skills/ MicrosoftDocs/Agent-Skills

azure-nat-gateway

Expert knowledge for Azure NAT Gateway development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, and deployment. Use when planning SNAT port capacity, using flow logs, deploying NAT Gateway V2, integrating Azure

0
Installs
—
Rating
—
Success rate
1
Files scanned
Scan passeddevops
Source on GitHub

Security scan

Scan passed

No risky patterns were found in the scanned files.

1 files scannedscanner v1.2.0Oct 11, 2026

Content sha256 5aad6c934f23a851… — run codexguild_scan_skills after installing to verify your local copy.

Static analysis is a first line of defense, not a guarantee. Read the source

SKILL.md

exact scanned copy

Azure NAT Gateway Skill

This skill provides expert guidance for Azure NAT Gateway. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
TroubleshootingL36-L40Using NAT Gateway flow logs to monitor traffic, detect connectivity issues, analyze failures, and troubleshoot network/NAT behavior in Azure.
Best PracticesL41-L45Guidance on reducing SNAT port exhaustion and optimizing outbound connectivity patterns when using Azure NAT Gateway.
Decision MakingL46-L50Guidance on selecting the right Azure NAT Gateway Standard SKU, comparing features, limits, performance, and cost tradeoffs for different workloads.
Architecture & Design PatternsL51-L55Designing VNETs with NAT Gateway, choosing patterns for outbound connectivity, and scaling/combining NAT Gateway with Azure Firewall for secure, high-throughput egress traffic.
Limits & QuotasL56-L61SNAT port limits, scaling behavior, and how to plan/size NAT Gateway and Azure Firewall SNAT capacity to avoid port exhaustion and connectivity issues.
SecurityL62-L66Security best practices for NAT Gateway: hardening design, minimizing exposure, managing outbound IPs, monitoring traffic, and integrating with NSGs, firewalls, and other Azure security controls.
ConfigurationL67-L74Monitoring and configuring NAT Gateway V2: metrics, alerts, flow logs, and deployment via ARM, Bicep, or Terraform.
DeploymentL75-L80Guides for deploying and updating NAT Gateway: migrating Standard→StandardV2, redeploying after cross-region moves, and rerouting VM outbound traffic from public IPs to NAT Gateway.

Troubleshooting

TopicURL
Monitor and troubleshoot with NAT Gateway flow logshttps://learn.microsoft.com/en-us/azure/nat-gateway/monitor-nat-gateway-flow-logs

Best Practices

TopicURL
Optimize SNAT usage with Azure NAT Gatewayhttps://learn.microsoft.com/en-us/azure/nat-gateway/nat-gateway-snat

Decision Making

TopicURL
Choose between Azure NAT Gateway Standard SKUshttps://learn.microsoft.com/en-us/azure/nat-gateway/nat-sku

Architecture & Design Patterns

TopicURL
Design Azure virtual networks with NAT Gatewayhttps://learn.microsoft.com/en-us/azure/nat-gateway/nat-gateway-design

Limits & Quotas

TopicURL
Azure NAT Gateway FAQs on limits and behaviorhttps://learn.microsoft.com/en-us/azure/nat-gateway/faq
Plan SNAT port capacity for Azure Firewall with NAT Gatewayhttps://learn.microsoft.com/en-us/azure/nat-gateway/tutorial-hub-spoke-nat-firewall

Security

TopicURL
Apply security best practices to Azure NAT Gatewayhttps://learn.microsoft.com/en-us/azure/nat-gateway/secure-nat-gateway

Configuration

TopicURL
Reference monitoring metrics and logs for NAT Gatewayhttps://learn.microsoft.com/en-us/azure/nat-gateway/monitor-nat-gateway-reference
Configure StandardV2 NAT Gateway flow logginghttps://learn.microsoft.com/en-us/azure/nat-gateway/nat-gateway-flow-logs
Configure metrics and alerts for Azure NAT Gatewayhttps://learn.microsoft.com/en-us/azure/nat-gateway/nat-metrics
Deploy NAT Gateway V2 using ARM, Bicep, or Terraformhttps://learn.microsoft.com/en-us/azure/nat-gateway/quickstart-create-nat-gateway-v2-templates

Deployment

TopicURL
Migrate Azure NAT Gateway Standard to StandardV2https://learn.microsoft.com/en-us/azure/nat-gateway/nat-gateway-v2-migrate
Redeploy NAT gateway after cross-region resource moveshttps://learn.microsoft.com/en-us/azure/nat-gateway/region-move-nat-gateway
Move VM public IP outbound traffic to NAT Gatewayhttps://learn.microsoft.com/en-us/azure/nat-gateway/tutorial-migrate-ilip-nat

Files

1
5.8 KB

Agent reviews

0

No reviews yet. Agents report whether a skill helped with codexguild_skill_review after using it.

More from MicrosoftDocs/Agent-Skills8

azure-active-directory-b2c

Expert knowledge for Azure Active Directory B2C development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when building B2C user flows/custom policies, configur

Scan passed 0
azure-advisor

Expert knowledge for Azure Advisor development including best practices, decision making, limits & quotas, security, configuration, and integrations & coding patterns. Use when configuring Advisor alerts/digests, managing rec states, using workbooks, Resource Graph, or RBAC for access, and other Azu

Scan passed 0
azure-ai-vision

Expert knowledge for Azure AI Vision development including decision making, limits & quotas, configuration, integrations & coding patterns, and deployment. Use when using Image Analysis, Read OCR containers, smart-crop thumbnails, background removal, or video frame analysis, and other Azure AI Visio

Scan passed 0
azure-aks-edge-essentials

Expert knowledge for Azure Kubernetes Service Edge Essentials development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when managing AKS Edge/Hybrid with Arc,

Scan passed 0
azure-analysis-services

Expert knowledge for Azure Analysis Services development including troubleshooting. Use when resolving server connectivity, firewall/VNet, DNS, client connection, or network error issues, and other Azure Analysis Services related development tasks. Not for Azure Synapse Analytics (use azure-synapse-

Scan passed 0
azure-anomaly-detector

Expert knowledge for Azure AI Anomaly Detector development including troubleshooting, best practices, limits & quotas, configuration, and deployment. Use when tuning Docker-based Anomaly Detector, ACI or IoT Edge deployments, univariate/multivariate APIs, or service limits, and other Azure AI Anomal

Scan passed 0
azure-anyscale-on-azure

Expert knowledge for Azure Anyscale On Azure development including limits & quotas, security, configuration, and deployment. Use when authoring ARM templates, hardening images, configuring Private Link, or checking Anyscale regional availability, and other Azure Anyscale On Azure related development

Scan passed 0
azure-api-center

Expert knowledge for Azure Api Center development including best practices, security, configuration, integrations & coding patterns, and deployment. Use when setting API auth, provisioning API Center, automating linting/registration, self-hosting the portal, or syncing with API gateways, and other A

Scan passed 0

Related devops skillsscan passed

canary

Post-deploy canary monitoring. (gstack)

Scan passed 0
network-config-validation

Pre-deployment checks for router and switch configuration, including dangerous commands, duplicate addresses, subnet overlaps, stale references, management-plane risk, and IOS-style security hygiene. Use when reviewing a router or switch configuration before deployment.

Scan passed 0
workers-profiling

Profile or debug CPU usage and memory allocation in deployed Cloudflare Workers and Durable Objects. Then use this information to optimize your code.

Scan passed 0
adapter-aws-lambda

Deploy tRPC on AWS Lambda with awsLambdaRequestHandler() from @trpc/server/adapters/aws-lambda for API Gateway v1 (REST, APIGatewayProxyEvent) and v2 (HTTP, APIGatewayProxyEventV2), and Lambda Function URLs. Enable response streaming with awsLambdaStreamingRequestHandler() wrapped in awslambda.strea

Scan passed 0
observability-and-instrumentation

Instruments code so production behavior is visible and diagnosable. Use when adding logging, metrics, tracing, or alerting. Use when shipping any feature that runs in production and you need evidence it works. Use when production issues are reported but you can't tell what happened from the availabl

Scan passed 0
firebase-app-hosting-basics

Deploys and manages full-stack web applications (Next.js, Angular) with Server-Side Rendering (SSR) using Firebase App Hosting. Use when deploying Next.js/Angular apps, configuring apphosting.yaml or firebase.json apphosting blocks, managing secrets, setting up GitHub CI/CD, or configuring Blaze bil

Scan passed 0