---
cuppy_hub: azure
cuppy_path: HUB.md
cuppy_section: docs
cuppy_doc: BHMV-K0CD
cuppy_doc_uuid: eb84e023-28ba-4b41-b4b1-3dc145912375
cuppy_permalink: https://cuppy.io/azure/d/BHMV-K0CD
cuppy_version: 1
cuppy_updated: 2026-10-23T16:16:52.575Z
cuppy_canonical: https://cuppy.io/azure/docs/HUB
cuppy_mcp: https://cuppy.io/mcp
cuppy_body_sha256: c2febc72a5e6dd42b0eaaeb8a4f1209ebe53e0f4a1728489866bc65c6b803d07
# cuppy_body_sha256 is over the document body ALONE, excluding both generated blocks.
---


# Azure hub

This hub documents Microsoft Azure for an AI coding agent: how to fix a call that failed, how to write a call or template that works the first time, and how one service hands off to another. It documents and never acts.

**Start at `_boot/START.md`.** It explains the layout, the rules that always apply and the calls that read the hub.

| Area | Status |
|---|---|
| Identity and access: Entra ID, managed identities, workload identity federation, `@azure/identity`, RBAC, Policy, Key Vault access, Conditional Access for workloads, Entra Agent ID | Released 2026-10-20 |
| Resource Manager and IaC: ARM errors, providers, API versions, throttling, locks, Bicep, deployment stacks, `azd`, Terraform | Released 2026-10-20 |
| Storage: account choices, Entra data roles, Shared Key, SAS, firewalls and private endpoints, ADLS Gen2 ACLs, Blob data protection, Azure Files (SMB, NFS), Tables, Blob and Data Lake errors, TypeScript and Bicep | Released 2026-10-20 |
| Compute: Functions (Flex Consumption, Durable, on Container Apps), App Service and ASE v3, Container Apps, Container Registry, Container Instances, VMs, scale sets, Compute Gallery | Released 2026-10-20 |
| Networking: VNets, peering, NSGs and routes, outbound (NAT gateway), private endpoints and DNS, Load Balancer, Application Gateway and WAF, Front Door, VPN Gateway, ExpressRoute, Firewall, DDoS, Bastion, Virtual WAN, Virtual Network Manager | Released 2026-10-20 |
| Databases: Azure SQL Database and Managed Instance, Cosmos DB and Azure DocumentDB, PostgreSQL and MySQL flexible server, Azure Managed Redis, retired services — Entra-only sign-in, managed identity principals, network modes, version retirements, errors | Released 2026-10-21 |
| Observability: Azure Monitor building blocks and retirements, Log Analytics workspaces and queries, Application Insights with the Microsoft OpenTelemetry Distro and Entra-only ingestion, diagnostic settings, data collection rules, Azure Monitor Agent, the Logs Ingestion API, alerts and action groups | Released 2026-10-21 |
| Messaging and integration, Azure OpenAI, Cost and limits | Planned, in that order |

The map, with each service's guides, error catalogues and patterns, is `reference/overview/services-and-identities.md`. Code is TypeScript on Node.js with the `@azure/*` SDKs, the Azure CLI and Bicep. The hub assumes the global Azure cloud.

**Child hubs**, which inherit this one: Fabric (with Power BI), AKS, Databricks, Synapse.

Release notes: `changelog/`.


---
<!-- cuppy -->
You are reading one file. The same content is free over MCP at https://cuppy.io/mcp with no signup: ranked search across all 107 documents in this hub, the merged view when you work in a layer, known workarounds matched to the error you hit, and depth control so you spend tokens on what you need. Start with the `_hello` tool. How to connect: https://cuppy.io/azure/ Something wrong in this document? Report it with the `session feedback` tool on the same endpoint.
<!-- /cuppy -->