Skip to content
cccskills
FreePublished on GitHub

azure-enclave

Expert knowledge for Azure Enclave development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, and deployment. Use when building Azure Enclave apps with AVD/AKS, RBAC/managed identities, CMK encryption, Bicep/ARM, or ExpressRoute, and other Azure Enclave related development tasks. Not for Azure Confidential Computing (use azure-confidential-computing), Azure Attestation (use azure-attestation), Azure Cloud Hsm (use azure-cloud-hsm), Azure Dedicated HSM (use azure-dedicated-hsm).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills
Works withAzurePostgreSQL
See how to install

Files included (1)

  • SKILL.md10.5 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Azure Enclave Skill

This skill provides expert guidance for Azure Enclave. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
TroubleshootingL36-L41Diagnosing and fixing common Azure Enclave issues, including error codes, configuration problems, deployment failures, and runtime/attestation troubleshooting.
Best PracticesL42-L47Design, security, and operational best practices for Azure Enclave, including secure architecture patterns and how to harden and manage admin VMs safely.
Decision MakingL48-L53Planning disaster recovery and business continuity for Azure Enclave, and strategies, steps, and considerations for migrating existing Azure workloads into an Enclave environment.
Architecture & Design PatternsL54-L60Architectural patterns for Azure Enclave apps: DMZ-based public access, integrating with AVD/AKS, and secure data ingress design for enclave environments.
Limits & QuotasL61-L66Naming rules for Azure Enclave resources plus service limits, quotas, and regional availability to plan compliant deployments and capacity.
SecurityL67-L91Configuring Azure Enclave security: RBAC, managed identities, CMK encryption, policy/guardrails for AKS, App Service, SQL, Storage, ACR, Cosmos DB, Key Vault, and governance/JIT access.
ConfigurationL92-L106Configuring enclaves, governance, approvals, DNS/AVD setup, observability, policy exemptions, and using service catalog templates for Azure Enclave workloads.
DeploymentL107-L115Deploying Enclave workloads: installing apps on RemoteApp VMs, using Bicep/ARM templates, and setting up shared dependencies, ExpressRoute, and VPN transit hub connections via CLI.

Troubleshooting

TopicURL
Resolve common questions and issues in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/azure-enclave-faq
Diagnose and resolve common Azure Enclave errorshttps://learn.microsoft.com/en-us/azure/enclave/troubleshoot

Best Practices

TopicURL
Apply design and security best practices for Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/best-practices
Operate admin VMs securely in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/understand-admin-vm

Decision Making

TopicURL
Design disaster recovery strategy for Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/disaster-recovery-planning
Migrate existing Azure resources into Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/migrate-azure-resources-azure-enclave

Architecture & Design Patterns

TopicURL
Design DMZ-based public access for Azure Enclave appshttps://learn.microsoft.com/en-us/azure/enclave/1-7-host-publicly-accessible-application-azure-enclave
Plan Azure Enclave architecture for AVD and AKShttps://learn.microsoft.com/en-us/azure/enclave/2-1-plan-architecture-workloads
Plan secure data transfer into Azure Enclave environmentshttps://learn.microsoft.com/en-us/azure/enclave/move-data-inside-enclave

Limits & Quotas

TopicURL
Apply naming rules and restrictions for Azure Enclave resourceshttps://learn.microsoft.com/en-us/azure/enclave/name-rules-restrictions-azure-enclave-resources
Review Azure Enclave quotas and regional availabilityhttps://learn.microsoft.com/en-us/azure/enclave/quotas-region-availability

Security

TopicURL
Configure Azure Enclave RBAC and deny assignmentshttps://learn.microsoft.com/en-us/azure/enclave/access-controls-enclaves
Apply AKS security policy guardrails in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/aks-initiative
Apply App Service security policy guardrails in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/app-service-initiative
Use built-in RBAC roles for Azure Enclave accesshttps://learn.microsoft.com/en-us/azure/enclave/built-in-rbac-roles
Configure CMK encryption for Azure Enclave resourceshttps://learn.microsoft.com/en-us/azure/enclave/configure-customer-managed-key-encryption-within-enclave
Apply secure policy guardrails to Azure Container Registryhttps://learn.microsoft.com/en-us/azure/enclave/container-registry-initiative
Enforce secure deployment policies for Azure Cosmos DBhttps://learn.microsoft.com/en-us/azure/enclave/cosmosdb-initiative
Create user-assigned managed identities in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/create-user-managed-identity
Implement defense-in-depth protections in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/defense-in-depth
Set up JIT access with PIM for Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/just-in-time-access
Secure Azure Key Vault with Enclave policy guardrailshttps://learn.microsoft.com/en-us/azure/enclave/key-vault-initiative
Use Azure Enclave maintenance mode for protected resourceshttps://learn.microsoft.com/en-us/azure/enclave/maintenance-mode
Configure secure monitoring policies in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/monitor-initiative
Configure permissions and onboarding for Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/onboard
Enforce secure deployment guardrails for Azure PostgreSQLhttps://learn.microsoft.com/en-us/azure/enclave/postgresql-initiative
Use Azure Enclave built-in RBAC roleshttps://learn.microsoft.com/en-us/azure/enclave/role-based-access-controls
Secure Azure Service Bus with Enclave policy guardrailshttps://learn.microsoft.com/en-us/azure/enclave/service-bus-initiative
Understand Azure Enclave shared security responsibilitieshttps://learn.microsoft.com/en-us/azure/enclave/shared-responsibility-model
Apply Azure Enclave security policies to Azure SQLhttps://learn.microsoft.com/en-us/azure/enclave/sql-initiative
Apply secure policy guardrails to Azure Storage accountshttps://learn.microsoft.com/en-us/azure/enclave/storage-initiative
Configure approval-based governance in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/what-approvals

Configuration

TopicURL
Configure enclave and community endpoint resources in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/1-5-create-enclave-endpoint-connections
Configure approvals workflow in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/configure-approvals
Configure community-level governance in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/configure-community-governance
Understand creation and deletion rules for Azure Enclave resourceshttps://learn.microsoft.com/en-us/azure/enclave/create-and-delete-logic
Configure Azure Virtual Desktop workloads within an enclavehttps://learn.microsoft.com/en-us/azure/enclave/create-azure-virtual-desktop-workloads
Set up a DNS forwarder VM in an Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/create-domain-name-service-forwarder
Use Azure Enclave service catalog templates for workloadshttps://learn.microsoft.com/en-us/azure/enclave/list-service-catalog-templates
Manage and process Azure Enclave approval requestshttps://learn.microsoft.com/en-us/azure/enclave/manage-approvals
Configure observability destinations for Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/observability
Configure policy exemptions for Azure Enclave workloadshttps://learn.microsoft.com/en-us/azure/enclave/policy-compliance-exemptions
Understand and use approvals for Azure Enclave changeshttps://learn.microsoft.com/en-us/azure/enclave/understand-approvals

Deployment

TopicURL
Install applications on RemoteApp VMs in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/application-deployment-using-remote-app-vm
Use Azure Enclave Bicep and ARM deployment templateshttps://learn.microsoft.com/en-us/azure/enclave/azure-enclave-templates
Deploy common dependency templates to Enclave workloadshttps://learn.microsoft.com/en-us/azure/enclave/deploy-common-dependencies-service-catalog
Deploy ExpressRoute connections in Azure Enclave workloadshttps://learn.microsoft.com/en-us/azure/enclave/deploy-express-route-connection-service-catalog
Deploy Azure Enclave catalog templates via Azure CLIhttps://learn.microsoft.com/en-us/azure/enclave/deploy-template-service-catalog-azure-cli
Deploy VPN connections for Azure Enclave transit hubshttps://learn.microsoft.com/en-us/azure/enclave/deploy-vpn-connection-service-catalog

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

azure-active-directory-b2c

Free

Expert knowledge for Azure Active Directory B2C development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when building B2C user flows/custom policies, configuring IdPs/MFA, securing APIs, automating CI/CD, or monitoring with Sentinel, and other Azure Active Directory B2C related development tasks. Not for Azure Role-based access control (use azure-rbac), Azure Information Protection (use azure-information-protection), Azure Security (use azure-security), Azure Sentinel (use azure-sentinel).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

azure-advisor

Free

Expert knowledge for Azure Advisor development including best practices, decision making, limits & quotas, security, configuration, and integrations & coding patterns. Use when managing Advisor alerts, digests, recommendation states, Resource Graph queries, or RBAC access, and other Azure Advisor related development tasks. Not for Cost Management (use azure-cost-management), Azure Monitor (use azure-monitor), Azure Policy (use azure-policy), Azure Security (use azure-security).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

azure-ai-vision

Free

Expert knowledge for Azure AI Vision development including decision making, limits & quotas, configuration, integrations & coding patterns, and deployment. Use when using Image Analysis, Read OCR containers, smart-crop thumbnails, background removal, or video frame analysis, and other Azure AI Vision related development tasks. Not for Azure AI Custom Vision (use azure-custom-vision), Azure AI Video Indexer (use azure-video-indexer), Azure AI Document Intelligence (use azure-document-intelligence), Azure AI Immersive Reader (use azure-immersive-reader).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

azure-aks-edge-essentials

Free

Expert knowledge for Azure Kubernetes Service Edge Essentials development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when deploying AKS Edge/Hybrid with Arc, Azure Local, GitOps, IoT/OPC/ONVIF, or Key Vault-integrated workloads, and other Azure Kubernetes Service Edge Essentials related development tasks. Not for Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure IoT Edge (use azure-iot-edge), Azure Stack Edge (use azure-stack-edge), Azure Container Apps (use azure-container-apps).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

azure-analysis-services

Free

Expert knowledge for Azure Analysis Services development including troubleshooting. Use when resolving server connectivity, firewall/VNet, DNS, client connection, or network error issues, and other Azure Analysis Services related development tasks. Not for Azure Synapse Analytics (use azure-synapse-analytics), Azure SQL Database (use azure-sql-database), Azure SQL Managed Instance (use azure-sql-managed-instance), SQL Server on Azure Virtual Machines (use azure-sql-virtual-machines).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

azure-anyscale-on-azure

Free

Expert knowledge for Azure Anyscale On Azure development including limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when registering AKS as Anyscale clouds, wiring ACR images, enabling Private Link/RBAC, ARM-based deployments, or region checks, and other Azure Anyscale On Azure related development tasks. Not for Azure Databricks (use azure-databricks), Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure Machine Learning (use azure-machine-learning), Azure HDInsight (use azure-hdinsight).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

See all skills by MicrosoftDocs

Report a problem with this skill