FinOps Azure
Use this skill when Azure resources, infra specs, cost estimates, budgets, quotas, scaling, monitoring, or cloud operations are involved.
Workflow
- Use read-only
az commands by default.
- Confirm login and subscription:
az account show --output jsonaz account list --output table
- Inventory relevant resources:
az resource list --output json- filter by resource group, tag, or service when known
- Check cost and waste signals:
- budgets
- unattached disks
- idle public IPs
- oversized SKUs
- missing autoscale
- missing tags
- Check operational signals:
- diagnostic settings
- alerts
- metrics
- backup/restore posture
- Record durable assumptions in
.codex-lattice/model-visible/AZURE_INFRA_MEMORY.md.
- Update
docs/harness/COST_MODEL.md, docs/harness/INFRA_SPEC.md, and docs/harness/OPERATIONS_RUNBOOK.md.
Safety Rules
- Do not create, update, delete, scale, rotate, or restart Azure resources without explicit user approval.
- Never print secrets, keys, connection strings, tokens, or full credentials.
- Prefer JSON output for machine-readable evidence.
Required Output
Return subscription, resource scope, cost drivers, waste candidates, monitoring gaps, risk, and next commands.
1---2name: finops-azure3description: Azure FinOps and resource review workflow. Use when Azure resources, infrastructure specs, cost estimates, budgets, quotas, scaling, monitoring, or cloud operations are involved. Defaults to read-only Azure CLI discovery.4---56# FinOps Azure78Use this skill when Azure resources, infra specs, cost estimates, budgets, quotas, scaling, monitoring, or cloud operations are involved.910## Workflow11121. Use read-only `az` commands by default.132. Confirm login and subscription:14 - `az account show --output json`15 - `az account list --output table`163. Inventory relevant resources:17 - `az resource list --output json`18 - filter by resource group, tag, or service when known194. Check cost and waste signals:20 - budgets21 - unattached disks22 - idle public IPs23 - oversized SKUs24 - missing autoscale25 - missing tags265. Check operational signals:27 - diagnostic settings28 - alerts29 - metrics30 - backup/restore posture316. Record durable assumptions in `.codex-lattice/model-visible/AZURE_INFRA_MEMORY.md`.327. Update `docs/harness/COST_MODEL.md`, `docs/harness/INFRA_SPEC.md`, and `docs/harness/OPERATIONS_RUNBOOK.md`.3334## Safety Rules3536- Do not create, update, delete, scale, rotate, or restart Azure resources without explicit user approval.37- Never print secrets, keys, connection strings, tokens, or full credentials.38- Prefer JSON output for machine-readable evidence.3940## Required Output4142Return subscription, resource scope, cost drivers, waste candidates, monitoring gaps, risk, and next commands.
jh941213