microsoftdocs/agent-skills

azure-blueprints

Expert knowledge for Azure Blueprints development including troubleshooting, decision making, security, configuration, integrations & coding patterns, and deployment.

View source

How to use

  1. Copy the installation command and review the source package before installing it in your own agent environment.
  2. Check the source document for required tools, credentials and supported hosts.
  3. Describe your input and desired deliverable; review the output against the source material.
npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-blueprints

Before you start

  • Installation does not include a model subscription, API allowance or permission to access your files.
  • Repository stars and installation counts describe activity, not an independent quality or security test.
Original skill document

Rendered from the source repository. Headings, examples, code, tables, links, and referenced images are preserved.

Azure Blueprints Skill

This skill provides expert guidance for Azure Blueprints. Covers troubleshooting, decision making, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file
IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
TroubleshootingL34-L38Diagnosing and fixing common Azure Blueprints deployment and assignment errors, including policy, role assignment, and resource lock issues, with step-by-step troubleshooting guidance.
Decision MakingL39-L44Guidance on Azure Blueprints retirement timelines, planning and executing migrations, and answers to common questions about moving off Blueprints.
SecurityL45-L60Security-focused deployment stages, resource locks, operator roles, and using/mapping Azure Blueprints for compliance frameworks like PBMM, ISM PROTECTED, ISO 27001, SWIFT CSP, and UK OFFICIAL/NHS.
ConfigurationL61-L72Configuring and deploying Azure Blueprints (including security/ISO/CAF/SWIFT samples), using blueprint functions, and importing/exporting blueprints via PowerShell.
Integrations & Coding PatternsL73-L79Automating Azure Blueprints as code using CLI, PowerShell, and REST: create, import/export, and manage blueprint definitions and assignments programmatically.
DeploymentL80-L85Controlling blueprint artifact deployment order, migrating blueprints to template specs/deployment stacks, and deploying the CAF Foundation blueprint with parameters.

Troubleshooting

TopicURL
Troubleshoot common Azure Blueprints errorshttps://learn.microsoft.com/en-us/azure/governance/blueprints/troubleshoot/general

Decision Making

TopicURL
Plan migration off Azure Blueprints with timelineshttps://learn.microsoft.com/en-us/azure/governance/blueprints/blueprint-retirement
Answer migration questions for Blueprints retirementhttps://learn.microsoft.com/en-us/azure/governance/blueprints/blueprint-retirement-faq

Security

TopicURL
Understand security-related stages of Azure Blueprint deploymenthttps://learn.microsoft.com/en-us/azure/governance/blueprints/concepts/deployment-stages
Configure resource locking behavior in Azure Blueprintshttps://learn.microsoft.com/en-us/azure/governance/blueprints/concepts/resource-locking
Configure Azure Blueprint Operator role environmenthttps://learn.microsoft.com/en-us/azure/governance/blueprints/how-to/configure-for-blueprint-operator
Use Canada Federal PBMM blueprint for governance controlshttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/canada-federal-pbmm
Use ISM PROTECTED blueprint for Australian compliancehttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/ism-protected/
Map ISM PROTECTED controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/ism-protected/control-mapping
Map ISO 27001 ASE/SQL controls to Policy and RBAChttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/iso27001-ase-sql-workload/control-mapping
Map ISO 27001 shared services controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/iso27001-shared/control-mapping
Use SWIFT CSP-CSCF 2020 blueprint for Azure compliancehttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/swift-2020/
Map SWIFT CSP-CSCF 2020 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/swift-2020/control-mapping
Use UK OFFICIAL and NHS blueprint for Azure governancehttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/ukofficial-uknhs
Protect Azure Blueprint-deployed resources with lockshttps://learn.microsoft.com/en-us/azure/governance/blueprints/tutorials/protect-new-resources

Configuration

TopicURL
Import and export Azure Blueprints with PowerShellhttps://learn.microsoft.com/en-us/azure/governance/blueprints/how-to/import-export-ps
Use Azure Blueprint functions in definitions and artifactshttps://learn.microsoft.com/en-us/azure/governance/blueprints/reference/blueprint-functions
Configure and deploy Azure Security Benchmark blueprint samplehttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/azure-security-benchmark-foundation/deploy
Configure and deploy CAF migration landing zone blueprinthttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/caf-migrate-landing-zone/deploy
Configure and deploy ISM PROTECTED blueprint samplehttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/ism-protected/deploy
Configure and deploy ISO 27001 ASE/SQL workload blueprinthttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/iso27001-ase-sql-workload/deploy
Configure and deploy ISO 27001 shared services blueprinthttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/iso27001-shared/deploy
Configure and deploy SWIFT CSP-CSCF 2020 blueprinthttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/swift-2020/deploy

Integrations & Coding Patterns

TopicURL
Create Azure Blueprints using Azure CLI commandshttps://learn.microsoft.com/en-us/azure/governance/blueprints/create-blueprint-azurecli
Create Azure Blueprints via REST API requestshttps://learn.microsoft.com/en-us/azure/governance/blueprints/create-blueprint-rest-api
Manage Azure Blueprint assignments with Az.Blueprint PowerShellhttps://learn.microsoft.com/en-us/azure/governance/blueprints/how-to/manage-assignments-ps

Deployment

TopicURL
Control Azure Blueprint artifact deployment orderhttps://learn.microsoft.com/en-us/azure/governance/blueprints/concepts/sequencing-order
Migrate Azure Blueprints to template specs and deployment stackshttps://learn.microsoft.com/en-us/azure/governance/blueprints/migrate-to-template-specs
Deploy CAF Foundation blueprint with parametershttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/caf-foundation/deploy

Related by task

from this repository

More skills

All skills
microsoftdocs
Community

azure-repos

Expert knowledge for Azure Repos development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, and integrations & coding patterns. Use when managing Git/TFVC repos, branch policies/PR checks, TFVC→Git migrations, large files, or security scanning, and other Azure Repos related development tasks. Not for Azure DevOps (use azure-devops), Azure Pipelines (use azure-pipelines), Azure Boards (use azure-boards), Azure

installs
1
GitHub stars
790
Updated
Oct 19
microsoftdocs
Community

azure-monitor

Expert knowledge for Azure Monitor development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when configuring AMA/DCRs, Log Analytics workspaces, Application Insights, alerts, or Kusto (KQL) queries, and other Azure Monitor related development tasks. Not for Azure Network Watcher (use azure-network-watcher), Azure Resource Graph (use azure-resource-graph), A

installs
1
GitHub stars
779
Updated
Oct 11
microsoftdocs
Community

azure-rbac

Expert knowledge for Azure Role-based access control development including troubleshooting, best practices, decision making, limits & quotas, security, configuration, and integrations & coding patterns. Use when defining custom/built-in roles, ABAC conditions, deny assignments, PIM, or ARM/Bicep-based role automation, and other Azure Role-based access control related development tasks. Not for Azure Policy (use azure-policy), Azure Security (use azure-security), Azure Resource Manager (use azure

installs
2
GitHub stars
777
Updated
Oct 5
microsoftdocs
Community

azure-analysis-services

Expert knowledge for Azure Analysis Services development including troubleshooting. Use when resolving server connectivity, firewall/VNet, DNS, client connection, or network error issues, and other Azure Analysis Services related development tasks. Not for Azure Synapse Analytics (use azure-synapse-analytics), Azure SQL Database (use azure-sql-database), Azure SQL Managed Instance (use azure-sql-managed-instance), SQL Server on Azure Virtual Machines (use azure-sql-virtual-machines).

installs
1
GitHub stars
777
Updated
Oct 5