Agent-Skills azure-networking

Expert knowledge for Azure Networking development including troubleshooting, best practices, decision making, architecture & design patterns, security, and integrations & coding patterns. Use when designing hub-spoke VNets, Azure Firewall/NSG rules, WAF (App GW/Front Door), Accelerated Networking, or Resource Graph queries, and other Azure Networking related development tasks. Not for Azure Virtual Network (use azure-virtual-network), Azure Virtual Network Manager (use azure-virtual-network-manager), Azure Virtual WAN (use azure-virtual-wan), Azure Network Watcher (use azure-network-watcher).

install
source · Clone the upstream repo
git clone https://github.com/MicrosoftDocs/Agent-Skills
Claude Code · Install into ~/.claude/skills/
T=$(mktemp -d) && git clone --depth=1 https://github.com/MicrosoftDocs/Agent-Skills "$T" && mkdir -p ~/.claude/skills && cp -r "$T/skills/azure-networking" ~/.claude/skills/microsoftdocs-agent-skills-azure-networking && rm -rf "$T"
manifest: skills/azure-networking/SKILL.md
source content

Azure Networking Skill

This skill provides expert guidance for Azure Networking. Covers troubleshooting, best practices, decision making, architecture & design patterns, security, and integrations & coding patterns. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g.,

L35-L120
), use
read_file
with the specified lines. For categories with file links (e.g.,
[security.md](security.md)
), use
read_file
on the linked reference file

IMPORTANT for Agent: If

metadata.generated_at
is more than 3 months old, suggest the user pull the latest version from the repository. If
mcp_microsoftdocs
tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use
    mcp_microsoftdocs:microsoft_docs_fetch
    with query string
    from=learn-agent-skill
    . Returns Markdown.
  • Fallback: Use
    fetch_webpage
    with query string
    from=learn-agent-skill&accept=text/markdown
    . Returns Markdown.

Category Index

CategoryLinesDescription
TroubleshootingL34-L38Diagnosing and resolving Microsoft.Network resource provisioning failures in Azure, including common error patterns, causes, and step-by-step remediation guidance.
Best PracticesL39-L43Guidance on boosting Azure NVA and VM network throughput/latency using Accelerated Connections, including configuration, tuning, and performance best practices.
Decision MakingL44-L51Guidance on choosing Azure network architectures: using region latency data, selecting secure topologies and app delivery options, and planning networking for remote and hybrid work scenarios.
Architecture & Design PatternsL52-L58Routing and traffic flow design in Azure: analyzing control vs data plane paths, and building secure hub-spoke network architectures for web apps.
SecurityL59-L70Zero Trust security for Azure networking: policies, NSGs, Azure Firewall, DDoS, App Gateway/Front Door WAF hardening, and securing virtual networks for web apps.
Integrations & Coding PatternsL71-L74Using Azure Resource Graph to query, filter, and analyze Azure networking resources at scale (e.g., VNets, NSGs, public IPs) for inventory, compliance, and reporting.

Troubleshooting

TopicURL
Troubleshoot Microsoft.Network failed provisioning stateshttps://learn.microsoft.com/en-us/azure/networking/troubleshoot-failed-state

Best Practices

TopicURL
Optimize NVA and VM performance with Accelerated Connectionshttps://learn.microsoft.com/en-us/azure/networking/nva-accelerated-connections

Decision Making

TopicURL
Use Azure region latency stats for architecture planninghttps://learn.microsoft.com/en-us/azure/networking/azure-network-latency
Choose secure Azure application delivery optionshttps://learn.microsoft.com/en-us/azure/networking/secure-application-delivery
Select a secure Azure network topologyhttps://learn.microsoft.com/en-us/azure/networking/secure-network-topology
Plan Azure networking for remote work scenarioshttps://learn.microsoft.com/en-us/azure/networking/working-remotely-support

Architecture & Design Patterns

TopicURL
Analyze control plane routing interoperability in Azurehttps://learn.microsoft.com/en-us/azure/networking/connectivity-interoperability-control-plane
Analyze data plane paths across Azure networkshttps://learn.microsoft.com/en-us/azure/networking/connectivity-interoperability-data-plane
Design a secure hub-spoke network for Azure web appshttps://learn.microsoft.com/en-us/azure/networking/cross-service-scenarios/design-secure-hub-spoke-network

Security

TopicURL
Deploy a Zero Trust virtual network for web appshttps://learn.microsoft.com/en-us/azure/networking/create-zero-trust-network-web-apps
Use built-in Azure Policy definitions for networkinghttps://learn.microsoft.com/en-us/azure/networking/policy-reference
Apply Azure Policy compliance controls to networkinghttps://learn.microsoft.com/en-us/azure/networking/security-controls-policy
Secure Application Gateway WAF with Zero Trust guidancehttps://learn.microsoft.com/en-us/azure/networking/security/zero-trust-application-gateway-waf
Harden Azure Firewall with Zero Trust settingshttps://learn.microsoft.com/en-us/azure/networking/security/zero-trust-azure-firewall
Implement Zero Trust for Azure DDoS Protectionhttps://learn.microsoft.com/en-us/azure/networking/security/zero-trust-ddos-protection
Secure Front Door WAF at the edge with Zero Trusthttps://learn.microsoft.com/en-us/azure/networking/security/zero-trust-front-door-waf
Apply Zero Trust recommendations to Azure network securityhttps://learn.microsoft.com/en-us/azure/networking/security/zero-trust-network-security

Integrations & Coding Patterns

TopicURL
Run Azure Resource Graph queries for networking resourceshttps://learn.microsoft.com/en-us/azure/networking/fundamentals/resource-graph-samples