skills.rest
Cloud-Byte-Consulting
Cloud-Byte-ConsultingOFFICIAL
Explore all skills by this author →
GitHub

azure-estate-assessor

Assess Azure estates with open-source tools and produce workload disposition maps for platform onboarding.

Updated Jul 16, 2026
Search Tags:#azure#assessment#brownfield#azqr#resource graph#iac coverage#migration triage
One-click install
npx skills add https://github.com/Cloud-Byte-Consulting/plugins --skill azure-estate-assessor-cloud-byte-consulting
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: azure-estate-assessor
Source: https://github.com/Cloud-Byte-Consulting/plugins/tree/main/azure-platform-engineering/skills/azure-estate-assessor
Command: npx skills add https://github.com/Cloud-Byte-Consulting/plugins --skill azure-estate-assessor-cloud-byte-consulting

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Brownfield Azure environments often lack a clear inventory of what actually runs, how much is governed by IaC, and which workloads should move to a platform. This Skill turns that unknown estate into evidence and a decision artifact without any write access. ## Core Features & Use Cases - Read-only discovery pipeline: Combines Azure Resource Graph inventory, azqr Well-Architected findings, Azure Governance Visualizer policy/RBAC mapping, and aztfexport/Bicep-decompile IaC coverage analysis. - Disposition map output: Produces one row per workload with dispositions of Recipe-wrap, Refactor, Leave in place, or Retire, ready for handoff to workload onboarding. - Assessment increment I9: Runs as the Cloud estate (Azure) increment of an assessment-orchestrator engagement, returning a delta with prefixed evidence IDs and provenance. - Use Case: A platform engineer inherits three subscriptions with no documentation and runs this Skill to inventory resources, measure IaC coverage, and triage each workload for migration. ## Quick Start Assess my Azure subscriptions read-only and produce a disposition map showing which workloads to wrap, refactor, leave, or retire.

Frequently Asked Questions about azure-estate-assessor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I assess an existing Azure environment before platform migration?▼

Run a read-only pipeline combining Azure Resource Graph inventory, azqr best-practice scans, Azure Governance Visualizer for policy and RBAC mapping, and aztfexport for IaC coverage. The result is a disposition map triaging each workload as wrap, refactor, leave, or retire.

How to measure IaC coverage of an Azure estate?▼

Use aztfexport with the --hcl-only flag per resource group to see what could be brought under Terraform, or az group export plus az bicep decompile for the Bicep path. Compare exported resources against what already exists in Git to compute the coverage ratio.

What permissions are needed to run an Azure estate assessment?▼

Only Reader role access via az CLI is required; the assessment is read-only by design and refuses write scopes even if offered. Cost Management Reader is optional and only used if separately approved for FinOps analysis.

Does aztfexport produce production-ready Terraform?▼

No. Microsoft warns that export is not guaranteed to succeed, so every export is treated as a draft rather than production IaC. Exported configuration is used only to estimate coverage and inform disposition decisions.

What are the limitations of read-only Azure discovery?▼

Findings are point-in-time snapshots, so every result is stamped with its query date because estates drift. Evidence contains resource IDs and configuration flags only, never secret values, connection strings, or key material.

Related Skills

Explore More Software Engineering Skills→
attentiondotnetattentiondotnet

azure-resource-lookup

Query Azure resources across subscriptions using Azure Resource Graph KQL.

Community
Intermediate
DongbumleeDongbumlee
1

k8s-documentation

Generate migration_report.md with runbooks, risk registers, and deployment guidance for AKS conversions.

Community
Advanced
hoanghn61hoanghn61

devops-detector

Detect DevOps CI/CD, containerization, orchestration, and IaC technologies from repository signals.

Community
Intermediate
Sir-chawakornSir-chawakorn
33

cloud-migration

Plan and execute cloud migrations across AWS, GCP, and Azure.

Community
Intermediate