skills.rest
ivegamsft
ivegamsftCOMMUNITY
Explore all skills by this author →
GitHub

azure-landing-zone

Automate Azure enterprise-scale landing zone design and deployment with Bicep templates.

Updated Mar 16, 2026
Search Tags:#Azure#IaC#Bicep#CAF#landing zone#ESLZ
One-click install
npx skills add https://github.com/ivegamsft/work-tracker --skill azure-landing-zone
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: azure-landing-zone
Source: https://github.com/ivegamsft/work-tracker/tree/main/.agents/skills/azure-landing-zone
Command: npx skills add https://github.com/ivegamsft/work-tracker --skill azure-landing-zone

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires Bicep, Azure CLI, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill streamlines the process of designing, scaffolding, and reviewing Azure enterprise-scale landing zones (ESLZ) following the Cloud Adoption Framework (CAF).

Core Features & Use Cases

  • Management Group Hierarchy: Design and document CAF management group hierarchies.
  • Platform Subscriptions: Scaffold platform subscriptions for Connectivity, Identity, and Management.
  • Hub Networking: Generate IaC templates for hub virtual networks, Azure Firewall, DNS resolver, Bastion, and gateway.
  • Policy Assignments: Assign regulatory policy initiatives like NIST 800-53, ISO 27001, CIS, PCI-DSS.
  • Landing Zone Vending: Create templates for vending new application landing zone subscriptions.
  • Architecture Decisions: Document architecture decisions for ESLZ design choices.
  • Use Case: For a company adopting Azure at scale, use this Skill to ensure compliance and standardization across the organization.

Quick Start

Use the azure-landing-zone skill to generate a hub networking Bicep module for the Connectivity subscription and assign the NIST 800-53 policy initiative at the Landing Zones management group scope.

Frequently Asked Questions about azure-landing-zone

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scaffold an Azure enterprise-scale landing zone using Bicep?▼

To scaffold an Azure landing zone using Bicep, you automate the design and deployment of management group hierarchies, platform subscriptions, and hub networks following the Cloud Adoption Framework.

How do I assign regulatory compliance policies like NIST 800-53 or ISO 27001 in Azure?▼

Assign regulatory compliance policies like NIST 800-53 or ISO 27001 by generating Bicep templates that apply policy initiatives directly at the Landing Zones management group scope.

What's the best way to generate Bicep modules for Azure hub virtual networks and Bastion?▼

The best way to generate Bicep modules for Azure hub networks, Bastion, and DNS resolvers is by automating IaC template creation specifically for the Connectivity subscription.

Do I need Azure CLI and Bicep to deploy an enterprise-scale landing zone?▼

Yes, you need both Azure CLI and Bicep installed to deploy the infrastructure as code required for automating enterprise-scale landing zone environments.

Can I automate vending new application landing zone subscriptions in Azure?▼

Yes, you can automate vending new application landing zone subscriptions by generating standardized IaC templates that provision and configure new subscriptions dynamically.

What is a CAF management group hierarchy and when do I need it for Azure migrations?▼

A CAF management group hierarchy organizes Azure resources for large-scale migrations, ensuring compliance and standardization across platform and landing zone subscriptions.

Related Skills

Explore More Software Engineering Skills→
jorgeasaurusjorgeasaurus
12

azure-enterprise-infra-planner

Generate Bicep or Terraform code for enterprise Azure infrastructure planning.

Community
Advanced
rysweetrysweet

azure-admin

Provision users, assign RBAC, and deploy Azure resources via CLI.

Community
Advanced
EmeaAppGbbEmeaAppGbb

azure-deployment

Automate Azure infrastructure provisioning and deployment with Bicep templates and Azure DevOps.

Official
Advanced
EstomEstom

cloud-architect

Design multi-cloud architectures and migration plans for AWS, Azure, and GCP.

Community
Advanced