azure-configurator

What problem does it solve?

Configure and verify post-provisioning Azure resources that are required for production-grade applications, removing fragile manual steps and ensuring secrets, RBAC, database access, and storage are correctly applied and auditable.

Core Features & Use Cases

• Idempotent RBAC assignment and verification: check-then-create role assignments scoped to resource IDs to grant managed identities minimal privileges and avoid duplicate errors.
• Key Vault secret upsert with verification: push sensitive env values to Key Vault using a naming conversion rule, verify read-back, and expose secrets via Key Vault reference URIs in app settings.
• App Service, PostgreSQL, and Storage configuration: bulk apply non-sensitive and Key Vault-referenced app settings, configure PostgreSQL auth modes and required extensions, create storage containers with private access, enable soft delete/versioning, and configure CORS.
• Operational safeguards: temporary file handling, propagation wait/retry guidance for RBAC, validation rules for database URLs, and a persistent save protocol for deliverables and review packets.
• Use Case: finalize a CI/CD deployment by ensuring the web apps can resolve Key Vault references, the backend can reach the hardened PostgreSQL instance, and storage is configured for application uploads.

Quick Start

Use the azure-configurator skill to push .env secrets into Key Vault, assign required RBAC roles to managed identities, configure app settings with Key Vault references, set PostgreSQL auth mode and extensions, and create storage containers with CORS and verification.