Generated banner for Azure Architecture Autopilot
Generated logo for Azure Architecture Autopilot

Azure Architecture Autopilot

GitHubOfficialFirst committed by whoniiiiDistributed by GitHub

  • Skill
  • Workflow
  • Cloud and DevOps
  • MIT
  • Low risk
  • Has scripts

From the author

Design Azure infrastructure using natural language, or analyze existing Azure resources to auto-generate architecture diagrams, refine them through conversation, and deploy with Bicep. When to use this skill: - "Create X on Azure", "Set up a RAG architecture" (new design) - "Analyze my current Azure infrastructure", "Draw a diagram for rg-xxx" (existing analysis) - "Foundry is slow", "I want to reduce costs", "Strengthen security" (natural language modification) - Azure resource deployment, Bicep template generation, IaC code generation - Microsoft Foundry, AI Search, OpenAI, Fabric, ADLS Gen2, Databricks, and all Azure services
— the description by whoniiii

AutoGineer summary

Written by AutoGineer from the skill’s own files, not by the author

Azure Architecture Autopilot is a multi-phase agentic workflow designed to assist users in creating or modifying Azure infrastructure. It guides users through an interactive design process, generates architecture diagrams using an embedded engine, produces Bicep templates, and manages the deployment lifecycle. The skill integrates with Azure services and utilizes official Microsoft documentation to ensure configurations align with current service specifications.

What it does

  • Designs new Azure infrastructure based on natural language requirements.
  • Analyzes existing Azure resources to generate visual architecture diagrams.
  • Refines infrastructure designs through interactive conversation.
  • Generates and reviews Bicep templates for infrastructure as code.
  • Executes deployment workflows including validation and what-if analysis.
  • Detects user language to provide localized support and documentation.

When to use it

  • When you need to design a new Azure environment or RAG architecture.
  • When you want to visualize your current Azure resource configuration.
  • When you need to generate or update Bicep templates for Azure deployments.
  • When you require guidance on modifying existing Azure infrastructure to meet new requirements.

Advantages

  • Automated diagram generation using an embedded engine with official Azure icons.
  • Structured multi-phase workflow ensuring design confirmation before deployment.
  • Integration with Microsoft documentation for dynamic service property lookups.
  • Supports natural language interaction for complex infrastructure tasks.
  • Includes built-in safety checks like what-if analysis prior to deployment.

Usage examples

“Create a RAG architecture on Azure.”
The agent will initiate the design phase, suggest a baseline architecture, generate a diagram, and guide you through the Bicep generation and deployment process.
“Analyze my current Azure infrastructure and draw a diagram.”
The agent will scan your existing resources, infer relationships, and produce an interactive HTML diagram of your current setup.
“I want to strengthen security for my existing Azure resources.”
The agent will analyze your current configuration and propose modifications to your infrastructure design to align with security patterns.

Install

Documentation by whoniiii

Azure Architecture Builder

A pipeline that designs Azure infrastructure using natural language, or analyzes existing resources to visualize architecture and proceed through modification and deployment.

The diagram engine is embedded within the skill (scripts/ folder). No pip install needed — it directly uses the bundled Python scripts to generate interactive HTML diagrams with 605+ official Azure icons. Ready to use immediately without network access or package installation.

Automatic User Language Detection

🚨 Detect the language of the user's first message and provide all subsequent responses in that language. This is the highest-priority principle.

  • If the user writes in Korean → respond in Korean

  • If the user writes in English → respond in English (ask_user, progress updates, reports, Bicep comments — all in English)

  • The instructions and examples in this document are written in English, and all user-facing output must match the user's language

⚠️ Do not copy examples from this document verbatim to the user. Use only the structure as reference, and adapt text to the user's language.

Tool Usage Guide (GHCP Environment)

FeatureTool NameNotes
Fetch URL contentweb_fetchFor MS Docs lookups, etc.
Web searchweb_searchURL discovery
Ask userask_userchoices must be a string array
Sub-agentstaskexplore/task/general-purpose
Shell command executionpowershellWindows PowerShell

All sub-agents (explore/task/general-purpose) cannot use web_fetch or web_search. Fact-checking that requires MS Docs lookups must be performed directly by the main agent.

External Tool Path Discovery

az, python, bicep, etc. are often not on PATH. Discover once before starting a Phase and cache the result. Do not re-discover every time.

⚠️ Do not use Get-Command python — risk of Windows Store alias. Direct filesystem discovery ($env:LOCALAPPDATA\Programs\Python) takes priority.

az CLI path:

$azCmd = $null
if (Get-Command az -ErrorAction SilentlyContinue) { $azCmd = 'az' }
if (-not $azCmd) {
  $azExe = Get-ChildItem -Path "$env:ProgramFiles\Microsoft SDKs\Azure\CLI2\wbin", "$env:LOCALAPPDATA\Programs\Azure CLI\wbin" -Filter "az.cmd" -ErrorAction SilentlyContinue | Select-Object -First 1 -ExpandProperty FullName
  if ($azExe) { $azCmd = $azExe }
}

Python path + embedded diagram engine: refer to the diagram generation section in references/phase1-advisor.md.

Progress Updates Required

Use blockquote + emoji + bold format:

> **⏳ [Action]** — [Reason]
> **✅ [Complete]** — [Result]
> **⚠️ [Warning]** — [Details]
> **❌ [Failed]** — [Cause]

Parallel Preload Principle

While waiting for user input via ask_user, preload information needed for the next step in parallel.

ask_user QuestionPreload Simultaneously
Project name / scan scopeReference files, MS Docs, Python path discovery, diagram module path verification
Model/SKU selectionMS Docs for next question choices
Architecture confirmationaz account show/list, az group list
Subscription selectionaz group list

Path Branching — Automatically Determined by User Request

Path A: New Design (New Build)

Trigger: "create", "set up", "deploy", "build", etc.

Phase 1 (references/phase1-advisor.md) — Interactive architecture design + diagram
    ↓
Phase 2 (references/bicep-generator.md) — Bicep code generation
    ↓
Phase 3 (references/bicep-reviewer.md) — Code review + compilation verification
    ↓
Phase 4 (references/phase4-deployer.md) — validate → what-if → deploy
Path B: Existing Analysis + Modification (Analyze & Modify)

Trigger: "analyze", "current resources", "scan", "draw a diagram", "show my infrastructure", etc.

Phase 0 (references/phase0-scanner.md) — Existing resource scan + diagram
    ↓
Modification conversation — "What would you like to change here?" (natural language modification request → follow-up questions)
    ↓
Phase 1 (references/phase1-advisor.md) — Confirm modifications + update diagram
    ↓
Phase 2~4 — Same as above
When Path Determination Is Ambiguous

Ask the user directly:

ask_user({
  question: "What would you like to do?",
  choices: [
    "Design a new Azure architecture (Recommended)",
    "Analyze + modify existing Azure resources"
  ]
})

Phase Transition Rules

  • Each Phase reads and follows the instructions in its corresponding references/*.md file

  • When transitioning between Phases, always inform the user about the next step

  • Do not skip Phases (especially the what-if between Phase 3 → Phase 4)

  • 🚨 Required condition for Phase 1 → Phase 2 transition: 01_arch_diagram_draft.html must have been generated using the embedded diagram engine and shown to the user. Do not proceed to Bicep generation without a diagram. Completing spec collection alone does not mean Phase 1 is done — Phase 1 includes diagram generation + user confirmation.

  • Modification request after deployment → return to Phase 1, not Phase 0 (Delta Confirmation Rule)

Service Coverage & Fallback

Optimized Services

Microsoft Foundry, Azure OpenAI, AI Search, ADLS Gen2, Key Vault, Microsoft Fabric, Azure Data Factory, VNet/Private Endpoint, AML/AI Hub

Other Azure Services

All supported — MS Docs are automatically consulted to generate at the same quality standard. Do not send messages that cause user anxiety such as "out of scope" or "best-effort".

Stable vs Dynamic Information Handling
CategoryHandling MethodExamples
StableReference files firstisHnsEnabled: true, PE triple set
DynamicAlways fetch MS DocsAPI version, model availability, SKU, region

Quick Reference

FileRole
references/phase0-scanner.mdExisting resource scan + relationship inference + diagram
references/phase1-advisor.mdInteractive architecture design + fact checking
references/bicep-generator.mdBicep code generation rules
references/bicep-reviewer.mdCode review checklist
references/phase4-deployer.mdvalidate → what-if → deploy
references/service-gotchas.mdRequired properties, PE mappings
references/azure-dynamic-sources.mdMS Docs URL registry
references/azure-common-patterns.mdPE/security/naming patterns
references/ai-data.mdAI/Data service guide
assets/06-architecture-diagram.pngExample generated architecture diagram
assets/07-azure-portal-resources.pngExample Azure portal resource view
assets/08-deployment-succeeded.pngExample successful deployment result

Files

references/azure-dynamic-sources.md

Azure Dynamic Sources Registry

This file manages only the sources (URLs) for frequently changing information. Actual values (API version, SKU, region, etc.) are not recorded here. Always fetch the URLs below to verify the latest information before generating Bicep.


1. Bicep API Version (Always Must Fetch)

Per-service MS Docs Bicep reference. Verify the latest stable apiVersion from these URLs before use.

Always verify child resources as well: Child resources such as accounts/projects, accounts/deployments, privateDnsZones/virtualNetworkLinks may have different API versions from their parent. Follow child resource links from the parent page to verify.

Services Not in the Table Above

The table above includes only v1 scope services. For other services, construct the URL in this format and fetch:

https://learn.microsoft.com/en-us/azure/templates/microsoft.{provider}/{resourceType}

2. Model Availability (Required When Using Foundry/OpenAI Models)

Verify whether the model name is deployable in the target region. Do not rely on static knowledge.

Verification MethodURL / Command
MS Docs model availabilityhttps://learn.microsoft.com/en-us/azure/ai-services/openai/concepts/models
Azure CLI (existing resources)az cognitiveservices account list-models --name "<NAME>" --resource-group "<RG>" -o table

If the model is unavailable in the target region → Notify the user and suggest available regions/alternative models. Do not substitute without user approval.


3. Private Endpoint Mapping (When Adding New Services)

PE groupId and DNS Zone mappings can be changed by Azure. When adding new services or verification is needed:

Verification MethodURL
PE DNS integration official docshttps://learn.microsoft.com/en-us/azure/private-link/private-endpoint-dns

Key service mappings in service-gotchas.md are stable, but always re-verify from the URL above when adding new services.


4. Service Region Availability

Verify whether a specific service is available in a specific region:

Verification MethodURL
Azure service-by-region availabilityhttps://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/

5. Azure Updates (Secondary Awareness)

The sources below are for reference only. The primary source is always MS Docs official documentation.

SourceURLPurpose
Azure Updateshttps://azure.microsoft.com/en-us/updates/Service change awareness
What's New in AzurePer-service What's New pages in DocsFeature change verification

Decision Rule: When to Fetch?

Information TypeMust Fetch?Rationale
API versionAlways fetchChanges frequently; incorrect values cause deployment failure
Model availability (name, region)Always fetchVaries by region and changes frequently
SKU listAlways fetchCan change per service
Region availabilityAlways fetchPer-service region support changes frequently. Always verify that the user-specified region is available for the service
PE groupId & DNS ZoneCan reference service-gotchas.md for v1 key services; must fetch for new services or complex configurations (Monitor, etc.)Key service mappings are stable, but new/complex services are risky
Required property patternsReference files firstNear-immutable (isHnsEnabled, etc.)

Requirements and compatibility

Written for: GitHub Copilot

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Needs: Needs Python

Security

What our scanner noticed· Low risk

  • Phrasing that asks for actions without confirmation
  • Instructions that use the network
  • Scripts that your agent may run

This skill includes scripts that your agent may run. Read them before you use it.

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Attribution and licence

First committed by
GitHub avatar of whoniiiiwhoniiii
Publisher
GitHub (Official)
Distributed by
GitHub
Source
github/awesome-copilot · skills/azure-architecture-autopilot · commit 797337f
Licence
MIT License (redistribution allowed)
  • LICENSE (added by AutoGineer from LICENSE)
  • ATTRIBUTION.md (written by AutoGineer)
Synced
Contributors
whoniiii, NehaGitHubAcc, Sertxito, stbenjam

AutoGineer is not affiliated with or endorsed by whoniiii or GitHub.

Get it from the source

1 of this skill’s files are not mirrored here, so there is no ZIP. Get the complete skill from its source: github/awesome-copilot