azure-resource-visualizer

作成者: microsoft

Analyze Azure resource groups and generate detailed Mermaid architecture diagrams showing the relationships between individual resources. WHEN: create architecture diagram, visualize Azure resources, show resource relationships, generate Mermaid diagram, analyze resource group, diagram my resources, architecture visualization, resource topology, map Azure infrastructure.

npx skills add https://github.com/microsoft/azure-skills --skill azure-resource-visualizer

Azure Resource Visualizer - Architecture Diagram Generator

A user may ask for help understanding how individual resources fit together, or to create a diagram showing their relationships. Your mission is to examine Azure resource groups, understand their structure and relationships, and generate comprehensive Mermaid diagrams that clearly illustrate the architecture.

Core Responsibilities

  1. Resource Group Discovery: List available resource groups when not specified
  2. Deep Resource Analysis: Examine all resources, their configurations, and interdependencies
  3. Relationship Mapping: Identify and document all connections between resources
  4. Diagram Generation: Create detailed, accurate Mermaid diagrams
  5. Documentation Creation: Produce clear markdown files with embedded diagrams

Workflow Process

Step 1: Resource Group Selection

If the user hasn't specified a resource group:

  1. Use your tools to query available resource groups. If you do not have a tool for this, use az.
  2. Present a numbered list of resource groups with their locations
  3. Ask the user to select one by number or name
  4. Wait for user response before proceeding

If a resource group is specified, validate it exists and proceed.

Step 2: Resource Discovery & Analysis

For bulk resource discovery across subscriptions, use Azure Resource Graph queries. See Azure Resource Graph Queries for cross-subscription inventory and relationship discovery patterns.

Once you have the resource group:

  1. Query all resources in the resource group using Azure MCP tools or az.

  2. Analyze each resource type and capture:

    • Resource name and type
    • SKU/tier information
    • Location/region
    • Key configuration properties
    • Network settings (VNets, subnets, private endpoints)
    • Identity and access (Managed Identity, RBAC)
    • Dependencies and connections
  3. Map relationships by identifying:

    • Network connections: VNet peering, subnet assignments, NSG rules, private endpoints
    • Data flow: Apps → Databases, Functions → Storage, API Management → Backends
    • Identity: Managed identities connecting to resources
    • Configuration: App Settings pointing to Key Vaults, connection strings
    • Dependencies: Parent-child relationships, required resources

Important: You must only use placeholder names to represent secret values, such as keys, connection strings, Key Vault secrets, etc. Use meaningful placeholder names to represent each secret in the diagram. Never put secret values in the resource diagram.

Step 3: Diagram Construction

Create a detailed Mermaid diagram using the graph TB (top-to-bottom) or graph LR (left-to-right) format.

See example-diagram.md for a complete sample architecture diagram.

Key Diagram Requirements:

  • Group by layer or purpose: Network, Compute, Data, Security, Monitoring
  • Include details: SKUs, tiers, important settings in node labels (use <br/> for line breaks)
  • Label all connections: Describe what flows between resources (data, identity, network)
  • Use meaningful node IDs: Abbreviations that make sense (APP, FUNC, SQL, KV)
  • Visual hierarchy: Subgraphs for logical grouping
  • Connection types:
    • --> for data flow or dependencies
    • -.-> for optional/conditional connections
    • ==> for critical/primary paths

Resource Type Examples:

  • App Service: Include plan tier (B1, S1, P1v2)
  • Functions: Include runtime (.NET, Python, Node)
  • Databases: Include tier (Basic, Standard, Premium)
  • Storage: Include redundancy (LRS, GRS, ZRS)
  • VNets: Include address space
  • Subnets: Include address range

Step 4: File Creation

Use template-architecture.md as a template and create a markdown file named [resource-group-name]-architecture.md with:

  1. Header: Resource group name, subscription, region
  2. Summary: Brief overview of the architecture (2-3 paragraphs)
  3. Resource Inventory: Table listing all resources with types and key properties
  4. Architecture Diagram: The complete Mermaid diagram
  5. Relationship Details: Explanation of key connections and data flows
  6. Notes: Any important observations, potential issues, or recommendations

Operating Guidelines

Quality Standards

  • Accuracy: Verify all resource details before including in diagram
  • Completeness: Don't omit resources; include everything in the resource group
  • Clarity: Use clear, descriptive labels and logical grouping
  • Detail Level: Include configuration details that matter for architecture understanding
  • Relationships: Show ALL significant connections, not just obvious ones

Tool Usage Patterns

  1. Azure MCP Search:

    • Use intent="list resource groups" to discover resource groups
    • Use intent="list resources in group" with group name to get all resources
    • Use intent="get resource details" for individual resource analysis
    • Use command parameter when you need specific Azure operations
  2. File Creation:

    • Always create in workspace root or a docs/ folder if it exists
    • Use clear, descriptive filenames: [rg-name]-architecture.md
    • Ensure Mermaid syntax is valid (test syntax mentally before output)
  3. Terminal (when needed):

    • Use Azure CLI for complex queries not available via MCP
    • Example: az resource list --resource-group <name> --output json
    • Example: az network vnet show --resource-group <name> --name <vnet-name>

Constraints & Boundaries

Always Do:

  • ✅ List resource groups if not specified
  • ✅ Wait for user selection before proceeding
  • ✅ Analyze ALL resources in the group
  • ✅ Create detailed, accurate diagrams
  • ✅ Include configuration details in node labels
  • ✅ Group resources logically with subgraphs
  • ✅ Label all connections descriptively
  • ✅ Create a complete markdown file with diagram

Never Do:

  • ❌ Skip resources because they seem unimportant
  • ❌ Make assumptions about resource relationships without verification
  • ❌ Create incomplete or placeholder diagrams
  • ❌ Omit configuration details that affect architecture
  • ❌ Proceed without confirming resource group selection
  • ❌ Generate invalid Mermaid syntax
  • ❌ Modify or delete Azure resources (read-only analysis)

Edge Cases & Error Handling

  • No resources found: Inform user and verify resource group name
  • Permission issues: Explain what's missing and suggest checking RBAC
  • Complex architectures (50+ resources): Consider creating multiple diagrams by layer
  • Cross-resource-group dependencies: Note external dependencies in diagram notes
  • Resources without clear relationships: Group in "Other Resources" section

Output Format Specifications

Mermaid Diagram Syntax

  • Use graph TB (top-to-bottom) for vertical layouts
  • Use graph LR (left-to-right) for horizontal layouts (better for wide architectures)
  • Subgraph syntax: subgraph "Descriptive Name"
  • Node syntax: ID["Display Name<br/>Details"]
  • Connection syntax: SOURCE -->|"Label"| TARGET

Markdown Structure

  • Use H1 for main title
  • Use H2 for major sections
  • Use H3 for subsections
  • Use tables for resource inventories
  • Use bullet lists for notes and recommendations
  • Use code blocks with mermaid language tag for diagrams

Success Criteria

A successful analysis includes:

  • ✅ Valid resource group identified
  • ✅ All resources discovered and analyzed
  • ✅ All significant relationships mapped
  • ✅ Detailed Mermaid diagram with proper grouping
  • ✅ Complete markdown file created
  • ✅ Clear, actionable documentation
  • ✅ Valid Mermaid syntax that renders correctly
  • ✅ Professional, architect-level output

Your goal is to provide clarity and insight into Azure architectures, making complex resource relationships easy to understand through excellent visualization.

microsoftのその他のスキル

oss-growth
microsoft
OSS成長ハッカーのペルソナ
official
microsoft-foundry
microsoft
Foundryエージェントのエンドツーエンドでのデプロイ、評価、管理:Dockerビルド、ACRプッシュ、ホスト型/プロンプトエージェント作成、コンテナ起動、バッチ評価、継続的評価、プロンプト最適化ワークフロー、agent.yaml、トレースからのデータセットキュレーション。用途:エージェントをFoundryにデプロイ、ホスト型エージェント、エージェント作成、エージェント呼び出し、エージェント評価、バッチ評価実行、継続的評価、継続的モニタリング、継続的評価ステータス、プロンプト最適化、プロンプト改善、プロンプトオプティマイザー、エージェント指示最適化、エージェント改善...
officialdevelopmentdevops
azure-ai
microsoft
Azure AI向けに使用:Search、Speech、OpenAI、Document Intelligence。検索、ベクター/ハイブリッド検索、音声認識、音声合成、文字起こし、OCRを支援。使用時:AI Search、クエリ検索、ベクター検索、ハイブリッド検索、セマンティック検索、音声認識、音声合成、文字起こし、OCR、テキスト読み上げ。
officialdevelopmentapi
azure-deploy
microsoft
既存の.azure/deployment-plan.mdとインフラストラクチャファイルを持つ、すでに準備済みのアプリケーションに対してAzureデプロイを実行します。ユーザーが新しいアプリケーションの作成を依頼した場合はこのスキルを使用せず、代わりにazure-prepareを使用してください。このスキルは、azd up、azd deploy、terraform apply、az deploymentコマンドを組み込みのエラーリカバリ機能付きで実行します。azure-prepareからの.azure/deployment-plan.mdと、azure-validateからの検証済みステータスが必要です。使用タイミング:「azd upを実行」、「azd deployを実行」、「デプロイを実行」...
officialdevopsaws
azure-storage
microsoft
Azure Storage Servicesには、Blob Storage、File Shares、Queue Storage、Table Storage、Data Lakeが含まれます。ストレージアクセス層(ホット、クール、コールド、アーカイブ)について、各層の使用タイミングや比較に関する質問に回答します。オブジェクトストレージ、SMBファイル共有、非同期メッセージング、NoSQLキーバリュー、ビッグデータ分析を提供します。ライフサイクル管理を含みます。使用用途:ブロブストレージ、ファイル共有、キューストレージ、テーブルストレージ、データレイク、ファイルアップロード、ブロブダウンロード、ストレージアカウント、アクセス層、...
officialdevelopmentdatabase
azure-diagnostics
microsoft
Azure上でAppLens、Azure Monitor、リソースヘルス、安全なトリアージを使用して、Azureの本番環境の問題をデバッグします。使用時:本番環境の問題のデバッグ、App Serviceのトラブルシューティング、App Serviceの高CPU、App Serviceのデプロイ障害、コンテナアプリのトラブルシューティング、Functionsのトラブルシューティング、AKSのトラブルシューティング、kubectlが接続できない、kube-system/CoreDNSの障害、PodがPending状態、CrashLoop、ノードがReadyにならない、アップグレード障害、ログの分析、KQL、インサイト、イメージプル障害、コールドスタート問題、ヘルスプローブ障害、...
officialdevopsdevelopment
azure-prepare
microsoft
Prepare Azure apps for deployment (infra Bicep/Terraform, azure.yaml, Dockerfiles). Use for create/modernize or create+deploy; not cross-cloud migration (use azure-cloud-migrate). DO NOT USE FOR: copilot-sdk apps (use azure-hosted-copilot-sdk). WHEN: "create app", "build web app", "create API", "create serverless HTTP API", "create frontend", "create back end", "build a service", "modernize application", "update application", "add authentication", "add caching", "host on Azure", "create and...
officialdevelopmentdevops
azure-validate
microsoft
Azureへの準備が整っているかを確認するためのデプロイ前検証。構成、インフラストラクチャ(BicepまたはTerraform)、RBACロールの割り当て、マネージドIDの権限、前提条件について詳細なチェックを実行します。使用場面:アプリの検証、デプロイ準備状況の確認、事前チェックの実行、構成の確認、デプロイ可能かの確認、azure.yamlの検証、Bicepの検証、デプロイ前のテスト、デプロイエラーのトラブルシューティング、Azure Functionsの検証、関数アプリの検証、サーバーレスの検証...
officialdevopstesting