skills.rest
github
githubOFFICIAL
Explore all skills by this author →
WebsiteGitHub

azure-well-architected-review

Reviews Azure IaC and live infrastructure against Well-Architected Framework pillars and generates GitHub issues.

38.5k|4.9k|Updated Jun 11, 2025
Search Tags:#Azure#terraform#Bicep#cloud audit#infrastructure review#gitHub issues#Well-Architected
One-click install
npx skills add https://github.com/github/awesome-copilot --skill azure-well-architected-review
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: azure-well-architected-review
Source: https://github.com/github/awesome-copilot/tree/main/skills/azure-well-architected-review
Command: npx skills add https://github.com/github/awesome-copilot --skill azure-well-architected-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manually auditing Azure workloads against the Well-Architected Framework is slow and inconsistent, and findings often get lost without a tracking mechanism. This Skill automates a structured five-pillar review of your IaC and deployed resources, then turns findings into trackable GitHub issues.

Core Features & Use Cases

  • Five-Pillar Review: Checks Reliability, Security, Cost Optimization, Operational Excellence, and Performance Efficiency against detailed checklists.
  • IaC and Live Drift Detection: Scans Bicep, Terraform, and ARM templates, inventories live resources via Azure CLI, and flags drift between code and deployment.
  • Risk-Classified GitHub Issues: Creates one issue per finding with remediation code samples, plus an EPIC issue with an architecture diagram and prioritized checklist.
  • Use Case: Before a production launch, run the review against your subscription to surface high-risk findings like missing zone redundancy or public blob access, and automatically file remediation issues for the team.

Quick Start

Ask the agent to perform an Azure Well-Architected review of this repository's infrastructure and create GitHub issues for the findings.

Frequently Asked Questions about azure-well-architected-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an Azure Well-Architected Framework review on my infrastructure?▼

Invoke this Skill with Azure CLI authenticated and your IaC files in the repository. It scans Bicep, Terraform, or ARM templates, inventories live resources, checks all five WAF pillars, and asks for confirmation before creating GitHub issues.

What IaC formats does the Azure architecture review support?▼

The review supports Bicep files, Terraform configurations using azurerm or azapi providers, and ARM deployment templates. If no IaC is found, it falls back to reviewing live resources via Azure CLI queries.

Does the review detect drift between Terraform and deployed Azure resources?▼

Yes, it compares IaC definitions against the live resource inventory from az resource list. It flags resources present in Azure but absent from code, undeployed IaC resources, and configuration mismatches as Operational Excellence findings.

What permissions are needed for the Azure Well-Architected review?▼

Read-only access is sufficient, typically the Reader and Security Reader roles on the target subscriptions or resource groups. The Skill lists required roles if it encounters insufficient permissions during the review.

Will the review create GitHub issues automatically without confirmation?▼

No, it presents a summary of findings by risk level and waits for explicit confirmation. On a negative or ambiguous response, it outputs the full findings as markdown to the console and stops without creating issues.

Related Skills

Explore More Software Engineering Skills→
tomztomz

azure-iac

Automate Azure infrastructure provisioning with Bicep, ARM templates, or Terraform.

Community
Intermediate
DiegoBulhoesDiegoBulhoes
1

iac-review

Detect and fix security issues in Terraform, Kustomize, Helm, and Kubernetes manifests.

Community
Advanced
parandurume-labsparandurume-labs
1

azure-security-audit

Audit and harden Azure infrastructure security configurations across identity, network, and monitoring.

Official
Advanced
devkenidevkeni
1

iac-security

Scan Infrastructure as Code for security misconfigurations using Checkov, tfsec, and Trivy.

Community
Intermediate