at **[github.com/settings/applicatio - Network accessline 22
1. Create the app at **[github.com/settings/applications/new](https://github.com/settings/applications/new)**. Use any name/homepage URL; set **Authorization callback URL** to a placeholder — replace it after the connection exists ([Set the - Network accessline 28
| `--client-id` | **Client ID** | | `--client-secret` | the generated **client secret** | | `--authorization-url` | `https://github.com/login/oauth/authorize` | - Network accessline 29
| `--client-secret` | the generated **client secret** | | `--authorization-url` | `https://github.com/login/oauth/authorize` | | `--token-url` | `https://github.com/login/oauth/access_token` | - Network accessline 30
| `--authorization-url` | `https://github.com/login/oauth/authorize` | - Network accessline 31
[Credential-related source omitted] - Access to secretsline 31
[Credential-related source omitted] - Network accessline 92
az rest --method get --query "properties.redirectUrl" -o tsv \ --url "https://management.azure.com/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.CognitiveServices/accounts/<account>/projects/<project>/connections/private-mcp - Network accessline 93
--url "https://management.azure.com/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.CognitiveServices/accounts/<account>/projects/<project>/connections/private-mcp-oauth?api-version=2025-06-01" - Network accessline 94
# => https://global.consent.azure-apim.net/redirect/<connector-guid> - Network accessline 148
- [Build and register an MCP server (custom MCP on Azure Functions)](https://learn.microsoft.com/en-us/azure/foundry/mcp/build-your-own-mcp-server?view=foundry) - Network accessline 149
- [MCP tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/mcp)
skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-key-auth.md
- Network accessline 17
# 1. Create the static-key connection (the key lives on the connection) azd ai connection create github-mcp-conn \ --kind remote-tool --target https://api.githubcopilot.com/mcp \ - Network accessline 18
azd ai connection create github-mcp-conn --kind remote-tool --target https://api.githubcopilot.com/mcp - Network accessline 19
--kind remote-tool --target https://api.githubcopilot.com/mcp \ - Network accessline 103
- [GitHub MCP server](https://github.com/github/github-mcp-server) — the static-key example used above - Network accessline 104
- [MCP tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/mcp)
skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-managed-oauth.md
- Access to secretsline 3
[Credential-related source omitted] - Access to secretsline 5
[Credential-related source omitted] - Access to secretsline 9
[Credential-related source omitted] - Network accessline 35
azd ai connection create github-mcp-managed \ --kind remote-tool \ --target https://api.githubcopilot.com/mcp \ - Network accessline 36
--kind remote-tool \ --target https://api.githubcopilot.com/mcp \ --auth-type oauth2 \ - Network accessline 37
--target https://api.githubcopilot.com/mcp \ - Network accessline 98
|---|---| | `tools/list` returns zero after consent | Wrong `--target` (not the MCP server URL), or the connector needs the `gateway_connector` two-PUT flow instead — see [foundry-tool-catalog.md](../../create/references/foundry-tool-catalo - Network accessline 99
| `tools/list` returns zero after consent | Wrong `--target` (not the MCP server URL), or the connector needs the `gateway_connector` two-PUT flow instead — see [foundry-tool-catalog.md](../../create/references/foundry-tool-catalog.md). | | - Network accessline 100
| `invalid_payload: unsupported authType` | API version drift — re-check allowed `authType` for `RemoteTool` in the [projects REST API](https://learn.microsoft.com/rest/api/aiservices/). | - Network accessline 106
- [MCP tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/mcp)
skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-noauth.md
- Network accessline 17
# 1. Create the no-auth connection azd ai connection create learn-mcp-conn \ --kind remote-tool --target https://learn.microsoft.com/api/mcp \ - Network accessline 18
azd ai connection create learn-mcp-conn --kind remote-tool --target https://learn.microsoft.com/api/mcp - Network accessline 19
--kind remote-tool --target https://learn.microsoft.com/api/mcp \ - Network accessline 67
- type: mcp server_label: learn_mcp server_url: https://learn.microsoft.com/api/mcp - Network accessline 68
server_label: learn_mcp server_url: https://learn.microsoft.com/api/mcp require_approval: never - Network accessline 69
server_url: https://learn.microsoft.com/api/mcp - Network accessline 102
- [Microsoft Learn MCP server](https://learn.microsoft.com/training/support/mcp) — the public example used above - Network accessline 103
- [MCP tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/mcp)
skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-user-entra-token.md
- Network accessline 116
- [tool-work-iq.md](tool-work-iq.md) — a concrete, verified user-entra-token MCP server (Microsoft 365 Work IQ) - [MCP tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/mcp) - Network accessline 117
- [MCP tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/mcp)
skills/microsoft-foundry/foundry-agent/toolbox/references/tool-openapi.md
- Network accessline 38
# 1. (API-key auth only) create the custom-keys connection; the key name must match the spec's securityScheme name azd ai connection create my-api-conn \ --kind custom-keys --target https://api.example.com \ - Network accessline 39
azd ai connection create my-api-conn --kind custom-keys --target https://api.example.com - Network accessline 40
--kind custom-keys --target https://api.example.com \ - Network accessline 52
openapi: "3.0.0" info: { title: Cat Facts, version: "1.0.0" } servers: [{ url: https://catfact.ninja }] - Network accessline 53
info: { title: Cat Facts, version: "1.0.0" } servers: [{ url: https://catfact.ninja }] paths: - Network accessline 54
servers: [{ url: https://catfact.ninja }] - Network accessline 81
openapi: "3.0.0" info: { title: My API, version: "1.0.0" } servers: [{ url: https://api.example.com }] - Network accessline 82
info: { title: My API, version: "1.0.0" } servers: [{ url: https://api.example.com }] security: [{ apiKeyHeader: [] }] - Network accessline 83
servers: [{ url: https://api.example.com }] - Network accessline 114
openapi: "3.0.0" info: { title: Cat Facts, version: "1.0.0" } servers: [{ url: https://catfact.ninja }] - Network accessline 115
info: { title: Cat Facts, version: "1.0.0" } servers: [{ url: https://catfact.ninja }] paths: - Network accessline 116
servers: [{ url: https://catfact.ninja }] - Network accessline 141
[Credential-related source omitted] - Network accessline 143
[Credential-related source omitted] - Dangerous shell operationline 145
[Credential-related source omitted] - Network accessline 145
[Credential-related source omitted] - Network accessline 153
- [OpenAPI tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/openapi)
skills/microsoft-foundry/foundry-agent/toolbox/references/tool-tool-search.md
- Network accessline 97
"type": "mcp", "server_label": "analytics", "server_url": "https://db-mcp.internal/sse", - Network accessline 98
"server_label": "analytics", "server_url": "https://db-mcp.internal/sse", "tool_configs": { - Network accessline 99
"server_url": "https://db-mcp.internal/sse", - Network accessline 118
For full fields, pinning recipes, the verify-with-`tool_search` flow, and best practices, see [Tool Search tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/tool-search).
skills/microsoft-foundry/foundry-agent/toolbox/references/tool-web-search.md
skills/microsoft-foundry/foundry-agent/toolbox/references/tool-work-iq.md
- Network accessline 3
Give the agent Microsoft 365 work context (mail, meetings, files, chats, and M365 agents) via the **Work IQ MCP server** at `https://workiq.svc.cloud.microsoft/mcp`. It attaches as a **remote MCP connection** and calls Work IQ as the **sign - Network accessline 5
- **Server URL:** `https://workiq.svc.cloud.microsoft/mcp` - Network accessline 31
# 1. Create the connection (Entra passthrough + Work IQ audience) azd ai connection create workiq-mcp-conn \ --kind remote-tool --target https://workiq.svc.cloud.microsoft/mcp \ - Network accessline 32
azd ai connection create workiq-mcp-conn --kind remote-tool --target https://workiq.svc.cloud.microsoft/mcp - Network accessline 33
--kind remote-tool --target https://workiq.svc.cloud.microsoft/mcp \ - Network accessline 74
# 2. Create the custom-OAuth connection (scope must include WorkIQAgent.Ask + offline_access) azd ai connection create workiq-oauth-conn \ --kind remote-tool --target https://workiq.svc.cloud.microsoft/mcp \ - Network accessline 75
azd ai connection create workiq-oauth-conn --kind remote-tool --target https://workiq.svc.cloud.microsoft/mcp - Network accessline 76
--kind remote-tool --target https://workiq.svc.cloud.microsoft/mcp \ - Network accessline 77
--auth-type oauth2 \ --client-id "$BYO" --client-secret "$SECRET" \ --authorization-url "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/authorize" \ - Network accessline 78
--client-id "$BYO" --client-secret "$SECRET" \ --authorization-url "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/authorize" \ --token-url "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token" \ - Network accessline 79
--authorization-url "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/authorize" \ - Network accessline 80
--token-url "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token" \ - Network accessline 93
ARM=".../connections/workiq-oauth-conn" # see tool-mcp-custom-oauth.md for the full ARM path REDIR=$(az rest --method get --query "properties.redirectUrl" -o tsv \ --url "https://management.azure.com$ARM?api-version=2025-06-01") - Network accessline 94
REDIR=$(az rest --method get --query "properties.redirectUrl" -o tsv --url "https://management.azure.com$ARM?api-version=2025-06-01") - Network accessline 95
--url "https://management.azure.com$ARM?api-version=2025-06-01") - Network accessline 132
[Credential-related source omitted] - Network accessline 134
[Credential-related source omitted] - Network accessline 136
[Credential-related source omitted] - Dangerous shell operationline 137
[Credential-related source omitted] - Network accessline 137
[Credential-related source omitted] - Network accessline 145
- [Work IQ tool documentation](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/work-iq) - Network accessline 146
- [MCP server authentication](https://learn.microsoft.com/azure/ai-foundry/agents/how-to/mcp-authentication) — Entra identities, OAuth identity passthrough, managed vs custom OAuth
skills/microsoft-foundry/foundry-agent/toolbox/references/toolbox-azd.md
- Network accessline 88
- [toolbox.md](../toolbox.md) — concept, create flow, supported tool types, troubleshooting - [Toolbox (Configure tools)](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/toolbox#configure-tools) - Network accessline 89
- [Toolbox (Configure tools)](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/toolbox#configure-tools) - Network accessline 90
- [Tool Catalog](https://learn.microsoft.com/azure/foundry/agents/concepts/tool-catalog) - Network accessline 91
- [Foundry Toolkit (VS Code) — set up tools/toolboxes](https://code.visualstudio.com/docs/intelligentapps/tool-catalog) - Network accessline 92
- [Foundry Portal](https://ai.azure.com/)
skills/microsoft-foundry/foundry-agent/toolbox/scripts/get-catalog-inputs.ps1
- Executable scriptline 1
Executable file - Network accessline 39
NOTE on serverUrl: remotes[].url is often null in the index (verified for github). When empty, supply the connector's documented MCP endpoint as --target (e.g. github Copilot -> https://api.githubcopilot.com/mcp). - Network accessline 41
--target (e.g. github Copilot -> https://api.githubcopilot.com/mcp). - Network accessline 61
$ErrorActionPreference = 'Stop' $gallery = 'https://eastus.api.azureml.ms/asset-gallery/v1.0/tools' - Network accessline 62
$gallery = 'https://eastus.api.azureml.ms/asset-gallery/v1.0/tools' - Network accessline 63
[Credential-related source omitted]
skills/microsoft-foundry/foundry-agent/toolbox/scripts/get-catalog-inputs.sh
- Executable scriptline 1
#!/usr/bin/env bash - Network accessline 45
# NOTE on serverUrl: remotes[].url is often null in the index (verified for # github). When empty, supply the connector's documented MCP endpoint as # --target (e.g. github Copilot -> https://api.githubcopilot.com/mcp). - Network accessline 47
# --target (e.g. github Copilot -> https://api.githubcopilot.com/mcp). - Network accessline 62
GALLERY="https://eastus.api.azureml.ms/asset-gallery/v1.0/tools" - Network accessline 67
[Credential-related source omitted] - Network accessline 79
body="{\"freeTextSearch\":\"*\",\"filters\":[{\"field\":\"entityContainerId\",\"operator\":\"eq\",\"values\":[\"registry-prod-bl\"]},{\"field\":\"type\",\"operator\":\"eq\",\"values\":[\"tools\"]}],\"pageSize\":100}" fi curl -sS -X POST - Network accessline 80
[Credential-related source omitted] - Network accessline 81
[Credential-related source omitted] - Access to secretsline 100
[Credential-related source omitted] - Access to secretsline 157
[Credential-related source omitted]
skills/microsoft-foundry/foundry-agent/toolbox/toolbox.md
- Access to secretsline 53
[Credential-related source omitted] - Network accessline 71
- **Agent Memory** — configured at the **project** level, separate from the toolbox. See [Memory docs](https://learn.microsoft.com/azure/ai-foundry/agents/how-to/memory-usage?view=foundry). - Network accessline 72
- **Routines (preview)** — an agent **trigger** (`schedule` / `timer` / `github_issue` / `custom`). See [Routines docs](https://learn.microsoft.com/azure/foundry/agents/how-to/use-routines). - Network accessline 80
**Before adding more than ~5 tools, add `{ "type": "toolbox_search_preview" }`.** This replaces the full `tools/list` with two meta-tools — `tool_search` and `call_tool` — so context cost stays flat. Full behavior: [tool-tool-search.md](ref - Network accessline 97
`?api-version=v1` is required; auth is a bearer token scoped `https://ai.azure.com/.default`. See [mcp-protocol.md § Endpoint URL details](references/mcp-protocol.md#endpoint-url-details). - Network accessline 105
- [Toolbox (how-to)](https://learn.microsoft.com/azure/foundry/agents/how-to/tools/toolbox) - Network accessline 106
- [Tool Catalog](https://learn.microsoft.com/azure/foundry/agents/concepts/tool-catalog) - Network accessline 107
- [Foundry Toolkit (VS Code)](https://code.visualstudio.com/docs/intelligentapps/tool-catalog) - Network accessline 108
- [Foundry Portal](https://ai.azure.com/)
skills/microsoft-foundry/foundry-agent/trace/references/kql-templates.md
- Network accessline 218
- [GenAI Spans](https://opentelemetry.io/docs/specs/semconv/gen-ai/gen-ai-spans/) - Network accessline 219
- [GenAI Agent Spans](https://opentelemetry.io/docs/specs/semconv/gen-ai/gen-ai-agent-spans/) - Network accessline 220
- [GenAI Events](https://opentelemetry.io/docs/specs/semconv/gen-ai/gen-ai-events/) - Network accessline 221
- [GenAI Metrics](https://opentelemetry.io/docs/specs/semconv/gen-ai/gen-ai-metrics/)
skills/microsoft-foundry/foundry-agent/trace/trace.md
- Network accessline 19
| Related skills | `troubleshoot` (hosted-agent logs), `eval-datasets` (trace harvesting) | | Preferred query tool | `monitor_resource_log_query` (Azure MCP) - use for App Insights KQL queries | | OTel conventions | [GenAI Spans](https://op - Network accessline 20
| Preferred query tool | `monitor_resource_log_query` (Azure MCP) - use for App Insights KQL queries | | OTel conventions | [GenAI Spans](https://opentelemetry.io/docs/specs/semconv/gen-ai/gen-ai-spans/), [Agent Spans](https://opentelemetry - Network accessline 21
| OTel conventions | [GenAI Spans](https://opentelemetry.io/docs/specs/semconv/gen-ai/gen-ai-spans/), [Agent Spans](https://opentelemetry.io/docs/specs/semconv/gen-ai/gen-ai-agent-spans/) | - Access to secretsline 42
[Credential-related source omitted] - Access to secretsline 43
[Credential-related source omitted] - Access to secretsline 49
[Credential-related source omitted] - Access to secretsline 50
[Credential-related source omitted]
skills/microsoft-foundry/foundry-agent/troubleshoot/troubleshoot.md
- Network accessline 37
- Triage in this exact order: 1. **Definition & deployment**: Validate the selected subtype and run `azd ai agent show --output json`. 2. **Voice WebSocket upgrade & auth**: Confirm the client connects to `wss://<project-host>/api - Network accessline 38
1. **Definition & deployment**: Validate the selected subtype and run `azd ai agent show --output json`. 2. **Voice WebSocket upgrade & auth**: Confirm the client connects to `wss://<project-host>/api/projects/<project>/agents/<voice-a - Network accessline 39
2. **Voice WebSocket upgrade & auth**: Confirm the client connects to `wss://<project-host>/api/projects/<project>/agents/<voice-agent>/endpoint/protocols/voice?api-version=v1` with `Foundry-Features: VoiceAgents=V1Preview` and an Entra tok - Network accessline 90
List the project connections to find Application Insights or Azure Monitor resources using the Azure CLI command documented at: [az cognitiveservices account connection](https://learn.microsoft.com/en-us/cli/azure/cognitiveservices/account/ - Network accessline 91
[az cognitiveservices account connection](https://learn.microsoft.com/en-us/cli/azure/cognitiveservices/account/connection?view=azure-cli-latest) - Network accessline 129
- [Foundry Hosted Agents](https://learn.microsoft.com/azure/ai-foundry/agents/concepts/hosted-agents?view=foundry) - Network accessline 130
- [Account Connection CLI Reference](https://learn.microsoft.com/en-us/cli/azure/cognitiveservices/account/connection?view=azure-cli-latest) - Network accessline 131
- [KQL Quick Reference](https://learn.microsoft.com/azure/data-explorer/kusto/query/kql-quick-reference) - Network accessline 132
- [Foundry Samples](https://github.com/microsoft-foundry/foundry-samples)
skills/microsoft-foundry/foundry-agent/validate/references/default-rules.yaml
- Network accessline 9
guidance: - title: "Agent Framework Foundry Toolbox sample" link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/agent-framework/responses/04-foundry-toolbox" - Network accessline 10
- title: "Agent Framework Foundry Toolbox sample" link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/agent-framework/responses/04-foundry-toolbox" - title: "LangGraph Foundry Too - Network accessline 11
link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/agent-framework/responses/04-foundry-toolbox" - Network accessline 12
- title: "LangGraph Foundry Toolbox sample" link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/langgraph/responses/02-langgraph-toolbox" when: Apply when the hosted agent uses an M - Network accessline 13
link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/langgraph/responses/02-langgraph-toolbox" - Network accessline 26
guidance: - title: "APIM hosted-agent solution template" link: "https://github.com/microsoft/Foundry-Agent-Solution-Templates/tree/main/apim-hosted-agent" - Network accessline 27
- title: "APIM hosted-agent solution template" link: "https://github.com/microsoft/Foundry-Agent-Solution-Templates/tree/main/apim-hosted-agent" when: Apply when repository requirements or configuration specify a model token or - Network accessline 28
link: "https://github.com/microsoft/Foundry-Agent-Solution-Templates/tree/main/apim-hosted-agent" - Network accessline 42
guidance: - title: "Configure hosted-agent telemetry" link: "https://learn.microsoft.com/azure/foundry/agents/how-to/configure-hosted-agent-telemetry" - Network accessline 43
- title: "Configure hosted-agent telemetry" link: "https://learn.microsoft.com/azure/foundry/agents/how-to/configure-hosted-agent-telemetry" - title: "Set up tracing for agents" - Network accessline 44
link: "https://learn.microsoft.com/azure/foundry/agents/how-to/configure-hosted-agent-telemetry" - Network accessline 45
- title: "Set up tracing for agents" link: "https://learn.microsoft.com/azure/foundry/observability/how-to/trace-agent-setup" when: Apply to every hosted agent configured with host azure.ai.agent. - Network accessline 46
link: "https://learn.microsoft.com/azure/foundry/observability/how-to/trace-agent-setup" - Network accessline 60
guidance: - title: "Microsoft Agent Framework SDK overview" link: "https://learn.microsoft.com/azure/foundry/how-to/develop/sdk-overview#agent-framework" - Network accessline 61
- title: "Microsoft Agent Framework SDK overview" link: "https://learn.microsoft.com/azure/foundry/how-to/develop/sdk-overview#agent-framework" - title: "Choose a hosted-agent framework" - Network accessline 62
link: "https://learn.microsoft.com/azure/foundry/how-to/develop/sdk-overview#agent-framework" - Network accessline 63
- title: "Choose a hosted-agent framework" link: "https://learn.microsoft.com/azure/foundry/agents/quickstarts/quickstart-deploy-own-code#choose-your-framework" when: Apply only when the hosted agent declares or imports Microsof - Network accessline 64
link: "https://learn.microsoft.com/azure/foundry/agents/quickstarts/quickstart-deploy-own-code#choose-your-framework" - Network accessline 77
guidance: - title: "Python hosted-agent framework samples" link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents" - Network accessline 78
- title: "Python hosted-agent framework samples" link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents" - title: ".NET hosted-agent framework samples" - Network accessline 79
link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents" - Network accessline 80
- title: ".NET hosted-agent framework samples" link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/csharp/hosted-agents" - title: "Python LangGraph hosting samples" - Network accessline 81
link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/csharp/hosted-agents" - Network accessline 82
- title: "Python LangGraph hosting samples" link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/langgraph" when: Apply to every hosted agent configured with host azure.ai.agent. - Network accessline 83
link: "https://github.com/microsoft-foundry/foundry-samples/tree/main/samples/python/hosted-agents/langgraph" - Network accessline 96
guidance: - title: "Tool best practices for agents" link: "https://learn.microsoft.com/azure/foundry/agents/concepts/tool-best-practice" - Network accessline 97
- title: "Tool best practices for agents" link: "https://learn.microsoft.com/azure/foundry/agents/concepts/tool-best-practice" - title: "Responsible AI transparency note for agents" - Network accessline 98
link: "https://learn.microsoft.com/azure/foundry/agents/concepts/tool-best-practice" - Network accessline 99
- title: "Responsible AI transparency note for agents" link: "https://learn.microsoft.com/azure/foundry/responsible-ai/agents/transparency-note" when: Apply when the repository stores or references instructions that govern the h - Network accessline 100
link: "https://learn.microsoft.com/azure/foundry/responsible-ai/agents/transparency-note" - Network accessline 113
guidance: - title: "Azure AI Search role-based access control" link: "https://learn.microsoft.com/azure/search/search-security-rbac" - Network accessline 114
- title: "Azure AI Search role-based access control" link: "https://learn.microsoft.com/azure/search/search-security-rbac" - title: "Enterprise knowledge-agent connection configuration" - Network accessline 115
link: "https://learn.microsoft.com/azure/search/search-security-rbac" - Network accessline 116
- title: "Enterprise knowledge-agent connection configuration" link: "https://github.com/microsoft/Foundry-Agent-Solution-Templates/blob/main/enterprise-knowledge-agent/scripts/provision.py" when: >- - Network accessline 117
link: "https://github.com/microsoft/Foundry-Agent-Solution-Templates/blob/main/enterprise-knowledge-agent/scripts/provision.py" - Network accessline 131
guidance: - title: "Azure Container Registry image tagging and versioning" link: "https://learn.microsoft.com/azure/container-registry/container-registry-image-tag-version" - Network accessline 132
- title: "Azure Container Registry image tagging and versioning" link: "https://learn.microsoft.com/azure/container-registry/container-registry-image-tag-version" - title: "Private-network hosted-agent existing ACR scenario" - Network accessline 133
link: "https://learn.microsoft.com/azure/container-registry/container-registry-image-tag-version" - Network accessline 134
- title: "Private-network hosted-agent existing ACR scenario" link: "https://github.com/microsoft/Foundry-Agent-Solution-Templates/tree/main/private-network-hosted-agent/scenarios/existing-private-acr" when: >- - Network accessline 135
link: "https://github.com/microsoft/Foundry-Agent-Solution-Templates/tree/main/private-network-hosted-agent/scenarios/existing-private-acr" - Network accessline 149
guidance: - title: "Foundry hosted-agent virtual networks" link: "https://learn.microsoft.com/azure/foundry/agents/how-to/virtual-networks" - Network accessline 150
- title: "Foundry hosted-agent virtual networks" link: "https://learn.microsoft.com/azure/foundry/agents/how-to/virtual-networks" - title: "Private-network hosted-agent security boundaries" - Network accessline 151
link: "https://learn.microsoft.com/azure/foundry/agents/how-to/virtual-networks" - Network accessline 152
- title: "Private-network hosted-agent security boundaries" link: "https://github.com/microsoft/Foundry-Agent-Solution-Templates/blob/main/private-network-hosted-agent/docs/security.md" when: >- - Network accessline 153
link: "https://github.com/microsoft/Foundry-Agent-Solution-Templates/blob/main/private-network-hosted-agent/docs/security.md" - Network accessline 168
guidance: - title: "Review platform environment variables" link: "https://learn.microsoft.com/azure/foundry/agents/how-to/configure-hosted-agent-env-variables#review-platform-environment-variables" - Network accessline 169
- title: "Review platform environment variables" link: "https://learn.microsoft.com/azure/foundry/agents/how-to/configure-hosted-agent-env-variables#review-platform-environment-variables" when: Apply when hosted-agent runtime or - Network accessline 170
link: "https://learn.microsoft.com/azure/foundry/agents/how-to/configure-hosted-agent-env-variables#review-platform-environment-variables" - Network accessline 184
guidance: - title: "Hosted-agent protocol endpoints" link: "https://learn.microsoft.com/azure/foundry/agents/concepts/hosted-agent-contract#protocol-endpoints" - Network accessline 185
- title: "Hosted-agent protocol endpoints" link: "https://learn.microsoft.com/azure/foundry/agents/concepts/hosted-agent-contract#protocol-endpoints" - title: "Add a protocol adapter" - Network accessline 186
link: "https://learn.microsoft.com/azure/foundry/agents/concepts/hosted-agent-contract#protocol-endpoints" - Network accessline 187
- title: "Add a protocol adapter" link: "https://learn.microsoft.com/azure/foundry/agents/how-to/add-protocol-adapter" when: Apply when the hosted-agent service declares the Responses or Invocations protocol in azure.yaml; other - Network accessline 188
link: "https://learn.microsoft.com/azure/foundry/agents/how-to/add-protocol-adapter"
skills/microsoft-foundry/foundry-agent/validate/references/report-schema.json
skills/microsoft-foundry/foundry-agent/validate/references/rules-schema.json
skills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.ps1
- Executable scriptline 1
Executable file - Network accessline 25
$capRaw = az rest --method GET ` --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/modelCapacities" ` - Network accessline 26
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/modelCapacities" ` - Network accessline 31
$projRaw = az rest --method GET ` --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/accounts" ` - Network accessline 32
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/accounts" `
skills/microsoft-foundry/models/deploy-model/capacity/scripts/discover_and_rank.sh
- Executable scriptline 1
#!/bin/bash - Network accessline 20
CAPACITY_JSON=$(az rest --method GET \ --url "https://management.azure.com/subscriptions/${SUB_ID}/providers/Microsoft.CognitiveServices/modelCapacities" \ - Network accessline 21
--url "https://management.azure.com/subscriptions/${SUB_ID}/providers/Microsoft.CognitiveServices/modelCapacities" \ - Network accessline 26
PROJECTS_JSON=$(az rest --method GET \ --url "https://management.azure.com/subscriptions/${SUB_ID}/providers/Microsoft.CognitiveServices/accounts" \ - Network accessline 27
--url "https://management.azure.com/subscriptions/${SUB_ID}/providers/Microsoft.CognitiveServices/accounts" \
skills/microsoft-foundry/models/deploy-model/capacity/scripts/query_capacity.ps1
- Executable scriptline 1
Executable file - Network accessline 40
if ($Region) { $url = "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$Region/modelCapacities" - Network accessline 41
$url = "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$Region/modelCapacities" - Network accessline 42
} else { $url = "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/modelCapacities" } - Network accessline 43
$url = "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/modelCapacities"
skills/microsoft-foundry/models/deploy-model/capacity/scripts/query_capacity.sh
- Executable scriptline 1
#!/bin/bash - Network accessline 33
if [ -n "$REGION" ]; then URL="https://management.azure.com/subscriptions/${SUB_ID}/providers/Microsoft.CognitiveServices/locations/${REGION}/modelCapacities" - Network accessline 34
URL="https://management.azure.com/subscriptions/${SUB_ID}/providers/Microsoft.CognitiveServices/locations/${REGION}/modelCapacities" - Network accessline 35
else URL="https://management.azure.com/subscriptions/${SUB_ID}/providers/Microsoft.CognitiveServices/modelCapacities" fi - Network accessline 36
URL="https://management.azure.com/subscriptions/${SUB_ID}/providers/Microsoft.CognitiveServices/modelCapacities" - Network accessline 40
CAPACITY_RESULT=$(az rest --method GET --url "$URL" \
skills/microsoft-foundry/models/deploy-model/customize/references/customize-workflow.md
- Network accessline 128
# Current region capacity az rest --method GET --url \ "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/locations/$PROJECT_REGION/modelCapacities?api-version=2024-10-01&modelFormat=$MODEL_ - Network accessline 129
az rest --method GET --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/locations/$PROJECT_REGION/modelCapacities?api-version=2024-10-01&modelFormat=$MODEL_FORMAT&modelName=$MODEL_NAM - Network accessline 130
"https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/locations/$PROJECT_REGION/modelCapacities?api-version=2024-10-01&modelFormat=$MODEL_FORMAT&modelName=$MODEL_NAME&modelVersion=$MODEL_VERSION" - Network accessline 148
az rest --method GET --url \ "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/modelCapacities?api-version=2024-10-01&modelFormat=$MODEL_FORMAT&modelName=$MODEL_NAME&modelVersion=$MODEL_VER - Network accessline 149
"https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/modelCapacities?api-version=2024-10-01&modelFormat=$MODEL_FORMAT&modelName=$MODEL_NAME&modelVersion=$MODEL_VERSION" - Network accessline 208
TENANT_INFO=$(az rest --method GET \ --url "https://management.azure.com/tenants?api-version=2024-11-01" \ - Network accessline 209
--url "https://management.azure.com/tenants?api-version=2024-11-01" \ - Network accessline 218
$tenantInfo = az rest --method GET ` --url "https://management.azure.com/tenants?api-version=2024-11-01" ` - Network accessline 219
--url "https://management.azure.com/tenants?api-version=2024-11-01" ` - Network accessline 339
az rest --method PUT \ --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/resourceGroups/$RESOURCE_GROUP/providers/Microsoft.CognitiveServices/accounts/$ACCOUNT_NAME/deployments/$DEPLOYMENT_NAME?api-version=2024-10-01" \ - Network accessline 340
--url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/resourceGroups/$RESOURCE_GROUP/providers/Microsoft.CognitiveServices/accounts/$ACCOUNT_NAME/deployments/$DEPLOYMENT_NAME?api-version=2024-10-01" \ - Network accessline 384
az rest --method PUT ` --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/resourceGroups/$RESOURCE_GROUP/providers/Microsoft.CognitiveServices/accounts/$ACCOUNT_NAME/deployments/${DEPLOYMENT_NAME}?api-version=2024-10-01" ` - Network accessline 385
--url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/resourceGroups/$RESOURCE_GROUP/providers/Microsoft.CognitiveServices/accounts/$ACCOUNT_NAME/deployments/${DEPLOYMENT_NAME}?api-version=2024-10-01" `
skills/microsoft-foundry/models/deploy-model/preset/references/preset-workflow.md
- Network accessline 166
# Query capacity for current region CAPACITY_JSON=$(az rest --method GET \ --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/locations/$PROJECT_REGION/modelCapacities?api-version=2024 - Network accessline 167
CAPACITY_JSON=$(az rest --method GET --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/locations/$PROJECT_REGION/modelCapacities?api-version=2024-10-01&modelFormat=$MODEL_FORMAT&mode - Network accessline 168
--url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/locations/$PROJECT_REGION/modelCapacities?api-version=2024-10-01&modelFormat=$MODEL_FORMAT&modelName=$MODEL_NAME&modelVersion=$MODEL_VE - Network accessline 195
# Get capacity for all regions in subscription ALL_REGIONS_JSON=$(az rest --method GET \ --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/modelCapacities?api-version=2024-10-01&model - Network accessline 196
ALL_REGIONS_JSON=$(az rest --method GET --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/modelCapacities?api-version=2024-10-01&modelFormat=$MODEL_FORMAT&modelName=$MODEL_NAME&model - Network accessline 197
--url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/modelCapacities?api-version=2024-10-01&modelFormat=$MODEL_FORMAT&modelName=$MODEL_NAME&modelVersion=$MODEL_VERSION") - Network accessline 496
TENANT_INFO=$(az rest --method GET \ --url "https://management.azure.com/tenants?api-version=2024-11-01" \ - Network accessline 497
--url "https://management.azure.com/tenants?api-version=2024-11-01" \ - Network accessline 506
$tenantInfo = az rest --method GET ` --url "https://management.azure.com/tenants?api-version=2024-11-01" ` - Network accessline 507
--url "https://management.azure.com/tenants?api-version=2024-11-01" ` - Network accessline 520
az rest --method PUT \ --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/resourceGroups/$RESOURCE_GROUP/providers/Microsoft.CognitiveServices/accounts/$ACCOUNT_NAME/deployments/$DEPLOYMENT_NAME?api-version=2024-10-01" \ - Network accessline 521
--url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/resourceGroups/$RESOURCE_GROUP/providers/Microsoft.CognitiveServices/accounts/$ACCOUNT_NAME/deployments/$DEPLOYMENT_NAME?api-version=2024-10-01" \ - Network accessline 565
az rest --method PUT ` --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/resourceGroups/$RESOURCE_GROUP/providers/Microsoft.CognitiveServices/accounts/$ACCOUNT_NAME/deployments/${DEPLOYMENT_NAME}?api-version=2024-10-01" ` - Network accessline 566
--url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/resourceGroups/$RESOURCE_GROUP/providers/Microsoft.CognitiveServices/accounts/$ACCOUNT_NAME/deployments/${DEPLOYMENT_NAME}?api-version=2024-10-01" `
skills/microsoft-foundry/models/deploy-model/preset/references/workflow.md
- Network accessline 79
CAPACITY_JSON=$(az rest --method GET \ --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/locations/$PROJECT_REGION/modelCapacities?api-version=2024-10-01&modelFormat=OpenAI&modelName= - Network accessline 80
--url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/locations/$PROJECT_REGION/modelCapacities?api-version=2024-10-01&modelFormat=OpenAI&modelName=$MODEL_NAME&modelVersion=$MODEL_VERSION") - Network accessline 92
ALL_REGIONS_JSON=$(az rest --method GET \ --url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/modelCapacities?api-version=2024-10-01&modelFormat=OpenAI&modelName=$MODEL_NAME&modelVersio - Network accessline 93
--url "https://management.azure.com/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.CognitiveServices/modelCapacities?api-version=2024-10-01&modelFormat=OpenAI&modelName=$MODEL_NAME&modelVersion=$MODEL_VERSION")
skills/microsoft-foundry/models/deploy-model/scripts/generate_deployment_url.ps1
skills/microsoft-foundry/models/deploy-model/scripts/generate_deployment_url.sh
skills/microsoft-foundry/project/connections.md
skills/microsoft-foundry/project/create/create-foundry-project.md
- Broad permissionsline 1
Read, Write, Bash, AskUserQuestion - Network accessline 22
**1. Azure CLI** — `az version` → expects version output. If missing: https://aka.ms/installazurecli - Network accessline 30
If not logged in, run `az login`. If no active subscription: https://azure.microsoft.com/free/ — STOP. - Network accessline 42
**4. Azure Developer CLI** — `azd version`. If missing: https://aka.ms/azure-dev/install - Network accessline 77
mkdir "<project-name>" && cd "<project-name>" azd init -t https://github.com/Azure-Samples/azd-ai-starter-basic -e <project-name> --no-prompt - Network accessline 78
azd init -t https://github.com/Azure-Samples/azd-ai-starter-basic -e <project-name> --no-prompt - Network accessline 103
See the canonical env-var docs: [azure-dev/cli/azd/docs/environment-variables.md](https://github.com/Azure/azure-dev/blob/main/cli/azd/docs/environment-variables.md). - Network accessline 119
Capture `AZURE_AI_PROJECT_ID`, `AZURE_AI_PROJECT_ENDPOINT`, and `AZURE_RESOURCE_GROUP`. Direct user to verify at https://ai.azure.com. - Network accessline 127
- Deploy an existing agent → [foundry-agent/deploy/deploy.md](../../foundry-agent/deploy/deploy.md) - Browse model catalog → `foundry_models_list` MCP tool - Manage project → https://ai.azure.com - Network accessline 129
- Manage project → https://ai.azure.com - Network accessline 141
| Problem | Solution | |---------|----------| | `azd: command not found` | Install from https://aka.ms/azure-dev/install | - Network accessline 142
|---------|----------| | `azd: command not found` | Install from https://aka.ms/azure-dev/install | | `ERROR: Failed to authenticate` | Run `azd auth login`; verify subscription with `az account list` | - Network accessline 143
| `azd: command not found` | Install from https://aka.ms/azure-dev/install | - Network accessline 157
- [Azure Developer CLI](https://aka.ms/azure-dev/install) · [Microsoft Foundry Portal](https://ai.azure.com) · [Foundry Docs](https://learn.microsoft.com/azure/ai-foundry/) · [azd-ai-starter-basic template](https://github.com/Azure-Samples/
skills/microsoft-foundry/quota/quota.md
- Network accessline 50
subId=$(az account show --query id -o tsv) az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 50
subId=$(az account show --query id -o tsv) az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 50
subId=$(az account show --query id -o tsv) az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 50
subId=$(az account show --query id -o tsv) az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 50
subId=$(az account show --query id -o tsv) az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 51
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" - Network accessline 51
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" - Network accessline 51
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" - Network accessline 51
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" - Network accessline 51
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" - Network accessline 52
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 52
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 52
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 52
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 52
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 71
region="eastus" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 71
region="eastus" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 71
region="eastus" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 71
region="eastus" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 71
region="eastus" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 72
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 72
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 72
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 72
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 72
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 73
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 73
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 73
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 73
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 73
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 90
az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 90
az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 90
az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 90
az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 90
az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 91
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 91
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 91
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 91
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 91
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 106
region="eastus" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 106
region="eastus" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 106
region="eastus" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 106
region="eastus" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 106
region="eastus" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 107
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 107
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 107
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 107
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 107
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 108
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 108
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 108
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 108
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 108
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 139
**Azure Portal Process:** 1. Navigate to [Azure Portal - All Resources](https://portal.azure.com/#view/HubsExtension/BrowseAll) → Filter "AI Services" → Click resource - Network accessline 139
**Azure Portal Process:** 1. Navigate to [Azure Portal - All Resources](https://portal.azure.com/#view/HubsExtension/BrowseAll) → Filter "AI Services" → Click resource - Network accessline 139
**Azure Portal Process:** 1. Navigate to [Azure Portal - All Resources](https://portal.azure.com/#view/HubsExtension/BrowseAll) → Filter "AI Services" → Click resource - Network accessline 139
**Azure Portal Process:** 1. Navigate to [Azure Portal - All Resources](https://portal.azure.com/#view/HubsExtension/BrowseAll) → Filter "AI Services" → Click resource - Network accessline 139
**Azure Portal Process:** 1. Navigate to [Azure Portal - All Resources](https://portal.azure.com/#view/HubsExtension/BrowseAll) → Filter "AI Services" → Click resource - Network accessline 140
1. Navigate to [Azure Portal - All Resources](https://portal.azure.com/#view/HubsExtension/BrowseAll) → Filter "AI Services" → Click resource - Network accessline 140
1. Navigate to [Azure Portal - All Resources](https://portal.azure.com/#view/HubsExtension/BrowseAll) → Filter "AI Services" → Click resource - Network accessline 140
1. Navigate to [Azure Portal - All Resources](https://portal.azure.com/#view/HubsExtension/BrowseAll) → Filter "AI Services" → Click resource - Network accessline 140
1. Navigate to [Azure Portal - All Resources](https://portal.azure.com/#view/HubsExtension/BrowseAll) → Filter "AI Services" → Click resource - Network accessline 140
1. Navigate to [Azure Portal - All Resources](https://portal.azure.com/#view/HubsExtension/BrowseAll) → Filter "AI Services" → Click resource - Network accessline 142
3. Click **Request quota increase** 4. Fill form: Model, Current Limit, Requested Limit, Region, **Business Justification** (required field) 5. Wait for approval: **3-5 business days typically, up to 10 business days** ([source](https://lea - Network accessline 142
3. Click **Request quota increase** 4. Fill form: Model, Current Limit, Requested Limit, Region, **Business Justification** (required field) 5. Wait for approval: **3-5 business days typically, up to 10 business days** ([source](https://lea - Network accessline 142
3. Click **Request quota increase** 4. Fill form: Model, Current Limit, Requested Limit, Region, **Business Justification** (required field) 5. Wait for approval: **3-5 business days typically, up to 10 business days** ([source](https://lea - Network accessline 142
3. Click **Request quota increase** 4. Fill form: Model, Current Limit, Requested Limit, Region, **Business Justification** (required field) 5. Wait for approval: **3-5 business days typically, up to 10 business days** ([source](https://lea - Network accessline 142
3. Click **Request quota increase** 4. Fill form: Model, Current Limit, Requested Limit, Region, **Business Justification** (required field) 5. Wait for approval: **3-5 business days typically, up to 10 business days** ([source](https://lea - Network accessline 144
5. Wait for approval: **3-5 business days typically, up to 10 business days** ([source](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/quota)) - Network accessline 144
5. Wait for approval: **3-5 business days typically, up to 10 business days** ([source](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/quota)) - Network accessline 144
5. Wait for approval: **3-5 business days typically, up to 10 business days** ([source](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/quota)) - Network accessline 144
5. Wait for approval: **3-5 business days typically, up to 10 business days** ([source](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/quota)) - Network accessline 144
5. Wait for approval: **3-5 business days typically, up to 10 business days** ([source](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/quota)) - Network accessline 185
**Official Microsoft Documentation:** - [Azure OpenAI Service Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - Official pay-per-token rates - Network accessline 185
**Official Microsoft Documentation:** - [Azure OpenAI Service Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - Official pay-per-token rates - Network accessline 185
**Official Microsoft Documentation:** - [Azure OpenAI Service Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - Official pay-per-token rates - Network accessline 185
**Official Microsoft Documentation:** - [Azure OpenAI Service Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - Official pay-per-token rates - Network accessline 185
**Official Microsoft Documentation:** - [Azure OpenAI Service Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - Official pay-per-token rates - Network accessline 186
- [Azure OpenAI Service Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - Official pay-per-token rates - Network accessline 186
- [Azure OpenAI Service Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - Official pay-per-token rates - Network accessline 186
- [Azure OpenAI Service Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - Official pay-per-token rates - Network accessline 186
- [Azure OpenAI Service Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - Official pay-per-token rates - Network accessline 186
- [Azure OpenAI Service Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - Official pay-per-token rates - Network accessline 187
- [PTU Costs and Billing](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/provisioned-throughput-onboarding) - PTU hourly rates - Network accessline 187
- [PTU Costs and Billing](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/provisioned-throughput-onboarding) - PTU hourly rates - Network accessline 187
- [PTU Costs and Billing](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/provisioned-throughput-onboarding) - PTU hourly rates - Network accessline 187
- [PTU Costs and Billing](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/provisioned-throughput-onboarding) - PTU hourly rates - Network accessline 187
- [PTU Costs and Billing](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/provisioned-throughput-onboarding) - PTU hourly rates - Network accessline 188
- [Azure OpenAI Models](https://learn.microsoft.com/en-us/azure/ai-services/openai/concepts/models) - Model capabilities and regions - Network accessline 188
- [Azure OpenAI Models](https://learn.microsoft.com/en-us/azure/ai-services/openai/concepts/models) - Model capabilities and regions - Network accessline 188
- [Azure OpenAI Models](https://learn.microsoft.com/en-us/azure/ai-services/openai/concepts/models) - Model capabilities and regions - Network accessline 188
- [Azure OpenAI Models](https://learn.microsoft.com/en-us/azure/ai-services/openai/concepts/models) - Model capabilities and regions - Network accessline 188
- [Azure OpenAI Models](https://learn.microsoft.com/en-us/azure/ai-services/openai/concepts/models) - Model capabilities and regions - Network accessline 189
- [Quota Management Guide](https://learn.microsoft.com/azure/ai-services/openai/how-to/quota) - Official quota procedures - Network accessline 189
- [Quota Management Guide](https://learn.microsoft.com/azure/ai-services/openai/how-to/quota) - Official quota procedures - Network accessline 189
- [Quota Management Guide](https://learn.microsoft.com/azure/ai-services/openai/how-to/quota) - Official quota procedures - Network accessline 189
- [Quota Management Guide](https://learn.microsoft.com/azure/ai-services/openai/how-to/quota) - Official quota procedures - Network accessline 189
- [Quota Management Guide](https://learn.microsoft.com/azure/ai-services/openai/how-to/quota) - Official quota procedures - Network accessline 190
- [Quotas and Limits](https://learn.microsoft.com/azure/ai-services/openai/quotas-limits) - Rate limits and quota details - Network accessline 190
- [Quotas and Limits](https://learn.microsoft.com/azure/ai-services/openai/quotas-limits) - Rate limits and quota details - Network accessline 190
- [Quotas and Limits](https://learn.microsoft.com/azure/ai-services/openai/quotas-limits) - Rate limits and quota details - Network accessline 190
- [Quotas and Limits](https://learn.microsoft.com/azure/ai-services/openai/quotas-limits) - Rate limits and quota details - Network accessline 190
- [Quotas and Limits](https://learn.microsoft.com/azure/ai-services/openai/quotas-limits) - Rate limits and quota details - Network accessline 192
**Calculators:** - [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) - Official pricing estimator - Network accessline 192
**Calculators:** - [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) - Official pricing estimator - Network accessline 192
**Calculators:** - [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) - Official pricing estimator - Network accessline 192
**Calculators:** - [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) - Official pricing estimator - Network accessline 192
**Calculators:** - [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) - Official pricing estimator - Network accessline 193
- [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) - Official pricing estimator - Network accessline 193
- [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) - Official pricing estimator - Network accessline 193
- [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) - Official pricing estimator - Network accessline 193
- [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) - Official pricing estimator - Network accessline 193
- [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) - Official pricing estimator
skills/microsoft-foundry/quota/references/capacity-planning.md
- Network accessline 9
> **Official Pricing Sources:** > - [Azure OpenAI Service Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - Official pay-per-token rates - Network accessline 10
> - [Azure OpenAI Service Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - Official pay-per-token rates - Network accessline 11
> - [PTU Costs and Billing Guide](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/provisioned-throughput-onboarding) - PTU hourly rates and capacity planning - Network accessline 14
- Pay-per-token for input/output - No upfront commitment - **Rates**: See [Azure OpenAI Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - Network accessline 15
- No upfront commitment - **Rates**: See [Azure OpenAI Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - GPT-4o: ~$0.0025-$0.01/1K tokens - Network accessline 16
- **Rates**: See [Azure OpenAI Pricing](https://azure.microsoft.com/en-us/pricing/details/cognitive-services/openai-service/) - Network accessline 23
- Hourly billing: `$/PTU/hr × PTUs × 730 hrs/month` - Monthly commitment with Reservations discounts - **Rates**: See [PTU Billing Guide](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/provisioned-throughput-onboarding) - Network accessline 24
- Monthly commitment with Reservations discounts - **Rates**: See [PTU Billing Guide](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/provisioned-throughput-onboarding) - Use PTU calculator to determine requirements (Micros - Network accessline 25
- **Rates**: See [PTU Billing Guide](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/provisioned-throughput-onboarding) - Network accessline 53
> **Important**: Always use the official [Azure Pricing Calculator](https://azure.microsoft.com/pricing/calculator/) and Microsoft Foundry portal PTU calculator (Microsoft Foundry → Operate → Quota → Provisioned Throughput Unit tab) for exa - Network accessline 95
> **Official Documentation:** > - [Choose the Right AI Model for Your Workload](https://learn.microsoft.com/en-us/azure/architecture/ai-ml/guide/choose-ai-model) - Microsoft Architecture Center - Network accessline 96
> - [Choose the Right AI Model for Your Workload](https://learn.microsoft.com/en-us/azure/architecture/ai-ml/guide/choose-ai-model) - Microsoft Architecture Center - Network accessline 97
> - [Azure OpenAI Models](https://learn.microsoft.com/en-us/azure/ai-services/openai/concepts/models) - Model capabilities, regions, and quotas - Network accessline 98
> - [Understanding Deployment Types](https://learn.microsoft.com/en-us/azure/ai-foundry/foundry-models/concepts/deployment-types) - Standard vs Provisioned guidance - Network accessline 100
**Model Characteristics** (from [official Azure OpenAI documentation](https://learn.microsoft.com/en-us/azure/ai-services/openai/concepts/models)): - Network accessline 110
**Deployment Type Selection** (from [official deployment types guide](https://learn.microsoft.com/en-us/azure/ai-foundry/foundry-models/concepts/deployment-types)): - Network accessline 120
**Capacity Planning Approach** (from [PTU onboarding guide](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/provisioned-throughput-onboarding)):
skills/microsoft-foundry/quota/references/error-resolution.md
- Network accessline 9
subId=$(az account show --query id -o tsv) for region in eastus westus eastus2 westus2 swedencentral uksouth; do az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations - Network accessline 10
for region in eastus westus eastus2 westus2 swedencentral uksouth; do az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 11
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 88
subId=$(az account show --query id -o tsv) az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 89
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 118
subId=$(az account show --query id -o tsv) az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 119
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \
skills/microsoft-foundry/quota/references/optimization.md
- Network accessline 16
region="eastus" # Change to your region az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 17
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 18
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 116
> **Official Documentation**: [Plan to manage costs for Azure OpenAI](https://learn.microsoft.com/en-us/azure/ai-services/openai/how-to/manage-costs) and [Fine-tuning cost management](https://learn.microsoft.com/en-us/azure/ai-foundry/opena - Network accessline 118
**A. Use Fine-Tuned Smaller Models** (from [Microsoft Transparency Note](https://learn.microsoft.com/en-us/azure/ai-foundry/responsible-ai/openai/transparency-note)): - Network accessline 129
**B. Remove Unused Fine-Tuned Deployments** (from [Fine-tuning cost management](https://learn.microsoft.com/en-us/azure/ai-foundry/openai/how-to/fine-tuning-cost-management)): - Network accessline 142
**C. Batch Multiple Requests** (from [Cost optimization Q&A](https://learn.microsoft.com/en-us/answers/questions/1689253/how-to-optimize-costs-per-request-azure-openai-gpt)): - Network accessline 146
**D. Use Commitment Tiers for Predictable Costs** (from [Managing costs guide](https://learn.microsoft.com/en-us/azure/ai-services/openai/how-to/manage-costs)): - Network accessline 161
subId=$(az account show --query id -o tsv) az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 162
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 163
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \
skills/microsoft-foundry/quota/references/ptu-guide.md
- Network accessline 62
# Calculate required PTU capacity curl -X POST "https://management.azure.com/subscriptions/<subscription-id>/providers/Microsoft.CognitiveServices/calculateModelCapacity?api-version=2024-10-01" \ - Network accessline 63
curl -X POST "https://management.azure.com/subscriptions/<subscription-id>/providers/Microsoft.CognitiveServices/calculateModelCapacity?api-version=2024-10-01" \ - Network accessline 149
- [Understanding PTU Costs](https://learn.microsoft.com/azure/ai-foundry/openai/how-to/provisioned-throughput-onboarding) - Network accessline 150
- [What Is Provisioned Throughput](https://learn.microsoft.com/azure/ai-foundry/openai/concepts/provisioned-throughput) - Network accessline 151
- [Calculate Model Capacity API](https://learn.microsoft.com/rest/api/aiservices/accountmanagement/calculate-model-capacity/calculate-model-capacity?view=rest-aiservices-accountmanagement-2024-10-01&tabs=HTTP) - Network accessline 152
- [PTU Overview](https://learn.microsoft.com/azure/ai-services/openai/concepts/provisioned-throughput)
skills/microsoft-foundry/quota/references/troubleshooting.md
- Network accessline 27
region="eastus" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 28
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 29
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 49
region="eastus" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 50
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 51
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 128
region="eastus" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 129
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 130
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 145
1. **Check model availability:** - Review [PTU model availability by region](https://learn.microsoft.com/azure/ai-services/openai/concepts/models#provisioned-deployment-model-availability) - Network accessline 146
- Review [PTU model availability by region](https://learn.microsoft.com/azure/ai-services/openai/concepts/models#provisioned-deployment-model-availability) - Network accessline 193
subId=$(az account show --query id -o tsv) az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 194
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" - Network accessline 195
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/eastus/usages?api-version=2023-05-01" \ - Network accessline 209
- [Quota Management Documentation](https://learn.microsoft.com/azure/ai-services/openai/how-to/quota) - Network accessline 210
- [Rate Limits Documentation](https://learn.microsoft.com/azure/ai-services/openai/quotas-limits) - Network accessline 211
- [Troubleshooting Guide](https://learn.microsoft.com/azure/ai-services/openai/troubleshooting)
skills/microsoft-foundry/quota/references/workflows.md
- Network accessline 25
echo "=== Region: $region ===" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 26
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 27
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 68
region="eastus" # Change to your target region az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 69
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 70
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 116
echo "=== Region: $region ===" az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 117
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 118
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 145
region="eastus" # Change to your region az rest --method get \ --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \ - Network accessline 146
az rest --method get --url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" - Network accessline 147
--url "https://management.azure.com/subscriptions/$subId/providers/Microsoft.CognitiveServices/locations/$region/usages?api-version=2023-05-01" \
skills/microsoft-foundry/rbac/rbac.md
- Network accessline 154
- [Microsoft Foundry RBAC Documentation](https://learn.microsoft.com/azure/ai-foundry/concepts/rbac-ai-foundry) - Network accessline 155
- [Azure Built-in Roles](https://learn.microsoft.com/azure/role-based-access-control/built-in-roles) - Network accessline 156
- [Managed Identities Overview](https://learn.microsoft.com/azure/active-directory/managed-identities-azure-resources/overview) - Network accessline 157
- [Service Principal Authentication](https://learn.microsoft.com/azure/developer/github/connect-from-azure)
skills/microsoft-foundry/references/agent-metadata-contract.md
- Access to secretsline 11
[Credential-related source omitted] - Access to secretsline 19
[Credential-related source omitted] - Access to secretsline 44
[Credential-related source omitted] - Access to secretsline 45
[Credential-related source omitted] - Access to secretsline 46
[Credential-related source omitted] - Access to secretsline 47
[Credential-related source omitted] - Access to secretsline 48
[Credential-related source omitted] - Access to secretsline 49
[Credential-related source omitted] - Access to secretsline 50
[Credential-related source omitted] - Access to secretsline 51
[Credential-related source omitted]
skills/microsoft-foundry/references/auth-best-practices.md
- Network accessline 3
> Source: [Microsoft — Passwordless connections for Azure services](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) and [Azure Identity client libraries](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 124
- [Passwordless connections overview](https://learn.microsoft.com/azure/developer/intro/passwordless-overview) - Network accessline 125
- [Managed identities overview](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview) - Network accessline 126
- [Azure RBAC overview](https://learn.microsoft.com/azure/role-based-access-control/overview) - Network accessline 127
- [.NET authentication guide](https://learn.microsoft.com/dotnet/azure/sdk/authentication/) - Network accessline 128
- [Python identity library](https://learn.microsoft.com/python/api/overview/azure/identity-readme) - Network accessline 129
- [JavaScript identity library](https://learn.microsoft.com/javascript/api/overview/azure/identity-readme) - Network accessline 130
- [Java identity library](https://learn.microsoft.com/java/api/overview/azure/identity-readme)
skills/microsoft-foundry/references/standard-agent-setup.md
- Network accessline 3
> ⚠<U+FE0F> **Warning:** This page covers Foundry's **Standard Agent Setup** (capability host + bring-your-own Cosmos DB / Azure Storage / Azure AI Search). The default `azd ai agent` flow uses **Basic Agent Setup** and does **not** provision a `c - Network accessline 5
> **MANDATORY:** Read [Standard Agent Setup docs](https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/standard-agent-setup?view=foundry) before proceeding with standard setup. - Network accessline 37
- Standard setup always creates a **new Foundry resource and a new project**. Do not ask the user for a project endpoint — one will be provisioned as part of the deployment. - **Always use the official Bicep template:** [Standard Agent Se - Network accessline 39
[Standard Agent Setup Bicep Template](https://github.com/azure-ai-foundry/foundry-samples/blob/main/infrastructure/infrastructure-setup-bicep/43-standard-agent-setup-with-customization/main.bicep) - Network accessline 52
- [Capability Hosts — Agent Setup Types](https://learn.microsoft.com/en-us/azure/ai-foundry/agents/concepts/capability-hosts?view=foundry) - Network accessline 53
- [Standard Agent Setup](https://learn.microsoft.com/en-us/azure/foundry/agents/concepts/standard-agent-setup?view=foundry)
skills/microsoft-foundry/resource/create/create-foundry-resource.md
- Network accessline 52
- **Azure subscription** - Active subscription ([create free account](https://azure.microsoft.com/pricing/purchase-options/azure-account)) - Network accessline 150
- [Common Patterns](./references/patterns.md) - Quick setup patterns and command reference - [Troubleshooting](./references/troubleshooting.md) - Common errors and solutions - [Azure AI Services documentation](https://learn.microsoft.com/en - Network accessline 152
- [Azure AI Services documentation](https://learn.microsoft.com/en-us/azure/ai-services/multi-service-resource?pivots=azcli)
skills/microsoft-foundry/resource/create/references/troubleshooting.md
- Network accessline 90
- [Create multi-service resource](https://learn.microsoft.com/en-us/azure/ai-services/multi-service-resource?pivots=azcli) - Network accessline 91
- [Azure AI Services documentation](https://learn.microsoft.com/en-us/azure/ai-services/) - Network accessline 92
- [Azure regions with AI Services](https://azure.microsoft.com/global-infrastructure/services/?products=cognitive-services)
skills/microsoft-foundry/resource/private-network/private-network.md
- Broad permissionsline 1
Read, Write, Bash, AskUserQuestion, microsoft_docs_search, microsoft_docs_fetch - Network accessline 21
| Topic | URL | |-------|-----| | Networking options (decision) | https://learn.microsoft.com/azure/foundry/agents/concepts/networking-options | - Network accessline 22
|-------|-----| | Networking options (decision) | https://learn.microsoft.com/azure/foundry/agents/concepts/networking-options | | Network isolation | https://learn.microsoft.com/azure/foundry/how-to/configure-private-link | - Network accessline 23
| Networking options (decision) | https://learn.microsoft.com/azure/foundry/agents/concepts/networking-options | - Network accessline 24
| Network isolation | https://learn.microsoft.com/azure/foundry/how-to/configure-private-link | - Network accessline 25
| Agent Service VNet | https://learn.microsoft.com/azure/foundry/agents/how-to/virtual-networks | - Network accessline 26
| Networking deep dive (subnet/IP) | https://learn.microsoft.com/azure/foundry/agents/concepts/agents-networking-deep-dive | - Network accessline 27
| Managed VNet | https://learn.microsoft.com/azure/foundry/how-to/managed-virtual-network | - Network accessline 28
| Feature limitations | https://learn.microsoft.com/azure/foundry/how-to/configure-private-link#foundry-feature-limitations |
skills/microsoft-foundry/resource/private-network/references/end-to-end-test.md
- Network accessline 68
for h in "${endpoints[@]}"; do ip=$(dig +short "$h" | tail -n1) nc -z -w 3 "$h" 443 >/dev/null 2>&1 && reach=yes || reach=no - Network accessline 69
ip=$(dig +short "$h" | tail -n1) nc -z -w 3 "$h" 443 >/dev/null 2>&1 && reach=yes || reach=no echo "$h -> $ip (reachable: $reach)" - Network accessline 70
nc -z -w 3 "$h" 443 >/dev/null 2>&1 && reach=yes || reach=no
skills/microsoft-foundry/resource/private-network/references/intake.md
- Network accessline 145
> Entra ID token audience for Foundry Agents API: `https://ai.azure.com` - Network accessline 161
| Topic | URL | |-------|-----| | Networking options (decision) | https://learn.microsoft.com/azure/foundry/agents/concepts/networking-options | - Network accessline 162
|-------|-----| | Networking options (decision) | https://learn.microsoft.com/azure/foundry/agents/concepts/networking-options | | Network isolation overview | https://learn.microsoft.com/azure/foundry/how-to/configure-private-link | - Network accessline 163
| Networking options (decision) | https://learn.microsoft.com/azure/foundry/agents/concepts/networking-options | - Network accessline 164
| Network isolation overview | https://learn.microsoft.com/azure/foundry/how-to/configure-private-link | - Network accessline 165
| Agent Service private networking | https://learn.microsoft.com/azure/foundry/agents/how-to/virtual-networks | - Network accessline 166
| Networking deep dive (subnet/IP) | https://learn.microsoft.com/azure/foundry/agents/concepts/agents-networking-deep-dive | - Network accessline 167
| Managed VNet configuration | https://learn.microsoft.com/azure/foundry/how-to/managed-virtual-network | - Network accessline 168
| Agent Service FAQ — VNet | https://learn.microsoft.com/azure/foundry/agents/faq#virtual-networking | - Network accessline 169
| Supported regions & availability | https://learn.microsoft.com/azure/foundry/reference/region-support | - Network accessline 170
| NSP | https://learn.microsoft.com/azure/foundry/how-to/add-foundry-to-network-security-perimeter | - Network accessline 171
| Feature Limitations | https://learn.microsoft.com/en-us/azure/foundry/how-to/configure-private-link#foundry-feature-limitations |
skills/microsoft-foundry/resource/private-network/references/post-deployment-validation.md
- Network accessline 54
az rest --method get \ --url "https://management.azure.com/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.CognitiveServices/accounts/<ai-account>/managedNetworks/default/outboundRules?api-version=2025-10-01-preview" \ - Network accessline 55
--url "https://management.azure.com/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.CognitiveServices/accounts/<ai-account>/managedNetworks/default/outboundRules?api-version=2025-10-01-preview" \
skills/microsoft-foundry/resource/private-network/references/template-index.md
- Network accessline 5
**Bicep templates:** https://github.com/microsoft-foundry/foundry-samples/tree/main/infrastructure/infrastructure-setup-bicep/ - Network accessline 7
**Terraform templates:** https://github.com/microsoft-foundry/foundry-samples/tree/main/infrastructure/infrastructure-setup-terraform/ - Network accessline 9
**Deployment helpers:** https://github.com/microsoft-foundry/foundry-samples/tree/main/infrastructure/infrastructure-setup-bicep/deployment-tools/ — `preflight` (pre-deploy checks) and `cleanup` (correct capability-host/subnet teardown orde
skills/microsoft-foundry/resource/private-network/references/vpn-dns-setup.bicep
- Network accessline 42
// The intake step (az cloud show) warns users before reaching this template. var aadAudience = 'c632b3df-fb67-4d84-bdcf-b95ad541b5c8' var aadIssuer = 'https://sts.windows.net/${aadTenantId}/' - Network accessline 43
var aadAudience = 'c632b3df-fb67-4d84-bdcf-b95ad541b5c8' var aadIssuer = 'https://sts.windows.net/${aadTenantId}/' var aadTenant = 'https://login.microsoftonline.com/${aadTenantId}/' - Network accessline 44
var aadIssuer = 'https://sts.windows.net/${aadTenantId}/' - Network accessline 45
var aadTenant = 'https://login.microsoftonline.com/${aadTenantId}/'
skills/microsoft-foundry/resource/private-network/references/vpn-dns-setup.md
- Network accessline 130
3. Open [Azure VPN Client](https://aka.ms/azvpnclientdownload) → **Import** the modified `azurevpnconfig.xml` → **Connect**
skills/microsoft-foundry/scripts/check-and-setup-dependencies.ps1
- Network accessline 1
$azd = Get-Command azd -ErrorAction SilentlyContinue if (-not $azd) { Write-Host "Azure Developer CLI (azd) is required. Install it from https://learn.microsoft.com/azure/developer/azure-developer-cli/install-azd, then rerun this script - Executable scriptline 1
Executable file - Network accessline 2
if (-not $azd) { Write-Host "Azure Developer CLI (azd) is required. Install it from https://learn.microsoft.com/azure/developer/azure-developer-cli/install-azd, then rerun this script." exit 1 - Network accessline 3
Write-Host "Azure Developer CLI (azd) is required. Install it from https://learn.microsoft.com/azure/developer/azure-developer-cli/install-azd, then rerun this script."
skills/microsoft-foundry/scripts/check-and-setup-dependencies.sh
- Executable scriptline 1
#!/usr/bin/env bash - Network accessline 5
if ! command -v azd >/dev/null 2>&1; then echo "Azure Developer CLI (azd) is required. Install it from https://learn.microsoft.com/azure/developer/azure-developer-cli/install-azd, then rerun this script." >&2 - Network accessline 6
echo "Azure Developer CLI (azd) is required. Install it from https://learn.microsoft.com/azure/developer/azure-developer-cli/install-azd, then rerun this script." >&2
skills/python-appservice-deploy/SKILL.md
- Network accessline 30
- ⛔ **SHELL SAFETY** — for `--runtime` always use `"PYTHON:3.14"` (colon). Never `"PYTHON|3.14"` (pipe is a shell operator). - ⛔ **NEVER `az webapp up`** — deprecated. Use Step 7 commands. - ✅ **URL FORMAT** — present endpoints as `https:// - Network accessline 32
- ✅ **URL FORMAT** — present endpoints as `https://...` URLs.
skills/python-appservice-deploy/references/deploy-azcli.md
- Access to secretsline 53
[Credential-related source omitted] - Access to secretsline 55
[Credential-related source omitted] - Network accessline 95
HOST=$(az webapp show -n <app> -g <rg> --query defaultHostName -o tsv) echo "https://$HOST" - Network accessline 96
echo "https://$HOST" - Network accessline 99
$host_ = az webapp show -n <app> -g <rg> --query defaultHostName -o tsv "https://$host_" - Network accessline 100
"https://$host_"
skills/python-appservice-deploy/references/deploy-azd.md
- Network accessline 77
Present the URL with the `https://` prefix and the post-deploy message from [post-deploy-message.md](post-deploy-message.md), then end the turn.
skills/python-appservice-deploy/scripts/generate-app-name.ps1
- Executable scriptline 1
Executable file
skills/python-appservice-deploy/scripts/generate-app-name.sh
- Executable scriptline 1
#!/usr/bin/env bash
skills/python-appservice-deploy/scripts/retry-az-create.ps1
- Executable scriptline 1
Executable file
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Some files could not be read; the facts below still hold.
Declared and executed: 7 facts
- Contacts aka.ms, which SKILL.md, the README and the plugin manifest do not mention.github/plugins/aks-skills/skills/aks-troubleshooting/scripts/cluster-snapshot.sh:21High confidence
- Contacts kubernetes.io, which SKILL.md, the README and the plugin manifest do not mention.github/plugins/aks-skills/skills/aks-troubleshooting/scripts/cluster-snapshot.sh:25High confidence
- Contacts jqlang.github.io, which SKILL.md, the README and the plugin manifest do not mention.github/plugins/aks-skills/skills/aks-troubleshooting/scripts/cluster-snapshot.sh:29High confidence
- Contacts aka.ms, which SKILL.md, the README and the plugin manifest do not mention.github/plugins/aks-skills/skills/aks-troubleshooting/scripts/pod-deep-dive.sh:25High confidence
- Contacts kubernetes.io, which SKILL.md, the README and the plugin manifest do not mention.github/plugins/aks-skills/skills/aks-troubleshooting/scripts/pod-deep-dive.sh:29High confidence
- Contacts jqlang.github.io, which SKILL.md, the README and the plugin manifest do not mention.github/plugins/aks-skills/skills/aks-troubleshooting/scripts/pod-deep-dive.sh:33High confidence
- Contacts pcnx-ai-etc5bra3fscchrew.b02.azurefd.net, which SKILL.md, the README and the plugin manifest do not mention.github/plugins/aks-skills/skills/azure-search-nav/references/Invoke-PortalSearchNav.ps1:61High confidence
Signal confidence: 493 facts
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-gpu-inference/references/gpu-cost-and-scaling.md:35Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-gpu-inference/references/gpu-cost-and-scaling.md:36Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-gpu-inference/references/gpu-observability.md:48Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-gpu-inference/references/gpu-observability.md:49Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-gpu-inference/references/gpu-observability.md:50Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-gpu-inference/references/gpu-observability.md:51Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-gpu-inference/references/gpu-scheduling.md:52Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-gpu-inference/references/gpu-scheduling.md:53Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-gpu-inference/references/gpu-scheduling.md:54Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-gpu-inference/references/kaito-workspaces.md:40Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-gpu-inference/references/kaito-workspaces.md:41Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:13Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:14Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:15Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:16Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:17Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:21Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:22Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:23Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:24Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:25Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:26Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:27Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:28Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:32Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:33Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:34Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:35Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:36Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:37Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:41Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:42Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:43Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:44Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-known-issues/references/error-code-map.md:45Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-network-capture/references/capture-authorization.md:26Low confidence
- Network access in prose of documentation.github/plugins/aks-skills/skills/aks-network-capture/references/capture-authorization.md:27Low confidence
- Executable script in a comment of a file that runs.github/plugins/aks-skills/skills/aks-network-capture/scripts/collect-azure-network-info.ps1:1Low confidence
- Executable script in code of a file that runs.github/plugins/aks-skills/skills/aks-network-capture/scripts/collect-azure-network-info.sh:1High confidence
- Executable script in a comment of a file that runs.github/plugins/aks-skills/skills/aks-network-capture/scripts/create-capture.ps1:1Low confidence
- Executable script in code of a file that runs.github/plugins/aks-skills/skills/aks-network-capture/scripts/create-capture.sh:1High confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored value.github/plugins/aks-skills/skills/aks-network-capture/scripts/create-capture.sh:280Low confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored value.github/plugins/aks-skills/skills/aks-network-capture/scripts/create-capture.sh:281Low confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored value.github/plugins/aks-skills/skills/aks-network-capture/scripts/create-capture.sh:304Low confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored value.github/plugins/aks-skills/skills/aks-network-capture/scripts/create-capture.sh:310Low confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored value.github/plugins/aks-skills/skills/aks-network-capture/scripts/create-capture.sh:312Low confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored value.github/plugins/aks-skills/skills/aks-network-capture/scripts/create-capture.sh:318Low confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored value.github/plugins/aks-skills/skills/aks-network-capture/scripts/create-capture.sh:341Low confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored value.github/plugins/aks-skills/skills/aks-network-capture/scripts/create-capture.sh:349Low confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored value.github/plugins/aks-skills/skills/aks-network-capture/scripts/create-capture.sh:367Low confidence
and 443 more
Only the first 500 facts are listed.
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Native | Manifest .claude-plugin/marketplace.json | .claude/skills/<skill-name>/ |
| Codex | Compatible | Standard SKILL.md skills/airunway-aks-setup/SKILL.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md skills/airunway-aks-setup/SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Native | Manifest .github/plugins/azure-skills/gemini-extension.json | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md skills/airunway-aks-setup/SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md skills/airunway-aks-setup/SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.
Explore alternatives and comparisons
Add this badge to your README
It updates every night and links to this page.
[](https://hotskills.dev/skill/microsoft-azure-skills/)