azure-enterprise-infra-planner

Name: azure-enterprise-infra-planner
Availability: InStock
Author: Microsoft

Generate Bicep or Terraform templates for enterprise Azure infrastructure from workload descriptions.

2.9k|323|Updated Jan 16, 2026

Search Tags:#azure #governance #terraform #infrastructure-as-code #bicep #iaac

Ready to run

npx skills add https://github.com/microsoft/skills --skill azure-enterprise-infra-planner-microsoft

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: azure-enterprise-infra-planner
Source: https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-enterprise-infra-planner
Command: npx skills add https://github.com/microsoft/skills --skill azure-enterprise-infra-planner-microsoft

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Architects and platform engineers need to translate workload descriptions into reproducible Azure infrastructure code that adheres to security and governance standards.

Core Features & Use Cases

IaC generation: Creates Bicep or Terraform templates from workload descriptions for scalable Azure deployments.
Design and orchestrate enterprise topologies: hub-spoke networks, identities, compliance, RBAC, and WAF alignment.
Guided workflow: enforces WAF cross-cutting checks, dependency ordering, and plan approvals before deployment.

Quick Start

Provide workload descriptions to generate IaC with Bicep or Terraform.

Frequently Asked Questions about azure-enterprise-infra-planner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I generate Terraform or Bicep templates from workload descriptions?▼

You can generate Terraform or Bicep templates by providing your workload descriptions to this planner. It translates your specifications into deterministic infrastructure-as-code for scalable Azure deployments.

Can I use this to design hub-spoke networks with WAF alignment?▼

Yes, you can design and orchestrate enterprise hub-spoke networks with WAF alignment. It enforces WAF cross-cutting checks to ensure your topology adheres to security and governance standards.

Does Azure infrastructure planning require plan approvals before deployment?▼

Yes, the guided workflow requires explicit plan approvals before deployment. It enforces dependency ordering and governance checks to ensure reproducible Azure infrastructure code.

What is the best way to enforce governance across multi-resource Azure topologies?▼

The best way to enforce governance is by using the integrated WAF checklist. It validates identity, compliance, and RBAC baselines across multi-resource topologies during infrastructure planning.

Can I provision identity and security baselines using Bicep?▼

Yes, you can provision identity and security baselines using Bicep. The planner generates the necessary infrastructure-as-code from your workload descriptions to establish these configurations.