janegilring/awesome-azure-landing-zones
Instructions file CodexOpenCode
Instructions for janegilring/awesome-azure-landing-zones, covering agents.md — awesome azure landing zones, repository layout, what is a skill vs. an agent?, skills in this repository and agents in this repository.
janegilring/awesome-azure-landing-zones
Agent
Azure Landing Zones Accelerator implementation expert. Guides bootstrap and starter-module deployment for the Bicep and Terraform accelerators, helps choose the right IaC variant, and plans migration from ALZ-Bicep (classic) to the AVM-based Bicep accelerator.
janegilring/awesome-azure-landing-zones
Agent
Azure landing zone architect. Drives end-to-end CAF/WAF design-area decisions for a landing zone — billing/tenant, identity, resource organization, network, security, management, governance, and platform automation — and produces a coherent, opinionated architecture.
janegilring/awesome-azure-landing-zones
Agent
Azure governance and policy expert. Designs and operates policy-driven guardrails with Azure Policy and initiatives, the ALZ default policies, Azure Monitor Baseline Alerts (AMBA), Enterprise Policy as Code (EPAC), compliance mapping, and remediation.
janegilring/awesome-azure-landing-zones
Agent
Azure migration and brownfield adoption expert. Plans Azure Migrate assessments and the transition of existing environments into an Azure landing zone, reconciling brownfield resources with the conceptual ALZ architecture, governance, and connectivity.
janegilring/awesome-azure-landing-zones
Agent
Azure landing zone networking and connectivity expert. Designs and reviews hub-spoke vs Virtual WAN topologies, IP addressing, DNS and private endpoints, traffic inspection, and hybrid connectivity (ExpressRoute/VPN).
janegilring/awesome-azure-landing-zones
Agent
Subscription and landing zone vending expert. Designs and operates an automated, self-service process to provision governed landing zones (subscriptions) at scale with networking, identity, budgets, and policy applied from creation.
janegilring/awesome-azure-landing-zones
Skill Claude CodeCodex
Technical skill for deploying an Azure landing zone with the official ALZ Accelerator. Covers the deployment phases (bootstrap → deploy), choosing the IaC variant (Terraform, Bicep on AVM, or Bicep classic), and migrating ALZ-Bicep classic to the AVM Bicep accelerator. Implementation specifics (Bicep/Terraform) live…
janegilring/awesome-azure-landing-zones
Skill Claude CodeCodex
CAF/ALZ guidance for the Azure billing and Microsoft Entra tenant design area: choosing and securing the Entra tenant, agreement and billing structure (EA/MCA/CSP), enrollment hierarchy, and single- vs multi-tenant decisions for a landing zone. WHEN: "entra tenant", "azure ad tenant", "billing", "enterprise…
janegilring/awesome-azure-landing-zones
Skill Claude CodeCodex
CAF/ALZ guidance for the Governance design area: policy-driven guardrails with Azure Policy and initiatives, the ALZ default policies, compliance and regulatory frameworks, cost management, Enterprise Policy as Code (EPAC), and remediation. WHEN: "governance design area", "azure policy", "policy initiative"…
janegilring/awesome-azure-landing-zones
Skill Claude CodeCodex
CAF/ALZ guidance for the Identity and access management design area: Microsoft Entra ID design, the identity subscription, RBAC and custom roles, Privileged Identity Management (PIM), Conditional Access, and hybrid identity for landing zones. WHEN: "identity", "entra id", "azure ad", "rbac", "role assignment…
janegilring/awesome-azure-landing-zones
Skill Claude CodeCodex
CAF/ALZ guidance for the Management design area: platform operations baselines, the centralized Log Analytics workspace and Azure Monitor, Azure Monitor Baseline Alerts (AMBA), the Management subscription, backup and disaster recovery, patching/Update Manager, and the dev-test-prod management approach. WHEN…
janegilring/awesome-azure-landing-zones
Skill Claude CodeCodex
CAF/ALZ guidance for the Network topology and connectivity design area: choosing hub-spoke vs Virtual WAN, planning IP addressing, DNS and private endpoints, egress/ingress inspection, and hybrid connectivity (ExpressRoute/VPN). WHEN: "network topology", "hub and spoke", "virtual wan", "connectivity subscription"…
janegilring/awesome-azure-landing-zones
Skill Claude CodeCodex
CAF/ALZ guidance for the Platform automation and DevOps design area: infrastructure as code for the platform, the bootstrap/management of the deployment toolchain, CI/CD pipelines and Git workflow, identities for automation (managed identities, OIDC/workload identity federation), environments/promotion, and keeping…
janegilring/awesome-azure-landing-zones
Skill Claude CodeCodex
CAF/ALZ guidance for the Resource organization design area: the management group hierarchy, subscription strategy (subscription democratization), the conceptual ALZ management groups (Platform, Landing Zones, Decommissioned, Sandbox), resource groups, naming, and tagging. WHEN: "management group", "management group…
janegilring/awesome-azure-landing-zones
Skill Claude CodeCodex
CAF/ALZ guidance for the Security design area: applying Zero Trust to a landing zone, Microsoft Defender for Cloud and secure score, Microsoft Sentinel, encryption and key/secret management, network security controls, and the CAF Secure methodology. WHEN: "security design", "zero trust", "defender for cloud", "secure…
janegilring/awesome-azure-landing-zones
Skill Claude CodeCodex
Technical skill for subscription (landing zone) vending: the automated, self-service process a platform team uses to request, deploy, and govern application landing zone subscriptions at scale. Covers the collect-data → initiate-platform-automation → create-subscription → post-deployment workflow, the…