azure-enclave skill
✓ OfficialProvides expert guidance for Azure Enclave development, including architecture, security configuration, deployment, and troubleshooting.
- GitHub stars
- 811
- Files
- 1
- Last commit
- Nov 9, 2026
- License
- CC-BY-4.0
- Allowed tools
- —
What does the azure-enclave skill do?
azure-enclave provides expert guidance for Azure Enclave development, including architecture, security configuration, deployment, and troubleshooting.
Summary generated from the skill's SKILL.md.
About the azure-enclave skill
Developers building and managing secure environments can use this skill to receive expert guidance on Azure Enclave development. It assists with complex tasks such as designing architectural patterns for AVD and AKS topologies, configuring networking and DNS, and implementing security guardrails for services like SQL, Storage, and Cosmos DB. The skill is designed for engineers who need to navigate specific limits, quotas, and resource naming rules while planning disaster recovery or failover strategies.
An agent should load this skill when it needs to troubleshoot connectivity errors, deploy workloads using ARM or Bicep templates, or secure identities through RBAC and managed identities. To provide up-to-date information, the skill relies on network access to fetch remote documentation via mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage. It is specifically intended for Azure Enclave development and should not be used for Azure Confidential Computing, Azure Attestation, or Azure Dedicated HSM.
What an agent can do with it
- 1Secure resource configurationHelp me apply security guardrails and RBAC to my Azure Enclave SQL and Storage resources.
- 2Architectural planningProvide architectural patterns for designing hybrid setups with Azure Local and AVD topologies.
- 3Deployment automationGuide me through deploying workloads into the enclave using Bicep or ARM templates.
- 4Troubleshooting connectivityDiagnose common errors related to enclave setup, attestation, and connectivity.
Written from the skill's SKILL.md. Every use case is checked against a quote from it.
How to install the azure-enclave skill
Each command copies the skill folder into the client's skills directory. Restart the client or start a new session to load it.Install the azure-enclave skill in Claude Code
~/.claude/skills/azure-enclave/SKILL.md
$ npx degit MicrosoftDocs/Agent-Skills/skills/azure-enclave ~/.claude/skills/azure-enclaveInstall the azure-enclave skill in Claude Code (project)
.claude/skills/azure-enclave/SKILL.md
$ npx degit MicrosoftDocs/Agent-Skills/skills/azure-enclave .claude/skills/azure-enclaveInstall the azure-enclave skill in Codex
~/.agents/skills/azure-enclave/SKILL.md
$ npx degit MicrosoftDocs/Agent-Skills/skills/azure-enclave ~/.agents/skills/azure-enclaveInstall the azure-enclave skill in Gemini CLI
~/.gemini/skills/azure-enclave/SKILL.md
$ npx degit MicrosoftDocs/Agent-Skills/skills/azure-enclave ~/.gemini/skills/azure-enclaveInstall the azure-enclave skill in Claude.ai
npx degit MicrosoftDocs/Agent-Skills/skills/azure-enclave azure-enclave && zip -r azure-enclave.zip azure-enclave # claude.ai → Customize → Skills → + → Create skill → Upload a skill → azure-enclave.zip
Automated checks
Ran Nov 15, 2026Full report →Not verified yet. A skill needs a score of 80, no serious finding, and enough data for us to check. How checks work · What to fix for more points
- Source repository linked and reachablemicrosoftdocs/agent-skills/skills/azure-enclave is public and reachablegithub.com/microsoftdocs/agent-skills/tree/HEAD/skills/azure ↗Pass
- Open source license (OSI)CC-BY-4.0 is not OSI-approvedspdx.org/licenses/CC-BY-4.0.html ↗Finding
- Commit or release in the last yearLast commit 2026-11-09github.com/microsoftdocs/agent-skills/commits ↗Pass
- No download-and-run or credential theft in scriptsNo scripts in the skill folderPass
- No hidden instructions in SKILL.mdNo override phrases, safeguard switches, credential requests or hidden charactersgithub.com/microsoftdocs/agent-skills/blob/HEAD/skills/azure ↗Pass
- Pre-approved tools are scopedNo pre-approved tools; the agent asks before using onegithub.com/microsoftdocs/agent-skills/blob/HEAD/skills/azure ↗Pass
- SKILL.md follows the Agent Skills formatValid name and description; says when to use it; 116 linesgithub.com/microsoftdocs/agent-skills/blob/HEAD/skills/azure ↗Pass
SKILL.md
View on GitHubAzure Enclave Skill
This skill provides expert guidance for Azure Enclave. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.
How to Use This Skill
IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g.,
L35-L120), useread_filewith the specified lines. For categories with file links (e.g.,[security.md](security.md)), useread_fileon the linked reference file
IMPORTANT for Agent: If
metadata.generated_atis more than 3 months old, suggest the user pull the latest version from the repository. Ifmcp_microsoftdocstools are not available, suggest the user install it: Installation Guide
This skill requires network access to fetch documentation content:
- Preferred: Use
mcp_microsoftdocs:microsoft_docs_fetchwith query stringfrom=learn-agent-skill. Returns Markdown. - Fallback: Use
fetch_webpagewith query stringfrom=learn-agent-skill&accept=text/markdown. Returns Markdown.
Category Index
| Category | Lines | Description |
|---|---|---|
| Troubleshooting | L36-L41 | Diagnosing and fixing common Azure Enclave setup, attestation, connectivity, and runtime errors, plus answers to frequently seen issues and troubleshooting steps. |
| Best Practices | L42-L47 | Design, security, and operational best practices for Azure Enclave, including secure architecture patterns and how to harden and manage admin VMs safely. |
| Decision Making | L48-L52 | Guidance on designing and planning disaster recovery, backup, and failover strategies specifically for Azure Enclave workloads. |
| Architecture & Design Patterns | L53-L59 | Architectural patterns for Azure Enclave apps: DMZ-based public access, planning AVD/AKS topologies, and designing hybrid setups with Azure Local. |
| Limits & Quotas | L60-L65 | Naming rules for Azure Enclave resources plus quota limits, capacity constraints, and which regions/supporting SKUs are available. |
| Security | L66-L89 | RBAC, identities, encryption, guardrails, and policies to secure Azure Enclave resources (SQL, Storage, AKS, ACR, Cosmos DB, Key Vault, App Service, Service Bus) and set up governance/monitoring. |
| Configuration | L90-L105 | Configuring Azure Enclave environments: endpoints, governance, approvals, networking/DNS, observability, maintenance, policy exemptions, and using service catalog templates. |
| Deployment | L106-L116 | Deploying and migrating workloads into Azure Enclave: ARM/Bicep templates, catalog/CLI deployments, AVD planning, app installs, dependencies, and secure VPN/ExpressRoute connectivity. |
Troubleshooting
| Topic | URL |
|---|---|
| Resolve common questions and issues in Azure Enclave | https://learn.microsoft.com/en-us/azure/enclave/azure-enclave-faq |
| Troubleshoot common Azure Enclave issues and errors | https://learn.microsoft.com/en-us/azure/enclave/troubleshoot |
Best Practices
| Topic | URL |
|---|---|
| Apply design and security best practices for Azure Enclave | https://learn.microsoft.com/en-us/azure/enclave/best-practices |
| Operate admin VMs securely in Azure Enclave | https://learn.microsoft.com/en-us/azure/enclave/understand-admin-vm |
Decision Making
| Topic | URL |
|---|---|
| Plan disaster recovery for Azure Enclave workloads | https://learn.microsoft.com/en-us/azure/enclave/disaster-recovery-planning |
Architecture & Design Patterns
| Topic | URL |
|---|---|
| Design DMZ-based public access for Azure Enclave apps | https://learn.microsoft.com/en-us/azure/enclave/1-7-host-publicly-accessible-application-azure-enclave |
| Plan Azure Enclave architecture for AVD and AKS | https://learn.microsoft.com/en-us/azure/enclave/2-1-plan-architecture-workloads |
| Design hybrid architectures with Azure Enclave and Azure Local | https://learn.microsoft.com/en-us/azure/enclave/azure-local-integration |
Limits & Quotas
| Topic | URL |
|---|---|
| Azure Enclave resource naming rules and constraints | https://learn.microsoft.com/en-us/azure/enclave/name-rules-restrictions-azure-enclave-resources |
| Review Azure Enclave quotas and regional availability | https://learn.microsoft.com/en-us/azure/enclave/quotas-region-availability |
Security
Configuration
Deployment
Files in this skill
1azure-enclave skill questions
How do I install the azure-enclave skill in Claude Code?
Run npx degit MicrosoftDocs/Agent-Skills/skills/azure-enclave ~/.claude/skills/azure-enclave. Claude Code loads skills from ~/.claude/skills (all projects) or .claude/skills (one project) and uses a skill when its description matches the task.
Which clients can use the azure-enclave skill?
Any client that reads the Agent Skills format: Claude Code, Codex, Gemini CLI and claude.ai (upload as a ZIP). Scripts in the skill run only where the client allows code execution.
What topics does the Azure Enclave skill cover?
The skill covers troubleshooting, best practices, decision making, architecture and design patterns, limits and quotas, security, configuration, and deployment.
Can I use this skill for Azure Confidential Computing?
No, you should use the azure-confidential-computing skill for Azure Confidential Computing tasks.
How can I deploy workloads into an Azure Enclave?
Workloads can be deployed using ARM/Bicep templates, catalog/CLI deployments, or by planning AVD and secure VPN/ExpressRoute connectivity.