landing-zone-deployment-design
Create Bicep-based infrastructure deployment designs for Azure landing zones.
Install
mkdir -p .claude/skills/landing-zone-deployment-design && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/17995" && unzip -o skill.zip -d .claude/skills/landing-zone-deployment-design && rm skill.zipInstalls to .claude/skills/landing-zone-deployment-design
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
Turn the Azure landing zone specs into a Bicep-first deployment model, module graph, and GitHub Actions staging plan.Key capabilities
- →Translate Azure landing zone specs into deployment boundaries.
- →Derive deployment sequences from OpenSpec capability order.
- →Split the design into Bicep modules or deployment units.
- →Highlight bootstrap constraints for the deployment runner.
- →Identify necessary outputs for workflow steps and verification.
How it works
The skill processes OpenSpec documents to identify deployment scopes, derive sequences, and define Bicep modules. It also pinpoints bootstrap constraints and required outputs for a GitHub Actions workflow.
Inputs & outputs
When to use landing-zone-deployment-design
- →Draft Bicep module structure
- →Define deployment sequences
- →Create GitHub Actions staging workflow
About this skill
Landing Zone Deployment Design
Use this skill when designing the Bicep structure or the deployment stages for the landing zone.
Goals
- Translate the OpenSpec landing-zone artifacts into implementation-ready deployment boundaries.
- Make bootstrap constraints explicit.
- Produce a design that a GitHub Actions workflow can execute deterministically.
Inputs to read first
openspec/changes/azure-landing-zone-foundation/proposal.mdopenspec/changes/azure-landing-zone-foundation/design.mdopenspec/changes/azure-landing-zone-foundation/specs/**/spec.md
Workflow
- Identify required deployment scopes such as subscription, resource group, hub, and spoke.
- Derive the deployment sequence from the capability order already defined in OpenSpec.
- Split the design into modules or deployment units with clean inputs and outputs.
- Highlight bootstrap constraints, especially where the runner platform depends on resources that the workflow itself must deploy first.
- Identify which outputs the workflow needs for later steps, summaries, and verification.
Required design checks
- Keep the hub as a platform boundary.
- Keep workloads in spokes.
- Preserve low-cost defaults.
- Keep expensive services behind explicit feature flags.
- Leave space for future routing and security upgrades.
Deliverables
- module graph
- deployment stage order
- parameter and output contract
- bootstrap notes
- assumptions and trade-offs
When not to use it
- →When not designing Bicep structure or deployment stages for a landing zone.
- →When the goal is not to translate OpenSpec artifacts into implementation-ready designs.
- →When a GitHub Actions workflow is not the target execution environment.
Limitations
- →The skill focuses on Azure landing zone specs.
- →It assumes a Bicep-first deployment model.
- →The design is intended for execution by a GitHub Actions workflow.
How it compares
This skill provides a structured methodology for transforming high-level landing zone specifications into a Bicep-first deployment model and GitHub Actions staging plan, ensuring deterministic execution and explicit constraints, unlike an a
Compared to similar skills
landing-zone-deployment-design side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| landing-zone-deployment-design (this skill) | 0 | 3mo | No flags | Advanced |
| azure-deployment-preflight | 7 | 6mo | Review | Advanced |
| terraform-azurerm-set-diff-analyzer | 5 | 5mo | Review | Beginner |
| hybrid-cloud-networking | 3 | 4mo | Review | Advanced |
Try saying
Example prompts that trigger this skill in your AI assistant.
You might also like
azure-deployment-preflight
github
Performs comprehensive preflight validation of Bicep deployments to Azure, including template syntax validation, what-if analysis, and permission checks. Use this skill before any deployment to Azure to preview changes, identify potential issues, and ensure the deployment will succeed. Activate when users mention deploying to Azure, validating Bicep files, checking deployment permissions, previewing infrastructure changes, running what-if, or preparing for azd provision.
terraform-azurerm-set-diff-analyzer
github
Analyze Terraform plan JSON output for AzureRM Provider to distinguish between false-positive diffs (order-only changes in Set-type attributes) and actual resource changes. Use when reviewing terraform plan output for Azure resources like Application Gateway, Load Balancer, Firewall, Front Door, NSG, and other resources with Set-type attributes that cause spurious diffs due to internal ordering changes.
hybrid-cloud-networking
wshobson
Configure secure, high-performance connectivity between on-premises infrastructure and cloud platforms using VPN and dedicated connections. Use when building hybrid cloud architectures, connecting data centers to cloud, or implementing secure cross-premises networking.
iac-common
jonathan-vella
**UTILITY SKILL** — Shared IaC deploy patterns for Bicep + Terraform agents: deployment strategies, circuit breaker, known deploy issues. WHEN: "phased deployment", "circuit breaker", "deploy strategy", "deploy issue", "shared IaC pattern". DO NOT USE FOR: preflight (azure-validate), code generation
senior-devops
davila7
Comprehensive DevOps skill for CI/CD, infrastructure automation, containerization, and cloud platforms (AWS, GCP, Azure). Includes pipeline setup, infrastructure as code, deployment automation, and monitoring. Use when setting up pipelines, deploying applications, managing infrastructure, implementing monitoring, or optimizing deployment processes.
devops-iac-engineer
davila7
Implements infrastructure as code using Terraform, Kubernetes, and cloud platforms. Designs scalable architectures, CI/CD pipelines, and observability solutions. Provides security-first DevOps practices and site reliability engineering guidance.