deploying-on-azure_skill

Overview

This skill designs and implements Azure cloud architectures using Microsoft best practices across compute, storage, databases, AI services, networking, and governance. It helps choose the right services, optimize cost and performance, and enforce security and compliance for new builds or migrations to Azure. Practical guidance covers service selection, IaC, identity, messaging, and AI integration patterns.

How this skill works

I inspect your workload requirements (scale, control, latency, data residency, integration) and map them to recommended Azure services and patterns. The skill provides decision frameworks (compute, storage, database, messaging), deployment guidance with Bicep/Terraform recommendations, and concrete controls for identity, networking, and governance. I also include cost estimation, lifecycle policies, and AI/ML integration patterns like RAG with Azure OpenAI.

When to use it

• Designing new applications or migrating workloads to Azure
• Selecting compute platforms (Container Apps, AKS, Functions, App Service)
• Architecting storage and lifecycle policies for cost optimization
• Integrating Azure OpenAI, Cognitive Services, or Azure ML
• Implementing messaging, networking, and secure private connectivity
• Defining governance, policy guardrails, and operational controls

Best practices

• Prefer managed PaaS services to reduce operational overhead when possible
• Use Private Endpoints in production and hub-and-spoke VNets for centralized security
• Apply Managed Identity and Azure RBAC with least privilege for all resources
• Leverage Bicep for Azure-native IaC and Terraform for multi-cloud consistency
• Enforce Azure Policy guardrails (tagging, allowed regions, TLS, private endpoints)
• Apply lifecycle policies for storage tiers and reserved/spot capacity for cost savings

Example use cases

• Deploy a microservices API with Azure Container Apps, Private Endpoints, and Key Vault
• Migrate a relational database to Azure SQL Managed Instance with backup and HA across zones
• Build a semantic search with embeddings using Azure OpenAI + Azure Cognitive Search (RAG)
• Ingest high-throughput telemetry with Event Hubs and process with Functions or Stream Analytics
• Protect PII by enforcing Private Endpoints, Key Vault encryption, and Conditional Access