Azure Infra
Overview
Use the local Azure CLI to answer questions about Azure resources. Default to read‑only queries. Only propose or run write/destructive actions after explicit user confirmation.
Quick Start
- •Ensure login:
az account show(if not logged in, runaz login --use-device-code). - •If multiple subscriptions exist, ask the user to pick one; otherwise use the default subscription.
- •Use read‑only commands to answer the question.
- •If the user asks for changes, outline the exact command and ask for confirmation before running.
Safety Rules (must follow)
- •Treat all actions as read‑only unless the user explicitly requests a change and confirms it.
- •For any potentially destructive change (delete/terminate/destroy/modify/scale/billing/IAM credentials), require a confirmation step.
- •Prefer
--dry-runwhen available and show the plan before execution. - •Never reveal or log secrets (keys, client secrets, tokens).
Task Guide (common requests)
- •Inventory / list: use
list/show/getcommands. - •Health / errors: use Azure Monitor metrics/logs queries.
- •Security checks: RBAC roles, public storage, NSG exposure, Key Vault access.
- •Costs: Cost Management (read‑only).
- •Changes: show exact CLI command and require confirmation.
Subscription & Tenant Handling
- •If the user specifies a subscription/tenant, honor it.
- •Otherwise use the default subscription from
az account show. - •When results are subscription‑scoped, state the subscription used.
References
See references/azure-cli-queries.md for common command patterns.
Assets
- •
assets/icon.svg— custom icon (dark cloud + terminal prompt, Azure‑blue accent)