Azure App Onboard Scaffold

Generate Azure Bicep or Terraform templates from architecture plans.

1.4k|224|Updated Feb 26, 2026
One-click install
npx skills add https://github.com/microsoft/azure-skills --skill azure-app-onboard-scaffold
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Azure App Onboard Scaffold
Source: https://github.com/microsoft/azure-skills/tree/main/skills/azure-app-onboard/scaffold
Command: npx skills add https://github.com/microsoft/azure-skills --skill azure-app-onboard-scaffold

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the transition from architecture planning to infrastructure-as-code (IaC) generation, ensuring that deployment-ready Bicep or Terraform templates are created with secure-by-default patterns and validated against Azure best practices.

Core Features & Use Cases

  • Automated IaC Generation: Converts service lists from architecture plans into modular, secure Bicep or Terraform templates.
  • Adversarial Self-Review: Performs automated L1/L3 self-reviews to catch configuration errors before deployment.
  • Conformance Validation: Enforces strict security and naming standards, including managed identity, SCM/FTP lockdown, and proper telemetry wiring.
  • Use Case: When you have a finalized service architecture plan, use this Skill to generate the entire infrastructure folder structure, including modules for App Service, Container Apps, and databases, ready for immediate deployment.

Quick Start

Invoke the azure app onboard scaffold skill to generate infrastructure code based on the existing prepare-plan.json file in your current session.

Frequently Asked Questions about Azure App Onboard Scaffold

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate secure-by-default Azure infrastructure-as-code from an architecture plan?

To generate secure-by-default Azure infrastructure-as-code, you can use an automated scaffolding process that converts structured service lists into modular Bicep or Terraform templates with managed identity and least-privilege RBAC configurations.

Can I generate both Bicep and Terraform templates for multi-service cloud deployments?

Yes, you can generate modular Bicep or Terraform templates for multi-service cloud deployments, creating a complete infrastructure folder structure with modules for App Service, Container Apps, and databases ready for deployment.

What is automated IaC conformance validation for Azure deployments?

Automated IaC conformance validation enforces strict security and naming standards for Azure deployments, checking for managed identity, SCM and FTP lockdown, proper telemetry wiring, and consistent tagging across modules.

How do I validate Azure Bicep or Terraform modules for configuration errors before deployment?

You validate Azure Bicep or Terraform modules by performing automated adversarial L1 and L3 self-reviews, which catch configuration errors and ensure the infrastructure templates conform to Azure best practices before deployment.

Does generating Azure infrastructure require a specific plan format?

Generating Azure infrastructure requires an existing structured architecture plan file, such as a prepare-plan.json file in your current session, which provides the service list needed to output the modular infrastructure code.

What's the best way to enforce least-privilege RBAC and consistent tagging across Azure IaC modules?

The best way to enforce least-privilege RBAC and consistent tagging across Azure IaC is to use an automated generation process that applies secure-by-default patterns and conformance validation to all outputted Bicep or Terraform modules.