azure-enclave

Azure Enclave architecture planning for AKS involves applying AKS security policy guardrails, using built-in RBAC roles, and following the workload architecture planning guidance. The skill links to Microsoft Learn articles covering AKS initiatives, access controls, and defense-in-depth patterns.

Migrating existing Azure resources into Azure Enclave follows a documented strategy covering assessment, steps, and considerations for moving workloads into the enclave environment. The skill references the official migration guide on Microsoft Learn for detailed procedures.

Yes, the skill requires network access to fetch documentation. It prefers the mcp_microsoftdocs:microsoft_docs_fetch tool and falls back to fetch_webpage, both retrieving Markdown content from Microsoft Learn.

Azure Enclave is a governed, isolated environment with approval workflows and policy guardrails, while Azure Confidential Computing focuses on hardware-based trusted execution environments. This skill explicitly excludes Confidential Computing, Azure Attestation, and Dedicated HSM topics.

Deployment failures often stem from enclave policy guardrails on services like SQL, Storage, or Key Vault, or from missing approvals for critical operations. The skill's troubleshooting and configuration sections link to articles on policy compliance exemptions and approval management.