azure-resources

Perform a comprehensive compliance audit of Azure resources against Microsoft's Cloud Adoption Framework best practices. Uses the Collect → Analyze → Report pattern from Microsoft's WARA methodology. Produces a structured report with findings and remediation steps.

Find and inspect an Azure resource by name — search across subscriptions and show full details

Install and configure Azure CLI for resource management

List Azure resources with flexible filtering by resource group, type, tags, or subscription. Uses Azure Resource Graph for efficient cross-subscription queries.

Pull and review Azure Advisor recommendations grouped by Well-Architected Framework pillar

Use this agent when the user asks to review Azure resources for cost optimization, find idle or orphaned resources, right-size VMs, check pricing tiers, or identify savings opportunities. Examples: <example> Context: User wants to reduce Azure spending user: "Review the cost of resources in my production resource group" assistant: "I'll use the cost-reviewer agent to analyze your production resources for cost optimization opportunities." <commentary> User explicitly asks for cost review of Azure resources, trigger cost-reviewer for specialized analysis. </commentary> </example> <example> Context: User suspects VM over-provisioning user: "Are any of my VMs oversized?" assistant: "I'll use the cost-reviewer agent to check VM utilization and recommend right-sizing." <commentary> User asks about VM sizing which is a cost optimization concern, trigger cost-reviewer. </commentary> </example> <example> Context: User wants to find wasted resources user: "Find idle or orphaned resources in my subscription" assistant: "I'll use the cost-reviewer agent to scan for unattached disks, unused IPs, and other orphaned resources." <commentary> Finding orphaned resources is a core cost optimization task, trigger cost-reviewer. </commentary> </example>

Use this agent when the user asks to review Azure resources for reliability, check availability zones, review backup policies, assess disaster recovery readiness, or evaluate high availability. Examples: <example> Context: User wants to verify their production environment is resilient user: "Check reliability of my production environment" assistant: "I'll use the reliability-reviewer agent to assess availability zones, backups, redundancy, and DR readiness." <commentary> User asks for reliability review which requires specialized assessment of HA and DR configurations, trigger reliability-reviewer. </commentary> </example> <example> Context: User concerned about data protection user: "Are my databases properly backed up?" assistant: "I'll use the reliability-reviewer agent to check backup policies and retention configurations for your databases." <commentary> Backup assessment is a core reliability concern, trigger reliability-reviewer. </commentary> </example> <example> Context: User preparing for disaster recovery planning user: "Review DR readiness for my resource group" assistant: "I'll use the reliability-reviewer agent to evaluate disaster recovery configurations, redundancy, and failover readiness." <commentary> DR readiness review requires specialized reliability knowledge, trigger reliability-reviewer. </commentary> </example>

Use this agent when the user asks to review Azure resources for security, check access controls, audit encryption, review network security, check RBAC, or assess security posture. Examples: <example> Context: User wants a security review of their Azure environment user: "Check security posture of my production resources" assistant: "I'll use the security-reviewer agent to audit your production resources against Azure security baselines." <commentary> User explicitly asks for security review, trigger security-reviewer for comprehensive security assessment. </commentary> </example> <example> Context: User concerned about storage account security user: "Are my storage accounts properly secured?" assistant: "I'll use the security-reviewer agent to check your storage accounts against security best practices." <commentary> User asks about specific resource type security which requires specialized security knowledge, trigger security-reviewer. </commentary> </example> <example> Context: User wants network security audit user: "Review network security for my VMs" assistant: "I'll use the security-reviewer agent to audit NSG rules, public IPs, and network isolation for your VMs." <commentary> Network security review is a specialized security task, trigger security-reviewer. </commentary> </example>

This skill should be used when the user asks to "review Azure resources", "audit resource compliance", "check Azure best practices", "review naming conventions", "evaluate tagging strategy", "assess security baselines", "optimize Azure costs", "improve resource reliability", "check Well-Architected Framework alignment", "find orphaned resources", "audit Azure tags", "run a WARA assessment", "check Azure Policy compliance", or "find resources missing tags".