Azure Defaults Skill

Single source of truth for Azure infrastructure configuration. Deep-dive content lives in references/ — load on demand.

Quick Reference (Load First)

Default Regions

Required Tags (Azure Policy Enforced)

These 4 tags are the MINIMUM baseline. Always defer to 04-governance-constraints.md for the actual required tag list.

Tag Casing Rule: Use PascalCase exactly as shown above (Environment, ManagedBy, Project, Owner). Never emit both owner and Owner or environment and Environment in the same template — Azure Policy treats case-variant tag keys as ambiguous evaluation paths (AmbiguousPolicyEvaluationPaths error).

Unique Suffix Pattern

Generate ONCE, pass to ALL modules:

var uniqueSuffix = uniqueString(resourceGroup().id)

Security Baseline (5-Line Summary)

For AVM pitfalls and deprecation patterns, read references/security-baseline-full.md.

Deprecated Services (Do NOT Recommend for Greenfield)

Rule: Never recommend deprecated services for greenfield projects. Before recommending any service with a multi-year RI commitment, verify the service retirement timeline extends beyond the commitment period. Check Microsoft Learn deprecation announcements.

CAF Naming Conventions

For extended abbreviations and length-constraint examples, read references/naming-full-examples.md.

Azure Verified Modules (AVM)

1. ALWAYS check AVM availability first
2. Use AVM defaults for SKUs when available
3. NEVER write raw Bicep/TF for a resource that has an AVM module

For the full Bicep + Terraform AVM module registry, read references/avm-modules.md.

Template-First Output Rules

Validation Checklist

• Output saved to agent-output/{project}/
• All required H2 headings present and correctly ordered
• All 4 required tags included in resource definitions
• Unique suffix used for globally unique names
• Security baseline settings applied
• Region defaults correct

Gotchas

• Tag casing is case-sensitive — Use PascalCase exactly: Environment, ManagedBy, Project, Owner. Never emit both owner and Owner in the same template — Azure Policy treats case-variant keys as ambiguous → AmbiguousPolicyEvaluationPaths error.
• Never recommend deprecated services for greenfield — Azure AD B2C (retired May 2025), CDN WAF classic, App Gateway v1, etc. Check the Deprecated Services list in Quick Reference.
• AVM-first is non-negotiable — NEVER write raw Bicep/Terraform for a resource that has an AVM module available.

Reference Index

Load these on demand — do NOT read all at once: