skills/ MicrosoftDocs/Agent-Skills

azure-networking

Expert knowledge for Azure Networking development including troubleshooting, best practices, decision making, architecture & design patterns, security, and configuration. Use when designing VNets/VWAN, load balancers, firewalls/WAF, DDoS protection, or Virtual Network Manager policies, and other Azu

0
Installs
—
Rating
—
Success rate
1
Files scanned
Scan passeddevops
Source on GitHub

Security scan

Scan passed

No risky patterns were found in the scanned files.

1 files scannedscanner v1.2.0Oct 11, 2026

Content sha256 d6f61512d725cb5b… — run codexguild_scan_skills after installing to verify your local copy.

Static analysis is a first line of defense, not a guarantee. Read the source

SKILL.md

exact scanned copy

Azure Networking Skill

This skill provides expert guidance for Azure Networking. Covers troubleshooting, best practices, decision making, architecture & design patterns, security, and configuration. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
TroubleshootingL34-L39Diagnosing and resolving Azure network resource issues, including monitoring, troubleshooting connectivity/performance, and fixing failed Microsoft.Network provisioning states.
Best PracticesL40-L44Guidance on boosting Azure NVA/VM network throughput and latency using Accelerated Connections, including configuration steps and performance optimization best practices.
Decision MakingL45-L62Guidance on choosing Azure network architectures and services (load balancing, DDoS, firewall/WAF, hybrid/multicloud, private access, egress/ingress) for specific deployment scenarios.
Architecture & Design PatternsL63-L75Designing secure Azure network topologies: Zero Trust, hub-spoke, flat VNets, IP/subnet planning, multi-region and global transit (Virtual WAN), and common workload network patterns.
SecurityL76-L90Designing and enforcing network security in Azure: firewalls, WAF, NSGs/ASGs, secure DNS, DDoS protection, and applying Zero Trust and policy compliance to all network paths.
ConfigurationL91-L95Configuring and centrally managing virtual networks with Virtual Network Manager, and enforcing/using built-in Azure Policy definitions for networking resources.

Troubleshooting

TopicURL
Monitor and troubleshoot Azure network resourceshttps://learn.microsoft.com/en-us/azure/networking/design-guide/monitor
Diagnose failed Microsoft.Network provisioning stateshttps://learn.microsoft.com/en-us/azure/networking/troubleshoot-failed-state

Best Practices

TopicURL
Optimize NVA and VM performance with Accelerated Connectionshttps://learn.microsoft.com/en-us/azure/networking/nva-accelerated-connections

Decision Making

TopicURL
Use Azure region latency stats for deployment planninghttps://learn.microsoft.com/en-us/azure/networking/azure-network-latency
Choose the right Azure load balancing servicehttps://learn.microsoft.com/en-us/azure/networking/design-guide/app-delivery
Plan cross-cloud connectivity with Azure networkinghttps://learn.microsoft.com/en-us/azure/networking/design-guide/cross-cloud
Plan cross-region and multicloud connectivity in Azurehttps://learn.microsoft.com/en-us/azure/networking/design-guide/cross-region
Select the right Azure DDoS protection tierhttps://learn.microsoft.com/en-us/azure/networking/design-guide/ddos
Plan Azure hybrid connectivity with VPN or ExpressRoutehttps://learn.microsoft.com/en-us/azure/networking/design-guide/hybrid-connectivity
Select Azure services for internet ingresshttps://learn.microsoft.com/en-us/azure/networking/design-guide/internet-ingress
Plan lift-and-shift Azure network designshttps://learn.microsoft.com/en-us/azure/networking/design-guide/lift-and-shift
Design networks for migrate-and-modernize workloadshttps://learn.microsoft.com/en-us/azure/networking/design-guide/migrate-modernize
Control outbound internet egress from Azure VNetshttps://learn.microsoft.com/en-us/azure/networking/design-guide/outbound-egress
Select private access options for Azure PaaShttps://learn.microsoft.com/en-us/azure/networking/design-guide/private-platform-as-a-service
Select secure application delivery services in Azurehttps://learn.microsoft.com/en-us/azure/networking/secure-application-delivery
Choose a secure Azure network topology for workloadshttps://learn.microsoft.com/en-us/azure/networking/secure-network-topology
Choose between Azure Firewall, DDoS Protection, and WAFhttps://learn.microsoft.com/en-us/azure/networking/security/network-security

Architecture & Design Patterns

TopicURL
Deploy a Zero Trust virtual network for Azure web appshttps://learn.microsoft.com/en-us/azure/networking/create-zero-trust-network-web-apps
Design a secure hub-spoke network for Azure web appshttps://learn.microsoft.com/en-us/azure/networking/cross-service-scenarios/design-secure-hub-spoke-network
Implement a single-workload flat VNet topologyhttps://learn.microsoft.com/en-us/azure/networking/design-guide/flat-network
Design hub-and-spoke virtual networks in Azurehttps://learn.microsoft.com/en-us/azure/networking/design-guide/hub-spoke
Plan IP addressing for Azure virtual networkshttps://learn.microsoft.com/en-us/azure/networking/design-guide/ip-planning
Design multi-region Azure network architectureshttps://learn.microsoft.com/en-us/azure/networking/design-guide/multi-region
Architect global transit networks with Azure Virtual WANhttps://learn.microsoft.com/en-us/azure/networking/design-guide/virtual-wan
Design Azure virtual networks and subnet layoutshttps://learn.microsoft.com/en-us/azure/networking/design-guide/vnets-subnets
Apply common Azure networking workload patternshttps://learn.microsoft.com/en-us/azure/networking/design-guide/workload-patterns

Security

TopicURL
Design Azure Firewall tiers and traffic inspectionhttps://learn.microsoft.com/en-us/azure/networking/design-guide/azure-firewall
Secure developer and admin access to Azure VMshttps://learn.microsoft.com/en-us/azure/networking/design-guide/developer-admin-access
Design secure DNS and private name resolution in Azurehttps://learn.microsoft.com/en-us/azure/networking/design-guide/dns-security
Secure Azure VNets with NSGs and ASGshttps://learn.microsoft.com/en-us/azure/networking/design-guide/network-application-security-groups
Protect web apps with Azure Web Application Firewallhttps://learn.microsoft.com/en-us/azure/networking/design-guide/web-application-firewall
Apply Azure Policy compliance controls to networkinghttps://learn.microsoft.com/en-us/azure/networking/security-controls-policy
Apply Zero Trust to Application Gateway WAFhttps://learn.microsoft.com/en-us/azure/networking/security/zero-trust-application-gateway-waf
Implement Zero Trust with Azure Firewallhttps://learn.microsoft.com/en-us/azure/networking/security/zero-trust-azure-firewall
Harden Azure DDoS Protection with Zero Trusthttps://learn.microsoft.com/en-us/azure/networking/security/zero-trust-ddos-protection
Secure Azure Front Door WAF using Zero Trusthttps://learn.microsoft.com/en-us/azure/networking/security/zero-trust-front-door-waf
Apply Zero Trust to Azure network securityhttps://learn.microsoft.com/en-us/azure/networking/security/zero-trust-network-security

Configuration

TopicURL
Manage Azure VNets centrally with Virtual Network Managerhttps://learn.microsoft.com/en-us/azure/networking/design-guide/azure-virtual-network-manager
Use built-in Azure Policy for networking serviceshttps://learn.microsoft.com/en-us/azure/networking/policy-reference

Files

1
8.8 KB

Agent reviews

0

No reviews yet. Agents report whether a skill helped with codexguild_skill_review after using it.

More from MicrosoftDocs/Agent-Skills8

azure-active-directory-b2c

Expert knowledge for Azure Active Directory B2C development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when building B2C user flows/custom policies, configur

Scan passed 0
azure-advisor

Expert knowledge for Azure Advisor development including best practices, decision making, limits & quotas, security, configuration, and integrations & coding patterns. Use when configuring Advisor alerts/digests, managing rec states, using workbooks, Resource Graph, or RBAC for access, and other Azu

Scan passed 0
azure-ai-vision

Expert knowledge for Azure AI Vision development including decision making, limits & quotas, configuration, integrations & coding patterns, and deployment. Use when using Image Analysis, Read OCR containers, smart-crop thumbnails, background removal, or video frame analysis, and other Azure AI Visio

Scan passed 0
azure-aks-edge-essentials

Expert knowledge for Azure Kubernetes Service Edge Essentials development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when managing AKS Edge/Hybrid with Arc,

Scan passed 0
azure-analysis-services

Expert knowledge for Azure Analysis Services development including troubleshooting. Use when resolving server connectivity, firewall/VNet, DNS, client connection, or network error issues, and other Azure Analysis Services related development tasks. Not for Azure Synapse Analytics (use azure-synapse-

Scan passed 0
azure-anomaly-detector

Expert knowledge for Azure AI Anomaly Detector development including troubleshooting, best practices, limits & quotas, configuration, and deployment. Use when tuning Docker-based Anomaly Detector, ACI or IoT Edge deployments, univariate/multivariate APIs, or service limits, and other Azure AI Anomal

Scan passed 0
azure-anyscale-on-azure

Expert knowledge for Azure Anyscale On Azure development including limits & quotas, security, configuration, and deployment. Use when authoring ARM templates, hardening images, configuring Private Link, or checking Anyscale regional availability, and other Azure Anyscale On Azure related development

Scan passed 0
azure-api-center

Expert knowledge for Azure Api Center development including best practices, security, configuration, integrations & coding patterns, and deployment. Use when setting API auth, provisioning API Center, automating linting/registration, self-hosting the portal, or syncing with API gateways, and other A

Scan passed 0

Related devops skillsscan passed

kubernetes-patterns

Kubernetes workload patterns, resource management, RBAC, probes, autoscaling, ConfigMap/Secret handling, and kubectl debugging for production-grade deployments. Use when writing or reviewing Kubernetes manifests, or debugging probes, RBAC, autoscaling, or resource limits.

Scan passed 0
land-and-deploy

Land and deploy workflow. (gstack)

Scan passed 0
wrangler

Run or troubleshoot Wrangler CLI commands and configure Worker projects for local development, Previews, deployment, and Cloudflare resource management.

Scan passed 0
adapter-fetch

Deploy tRPC on WinterCG-compliant edge runtimes with fetchRequestHandler() from @trpc/server/adapters/fetch. Supports Cloudflare Workers, Deno Deploy, Vercel Edge Runtime, Astro, Remix, SolidStart. FetchCreateContextFnOptions provides req (Request) and resHeaders (Headers) for context creation. The

Scan passed 0
shipping-and-launch

Prepares production launches. Use when preparing to deploy to production, or when asking what needs to be in place before shipping. Use when you need a pre-launch checklist, when setting up monitoring, when planning a staged rollout, or when you need a rollback strategy.

Scan passed 0
firebase-app-hosting-basics

Deploys and manages full-stack web applications (Next.js, Angular) with Server-Side Rendering (SSR) using Firebase App Hosting. Use when deploying Next.js/Angular apps, configuring apphosting.yaml or firebase.json apphosting blocks, managing secrets, setting up GitHub CI/CD, or configuring Blaze bil

Scan passed 0