apim_throttle_expert

Classifies 429 root causes in Husky's Astro API Gateway from routing metadata.

5|2|Updated Apr 28, 2026
One-click install
npx skills add https://github.com/aiappsgbb/awesome-gbb --skill apim-throttle-expert
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: apim_throttle_expert
Source: https://github.com/aiappsgbb/awesome-gbb/tree/main/skills/azure-sre-agent/references/plugins/gbb-citadel/skills/apim_throttle_expert
Command: npx skills add https://github.com/aiappsgbb/awesome-gbb --skill apim-throttle-expert

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps you diagnose Azure AI Citadel API Management (APIM) gateway 429 throttling errors by identifying which specific rate-limit policy triggered and what to do next.

Core Features & Use Cases

  • 429 classification from real gateway signals: Determines whether the throttling is due to per-product quota, per-key rate-limit-by-key, backend AOAI TPM exhaustion, or a potential policy bug when key headers are missing.
  • Focused diagnostics workflow: Guides investigation by correlating the failing operation, client, product, and time window, then summarizing gateway logs for the relevant period.
  • Actionable SRE output with guardrails: Produces a structured classification and recommended remediation while enforcing non-destructive and non-sensitive handling (no policy modification, no subscription key reading).

Quick Start

Use apim_throttle_expert to diagnose a 429 spike by asking for the failing Citadel API path (such as /llm/v1/chat/completions) and the approximate time window for the incidents.

Frequently Asked Questions about apim_throttle_expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I diagnose 429 throttling errors from an Azure APIM gateway?

To diagnose 429 throttling errors, you need to correlate OperationId and ClientIpAddress in Log Analytics within a specific time window. This process identifies whether per-product quotas, per-key rate limits, or backend AOAI TPM exhaustion triggered the response.

Why does my APIM gateway return a 429 throttling response?

A 429 throttling response occurs when a specific rate-limit policy is triggered. You can infer the root cause by examining throttling headers like x-throttling-source and x-aoai-throttle, which indicate whether the limit stems from product quotas or backend capacity.

How do I find the root cause of Citadel API rate limiting using Log Analytics?

Finding the root cause of Citadel API rate limiting involves mapping gateway logs to the operational trigger. By correlating the failing operation, client IP, and time window, you can classify the specific rate-limit source and return a recommended remediation action.

Can I use Log Analytics to check backend AOAI TPM exhaustion during a 429 spike?

Yes, you can use Log Analytics to check backend AOAI TPM exhaustion during a 429 spike by correlating relevant gateway logs. This helps determine if the throttling originates from backend capacity limits rather than per-product or per-key rate-limit policies.

Does diagnosing APIM throttling require modifying gateway policies?

Diagnosing APIM throttling does not require modifying gateway policies or handling subscription keys. The diagnostic process is non-destructive, focusing on classifying the rate-limit source from gateway signals and recommending actions without applying changes.

What is the best way to classify APIM 429 errors for SRE on-call investigations?

The best way to classify APIM 429 errors for SRE on-call investigations is to analyze Retry-After and throttling headers. This approach pinpoints whether per-product quotas, per-key rate limits, or backend AOAI TPM exhaustion caused the failure, providing actionable output.