azure-resource-visualizer

作者: microsoft

分析 Azure 資源群組,並生成詳細的 Mermaid 架構圖,顯示個別資源之間的關係。使用時機:建立架構圖、視覺化 Azure 資源、顯示資源關係、生成 Mermaid 圖表、分析資源群組、繪製我的資源圖、架構視覺化、資源拓撲、映射 Azure 基礎設施。

npx skills add https://github.com/microsoft/azure-skills --skill azure-resource-visualizer

Azure Resource Visualizer - Architecture Diagram Generator

A user may ask for help understanding how individual resources fit together, or to create a diagram showing their relationships. Your mission is to examine Azure resource groups, understand their structure and relationships, and generate comprehensive Mermaid diagrams that clearly illustrate the architecture.

Core Responsibilities

  1. Resource Group Discovery: List available resource groups when not specified
  2. Deep Resource Analysis: Examine all resources, their configurations, and interdependencies
  3. Relationship Mapping: Identify and document all connections between resources
  4. Diagram Generation: Create detailed, accurate Mermaid diagrams
  5. Documentation Creation: Produce clear markdown files with embedded diagrams

Workflow Process

Step 1: Resource Group Selection

If the user hasn't specified a resource group:

  1. Use your tools to query available resource groups. If you do not have a tool for this, use az.
  2. Present a numbered list of resource groups with their locations
  3. Ask the user to select one by number or name
  4. Wait for user response before proceeding

If a resource group is specified, validate it exists and proceed.

Step 2: Resource Discovery & Analysis

For bulk resource discovery across subscriptions, use Azure Resource Graph queries. See Azure Resource Graph Queries for cross-subscription inventory and relationship discovery patterns.

Once you have the resource group:

  1. Query all resources in the resource group using Azure MCP tools or az.

  2. Analyze each resource type and capture:

    • Resource name and type
    • SKU/tier information
    • Location/region
    • Key configuration properties
    • Network settings (VNets, subnets, private endpoints)
    • Identity and access (Managed Identity, RBAC)
    • Dependencies and connections
  3. Map relationships by identifying:

    • Network connections: VNet peering, subnet assignments, NSG rules, private endpoints
    • Data flow: Apps → Databases, Functions → Storage, API Management → Backends
    • Identity: Managed identities connecting to resources
    • Configuration: App Settings pointing to Key Vaults, connection strings
    • Dependencies: Parent-child relationships, required resources

Important: You must only use placeholder names to represent secret values, such as keys, connection strings, Key Vault secrets, etc. Use meaningful placeholder names to represent each secret in the diagram. Never put secret values in the resource diagram.

Step 3: Diagram Construction

Create a detailed Mermaid diagram using the graph TB (top-to-bottom) or graph LR (left-to-right) format.

See example-diagram.md for a complete sample architecture diagram.

Key Diagram Requirements:

  • Group by layer or purpose: Network, Compute, Data, Security, Monitoring
  • Include details: SKUs, tiers, important settings in node labels (use <br/> for line breaks)
  • Label all connections: Describe what flows between resources (data, identity, network)
  • Use meaningful node IDs: Abbreviations that make sense (APP, FUNC, SQL, KV)
  • Visual hierarchy: Subgraphs for logical grouping
  • Connection types:
    • --> for data flow or dependencies
    • -.-> for optional/conditional connections
    • ==> for critical/primary paths

Resource Type Examples:

  • App Service: Include plan tier (B1, S1, P1v2)
  • Functions: Include runtime (.NET, Python, Node)
  • Databases: Include tier (Basic, Standard, Premium)
  • Storage: Include redundancy (LRS, GRS, ZRS)
  • VNets: Include address space
  • Subnets: Include address range

Step 4: File Creation

Use template-architecture.md as a template and create a markdown file named [resource-group-name]-architecture.md with:

  1. Header: Resource group name, subscription, region
  2. Summary: Brief overview of the architecture (2-3 paragraphs)
  3. Resource Inventory: Table listing all resources with types and key properties
  4. Architecture Diagram: The complete Mermaid diagram
  5. Relationship Details: Explanation of key connections and data flows
  6. Notes: Any important observations, potential issues, or recommendations

Operating Guidelines

Quality Standards

  • Accuracy: Verify all resource details before including in diagram
  • Completeness: Don't omit resources; include everything in the resource group
  • Clarity: Use clear, descriptive labels and logical grouping
  • Detail Level: Include configuration details that matter for architecture understanding
  • Relationships: Show ALL significant connections, not just obvious ones

Tool Usage Patterns

  1. Azure MCP Search:

    • Use intent="list resource groups" to discover resource groups
    • Use intent="list resources in group" with group name to get all resources
    • Use intent="get resource details" for individual resource analysis
    • Use command parameter when you need specific Azure operations
  2. File Creation:

    • Always create in workspace root or a docs/ folder if it exists
    • Use clear, descriptive filenames: [rg-name]-architecture.md
    • Ensure Mermaid syntax is valid (test syntax mentally before output)
  3. Terminal (when needed):

    • Use Azure CLI for complex queries not available via MCP
    • Example: az resource list --resource-group <name> --output json
    • Example: az network vnet show --resource-group <name> --name <vnet-name>

Constraints & Boundaries

Always Do:

  • ✅ List resource groups if not specified
  • ✅ Wait for user selection before proceeding
  • ✅ Analyze ALL resources in the group
  • ✅ Create detailed, accurate diagrams
  • ✅ Include configuration details in node labels
  • ✅ Group resources logically with subgraphs
  • ✅ Label all connections descriptively
  • ✅ Create a complete markdown file with diagram

Never Do:

  • ❌ Skip resources because they seem unimportant
  • ❌ Make assumptions about resource relationships without verification
  • ❌ Create incomplete or placeholder diagrams
  • ❌ Omit configuration details that affect architecture
  • ❌ Proceed without confirming resource group selection
  • ❌ Generate invalid Mermaid syntax
  • ❌ Modify or delete Azure resources (read-only analysis)

Edge Cases & Error Handling

  • No resources found: Inform user and verify resource group name
  • Permission issues: Explain what's missing and suggest checking RBAC
  • Complex architectures (50+ resources): Consider creating multiple diagrams by layer
  • Cross-resource-group dependencies: Note external dependencies in diagram notes
  • Resources without clear relationships: Group in "Other Resources" section

Output Format Specifications

Mermaid Diagram Syntax

  • Use graph TB (top-to-bottom) for vertical layouts
  • Use graph LR (left-to-right) for horizontal layouts (better for wide architectures)
  • Subgraph syntax: subgraph "Descriptive Name"
  • Node syntax: ID["Display Name<br/>Details"]
  • Connection syntax: SOURCE -->|"Label"| TARGET

Markdown Structure

  • Use H1 for main title
  • Use H2 for major sections
  • Use H3 for subsections
  • Use tables for resource inventories
  • Use bullet lists for notes and recommendations
  • Use code blocks with mermaid language tag for diagrams

Success Criteria

A successful analysis includes:

  • ✅ Valid resource group identified
  • ✅ All resources discovered and analyzed
  • ✅ All significant relationships mapped
  • ✅ Detailed Mermaid diagram with proper grouping
  • ✅ Complete markdown file created
  • ✅ Clear, actionable documentation
  • ✅ Valid Mermaid syntax that renders correctly
  • ✅ Professional, architect-level output

Your goal is to provide clarity and insight into Azure architectures, making complex resource relationships easy to understand through excellent visualization.

來自 microsoft 的更多技能

oss-growth
microsoft
開源增長駭客角色
official
microsoft-foundry
microsoft
端到端部署、評估與管理 Foundry 代理:Docker 建置、ACR 推送、託管/提示代理建立、容器啟動、批次評估、持續評估、提示最佳化工作流程、agent.yaml、從追蹤資料集整理。用途:將代理部署至 Foundry、託管代理、建立代理、調用代理、評估代理、執行批次評估、持續評估、持續監控、持續評估狀態、最佳化提示、改善提示、提示最佳化器、最佳化代理指令、改善代理...
officialdevelopmentdevops
azure-ai
microsoft
用於 Azure AI:搜尋、語音、OpenAI、文件智慧。協助搜尋、向量/混合搜尋、語音轉文字、文字轉語音、轉錄、OCR。適用情境:AI 搜尋、查詢搜尋、向量搜尋、混合搜尋、語意搜尋、語音轉文字、文字轉語音、轉錄、OCR、將文字轉換為語音。
officialdevelopmentapi
azure-deploy
microsoft
對已準備好的應用程式執行 Azure 部署,這些應用程式需具備現有的 .azure/deployment-plan.md 與基礎架構檔案。當使用者要求建立新應用程式時,請勿使用此技能——應改用 azure-prepare。此技能會執行 azd up、azd deploy、terraform apply 及 az deployment 命令,並內建錯誤復原機制。需具備來自 azure-prepare 的 .azure/deployment-plan.md,以及來自 azure-validate 的驗證狀態。適用時機:「執行 azd up」、「執行 azd deploy」、「執行部署」……
officialdevopsaws
azure-storage
microsoft
Azure Storage Services 包括 Blob 儲存體、檔案共用、佇列儲存體、表格儲存體和 Data Lake。回答關於儲存存取層(熱、冷、凍結、封存)、各層使用時機及層級比較的問題。提供物件儲存、SMB 檔案共用、非同步訊息、NoSQL 鍵值及大數據分析。包含生命週期管理。用於:blob 儲存體、檔案共用、佇列儲存體、表格儲存體、data lake、上傳檔案、下載 blob、儲存帳戶、存取層...
officialdevelopmentdatabase
azure-diagnostics
microsoft
在 Azure 上使用 AppLens、Azure Monitor、資源健康狀態和安全分類來偵錯 Azure 生產問題。適用時機:偵錯生產問題、疑難排解應用程式服務、應用程式服務高 CPU、應用程式服務部署失敗、疑難排解容器應用程式、疑難排解函數、疑難排解 AKS、kubectl 無法連線、kube-system/CoreDNS 失敗、Pod 擱置、CrashLoop、節點未就緒、升級失敗、分析記錄、KQL、深入解析、映像提取失敗、冷啟動問題、健康狀態探查失敗...
officialdevopsdevelopment
azure-prepare
microsoft
Prepare Azure apps for deployment (infra Bicep/Terraform, azure.yaml, Dockerfiles). Use for create/modernize or create+deploy; not cross-cloud migration (use azure-cloud-migrate). DO NOT USE FOR: copilot-sdk apps (use azure-hosted-copilot-sdk). WHEN: "create app", "build web app", "create API", "create serverless HTTP API", "create frontend", "create back end", "build a service", "modernize application", "update application", "add authentication", "add caching", "host on Azure", "create and...
officialdevelopmentdevops
azure-validate
microsoft
部署前驗證 Azure 就緒狀態。對設定、基礎架構(Bicep 或 Terraform)、RBAC 角色指派、受控身分權限及先決條件進行深度檢查,再進行部署。適用時機:驗證我的應用程式、檢查部署就緒狀態、執行預檢檢查、驗證設定、確認是否可部署、驗證 azure.yaml、驗證 Bicep、部署前測試、疑難排解部署錯誤、驗證 Azure Functions、驗證函式應用程式、驗證無伺服器...
officialdevopstesting