DevOps-Security-Agent-Skills/infrastructure/cloud-azure/azure-networking/SKILL.md

name, description, license, metadata

name	description	license	metadata
azure-networking	Configure Azure VNets, NSGs, and Azure Firewall. Implement hub-spoke topology and private endpoints. Use when designing Azure network infrastructure.	MIT	author version devops-skills 1.0

Azure Networking

Design and implement Azure network infrastructure.

Create VNet

az network vnet create \
  --resource-group mygroup \
  --name myvnet \
  --address-prefix 10.0.0.0/16 \
  --subnet-name default \
  --subnet-prefix 10.0.1.0/24

Network Security Group

az network nsg create \
  --resource-group mygroup \
  --name mynsg

az network nsg rule create \
  --resource-group mygroup \
  --nsg-name mynsg \
  --name AllowHTTPS \
  --priority 100 \
  --destination-port-ranges 443 \
  --access Allow

Private Endpoint

az network private-endpoint create \
  --resource-group mygroup \
  --name myendpoint \
  --vnet-name myvnet \
  --subnet default \
  --private-connection-resource-id /subscriptions/.../sql/... \
  --group-id sqlServer \
  --connection-name myconnection

Best Practices

• Implement hub-spoke topology
• Use NSGs and Azure Firewall
• Enable DDoS protection
• Use private endpoints
• Implement VNet peering