AgentSkillsCN

azure-infrastructure

Azure基础设施模式与最佳实践

SKILL.md
--- frontmatter
name: azure-infrastructure
description: Azure infrastructure patterns and best practices
version: "1.0.0"
license: MIT

When to Use

  • •Infrastructure planning and design
  • •Azure Verified Modules reference
  • •CAF naming convention guidance
  • •Resource provisioning patterns

Prerequisites

  • •Azure subscription access
  • •Terraform knowledge
  • •Understanding of Azure services

Reference Patterns

Resource Group Naming

code
rg-<project>-<environment>-<region>
Example: rg-3horizons-prod-eastus2

AKS Cluster Naming

code
aks-<project>-<environment>-<region>
Example: aks-3horizons-prod-eastus2

Key Vault Naming

code
kv-<project>-<environment>-<region>
Example: kv-3horizons-prod-eus2

Storage Account Naming

code
st<project><environment><region>
Example: st3horizonsprodeus2

Required Tags

hcl
locals {
  common_tags = {
    Environment = var.environment
    Project     = var.project_name
    Owner       = var.owner
    CostCenter  = var.cost_center
    ManagedBy   = "terraform"
  }
}

Security Patterns

  • •Use Workload Identity (not service principals)
  • •Enable private endpoints for PaaS services
  • •Configure NSGs with deny-all default
  • •Enable Azure Defender for Cloud

Best Practices

  1. •Use Azure Verified Modules when available
  2. •Follow CAF naming conventions
  3. •Enable diagnostic settings
  4. •Configure resource locks for production
  5. •Use managed identities

Integration with Agents

Used by: @infrastructure, @terraform, @security