Skip to content

Azure Well-Architected Review

Audits your Azure infrastructure code and live resources against Microsoft's five WAF pillars.

Stars
40,703
Licence
MIT
Files
1 file

What it does

When you ask the agent to review an Azure project, it follows a structured checklist from Microsoft's Well-Architected Framework covering reliability, security, cost, operations and performance. It reads your Bicep, Terraform or ARM infrastructure files, lists the Azure resources that actually exist via the Azure CLI, and flags gaps such as missing backups, open network rules, or resources created by hand in the portal. It then ranks findings as high, medium or low risk and can create GitHub issues to track the fixes.

Great for

  • Teams preparing an Azure workload for production who want a structured readiness check
  • Engineers who maintain Bicep or Terraform code and want to spot drift between code and live resources
  • Architects who need a consistent checklist-based review that can be repeated over time

Skip it if

  • Projects not hosted on Azure, since the checklist and CLI commands are Azure-specific
  • Replacing a professional security audit or compliance certification, because the checks are a checklist the agent applies and may miss issues or misjudge context
  • Running against production subscriptions without read-only credentials, since the workflow lists resources and may create GitHub issues on your behalf

Try asking

  • “Run a Well-Architected review of this repo's Bicep files and the resource group prod-app-rg”
  • “Check my Terraform infrastructure for security gaps and create GitHub issues for the high-risk findings”
  • “Compare what is deployed in our Azure subscription with our IaC and report any drift”
Step-by-step guide: how to use Azure Well-Architected ReviewInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    azure-well-architected-review.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip azure-well-architected-review.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip azure-well-architected-review.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Scope the review explicitly to one subscription or resource group, and use read-only Azure credentials first
  • Review the findings list before allowing the agent to create GitHub issues, so you can remove false positives
  • Treat the output as a starting checklist and confirm high-risk items with a qualified person before acting

What's inside

  • SKILL.md

Redistributed unmodified from github/awesome-copilot under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.