Azure Resources Skill (Read-Only)

Query and inspect Azure resources without making changes.

See also: Shared Conventions | Safety Guidelines

Purpose

Search, list, and inspect Azure resources to understand infrastructure.

Commands

az account show -o json
az account list -o json
az group list -o json
az group show --name <name> -o json
az resource list -o json
az resource list --resource-group <rg> -o json
az resource list --resource-type <type> -o json
az resource show --ids <resource-id> -o json

Output Format

Always use -o json for consistent, parseable output.

Workflow Examples

Get Current Subscription

az account show -o json

List All Resource Groups

az group list -o json

Find Resources by Type

# All VMs
az resource list --resource-type "Microsoft.Compute/virtualMachines" -o json

# All storage accounts
az resource list --resource-type "Microsoft.Storage/storageAccounts" -o json

# All App Services
az resource list --resource-type "Microsoft.Web/sites" -o json

Inspect Specific Resource

az resource show --ids "/subscriptions/xxx/resourceGroups/yyy/providers/..." -o json

Find Resources in a Resource Group

az resource list --resource-group my-rg -o json

Common Resource Types

| Resource | Type String | |----------|-------------| | VM | Microsoft.Compute/virtualMachines | | Storage | Microsoft.Storage/storageAccounts | | App Service | Microsoft.Web/sites | | SQL Database | Microsoft.Sql/servers/databases | | Key Vault | Microsoft.KeyVault/vaults | | AKS | Microsoft.ContainerService/managedClusters |

Policies

• Read-only only - no create, update, delete, or set commands
• Always use JSON output for consistent parsing
• If asked to modify resources: stop, explain read-only scope, show what command would be needed, require explicit confirmation