A library of AI Skills and Agents for the Microsoft Cloud Adoption Framework (CAF) and Azure Landing Zones (ALZ). It gives AI coding agents (GitHub Copilot, Copilot CLI, Claude Code, and other Agent Skills-compatible tools) reusable, grounded domain knowledge for designing, deploying, governing, and operating Azure landing zones.
This repository also configures its own agents. See what awesome-azure-landing-zones tells them →
janegilring/awesome-azure-landing-zones
Skill Claude CodeCodex
Technical skill for deploying an Azure landing zone with the official ALZ Accelerator. Covers the deployment phases (bootstrap → deploy), choosing the IaC variant (Terraform, Bicep on AVM, or Bicep classic), and migrating ALZ-Bicep classic to the AVM Bicep accelerator. Implementation specifics (Bicep/Terraform) live…
janegilring/awesome-azure-landing-zones
Skill Claude CodeCodex
CAF/ALZ guidance for the Azure billing and Microsoft Entra tenant design area: choosing and securing the Entra tenant, agreement and billing structure (EA/MCA/CSP), enrollment hierarchy, and single- vs multi-tenant decisions for a landing zone. WHEN: "entra tenant", "azure ad tenant", "billing", "enterprise…
janegilring/awesome-azure-landing-zones
Skill Claude CodeCodex
CAF/ALZ guidance for the Governance design area: policy-driven guardrails with Azure Policy and initiatives, the ALZ default policies, compliance and regulatory frameworks, cost management, Enterprise Policy as Code (EPAC), and remediation. WHEN: "governance design area", "azure policy", "policy initiative"…
janegilring/awesome-azure-landing-zones
Skill Claude CodeCodex
CAF/ALZ guidance for the Identity and access management design area: Microsoft Entra ID design, the identity subscription, RBAC and custom roles, Privileged Identity Management (PIM), Conditional Access, and hybrid identity for landing zones. WHEN: "identity", "entra id", "azure ad", "rbac", "role assignment…
janegilring/awesome-azure-landing-zones
Skill Claude CodeCodex
CAF/ALZ guidance for the Management design area: platform operations baselines, the centralized Log Analytics workspace and Azure Monitor, Azure Monitor Baseline Alerts (AMBA), the Management subscription, backup and disaster recovery, patching/Update Manager, and the dev-test-prod management approach. WHEN…
janegilring/awesome-azure-landing-zones
Skill Claude CodeCodex
CAF/ALZ guidance for the Network topology and connectivity design area: choosing hub-spoke vs Virtual WAN, planning IP addressing, DNS and private endpoints, egress/ingress inspection, and hybrid connectivity (ExpressRoute/VPN). WHEN: "network topology", "hub and spoke", "virtual wan", "connectivity subscription"…
janegilring/awesome-azure-landing-zones
Skill Claude CodeCodex
CAF/ALZ guidance for the Platform automation and DevOps design area: infrastructure as code for the platform, the bootstrap/management of the deployment toolchain, CI/CD pipelines and Git workflow, identities for automation (managed identities, OIDC/workload identity federation), environments/promotion, and keeping…
janegilring/awesome-azure-landing-zones
Skill Claude CodeCodex
CAF/ALZ guidance for the Resource organization design area: the management group hierarchy, subscription strategy (subscription democratization), the conceptual ALZ management groups (Platform, Landing Zones, Decommissioned, Sandbox), resource groups, naming, and tagging. WHEN: "management group", "management group…
janegilring/awesome-azure-landing-zones
Skill Claude CodeCodex
CAF/ALZ guidance for the Security design area: applying Zero Trust to a landing zone, Microsoft Defender for Cloud and secure score, Microsoft Sentinel, encryption and key/secret management, network security controls, and the CAF Secure methodology. WHEN: "security design", "zero trust", "defender for cloud", "secure…
janegilring/awesome-azure-landing-zones
Skill Claude CodeCodex
Technical skill for subscription (landing zone) vending: the automated, self-service process a platform team uses to request, deploy, and govern application landing zone subscriptions at scale. Covers the collect-data → initiate-platform-automation → create-subscription → post-deployment workflow, the…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: