How does this skill improve Azure security?

It enforces the use of Managed Identity, Private Endpoints for PaaS services, and Privileged Identity Management (PIM) to eliminate static secrets and reduce the overall attack surface.

What networking patterns does it recommend?

It prioritizes hub-and-spoke VNet topologies with Azure Firewall Premium for centralized egress and Private Link for secure access to Azure PaaS services.

Does this skill support Azure Cost Management?

Absolutely, it includes best practices for configuring Azure Reservations, Savings Plans, and budget alerts at the subscription and resource group levels.

Can it help with AKS deployments?

Yes, it provides specific guidance for private AKS clusters, Azure AD RBAC integration, Workload Identity, and Defender for Containers.

Is it compatible with CI/CD workflows?

Yes, it provides patterns for setting up OIDC federation (Workload Identity) for both Azure DevOps and GitHub Actions to avoid storing service principal secrets.

Azure Cloud Infrastructure Expert

Name: Azure Cloud Infrastructure Expert
Author: rnavarych

byrnavarych

•

云基础设施

Architects, secures, and optimizes enterprise Azure environments using industry-leading best practices for identity, networking, and governance.

This skill transforms Claude into a senior Azure architect capable of designing and implementing production-grade cloud environments. It provides deep expertise across the entire Microsoft Azure ecosystem, focusing on modern security principles like Managed Identity, Private Endpoints, and Privileged Identity Management (PIM). Whether you are configuring hub-and-spoke network topologies, deploying hardened AKS clusters, or implementing governance through Azure Policy, this skill ensures your infrastructure is scalable, compliant, and cost-effective.

主要功能

01Full-stack Observability with Log Analytics and KQL

02Advanced Entra ID RBAC and PIM configuration

0311 GitHub stars

04Governance through Azure Policy and Cost Management

05Production-ready AKS and Container Apps orchestration

06Secure Networking (Hub-and-Spoke, Private Endpoints, Azure Firewall)

使用场景

01Implementing Zero Trust security with Managed Identities and Private Link

02Deploying and hardening enterprise-grade AKS clusters

03Optimizing cloud spend through Azure Reservations and Budgeting

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add rnavarych/alpha-engineer azure-expert

For use in Claude.ai and ChatGPT

主要功能

01Full-stack Observability with Log Analytics and KQL

02Advanced Entra ID RBAC and PIM configuration

0311 GitHub stars

04Governance through Azure Policy and Cost Management

05Production-ready AKS and Container Apps orchestration

06Secure Networking (Hub-and-Spoke, Private Endpoints, Azure Firewall)

使用场景

01Implementing Zero Trust security with Managed Identities and Private Link

02Deploying and hardening enterprise-grade AKS clusters

03Optimizing cloud spend through Azure Reservations and Budgeting

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add rnavarych/alpha-engineer azure-expert

For use in Claude.ai and ChatGPT