MCPInstall

azure-defender-for-cloud

by microsoftdocsDevOps & Cloud

Expert knowledge for Azure Defender For Cloud development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when securing VMs/containers, SQL/storage, multicloud connectors, JIT access, or Defender for Cloud APIs, and other Azure Defender For Cloud related development tasks. Not for Azure Security (use azure-security), Azure Sentinel (use azure-sentinel), Azure DDoS Protection (use azure-ddos-protection), Azure External Attack Surface Management (use azure-external-attack-surface-management).

Installs
195
Last 24h
—
Trending rank
—
Security
Not audited

Install

Works with every agent the skills CLI supports.

npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-defender-for-cloud
  1. 01

    Install

    Run the command in your project. The CLI asks which agents to install for.

  2. 02

    Describe the task

    Ask your agent for something this skill covers. It loads azure-defender-for-cloud automatically when relevant.

  3. 03

    Review the result

    The agent follows the SKILL.md steps, scripts and references bundled with the skill.

SKILL.md

The instructions your agent reads when the skill is triggered.

Azure Defender For Cloud Skill

This skill provides expert guidance for Azure Defender For Cloud. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
TroubleshootingL37-L83Diagnosing, interpreting, and fixing Defender for Cloud alerts and deployment issues across services (VMs, containers, SQL, storage, APIs, DNS, multi‑cloud connectors, and integrations).
Best PracticesL84-L101Guidance for investigating and remediating Defender for Cloud alerts, misconfigurations, and vulnerabilities across VMs, containers, storage, and SQL, plus tuning false positives and access controls.
Decision MakingL102-L131Planning and cost/feature tradeoffs for Defender for Cloud: choosing plans/portals, multicloud coverage, migrations (storage, servers, agents), DevOps/containers, and secure score/pre-purchase units.
Architecture & Design PatternsL132-L141Multicloud security architecture for Defender for Cloud: connector auth for AWS/GCP, secure/private connectivity, container protection design, ownership models, and applying Zero Trust.
Limits & QuotasL142-L151Limits, quotas, and behaviors for Defender for Cloud: data ingestion and trials, portal limitations, CSV alert export caps, extension lifecycles, and storage malware scan result interpretation.
SecurityL152-L212Configuring and managing Defender for Cloud security: roles/RBAC, compliance, recommendations, exemptions, JIT access, Kubernetes/containers, storage/SQL/AI protections, and threat detection/remediation.
ConfigurationL213-L287Configuring and tuning Defender for Cloud: enable plans, connect clouds and tools, set scanning/alerts/export, manage containers/storage/SQL/EDR, and customize policies, tags, and automations.
Integrations & Coding PatternsL288-L322Integrating Defender for Cloud with SIEMs, XDR, ITSM, CI/CD, multi-cloud logs, and using APIs/CLI/ARG to query, export, and automate alerts, vulnerabilities, SBOM, and SQL VA data.
DeploymentL323-L343Guides for planning and deploying Defender for Cloud components (servers, containers, APIs, on-prem/Arc), automating at scale (CLI, PowerShell, CI/CD, ARM/Bicep), and checking prerequisites/support.

Troubleshooting

TopicURL
Interpret and respond to Defender for Cloud AI alertshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-ai-workloads
Interpret Defender for Cloud alerts for Azure App Servicehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-azure-app-service
Interpret Defender for Cloud alerts for Azure Cosmos DBhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-azure-cosmos-db
Interpret Defender for Cloud alerts for Azure DDoS Protectionhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-azure-ddos-protection
Interpret Defender for Cloud alerts for Azure Key Vaulthttps://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-azure-key-vault
Interpret Defender for Cloud alerts for Azure network layerhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-azure-network-layer
Interpret Defender for Cloud alerts for Azure Storagehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-azure-storage
Interpret Defender for Cloud alerts for Azure VM extensionshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-azure-vm-extensions
Diagnose and simulate Kubernetes alerts in Defender for Containershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-containers
Interpret Defender for Cloud alerts for Defender for APIshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-defender-for-apis
Interpret Defender for Cloud alerts for DNShttps://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-dns
Interpret Defender for Cloud alerts for Linux machineshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-linux-machines
Interpret and act on Defender alerts for open-source databaseshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-open-source-relational-databases
Use Defender for Cloud security alert referencehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-reference
Understand Defender alerts for Azure Resource Managerhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-resource-manager
Interpret and respond to Defender SQL security alertshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-sql-database-and-azure-synapse-analytics
Interpret Defender for Cloud alerts for Windows machineshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-windows-machines
Investigate API security alerts and posture in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-apis-posture
Troubleshoot Microsoft Defender for Containers deploymentshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-troubleshoot
Verify Defender for Containers sensor deploymenthttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-verify-deployment
Respond to Microsoft Defender for DNS security alertshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-dns-alerts
Investigate and remediate Defender for Resource Manager alertshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-resource-manager-usage
Investigate and respond to Defender for SQL alertshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-sql-alerts
Test and validate Defender for Storage data security featureshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-test
Understand Defender for Storage security threats and alertshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-threats-alerts
Resolve common Defender portal integration issueshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-portal/integration-faq
Review deprecated Defender for Cloud security alertshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/deprecated-alerts
Fix EDR solution recommendations in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/endpoint-detection-response-solution-recommendations
Resolve common Microsoft Defender for Servers issueshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/faq-defender-for-servers
FAQ and troubleshooting for Endor Labs integrationhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/faq-endor-labs
Resolve common Microsoft Defender for Cloud issueshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/faq-general
Use Defender for Cloud incident reference and management infohttps://learn.microsoft.com/en-us/azure/defender-for-cloud/incidents-reference
Investigate Kubernetes node malware alerts in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/kubernetes-nodes-malware
Fix agentless scan errors for GCP VMs in Defenderhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/resolve-disk-scanning-error
Resolve GCP Domain Restricted Sharing for Defender onboardinghttps://learn.microsoft.com/en-us/azure/defender-for-cloud/resolve-gcp-sharing-policy
Resolve GCP VPC Service Controls issues for Defenderhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/resolve-vpc-service-controls-issues
Verify agentless malware scanning alerts for Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/test-agentless-malware-scanning
Troubleshoot Defender for Cloud AWS and GCP connector issueshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/troubleshoot-connectors
Troubleshoot Defender for SQL on Machines configurationhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/troubleshoot-sql-machines-guide
Troubleshoot express and classic SQL VA configurationhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/troubleshoot-vulnerability-findings
Troubleshoot common Microsoft Defender for Cloud issueshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/troubleshooting-guide
Troubleshoot gated Kubernetes deployments with Defender for Containershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/troubleshooting-runtime-gated
Verify Defender protection for AWS open-source databaseshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/verify-protection-open-source-relational-databases-aws

Best Practices

TopicURL
Validate Microsoft Defender for Cloud alert configurationhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/alert-validation
Review and remediate OS baseline misconfigurations in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/apply-security-baseline
Use binary drift detection to protect container workloadshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/binary-drift-detection
Handle false-positive recommendations in Defender for Storagehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-false-positive-recommendations
Investigate and fix Defender for Endpoint misconfiguration findingshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/endpoint-detection-misconfiguration
Remediate endpoint detection and response gaps in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/endpoint-detection-response-solution-recommendations
Remediate Defender for Cloud security recommendationshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/implement-security-recommendations
Remediate machine vulnerabilities in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/remediate-vulnerability-findings-vm
Review and remediate Azure SQL VA findingshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/sql-azure-vulnerability-assessment-find
SQL vulnerability assessment rules and guidancehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/sql-azure-vulnerability-assessment-rules
Track SQL vulnerability assessment rule changeshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/sql-azure-vulnerability-assessment-rules-changelog
Protect Azure VMs with JIT access and application controlhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/tutorial-protect-resources
Remediate running container vulnerabilities in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/view-and-remediate-vulnerabilities-containers
Review and remediate Defender registry image vulnerabilitieshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/view-and-remediate-vulnerability-registry-images

Decision Making

TopicURL
Choose between Azure and Defender portals for Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/azure-portal-vs-defender-portal-comparison
Allocate Defender for Cloud costs using Azure Cost Analysishttps://learn.microsoft.com/en-us/azure/defender-for-cloud/chargeback
Select and configure Defender for Cloud plans for GCP projectshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/configure-google-plans
Estimate Microsoft Defender for Cloud plan costshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/cost-calculator
Evaluate and migrate from Defender for Storage classichttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-classic
Migrate from classic to new Defender for Storage planhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-classic-migrate
Estimate and track Defender for Cloud costs with DWUshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-portal/estimate-track-costs
Decide how plan management changes in Defender portalhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-portal/plan-management-changes-defender-portal
Plan migration from BYOL VM vulnerability scanninghttps://learn.microsoft.com/en-us/azure/defender-for-cloud/deploy-vulnerability-assessment-byol-vm
Plan Defender for Cloud DevOps security supporthttps://learn.microsoft.com/en-us/azure/defender-for-cloud/devops-support
Manage Defender for open-source databases on AWS RDShttps://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-defender-for-databases-aws
Migrate to updated File Integrity Monitoring in Defender for Servershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/episode-fifty-three
Plan and choose Microsoft CNAPP with Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/episode-forty-eight
Understand and use the new secure score in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/episode-sixty-six
Answer common questions about Defender for Containershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/faq-defender-for-containers
Use GitHub Advanced Security with Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/github-advanced-security-overview
Plan multicloud Defender for Cloud feature supporthttps://learn.microsoft.com/en-us/azure/defender-for-cloud/multicloud-support-matrix
Plan deployment of Defender for Servers across environmentshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-defender-for-servers
Plan Defender for Servers data residency and workspaceshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-defender-for-servers-data-workspace
Choose the right Defender for Servers planhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-defender-for-servers-select-plan
Define ownership roles for multicloud Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-multicloud-security-determine-ownership-requirements
Plan for Log Analytics agent retirement in Defenderhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/prepare-deprecation-log-analytics-mma-agent
Plan for Log Analytics agent retirement in Defenderhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/prepare-deprecation-log-analytics-mma-agent
Choose and optimize Defender for Cloud pre-purchase unitshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/prepurchase-plan
Migrate Defender for Cloud disable rules to exemptionshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/transition-disable-rules-exemptions
Plan transition to individual Defender for Cloud recommendationshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/transition-grouped-individual-recommendations

Architecture & Design Patterns

TopicURL
Understand GCP connector authentication architecture in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/authentication-architecture-google-cloud
Understand AWS connector authentication architecture in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/concept-authentication-architecture-aws
Design secure connectivity with Microsoft Security Private Link for Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/concept-private-links
Review Defender for Containers security architecture and connectivityhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-architecture
Understand Defender for Containers deployment architecture optionshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-deployment-overview
Apply Zero Trust principles with Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/zero-trust

Limits & Quotas

TopicURL
Understand Defender for Servers data ingestion benefithttps://learn.microsoft.com/en-us/azure/defender-for-cloud/data-ingestion-benefit
Review known limitations of Defender portal experiencehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-portal/known-limitations
Export Defender for Cloud alerts to CSV with limitshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/export-alerts-to-csv
Understand Defender for Cloud free trial limitshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/free-trial
Review Defender for Cloud data collection extensions and retirement timelineshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/monitoring-components
Interpret Defender for Storage malware scan resultshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/understand-malware-scan-results

Security

TopicURL
Assign Defender for Cloud recommendations to active usershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/active-user
Enable Defender for Cloud threat protection for AIhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/ai-onboarding
Configure container runtime antimalware in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/anti-malware
Assign workload owner access for AWS/GCP connectorshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/assign-access-to-workload
Assign regulatory compliance standards in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/assign-regulatory-compliance-standards
Configure unified RBAC cloud scopes in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/cloud-scopes-unified-rbac
Use Defender for Cloud code-to-runtime mappinghttps://learn.microsoft.com/en-us/azure/defender-for-cloud/code-to-runtime-mapping
Configure Defender for Cloud private endpointshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/configure-private-endpoints
Configure IAM roles for Defender for Containers on AWS and GCPhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/containers-permissions
Allow Defender for Cloud export to firewalled Event Hubshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/continuous-export-event-hub-firewall
Create custom security standards and recommendations in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/create-custom-recommendations
Understand data collection and protection in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/data-security
Configure secure authentication for Defender for Cloud CLIhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-cli-authentication
Automate malware remediation in Defender for Storagehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-configure-malware-scan
Verify EDR solution connectivity in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/detect-endpoint-detection-response-solutions
Identify internet-exposed IPs with Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/detect-exposed-ip-addresses
Configure Defender exemptions for container image findingshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/disable-vulnerability-findings-containers
Enable Defender for open-source Azure databases securelyhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-defender-for-databases-azure
Configure sensitive data threat detection in Defender for Storagehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-defender-for-storage-data-sensitivity
Enable just-in-time access for Azure VMshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-just-in-time-access
Configure Defender gated deployment vulnerability rules for AKShttps://learn.microsoft.com/en-us/azure/defender-for-cloud/enablement-guide-runtime-gated
Analyze Kubernetes lateral movement with Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/episode-sixty-one
Exempt specific resources from Defender for Cloud recommendationshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/exempt-resource
Create Defender for Cloud recommendation exemptions at scalehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/exempt-resources-at-scale
Understand Defender for Cloud permission requirements and roleshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/faq-permissions
Defender for Cloud regulatory compliance FAQ and mappingshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/faq-regulatory-compliance
Review file integrity monitoring changes in Defenderhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/file-integrity-monitoring-review-changes
Add end-user and app context to Defender AI alertshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/gain-end-user-context-ai
Configure gated AKS deployments with Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/gated-deployment-infrastructure-as-code
Use governance rules to drive recommendation remediationhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/governance-rules
Use attack path analysis to remediate cloud security riskshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/how-to-manage-attack-path
Configure just-in-time VM access in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-overview
Configure Kubernetes misconfiguration enforcement in Defenderhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/kubernetes-misconfiguration-enforcement
Remediate Kubernetes node vulnerabilities in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/kubernetes-nodes-va
Enforce Kubernetes data plane hardening with Azure Policyhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/kubernetes-workload-protections
Harden OS baselines with Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/operating-system-misconfiguration
Assign Defender for Cloud roles and permissions with Azure RBAChttps://learn.microsoft.com/en-us/azure/defender-for-cloud/permissions
Configure roles and permissions for Defender for Servershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-defender-for-servers-roles
Manage user data and GDPR requests in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/privacy
Use Defender for Cloud security recommendations for Azure App Servicehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-app-services
Apply Defender for Cloud compute security recommendationshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-compute
Apply Defender for Cloud container security recommendationshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-container
Harden data resources with Defender for Cloud recommendationshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-data
Review deprecated Defender for Cloud security recommendationshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-deprecated
Use Defender for Cloud DevOps security recommendationshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-devops
Implement identity and access security recommendations in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-identity-access
Use Defender for Cloud IoT security recommendationshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-iot
Apply Defender for Cloud Key Vault security recommendationshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-keyvault
Apply networking security recommendations in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-networking
Use Defender for Cloud serverless containers security recommendationshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-serverless-containers
Apply serverless protection recommendations in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-serverless-protection
Manage Defender for Cloud recommendation exemptionshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/review-exemptions
Review and act on Defender for Cloud security recommendationshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/review-security-recommendations
Enable Defender SQL Vulnerability Assessment express modehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/sql-azure-vulnerability-assessment-enable
Configure classic SQL Vulnerability Assessment in Defenderhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/sql-azure-vulnerability-assessment-enable-classic
Review prerequisites and permissions for Defender for Storagehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/support-matrix-defender-for-storage
Configure tenant-wide Defender for Cloud permissionshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/tenant-wide-permissions-management

Configuration

TopicURL
Advanced configuration and logging for malware scanninghttps://learn.microsoft.com/en-us/azure/defender-for-cloud/advanced-configurations-for-malware-scanning
Configure agentless code scanning in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/agentless-code-scanning
Configure agentless malware scanning for Defender for Servershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/agentless-malware-scanning
Configure container vulnerability management in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/agentless-vulnerability-assessment-azure
Onboard Docker Hub registries for Defender vulnerability assessmenthttps://learn.microsoft.com/en-us/azure/defender-for-cloud/agentless-vulnerability-assessment-docker-hub
Configure JFrog Artifactory tenants for agentless vulnerability scanninghttps://learn.microsoft.com/en-us/azure/defender-for-cloud/agentless-vulnerability-assessment-jfrog-artifactory
Understand Defender for Cloud alert schemashttps://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-schemas
Configure alert suppression rules in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/alerts-suppression-rules
Use Azure Monitor Agent with Defender for Cloud servershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/auto-deploy-azure-monitoring-agent
Build Cloud Security Explorer queries for container vulnerabilitieshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/cloud-security-explorer-container-vulnerabilities
Author Cloud Security Explorer queries for Kuberneteshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/cloud-security-explorer-kubernetes-clusters
Configure Microsoft Security DevOps extension in Azure DevOpshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/configure-azure-devops-extension
Configure Microsoft Security DevOps extension in Azure DevOpshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/configure-azure-devops-extension
Configure Defender for Cloud alert email notificationshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/configure-email-notifications
Modify Defender for Servers coverage and plan settingshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/configure-servers-coverage
Manage classic SQL vulnerability findings in Defenderhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/configure-vulnerability-findings-classic
Configure express vulnerability findings in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/configure-vulnerability-findings-express
Enable Defender for Cloud on Azure subscriptionshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/connect-azure-subscription
Configure container image mapping from code to runtimehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/container-image-mapping
Configure Defender for Cloud continuous export in portalhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/continuous-export
Configure continuous export with Azure Policy at scalehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/continuous-export-azure-policy
Analyze Defender for Cloud export data in Azure Monitorhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/continuous-export-view-data
Configure cross-tenant management with Azure Lighthousehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/cross-tenant-management
Configure custom data collection rules for Defender for Servershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/data-collection-rule
Configure data security posture in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/data-security-posture-enable
Customize data sensitivity settings in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/data-sensitivity-settings
Review CI/CD scan results in Cloud Security Explorerhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-cli-reviewing-results
Identify AWS and GCP resources covered by Defender CSPMhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-cloud-security-posture-management-supported-resources
Connect Docker Hub registries to Defender for Containershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-enable-external-registry-for-docker-hub
Enable Defender for Containers across cloud providershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-enable-plan
Configure cluster exclusion tags for Defender for Containers sensor deploymenthttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-exclude-cluster
Reference access patterns and private cluster support for Defender for Containershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-feature-access-patterns
Configure network access and permissions for Defender for Containershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-network-access
Disable and remove Defender for Containers componentshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-remove
Enable and configure Defender for Azure Cosmos DBhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-databases-enable-cosmos-protections
Configure vulnerability assessment for SQL servers on machineshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-sql-on-machines-vulnerability-assessment
Enable and configure classic Defender for Storagehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-classic-enable
Configure Defender for Storage via IaC and policyhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-infrastructure-as-code-enablement
Configure Defender for Storage using Azure Policy at scalehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-policy-enablement
Enable Defender for Storage with Azure PowerShellhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-powershell-enablement
Enable Defender for Storage using the REST APIhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-rest-api-enablement
Configure Azure environment connections in Defender portalhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-portal/connect-azure-environments-defender-portal
Configure cloud security plans in Defender portalhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-portal/manage-plans-defender-portal
Configure Defender Vulnerability Management scanning in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/deploy-vulnerability-assessment-defender-vulnerability-management
Configure disabled vulnerability findings in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/disable-vulnerability-findings
Configure agentless machine scanning across clouds in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-agentless-scanning-vms
Configure Defender for Endpoint integration in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-defender-for-endpoint
Configure and remediate system update recommendations in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-periodic-system-updates
Enable Defender for Cloud pull request annotationshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/enable-pull-request-annotations
Configure and assess Defender for Endpoint EDR settingshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/endpoint-detection-response
Configure malware automated remediation in Defender for Storagehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/episode-sixty-five
Exclude machines from agentless scanning in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/exclude-machines-agentless-scanning
Configure File Integrity Monitoring with Defender for Servershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/file-integrity-monitoring-enable-defender-endpoint
Configure Microsoft Security DevOps GitHub Actionhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/github-action
Configure cloud security explorer queries and snapshotshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/how-to-manage-cloud-security-explorer
Configure IaC template-to-resource mapping in Defenderhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/iac-template-mapping
Configure IaC security scanning with Microsoft Security DevOpshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/iac-vulnerabilities
Configure and manage MCSB in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/manage-mcsb
Migrate classic Defender for SQL API configurationshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/migrate-classic-defender-for-sql-apis
Set up on-demand malware scanning in Defender for Storagehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/on-demand-malware-scanning
Associate Defender for Endpoint servers with Defender for Servershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/onboard-machines-with-defender-for-endpoint
Use built-in Azure Policy definitions for Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/policy-reference
Reference AI security recommendations in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-ai
Reference API security recommendations in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference-api
Deploy Azure machine configuration extension with Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/security-baseline-guest-configuration
Reference supported sensitive information types in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/sensitive-info-types
Configure SQL alert simulation in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/simulate-alerts-sql-machines
Use software inventory in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/software-inventory
Use Security Copilot to summarize Defender recommendationshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/summarize-with-copilot
Configure automatic registration for Defender for SQL Servershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/update-sql-machine-configuration
Set up workflow automations in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/workflow-automations

Integrations & Coding Patterns

TopicURL
Connect Defender for Cloud data to Power BIhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/add-data-power-bi
Query Defender attack path data via Azure Resource Graph APIhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/attack-path-api
Integrate Defender for Cloud CLI into CI/CD pipelineshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/ci-cd-pipeline-scanning-with-defender-cli
Build Defender Cloud Security Explorer vulnerability querieshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/cloud-security-explorer-software-vulnerabilities
Integrate Defender for Cloud alerts with Microsoft Defender XDRhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/concept-integration-365
Integrate Mend.io with Microsoft Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/connect-mend-io
Integrate Defender for Cloud with ServiceNow ITSMhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/connect-servicenow
Configure Defender for Cloud continuous export via REST APIhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/continuous-export-rest-api
Automate ServiceNow tickets with Defender governance ruleshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/create-governance-rule-servicenow
Integrate Defender for Cloud tickets with ServiceNowhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/create-ticket-servicenow
Use Defender for Cloud CLI syntax for container and SBOM scanshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-cli-syntax
Query and export Defender for SQL vulnerability resultshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-sql-scan-results
Query storage aggregated logs with Defender XDR Advanced Huntinghttps://learn.microsoft.com/en-us/azure/defender-for-cloud/episode-sixty-four
Stream Defender for Cloud alerts to SIEM toolshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/export-to-siem
Configure Defender for Cloud alerts export to QRadar/Splunkhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/export-to-splunk-or-qradar
Reference for SQL VA Express Azure CLI commandshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/express-configuration-azure-commands
Reference for SQL VA Express PowerShell commandshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/express-configuration-powershell-commands
Use SQL VA Express configuration PowerShell wrapperhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/express-configuration-sql-commands
Integrate AWS CloudTrail logs with Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/integrate-cloud-trail
Understand Defender for Endpoint integration in Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/integration-defender-for-endpoint
Ingest GCP Cloud Logging into Defender for Cloud via Pub/Subhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/logging-ingestion
Integrate 42Crunch API security with Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/onboarding-guide-42crunch
Integrate Bright Security DAST with Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/onboarding-guide-bright
Connect StackHawk application testing to Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/onboarding-guide-stackhawk
Legacy security solution integrations with Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/partner-integration
Enable SQL VA Express Configuration with PowerShellhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/powershell-sample-vulnerability-assessment-azure-sql
Set SQL VA baselines on Azure SQL via PowerShellhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/powershell-sample-vulnerability-assessment-baselines
Use unified SQL VA REST API end-to-endhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/powershell-unified-api-quickstart
Query SBOM data in Defender for Cloud explorerhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/query-software-bill-of-materials
Use Azure Resource Graph queries for Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/resource-graph-samples
Connect Sentinel-linked AWS accounts to Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/sentinel-connected-aws

Deployment

TopicURL
Integrate Defender for Cloud CLI into CI/CD pipelineshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/ci-cd-pipeline-scanning-with-defender-cli
Review prerequisites and support for Defender data security posturehttps://learn.microsoft.com/en-us/azure/defender-for-cloud/concept-data-security-posture-prepare
Verify prerequisites for Defender for APIs deploymenthttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-apis-prepare
Deploy Defender for Containers sensors via Azure CLIhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-deploy-azure-cli
Plan Defender for Containers deployment across Kubernetes environmentshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-deployment-planning
Deploy Defender for Containers to private Kubernetes clustershttps://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-containers-private-clusters
Deploy Defender for Containers sensor with Helmhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/deploy-helm
Integrate Defender for Cloud CLI into CI/CD pipelineshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/episode-fifty-nine
Adopt Kubernetes gated deployment with Defender for Cloudhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/episode-sixty-two
Migrate File Integrity Monitoring to Defender for Endpointhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/migrate-file-integrity-monitoring
Scale Microsoft Defender for Servers across environmentshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/plan-defender-for-servers-scale
Onboard Defender for Cloud at scale using PowerShellhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/powershell-onboarding
Deploy Defender for Cloud alert automation via ARM or Bicephttps://learn.microsoft.com/en-us/azure/defender-for-cloud/quickstart-automation-alert
Onboard on-premises machines to Defender for Cloud via Archttps://learn.microsoft.com/en-us/azure/defender-for-cloud/quickstart-onboard-machines
Review Defender for Cloud regional availability by platformhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/regional-availability
Check Defender for Cloud interoperability and support matrixhttps://learn.microsoft.com/en-us/azure/defender-for-cloud/support-matrix-defender-for-cloud
Check Defender for Containers platform supporthttps://learn.microsoft.com/en-us/azure/defender-for-cloud/support-matrix-defender-for-containers
Review Defender for Servers plan support and requirementshttps://learn.microsoft.com/en-us/azure/defender-for-cloud/support-matrix-defender-for-servers

FAQ

What does the azure-defender-for-cloud skill do?

Expert knowledge for Azure Defender For Cloud development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when securing VMs/containers, SQL/storage, multicloud connectors, JIT access, or Defender for Cloud APIs, and other Azure Defender For Cloud related development tasks. Not for Azure Security (use azure-security), Azure Sentinel (use azure-sentinel), Azure DDoS Protection (use azure-ddos-protection), Azure External Attack Surface Management (use azure-external-attack-surface-management).

How do I install azure-defender-for-cloud?

Run npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-defender-for-cloud in your project. The skills CLI detects the agents you use and copies the skill into the right folder. For Claude Code you can also place the skill folder at ~/.claude/skills/azure-defender-for-cloud/ (personal) or .claude/skills/azure-defender-for-cloud/ (project).

Which AI agents can use azure-defender-for-cloud?

Any agent that supports the open Agent Skills format (a folder with a SKILL.md file), including Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, Windsurf, Cline, OpenCode and more.

Is azure-defender-for-cloud safe to install?

No partner security audit is available yet. Skills can run commands and scripts, so read the SKILL.md and any bundled files before installing.

Who maintains azure-defender-for-cloud?

It is published by microsoftdocs in microsoftdocs/agent-skills. It has 195 recorded installs.

More from microsoftdocs/agent-skills

View all →

azure-container-apps

microsoftdocs/agent-skills

Expert knowledge for Azure Container Apps development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when configuring ACA auth/networking, workload profiles/GPUs, CI/CD deployments, KEDA/Dapr scaling, or Java microservices, and other Azure Container Apps related development tasks. Not for Azure App Service (use azure-app-service), Azure Functions (use azure-functions), Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure Spring Apps (use azure-spring-apps).

DevOps & Cloud1.3K installs

azure-sql-database

microsoftdocs/agent-skills

Expert knowledge for Azure SQL Database development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when choosing DTU/vCore tiers, configuring serverless or Hyperscale, geo-replication/DR, CI/CD, or Terraform, and other Azure SQL Database related development tasks. Not for Azure SQL Managed Instance (use azure-sql-managed-instance), SQL Server on Azure Virtual Machines (use azure-sql-virtual-machines), Azure Cosmos DB (use azure-cosmos-db), Azure Data Factory (use azure-data-factory).

Data & Databases1.3K installs

azure-well-architected

microsoftdocs/agent-skills

Expert guidance for designing, assessing, and optimizing Azure workloads using Azure Well Architected. Covers design review checklists, recommendations, design principles, tradeoffs, service guides, workload patterns, and assessment questions. Use when designing AI/HPC/SaaS workloads, AVD/AVS deployments, WAF assessments, or App Service/AKS/SQL architectures, and other Azure Well Architected related development tasks.

DevOps & Cloud646 installs

azure-pipelines

microsoftdocs/agent-skills

Expert knowledge for Azure Pipelines development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when configuring YAML pipelines, agents, service connections, Key Vault secrets, or Kubernetes/web app deployments, and other Azure Pipelines related development tasks. Not for Azure DevOps (use azure-devops), Azure Boards (use azure-boards), Azure Repos (use azure-repos), Azure Test Plans (use azure-test-plans).

DevOps & Cloud439 installs

azure-architecture

microsoftdocs/agent-skills

Expert guidance for designing Azure solutions using Azure Architecture. Covers reference architectures, solution ideas, design patterns, technology choices, architecture styles, best practices, anti-patterns, example workloads, and migration guides. Use when designing AKS or App Service apps, SAP/ERP or IoT workloads, hybrid/Arc setups, or AI/ML solutions on Azure, and other Azure Architecture related development tasks.

Code Quality & Workflow419 installs

azure-devops

microsoftdocs/agent-skills

Expert knowledge for Azure DevOps development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when managing org/projects, repos, pipelines, work items, dashboards/analytics, or Azure DevOps Server deployments, and other Azure DevOps related development tasks. Not for Azure Boards (use azure-boards), Azure Pipelines (use azure-pipelines), Azure Repos (use azure-repos), Azure Test Plans (use azure-test-plans).

DevOps & Cloud407 installs

Popular devops & cloud skills

View category →

microsoft-foundry

microsoft/azure-skills

Build, deploy, evaluate, optimize, fine-tune, and manage Microsoft Foundry agents, models, and resources end to end. USE FOR: foundry, azd ai agent, azd provision/deploy, hosted agent scaffold/develop/run/deploy/troubleshoot, prompt agent create, managed harness agent create, GitHub Copilot harness agent, create agent, update agent, add tool to agent, invoke agent, agent insights, evaluate agent, batch eval, continuous eval, continuous monitoring, agent CI/CD, optimize prompt, improve prompt, optimize agent instructions, Agent Optimizer scaffold, dataset curation from traces, deploy model, model fine-tuning (SFT/DPO/RFT), Foundry project, RBAC, role assignment, permissions, quota, capacity, region, deployment failure, AI Services, create Foundry resource, knowledge index, customize deployment, onboard, availability, training-data, grader, distillation, large file upload. DO NOT USE FOR: Azure Functions, App Service, general Azure deploy (use azure-deploy), general Azure prep (use azure

OfficialDevOps & Cloud579.1K installs

azure-diagnostics

microsoft/azure-skills

Debug Azure production issues on Azure using AppLens, Azure Monitor, resource health, and safe triage. WHEN: debug production issues, troubleshoot app service, app service high CPU, app service deployment failure, troubleshoot container apps, container app 503 or target port mismatch, troubleshoot functions, function telemetry missing or stopped after a config/connection-string change, troubleshoot AKS, VM RDP, Linux SSH, VM black screen, can't connect to VM, reset VM password, NSG or firewall blocking, kubectl cannot connect, kube-system/CoreDNS failures, pod pending, crashloop, node not ready, upgrade failures, analyze logs, KQL, insights, image pull failures, cold start issues, health probe failures, resource health, root cause of errors, troubleshoot event hubs, troubleshoot service bus, messaging SDK error, AMQP connection failure, message lock lost, lock renewal during long-running processing, service bus dead letter.

OfficialDevOps & Cloud569.8K installs

azure-prepare

microsoft/azure-skills

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.

OfficialDevOps & Cloud569K installs

azure-ai

microsoft/azure-skills

Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybrid search, speech-to-text, text-to-speech, transcription, OCR. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, OCR, convert text to speech.

OfficialDevOps & Cloud568.8K installs

azure-deploy

microsoft/azure-skills

Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application — use azure-prepare instead. This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. Requires .azure/deployment-plan.md from azure-prepare and validated status from azure-validate. WHEN: "run azd up", "run azd deploy", "execute deployment", "push to production", "push to cloud", "go live", "ship it", "bicep deploy", "terraform apply", "publish to Azure", "launch on Azure". DO NOT USE WHEN: "create and deploy", "build and deploy", "create a new app", "set up infrastructure", "create and deploy to Azure using Terraform" — use azure-prepare for these.

OfficialDevOps & Cloud568.6K installs

azure-validate

microsoft/azure-skills

Pre-deployment validation for Azure readiness. Run deep checks on configuration, infrastructure (Bicep or Terraform), RBAC role assignments, managed identity permissions, and prerequisites before deploying. WHEN: validate my app, check deployment readiness, run preflight checks, verify configuration, check if ready to deploy, validate azure.yaml, validate Bicep, test before deploying, troubleshoot deployment errors, validate Azure Functions, validate function app, validate serverless deployment, verify RBAC roles, check role assignments, review managed identity permissions, what-if analysis, validate Container Apps deployment.

OfficialDevOps & Cloud568K installs