Azure hub
The root card of the Azure hub — documentation that helps an AI coding agent make Azure calls succeed (fix a failed call, write one that works first time, wire two services together), built family by family from Microsoft's source repositories at pinned commits and checked against the Azure CLI, REST specs and TypeScript SDK. Parent of the Fabric, AKS, Databricks and Synapse hubs. Start at _boot/START.md.
markdownbootv1BHMV-K0CDcloud: azure-globalvendor: microsoftaudience: agentaudience: maintainerchildren: azure-fabricchildren: azure-akschildren: azure-databrickschildren: azure-synapselanguages: typescriptlanguages: clilanguages: bicepazurehubroot
This hub documents Microsoft Azure for an AI coding agent: how to fix a call that failed, how to write a call or template that works the first time, and how one service hands off to another. It documents and never acts.
Start at _boot/START.md. It explains the layout, the rules that always apply and the calls that read the hub.
| Area | Status |
|---|---|
Identity and access: Entra ID, managed identities, workload identity federation, @azure/identity, RBAC, Policy, Key Vault access, Conditional Access for workloads, Entra Agent ID | Released 2026-10-20 |
Resource Manager and IaC: ARM errors, providers, API versions, throttling, locks, Bicep, deployment stacks, azd, Terraform | Released 2026-10-20 |
| Storage: account choices, Entra data roles, Shared Key, SAS, firewalls and private endpoints, ADLS Gen2 ACLs, Blob data protection, Azure Files (SMB, NFS), Tables, Blob and Data Lake errors, TypeScript and Bicep | Released 2026-10-20 |
| Compute: Functions (Flex Consumption, Durable, on Container Apps), App Service and ASE v3, Container Apps, Container Registry, Container Instances, VMs, scale sets, Compute Gallery | Released 2026-10-20 |
| Networking: VNets, peering, NSGs and routes, outbound (NAT gateway), private endpoints and DNS, Load Balancer, Application Gateway and WAF, Front Door, VPN Gateway, ExpressRoute, Firewall, DDoS, Bastion, Virtual WAN, Virtual Network Manager | Released 2026-10-20 |
| Databases: Azure SQL Database and Managed Instance, Cosmos DB and Azure DocumentDB, PostgreSQL and MySQL flexible server, Azure Managed Redis, retired services — Entra-only sign-in, managed identity principals, network modes, version retirements, errors | Released 2026-10-21 |
| Observability: Azure Monitor building blocks and retirements, Log Analytics workspaces and queries, Application Insights with the Microsoft OpenTelemetry Distro and Entra-only ingestion, diagnostic settings, data collection rules, Azure Monitor Agent, the Logs Ingestion API, alerts and action groups | Released 2026-10-21 |
| Messaging and integration, Azure OpenAI, Cost and limits | Planned, in that order |
The map, with each service's guides, error catalogues and patterns, is reference/overview/services-and-identities.md. Code is TypeScript on Node.js with the @azure/* SDKs, the Azure CLI and Bicep. The hub assumes the global Azure cloud.
Child hubs, which inherit this one: Fabric (with Power BI), AKS, Databricks, Synapse.
Release notes: changelog/.