PaperclipOrg
Claude Agent Skill · by Microsoft

Azure Enterprise Infra Planner

When you need to architect enterprise Azure infrastructure from scratch rather than deploy individual apps, this skill walks you through the full planning proce

Install
Terminal · npx
$npx skills add https://github.com/obra/superpowers --skill brainstorming
Works with Paperclip

How Azure Enterprise Infra Planner fits into a Paperclip company.

Azure Enterprise Infra Planner drops into any Paperclip agent that handles this kind of work. Assign it to a specialist inside a pre-configured PaperclipOrg company and the skill becomes available on every heartbeat — no prompt engineering, no tool wiring.

S
SaaS FactoryPaired

Pre-configured AI company — 18 agents, 18 skills, one-time purchase.

$27$59
Explore pack
Source file
SKILL.md62 lines
Expand
---name: azure-enterprise-infra-plannerdescription: "Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure Backup for VM workloads'. PREFER azure-prepare FOR app-centric workflows."license: MITmetadata:  author: Microsoft  version: "1.0.2"--- # Azure Enterprise Infra Planner ## When to Use This Skill Activate this skill when user wants to:- Plan enterprise Azure infrastructure from a workload or architecture description- Architect a landing zone, hub-spoke network, or multi-region topology- Design networking infrastructure: VNets, subnets, firewalls, private endpoints, VPN gateways- Plan identity, RBAC, and compliance-driven infrastructure- Generate Bicep or Terraform for subscription-scope or multi-resource-group deployments- Plan disaster recovery, failover, or cross-region high-availability topologies ## Quick Reference | Property | Details ||---|---|| MCP tools | `get_azure_bestpractices_get`, `wellarchitectedframework_serviceguide_get`, `microsoft_docs_fetch`, `microsoft_docs_search`, `bicepschema_get` || CLI commands | `az deployment group create`, `az bicep build`, `az resource list`, `terraform init`, `terraform plan`, `terraform validate`, `terraform apply` || Output schema | [plan-schema.md](references/plan-schema.md) || Key references | [research.md](references/research.md), [resources/](references/resources/README.md), [waf-checklist.md](references/waf-checklist.md), [constraints/](references/constraints/README.md) | ## Workflow Read [workflow.md](references/workflow.md) for detailed step-by-step instructions, including MCP tool usage, CLI commands, and decision points. Follow the phases in order, ensuring all key gates are passed before proceeding to the next phase. | Phase | Action | Key Gate ||-------|--------|----------|| 1 | Research — WAF Tools | All MCP tool calls complete || 2 | Research — Refine & Lookup | Resource list approved by user || 3 | Plan Generation | Plan JSON written to disk || 4 | Verification | All checks pass, user approves || 5 | IaC Generation | `meta.status` = `approved` || 6 | Deployment | User confirms destructive actions | ## MCP Tools | Tool | Purpose ||------|---------|| `get_azure_bestpractices_get` | Azure best practices for code generation, operations, and deployment || `wellarchitectedframework_serviceguide_get` | WAF service guide for a specific Azure service || `microsoft_docs_search` | Search Microsoft Learn for relevant documentation chunks || `microsoft_docs_fetch` | Fetch full content of a Microsoft Learn page by URL || `bicepschema_get` | Bicep schema definition for any Azure resource type (latest API version) | ## Error Handling | Error | Cause | Fix ||---|---|---|| MCP tool error or not available | Tool call timeout, connection error, or tool doesn't exist | Retry once; fall back to reference files and notify user if unresolved || Plan approval missing | `meta.status` is not `approved` | Stop and prompt user for approval before IaC generation or deployment || IaC validation failure | `az bicep build` or `terraform validate` returns errors | Fix the generated code and re-validate; notify user if unresolved || Pairing constraint violation | Incompatible SKU or resource combination | Fix in plan before proceeding to IaC generation || Infra plan or IaC files not found | Files written to wrong location or not created | Verify files exist at `<project-root>/.azure/` and `<project-root>/infra/`; if missing, re-create the files by following [workflow.md](references/workflow.md) exactly |