Official agent skill

Azure Enclave

by MicrosoftDocs in MicrosoftDocs/Agent-Skills

Expert knowledge for Azure Enclave development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, and deployment.

OfficialCC-BY-4.0Auto-check passedDevOps & Cloud

Install Azure Enclave

skills CLI
$ npx skills add MicrosoftDocs/Agent-Skills --skill azure-enclave -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install MicrosoftDocs/Agent-Skills azure-enclave --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/MicrosoftDocs/Agent-Skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/azure-enclave .claude/skills/azure-enclave && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
azure-enclave
GitHub stars
775
Token cost
~2.7k tokens
SKILL.md length
779 words
Files
1
Skills in repo
149
Repo updated
First seen
Licence
CC-BY-4.0

At a glance

Expert knowledge for Azure Enclave development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, and deployment.

  • Building DMZ/AVD/AKS enclave apps
  • SKILL.md covers How to Use This Skill and Category Index
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
  • Configuring RBAC/CMK

What it does

Azure Enclave is an agent skill from MicrosoftDocs/Agent-Skills, published by the product's own GitHub organization. Expert knowledge for Azure Enclave development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, and deployment. Use when building DMZ/AVD/AKS enclave apps, configuring RBAC/CMK, deploying via Bicep/ARM, or setting up ExpressRoute/VPN, and other Azure Enclave related development tasks. Not for Azure Confidential Computing (use azure-confidential-computing), Azure Attestation (use azure-attestation), Azure Dedicated HSM (use…

Its SKILL.md is about 2.7k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts. Compatibility notes: Requires network access. Uses mcpmicrosoftdocs:microsoftdocsfetch or fetchwebpage to retrieve documentation.

It sits in DevOps & Cloud, covering Design patterns, Authorization and RBAC and Infrastructure as code. It works with Microsoft Azure and Bicep. The repository describes itself as: Curated Agent Skills for Microsoft & Azure – giving AI coding assistants structured, real-time expertise from Microsoft Learn docs. The licence is CC-BY-4.0.

When your agent uses it

  • Building DMZ/AVD/AKS enclave apps
  • Configuring RBAC/CMK
  • Deploying via Bicep/ARM
  • Setting up ExpressRoute/VPN

Example prompts

  • “/azure-enclave”

Requirements

  • Compatibility (from SKILL.md): Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation.

What it can do on your machine

Read from SKILL.md and the folder at commit ba74e8f. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Links to these hosts (documentation or services it may open):

    • learn.microsoft.com
    • github.com

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

  • Compatibility

    Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation.

    From compatibility in the SKILL.md frontmatter.

Context cost

Azure Enclave loads about 2.7k tokens when it runs. Until then it costs about 147 tokens; SKILL.md has 779 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~147
When it runs · the whole SKILL.md, loaded when a task matches
~2.7k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from MicrosoftDocs/Agent-Skills at commit ba74e8f, republished under its CC-BY-4.0 licence (© MicrosoftDocs). 779 words, ~2,697 tokens.

Download SKILL.mdSave it as .claude/skills/azure-enclave/SKILL.md (or your agent's skills folder).
name
azure-enclave
description
Expert knowledge for Azure Enclave development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, and deployment. Use when building DMZ/AVD/AKS enclave apps, configuring RBAC/CMK, deploying via Bicep/ARM, or setting up ExpressRoute/VPN, and other Azure Enclave related development tasks. Not for Azure Confidential Computing (use azure-confidential-computing), Azure Attestation (use azure-attestation), Azure Dedicated HSM (use azure-dedicated-hsm), Azure Cloud Hsm (use azure-cloud-hsm).
compatibility
Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation.
metadata.generated_at
2026-10-04
metadata.generator
docs2skills/1.0.0

Azure Enclave Skill

This skill provides expert guidance for Azure Enclave. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
TroubleshootingL36-L41Diagnosing and resolving common Azure Enclave issues, including error codes, configuration problems, deployment failures, and runtime/attestation troubleshooting.
Best PracticesL42-L47Design, security, and operational best practices for Azure Enclave, including secure architecture patterns and how to harden and manage admin VMs safely.
Decision MakingL48-L53Planning disaster recovery and business continuity for Azure Enclave, and strategies, steps, and considerations for migrating existing Azure workloads into an Enclave environment.
Architecture & Design PatternsL54-L60Architectural patterns for Azure Enclave apps: DMZ-based public access, integrating with AVD/AKS, and secure data ingress design for enclave environments.
Limits & QuotasL61-L66Naming rules for Azure Enclave resources plus service limits, quotas, and regional availability to plan compliant deployments and capacity.
SecurityL67-L91Configuring Azure Enclave security: RBAC, managed identities, CMK encryption, policy/guardrails for AKS, App Service, SQL, Storage, ACR, Cosmos DB, Key Vault, and governance/JIT access.
ConfigurationL92-L106Configuring enclaves, governance, approvals, DNS/AVD setup, observability, policy exemptions, and using service catalog templates for Azure Enclave workloads.
DeploymentL107-L115Guides for deploying Enclave workloads: app installation on RemoteApp VMs, using Bicep/ARM/CLI templates, and setting up ExpressRoute/VPN connectivity and shared dependencies.
Troubleshooting
TopicURL
Resolve common questions and issues in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/azure-enclave-faq
Diagnose and fix common Azure Enclave errorshttps://learn.microsoft.com/en-us/azure/enclave/troubleshoot
Best Practices
TopicURL
Apply design and security best practices for Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/best-practices
Operate admin VMs securely in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/understand-admin-vm
Decision Making
TopicURL
Design disaster recovery strategy for Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/disaster-recovery-planning
Migrate existing Azure resources into Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/migrate-azure-resources-azure-enclave
Architecture & Design Patterns
Limits & Quotas
TopicURL
Apply naming rules and restrictions for Azure Enclave resourceshttps://learn.microsoft.com/en-us/azure/enclave/name-rules-restrictions-azure-enclave-resources
Review Azure Enclave quotas and regional availabilityhttps://learn.microsoft.com/en-us/azure/enclave/quotas-region-availability
Show full SKILL.md (332 more words)Show less
Security
TopicURL
Configure Azure Enclave RBAC and deny assignmentshttps://learn.microsoft.com/en-us/azure/enclave/access-controls-enclaves
Apply AKS security policy guardrails in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/aks-initiative
Apply App Service security policy guardrails in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/app-service-initiative
Use built-in RBAC roles for Azure Enclave accesshttps://learn.microsoft.com/en-us/azure/enclave/built-in-rbac-roles
Configure CMK encryption for Azure Enclave resourceshttps://learn.microsoft.com/en-us/azure/enclave/configure-customer-managed-key-encryption-within-enclave
Apply secure policy guardrails to Azure Container Registryhttps://learn.microsoft.com/en-us/azure/enclave/container-registry-initiative
Enforce secure deployment policies for Azure Cosmos DBhttps://learn.microsoft.com/en-us/azure/enclave/cosmosdb-initiative
Create user-assigned managed identities in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/create-user-managed-identity
Implement defense-in-depth protections in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/defense-in-depth
Set up JIT access with PIM for Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/just-in-time-access
Secure Azure Key Vault with Enclave policy guardrailshttps://learn.microsoft.com/en-us/azure/enclave/key-vault-initiative
Use Azure Enclave maintenance mode for protected resourceshttps://learn.microsoft.com/en-us/azure/enclave/maintenance-mode
Configure secure monitoring policies in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/monitor-initiative
Configure permissions and onboarding for Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/onboard
Enforce secure deployment guardrails for Azure PostgreSQLhttps://learn.microsoft.com/en-us/azure/enclave/postgresql-initiative
Use Azure Enclave built-in RBAC roleshttps://learn.microsoft.com/en-us/azure/enclave/role-based-access-controls
Secure Azure Service Bus with Enclave policy guardrailshttps://learn.microsoft.com/en-us/azure/enclave/service-bus-initiative
Understand Azure Enclave shared security responsibilitieshttps://learn.microsoft.com/en-us/azure/enclave/shared-responsibility-model
Apply Azure Enclave security policies to Azure SQLhttps://learn.microsoft.com/en-us/azure/enclave/sql-initiative
Apply secure policy guardrails to Azure Storage accountshttps://learn.microsoft.com/en-us/azure/enclave/storage-initiative
Configure approval-based governance in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/what-approvals
Configuration
TopicURL
Configure enclave and community endpoint resources in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/1-5-create-enclave-endpoint-connections
Configure approvals workflow in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/configure-approvals
Configure community-level governance in Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/configure-community-governance
Understand creation and deletion rules for Azure Enclave resourceshttps://learn.microsoft.com/en-us/azure/enclave/create-and-delete-logic
Configure Azure Virtual Desktop workloads within an enclavehttps://learn.microsoft.com/en-us/azure/enclave/create-azure-virtual-desktop-workloads
Set up a DNS forwarder VM in an Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/create-domain-name-service-forwarder
Use Azure Enclave service catalog templates for workloadshttps://learn.microsoft.com/en-us/azure/enclave/list-service-catalog-templates
Manage and process Azure Enclave approval requestshttps://learn.microsoft.com/en-us/azure/enclave/manage-approvals
Configure observability destinations for Azure Enclavehttps://learn.microsoft.com/en-us/azure/enclave/observability
Configure policy exemptions for Azure Enclave workloadshttps://learn.microsoft.com/en-us/azure/enclave/policy-compliance-exemptions
Understand and use approvals for Azure Enclave changeshttps://learn.microsoft.com/en-us/azure/enclave/understand-approvals
Deployment

© MicrosoftDocs, CC-BY-4.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in skills/azure-enclave of MicrosoftDocs/Agent-Skills.

Open the folder on GitHubat commit ba74e8f

Compare with similar skills

Azure Enclave next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Azure Enclave compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Azure Enclave this skillMicrosoftDocs/Agent-Skills775—~2.7kAutomated safety check: PassCC-BY-4.0
Azure Validatemicrosoft/GitHub-Copilot-for-Azure2551 repos~880Automated safety check: PassMIT
Azure Architecture Autopilotgithub/awesome-copilot40k1 repos~1.9kAutomated safety check: PassMIT
Azure Bicep Skilltimothywarner-org/claude-code224—~2.9kAutomated safety check: PassMIT
Azsdk Common Live And Recorded TestsAzure/azure-sdk-tools134—~1.5kAutomated safety check: NotesMIT
Azure Deployment Preflightgithub/awesome-copilot40k1 repos~1.9kAutomated safety check: PassMIT

Similar skills

  • Azure Validate

    microsoft/GitHub-Copilot-for-Azure

    Official

    Pre-deployment validation for Azure readiness. An agent skill from microsoft/GitHub-Copilot-for-Azure.

    255 GitHub starsUsed in 1 repo~880 tokens
    DevOps & CloudAuto-check passed
  • Azure Architecture Autopilot

    github/awesome-copilot

    Official

    Designs Azure infrastructure from a natural-language description, or diagrams an existing resource group, then refines the design through conversation and deploys it with Bicep.

    40k GitHub starsUsed in 1 repo~1.9k tokens
    DevOps & CloudAuto-check passed
  • Azure Bicep Skill

    timothywarner-org/claude-code

    A skill your agent uses when authoring, reviewing, or refactoring Azure Bicep code.

    224 GitHub stars~2.9k tokensUpdated 2 mo ago
    DevOps & CloudAuto-check passed
  • Official

    Deploy test resources and run Azure SDK tests in live, record, or playback mode.

    134 GitHub stars~1.5k tokensUpdated yesterday
    DevOps & CloudAuto-check: notes
  • Azure Deployment Preflight

    github/awesome-copilot

    Official

    Performs comprehensive preflight validation of Bicep deployments to Azure, including template syntax validation, what-if analysis, and permission checks.

    40k GitHub starsUsed in 1 repo~1.9k tokens
    DevOps & CloudAuto-check passed
  • Apex Azure Deploy

    jonathan-vella/apex

    WORKFLOW SKILL — Execute Azure deployments (azd up, azd deploy, terraform apply) for already-prepared apps with built-in error recovery.

    217 GitHub stars~2.3k tokensUpdated yesterday
    DevOps & CloudAuto-check passed

More from MicrosoftDocs/Agent-Skills

All 149 skills in this repo
  • Azure Personalizer

    MicrosoftDocs/Agent-Skills

    Official

    Expert knowledge for Azure AI Personalizer development including troubleshooting, decision making, security, configuration, and integrations & coding patterns.

    775 GitHub starsUsed in 1 repo~1.1k tokens
    Auto-check passed
  • Azure Architecture Advisor

    MicrosoftDocs/Agent-Skills

    Official

    Guides Azure solution design by category, from reference architectures and design patterns to technology choices and migrations, fetching current Microsoft Learn pages over the network.

    775 GitHub stars~15k tokensUpdated 2 days ago
    Auto-check passed
  • Azure Advisor Guidance

    MicrosoftDocs/Agent-Skills

    Official

    Reference guidance for Azure Advisor work: recommendations, alerts and digests, workbooks, RBAC access and sovereign-cloud limits, fetched from Microsoft Learn.

    775 GitHub stars~1.7k tokensUpdated 2 days ago
    Auto-check passed
  • Azure AI Vision Reference

    MicrosoftDocs/Agent-Skills

    Official

    Looks up Microsoft Learn guidance for Azure AI Vision: Image Analysis, Read OCR containers, smart-crop thumbnails, background removal and video frame analysis, plus limits and deployment.

    775 GitHub stars~1.6k tokensUpdated 2 days ago
    Auto-check passed
  • Azure Analysis Services

    MicrosoftDocs/Agent-Skills

    Official

    Expert knowledge for Azure Analysis Services development including troubleshooting.

    775 GitHub stars~608 tokensUpdated 2 days ago
    Auto-check passed
  • Azure Anomaly Detector

    MicrosoftDocs/Agent-Skills

    Official

    Expert knowledge for Azure AI Anomaly Detector development including troubleshooting, best practices, limits & quotas, configuration, and deployment.

    775 GitHub stars~1.1k tokensUpdated 2 days ago
    Auto-check passed

Questions about Azure Enclave

What does Azure Enclave do?

Expert knowledge for Azure Enclave development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, and deployment. Azure Enclave is an agent skill from MicrosoftDocs/Agent-Skills, published by the product's own GitHub organization. Expert knowledge for Azure Enclave development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, and deployment.

When should I use Azure Enclave?

Azure Enclave fits situations like: building DMZ/AVD/AKS enclave apps; configuring RBAC/CMK; deploying via Bicep/ARM; setting up ExpressRoute/VPN.

How do I install Azure Enclave in Claude Code?

Run `npx skills add MicrosoftDocs/Agent-Skills --skill azure-enclave -a claude-code`. Or copy the skill folder (skills/azure-enclave in MicrosoftDocs/Agent-Skills) into .claude/skills/azure-enclave in your project. Claude Code loads it when a task matches its description.

How do I install Azure Enclave in Codex?

Run `npx skills add MicrosoftDocs/Agent-Skills --skill azure-enclave -a codex`. Or copy the skill folder (skills/azure-enclave in MicrosoftDocs/Agent-Skills) into .agents/skills/azure-enclave in your project. Codex loads it when a task matches its description.

Can I use Azure Enclave in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add MicrosoftDocs/Agent-Skills --skill azure-enclave -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/azure-enclave, .gemini/skills/azure-enclave, .github/skills/azure-enclave and .opencode/skills/azure-enclave in your project.

What does Azure Enclave need to run?

SKILL.md names no scripts, command-line tools or credentials: Azure Enclave is instructions for the agent only. Compatibility (from SKILL.md): Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation..

Does Azure Enclave access the network?

SKILL.md names 2 domains. As links in the text: learn.microsoft.com and github.com. This is read from the text; nothing was executed.

Is Azure Enclave safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Azure Enclave use?

Azure Enclave is published under the CC-BY-4.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Azure Enclave use?

About 2.7k tokens (SKILL.md is roughly 11k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Azure Enclave?

Skills that share tags, products or a category with Azure Enclave: Azure Validate (microsoft/GitHub-Copilot-for-Azure, 255 stars), Azure Architecture Autopilot (github/awesome-copilot, 40k stars), Azure Bicep Skill (timothywarner-org/claude-code, 224 stars) and Azsdk Common Live And Recorded Tests (Azure/azure-sdk-tools, 134 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Azure Enclave?

MicrosoftDocs (a GitHub organization, an official publisher) maintains it in MicrosoftDocs/Agent-Skills, which has 775 GitHub stars. The repository holds 149 skills in this directory. The repository was last updated on October 5, 2026.

Source: MicrosoftDocs/Agent-Skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.