azure-well-architected

Enforce Azure Well-Architected Framework guidance across cloud architecture and IaC.

1|Updated Mar 7, 2026
One-click install
npx skills add https://github.com/kayaman/skills --skill azure-well-architected
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-well-architected
Source: https://github.com/kayaman/skills/tree/main/skills/azure-well-architected
Command: npx skills add https://github.com/kayaman/skills --skill azure-well-architected

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides clear, actionable guidance to ensure Azure solutions meet reliability, security, cost, operational, and performance objectives, reducing architectural risk and inconsistent implementations across teams.

Core Features & Use Cases

  • Cross-pillar Guidance: Structured recommendations aligned to Reliability, Security, Cost Optimization, Operational Excellence, and Performance Efficiency.
  • Practical Rules and Checklists: Mandatory and recommended rules for RTO/RPO, least-privilege access, encryption, tagging, budgeting, observability, IaC, and deployment patterns.
  • Review and Design Support: Use when designing Azure solutions, authoring or reviewing Bicep/ARM/Terraform, evaluating pull requests, or selecting services and trade-offs.

Quick Start

Ask the assistant to review an Azure solution or IaC change and produce an architecture review checklist covering RTO/RPO, encryption, least-privilege access, tagging and cost controls, observability, and deployment safety.

Frequently Asked Questions about azure-well-architected

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review my Azure architecture for Well-Architected Framework compliance?

To review Azure architecture for Well-Architected Framework compliance, evaluate your solution against reliability, security, cost, operational, and performance objectives. This produces an actionable checklist covering RTO/RPO, encryption, least-privilege, tagging, and observability.

What is the best way to enforce least-privilege and encryption in Azure IaC?

The best way to enforce least-privilege and encryption in Azure IaC is to apply mandatory infrastructure-as-code rules during Bicep, ARM, or Terraform pull request reviews, ensuring all resources meet strict access and encryption standards before deployment.

Can I use this guidance to assess Bicep and Terraform pull requests?

Yes, you can use this guidance to assess Bicep, ARM, and Terraform pull requests. It evaluates IaC changes against mandatory rules for deployment safety, resource tagging, budgets, and automated CI/CD patterns to reduce architectural risk.

How do I ensure my Azure solution meets documented RTO and RPO requirements?

To ensure your Azure solution meets documented RTO and RPO requirements, apply structured reliability guidance during service selection and design. This validates that your architecture satisfies recovery objectives while balancing cost optimization and performance efficiency.

Does Azure Well-Architected guidance cover cost optimization and resource tagging?

Yes, Azure Well-Architected guidance covers cost optimization by enforcing mandatory rules for resource tagging and budgets. It provides practical checklists to ensure your cloud infrastructure maintains cost controls and operational excellence.

What are the limitations of applying Azure Well-Architected Framework guidance manually?

Applying the Azure Well-Architected Framework manually risks inconsistent implementations across teams and overlooked requirements like observability or deployment safety. Structured automated guidance reduces architectural risk by enforcing mandatory rules uniformly across all designs.