azure-automation

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Azure Automation Skill

Azure Automation Skill

This skill provides expert guidance for Azure Automation. Covers troubleshooting, best practices, decision making, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.
本Skill为Azure Automation提供专业指导,涵盖故障排除、最佳实践、决策制定、限制与配额、安全、配置、集成与编码模式以及部署。它结合了本地快速参考内容与远程文档获取能力。

How to Use This Skill

如何使用本Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g.,
L35-L120
), use
read_file
with the specified lines. For categories with file links (e.g.,
[security.md](security.md)
), use
read_file
on the linked reference file
IMPORTANT for Agent: If
metadata.generated_at
is more than 3 months old, suggest the user pull the latest version from the repository. If
mcp_microsoftdocs
tools are not available, suggest the user install it: Installation Guide
This skill requires network access to fetch documentation content:
  • Preferred: Use
    mcp_microsoftdocs:microsoft_docs_fetch
    with query string
    from=learn-agent-skill
    . Returns Markdown.
  • Fallback: Use
    fetch_webpage
    with query string
    from=learn-agent-skill&accept=text/markdown
    . Returns Markdown.
Agent重要提示:使用下方的分类索引定位相关章节。对于带有行范围的分类(例如
L35-L120
),使用
read_file
并指定对应行。对于带有文件链接的分类(例如
[security.md](security.md)
),对链接的参考文件使用
read_file
Agent重要提示:如果
metadata.generated_at
已超过3个月,建议用户从仓库拉取最新版本。如果
mcp_microsoftdocs
工具不可用,建议用户安装:安装指南
本Skill需要网络访问权限以获取文档内容:
  • 首选方式:使用
    mcp_microsoftdocs:microsoft_docs_fetch
    ,查询字符串为
    from=learn-agent-skill
    ,返回Markdown格式内容。
  • 备选方式:使用
    fetch_webpage
    ,查询字符串为
    from=learn-agent-skill&accept=text/markdown
    ,返回Markdown格式内容。

Category Index

分类索引

CategoryLinesDescription
TroubleshootingL36-L46Diagnosing and fixing Azure Automation issues: DSC/State Configuration, Hybrid Runbook Workers (agent/extension), managed identities, runbook failures, shared resources, and collecting support diagnostics.
Best PracticesL47-L56Best practices for structuring, chaining, and managing runbooks, handling errors and output streams, ensuring resilient execution, and avoiding context-switching issues in Azure Automation.
Decision MakingL57-L66Guidance on choosing Azure Automation runbook types and planning migrations (Orchestrator, Log Analytics agent, Hybrid workers, Run As accounts, AzureRM→Az, and agent-to-extension changes).
Limits & QuotasL67-L74Limits, quotas, and version/support details for Azure Automation: DSC extension changes, Automation resource limits, subscription quotas, and Change Tracking/Inventory support with AMA.
SecurityL75-L95Securing Automation accounts: identities (system/user-assigned), Entra auth, RBAC, encryption, private endpoints, policies, and safe use of credentials/certs in runbooks and Terraform.
ConfigurationL96-L136Configuring Azure Automation runbooks and DSC: alerts, schedules, parameters, hybrid workers, source control, Python/PowerShell modules, policy, and Change Tracking/Inventory at scale.
Integrations & Coding PatternsL137-L149Integrating Automation runbooks with Azure/AWS/Office 365/SQL, authenticating via identities/webhooks, deploying ARM, sending logs to Monitor, and emailing via SendGrid
DeploymentL150-L158Guides for deploying resilient Automation accounts and Hybrid Runbook Workers (Windows/Linux), using availability zones, DR planning, and CI/CD with DSC and Chocolatey.
分类行范围描述
故障排除L36-L46诊断并修复Azure Automation问题:DSC/状态配置、Hybrid Runbook Workers(代理/扩展)、托管标识、Runbook执行失败、共享资源,以及收集支持诊断数据。
最佳实践L47-L56Runbook的结构设计、链式调用与管理的最佳实践,错误处理与输出流配置,确保执行弹性,以及避免Azure Automation中的上下文切换问题。
决策制定L57-L66选择Azure Automation Runbook类型的指导,以及迁移规划(Orchestrator、Log Analytics代理、混合工作器、Run As账户、AzureRM→Az、代理到扩展的变更)。
限制与配额L67-L74Azure Automation的限制、配额、版本与支持详情:DSC扩展变更、Automation资源限制、订阅配额,以及AMA的变更跟踪/清单支持。
安全L75-L95保护Automation账户:标识(系统分配/用户分配)、Entra身份验证、RBAC、加密、专用终结点、策略,以及在Runbook和Terraform中安全使用凭据/证书。
配置L96-L136配置Azure Automation Runbook和DSC:警报、计划、参数、混合工作器、源代码控制、Python/PowerShell模块、策略,以及大规模变更跟踪/清单。
集成与编码模式L137-L149将Automation Runbook与Azure/AWS/Office 365/SQL集成,通过标识/Webhook进行身份验证,部署ARM模板,将日志发送到Monitor,以及通过SendGrid发送邮件
部署L150-L158部署高可用Automation账户和Hybrid Runbook Workers(Windows/Linux)的指南,使用可用性区域、灾难恢复规划,以及结合DSC和Chocolatey的CI/CD。

Troubleshooting

故障排除

Best Practices

最佳实践

TopicURL
Design modular parent-child runbooks in Azure Automationhttps://learn.microsoft.com/en-us/azure/automation/automation-child-runbooks
Design resilient Azure Automation runbook execution behaviorhttps://learn.microsoft.com/en-us/azure/automation/automation-runbook-execution
Implement error handling in Azure Automation graphical runbookshttps://learn.microsoft.com/en-us/azure/automation/automation-runbook-graphical-error-handling
Configure output and message streams in Azure Automation runbookshttps://learn.microsoft.com/en-us/azure/automation/automation-runbook-output-and-messages
Avoid Azure Automation runbook issues from context switchinghttps://learn.microsoft.com/en-us/azure/automation/context-switching
Manage Azure Automation runbooks with recommended design patternshttps://learn.microsoft.com/en-us/azure/automation/manage-runbooks
主题URL
在Azure Automation中设计模块化父子Runbookhttps://learn.microsoft.com/en-us/azure/automation/automation-child-runbooks
设计高可用的Azure Automation Runbook执行机制https://learn.microsoft.com/en-us/azure/automation/automation-runbook-execution
在Azure Automation图形化Runbook中实现错误处理https://learn.microsoft.com/en-us/azure/automation/automation-runbook-graphical-error-handling
配置Azure Automation Runbook的输出与消息流https://learn.microsoft.com/en-us/azure/automation/automation-runbook-output-and-messages
避免Azure Automation Runbook因上下文切换产生的问题https://learn.microsoft.com/en-us/azure/automation/context-switching
使用推荐设计模式管理Azure Automation Runbookhttps://learn.microsoft.com/en-us/azure/automation/manage-runbooks

Decision Making

决策制定

Limits & Quotas

限制与配额

Security

安全

TopicURL
Configure user-assigned managed identity for Azure Automationhttps://learn.microsoft.com/en-us/azure/automation/add-user-assigned-identity
Understand Azure Automation data protection and privacyhttps://learn.microsoft.com/en-us/azure/automation/automation-managing-data
Assign Azure RBAC roles and permissions for Automation accountshttps://learn.microsoft.com/en-us/azure/automation/automation-role-based-access-control
Configure encryption for secure assets in Azure Automationhttps://learn.microsoft.com/en-us/azure/automation/automation-secure-asset-encryption
Apply security best practices for Azure Automation accountshttps://learn.microsoft.com/en-us/azure/automation/automation-security-guidelines
Configure authentication methods for Azure Automation accountshttps://learn.microsoft.com/en-us/azure/automation/automation-security-overview
Configure Microsoft Entra ID authentication for Azure Automationhttps://learn.microsoft.com/en-us/azure/automation/automation-use-azure-ad
Disable local authentication and enforce Entra auth in Automationhttps://learn.microsoft.com/en-us/azure/automation/disable-local-authentication
Disable system-assigned managed identity on Automation accountshttps://learn.microsoft.com/en-us/azure/automation/disable-managed-identity-for-automation
Enable system-assigned managed identity for Azure Automationhttps://learn.microsoft.com/en-us/azure/automation/enable-managed-identity-for-automation
Secure Azure Automation access with Private Link and private endpointshttps://learn.microsoft.com/en-us/azure/automation/how-to/private-link-security
Use managed identity in Azure Automation PowerShell runbookshttps://learn.microsoft.com/en-us/azure/automation/learn/powershell-runbook-managed-identity
Provision Automation account and Reader role via Terraformhttps://learn.microsoft.com/en-us/azure/automation/quickstarts/create-azure-automation-account-terraform
Enable managed identities for Azure Automation accountshttps://learn.microsoft.com/en-us/azure/automation/quickstarts/enable-managed-identity
Apply Azure Policy compliance controls to Automationhttps://learn.microsoft.com/en-us/azure/automation/security-controls-policy
Securely manage certificates for Azure Automation runbooks and DSChttps://learn.microsoft.com/en-us/azure/automation/shared-resources/certificates
Create and use credential assets securely in Azure Automationhttps://learn.microsoft.com/en-us/azure/automation/shared-resources/credentials
主题URL
为Azure Automation配置用户分配的托管标识https://learn.microsoft.com/en-us/azure/automation/add-user-assigned-identity
了解Azure Automation的数据保护与隐私https://learn.microsoft.com/en-us/azure/automation/automation-managing-data
为Automation账户分配Azure RBAC角色与权限https://learn.microsoft.com/en-us/azure/automation/automation-role-based-access-control
为Azure Automation中的安全资产配置加密https://learn.microsoft.com/en-us/azure/automation/automation-secure-asset-encryption
应用Azure Automation账户的安全最佳实践https://learn.microsoft.com/en-us/azure/automation/automation-security-guidelines
为Azure Automation账户配置身份验证方法https://learn.microsoft.com/en-us/azure/automation/automation-security-overview
为Azure Automation配置Microsoft Entra ID身份验证https://learn.microsoft.com/en-us/azure/automation/automation-use-azure-ad
在Automation中禁用本地身份验证并强制使用Entra身份验证https://learn.microsoft.com/en-us/azure/automation/disable-local-authentication
在Automation账户上禁用系统分配的托管标识https://learn.microsoft.com/en-us/azure/automation/disable-managed-identity-for-automation
为Azure Automation启用系统分配的托管标识https://learn.microsoft.com/en-us/azure/automation/enable-managed-identity-for-automation
使用Private Link和专用终结点保护Azure Automation访问https://learn.microsoft.com/en-us/azure/automation/how-to/private-link-security
在Azure Automation PowerShell Runbook中使用托管标识https://learn.microsoft.com/en-us/azure/automation/learn/powershell-runbook-managed-identity
通过Terraform配置Automation账户与Reader角色https://learn.microsoft.com/en-us/azure/automation/quickstarts/create-azure-automation-account-terraform
为Azure Automation账户启用托管标识https://learn.microsoft.com/en-us/azure/automation/quickstarts/enable-managed-identity
为Automation应用Azure Policy合规控制https://learn.microsoft.com/en-us/azure/automation/security-controls-policy
为Azure Automation Runbook和DSC安全管理证书https://learn.microsoft.com/en-us/azure/automation/shared-resources/certificates
在Azure Automation中安全创建和使用凭据资产https://learn.microsoft.com/en-us/azure/automation/shared-resources/credentials

Configuration

配置

TopicURL
Configure metric alerts for Azure Automation runbookshttps://learn.microsoft.com/en-us/azure/automation/automation-alert-metric
Configure and use connection assets in Azure Automationhttps://learn.microsoft.com/en-us/azure/automation/automation-connections
Trigger Azure Automation runbooks from Azure Monitor alertshttps://learn.microsoft.com/en-us/azure/automation/automation-create-alert-triggered-runbook
Compile DSC configurations in Azure Automationhttps://learn.microsoft.com/en-us/azure/automation/automation-dsc-compile
Configure DSC data at scale in Azure Automationhttps://learn.microsoft.com/en-us/azure/automation/automation-dsc-config-data-at-scale
Generate DSC configurations from existing servershttps://learn.microsoft.com/en-us/azure/automation/automation-dsc-config-from-server
Configure STIG-based DSC data in Azure Automationhttps://learn.microsoft.com/en-us/azure/automation/automation-dsc-configuration-based-on-stig
Convert DSC configurations to composite resourceshttps://learn.microsoft.com/en-us/azure/automation/automation-dsc-create-composite
Send State Configuration data to Azure Monitor Logshttps://learn.microsoft.com/en-us/azure/automation/automation-dsc-diagnostics
Perform common Azure Automation State Configuration taskshttps://learn.microsoft.com/en-us/azure/automation/automation-dsc-getting-started
Onboard machines to Azure Automation State Configurationhttps://learn.microsoft.com/en-us/azure/automation/automation-dsc-onboarding
Remediate noncompliant servers with State Configurationhttps://learn.microsoft.com/en-us/azure/automation/automation-dsc-remediate
Use the Azure Automation textual editor for PowerShell runbookshttps://learn.microsoft.com/en-us/azure/automation/automation-edit-textual-runbook
Author and configure graphical runbooks in Azure Automationhttps://learn.microsoft.com/en-us/azure/automation/automation-graphical-authoring-intro
Configure and use Azure Automation Hybrid Runbook Workerhttps://learn.microsoft.com/en-us/azure/automation/automation-hybrid-runbook-worker
Configure network requirements for Azure Automation componentshttps://learn.microsoft.com/en-us/azure/automation/automation-network-configuration
Author and manage Automation runbooks using VS Codehttps://learn.microsoft.com/en-us/azure/automation/automation-runbook-authoring
Create watcher tasks to track file updates in Automationhttps://learn.microsoft.com/en-us/azure/automation/automation-scenario-using-watcher-task
Update and manage Azure PowerShell modules in Automation accountshttps://learn.microsoft.com/en-us/azure/automation/automation-update-azure-modules
Compose DSC configurations using composite resourceshttps://learn.microsoft.com/en-us/azure/automation/compose-configurationwithcompositeresources
Enforce Hybrid Runbook Worker job execution via policyhttps://learn.microsoft.com/en-us/azure/automation/enforce-job-execution-hybrid-worker
Configure Azure Automation regional DNS records for firewalled networkshttps://learn.microsoft.com/en-us/azure/automation/how-to/automation-region-dns-records
Configure runtime environments and associated runbooks in Azure Automationhttps://learn.microsoft.com/en-us/azure/automation/manage-runtime-environment
Use built-in Azure Policy definitions for Automationhttps://learn.microsoft.com/en-us/azure/automation/policy-reference
Import and manage Python 3 packages in Azure Automationhttps://learn.microsoft.com/en-us/azure/automation/python-3-packages
Import and manage Python 2 packages in Azure Automationhttps://learn.microsoft.com/en-us/azure/automation/python-packages
Deploy Azure Automation account via ARM templatehttps://learn.microsoft.com/en-us/azure/automation/quickstart-create-automation-account-template
Configure input parameters for Azure Automation runbookshttps://learn.microsoft.com/en-us/azure/automation/runbook-input-parameters
Understand and configure Azure Automation runtime environmentshttps://learn.microsoft.com/en-us/azure/automation/runtime-environment-overview
Configure schedules for Azure Automation runbookshttps://learn.microsoft.com/en-us/azure/automation/shared-resources/schedules
Define and use variable assets in Azure Automationhttps://learn.microsoft.com/en-us/azure/automation/shared-resources/variables
Configure Azure Automation source control integrationhttps://learn.microsoft.com/en-us/azure/automation/source-control-integration
Choose methods to start Azure Automation runbookshttps://learn.microsoft.com/en-us/azure/automation/start-runbooks
Remove DSC configuration and unregister Automation nodehttps://learn.microsoft.com/en-us/azure/automation/state-configuration/remove-node-and-configuration-package
Configure machines to desired state with Automation DSChttps://learn.microsoft.com/en-us/azure/automation/tutorial-configure-servers-desired-state
Enable Change Tracking and Inventory at scale via Machines panehttps://learn.microsoft.com/en-us/azure/azure-change-tracking-inventory/enable-change-tracking-at-scale-machines-blade
Enable Change Tracking and Inventory at scale with Azure Policyhttps://learn.microsoft.com/en-us/azure/azure-change-tracking-inventory/enable-change-tracking-at-scale-policy
主题URL
为Azure Automation Runbook配置指标警报https://learn.microsoft.com/en-us/azure/automation/automation-alert-metric
在Azure Automation中配置和使用连接资产https://learn.microsoft.com/en-us/azure/automation/automation-connections
通过Azure Monitor警报触发Azure Automation Runbookhttps://learn.microsoft.com/en-us/azure/automation/automation-create-alert-triggered-runbook
在Azure Automation中编译DSC配置https://learn.microsoft.com/en-us/azure/automation/automation-dsc-compile
在Azure Automation中大规模配置DSC数据https://learn.microsoft.com/en-us/azure/automation/automation-dsc-config-data-at-scale
从现有服务器生成DSC配置https://learn.microsoft.com/en-us/azure/automation/automation-dsc-config-from-server
在Azure Automation中配置基于STIG的DSC数据https://learn.microsoft.com/en-us/azure/automation/automation-dsc-configuration-based-on-stig
将DSC配置转换为复合资源https://learn.microsoft.com/en-us/azure/automation/automation-dsc-create-composite
将状态配置数据发送到Azure Monitor日志https://learn.microsoft.com/en-us/azure/automation/automation-dsc-diagnostics
执行常见的Azure Automation状态配置任务https://learn.microsoft.com/en-us/azure/automation/automation-dsc-getting-started
将计算机加入Azure Automation状态配置https://learn.microsoft.com/en-us/azure/automation/automation-dsc-onboarding
使用状态配置修复不合规服务器https://learn.microsoft.com/en-us/azure/automation/automation-dsc-remediate
使用Azure Automation文本编辑器编写PowerShell Runbookhttps://learn.microsoft.com/en-us/azure/automation/automation-edit-textual-runbook
在Azure Automation中创作和配置图形化Runbookhttps://learn.microsoft.com/en-us/azure/automation/automation-graphical-authoring-intro
配置和使用Azure Automation Hybrid Runbook Workerhttps://learn.microsoft.com/en-us/azure/automation/automation-hybrid-runbook-worker
配置Azure Automation组件的网络要求https://learn.microsoft.com/en-us/azure/automation/automation-network-configuration
使用VS Code创作和管理Automation Runbookhttps://learn.microsoft.com/en-us/azure/automation/automation-runbook-authoring
创建Watcher任务跟踪Automation中的文件更新https://learn.microsoft.com/en-us/azure/automation/automation-scenario-using-watcher-task
更新和管理Automation账户中的Azure PowerShell模块https://learn.microsoft.com/en-us/azure/automation/automation-update-azure-modules
使用复合资源编写DSC配置https://learn.microsoft.com/en-us/azure/automation/compose-configurationwithcompositeresources
通过策略强制Hybrid Runbook Worker作业执行https://learn.microsoft.com/en-us/azure/automation/enforce-job-execution-hybrid-worker
为防火墙网络配置Azure Automation区域DNS记录https://learn.microsoft.com/en-us/azure/automation/how-to/automation-region-dns-records
在Azure Automation中配置运行时环境及关联的Runbookhttps://learn.microsoft.com/en-us/azure/automation/manage-runtime-environment
使用Azure Automation的内置Azure Policy定义https://learn.microsoft.com/en-us/azure/automation/policy-reference
在Azure Automation中导入和管理Python 3包https://learn.microsoft.com/en-us/azure/automation/python-3-packages
在Azure Automation中导入和管理Python 2包https://learn.microsoft.com/en-us/azure/automation/python-packages
通过ARM模板部署Azure Automation账户https://learn.microsoft.com/en-us/azure/automation/quickstart-create-automation-account-template
为Azure Automation Runbook配置输入参数https://learn.microsoft.com/en-us/azure/automation/runbook-input-parameters
了解和配置Azure Automation运行时环境https://learn.microsoft.com/en-us/azure/automation/runtime-environment-overview
为Azure Automation Runbook配置计划https://learn.microsoft.com/en-us/azure/automation/shared-resources/schedules
在Azure Automation中定义和使用变量资产https://learn.microsoft.com/en-us/azure/automation/shared-resources/variables
配置Azure Automation源代码控制集成https://learn.microsoft.com/en-us/azure/automation/source-control-integration
选择启动Azure Automation Runbook的方式https://learn.microsoft.com/en-us/azure/automation/start-runbooks
删除DSC配置并注销Automation节点https://learn.microsoft.com/en-us/azure/automation/state-configuration/remove-node-and-configuration-package
使用Automation DSC将计算机配置为所需状态https://learn.microsoft.com/en-us/azure/automation/tutorial-configure-servers-desired-state
通过计算机面板大规模启用变更跟踪与清单https://learn.microsoft.com/en-us/azure/azure-change-tracking-inventory/enable-change-tracking-at-scale-machines-blade
通过Azure Policy大规模启用变更跟踪与清单https://learn.microsoft.com/en-us/azure/azure-change-tracking-inventory/enable-change-tracking-at-scale-policy

Integrations & Coding Patterns

集成与编码模式

TopicURL
Configure Azure Automation runbooks to authenticate with AWShttps://learn.microsoft.com/en-us/azure/automation/automation-config-aws-account
Deploy ARM templates from Azure Automation PowerShell runbookshttps://learn.microsoft.com/en-us/azure/automation/automation-deploy-template-runbook
Forward Azure Automation job logs to Azure Monitorhttps://learn.microsoft.com/en-us/azure/automation/automation-manage-send-joblogs-log-analytics
Provision AWS virtual machines using Azure Automation runbookshttps://learn.microsoft.com/en-us/azure/automation/automation-scenario-aws-deployment
Send email from Azure Automation runbook using SendGridhttps://learn.microsoft.com/en-us/azure/automation/automation-send-email
Trigger Azure Automation runbooks via webhooks from external serviceshttps://learn.microsoft.com/en-us/azure/automation/automation-webhooks
Use the Azure Automation graphical runbook SDKhttps://learn.microsoft.com/en-us/azure/automation/graphical-runbook-sdk
Manage Office 365 services with Azure Automationhttps://learn.microsoft.com/en-us/azure/automation/manage-office-365
Manage Azure SQL databases using Automation managed identityhttps://learn.microsoft.com/en-us/azure/automation/manage-sql-server-in-automation

Deployment

部署

TopicURL
Use availability zones for resilient Azure Automation deploymentshttps://learn.microsoft.com/en-us/azure/automation/automation-availability-zones
Plan disaster recovery for Azure Automation accountshttps://learn.microsoft.com/en-us/azure/automation/automation-disaster-recovery
Set up continuous deployment with DSC and Chocolateyhttps://learn.microsoft.com/en-us/azure/automation/automation-dsc-cd-chocolatey
Deploy Linux Hybrid Runbook Worker agenthttps://learn.microsoft.com/en-us/azure/automation/automation-linux-hrw-install
Deploy agent-based Windows Hybrid Runbook Workers in Azure Automationhttps://learn.microsoft.com/en-us/azure/automation/automation-windows-hrw-install
Deploy extension-based Hybrid Runbook Workers for Windows and Linuxhttps://learn.microsoft.com/en-us/azure/automation/extension-based-hybrid-runbook-worker-install
主题URL
使用可用性区域实现高可用的Azure Automation部署https://learn.microsoft.com/en-us/azure/automation/automation-availability-zones
规划Azure Automation账户的灾难恢复https://learn.microsoft.com/en-us/azure/automation/automation-disaster-recovery
结合DSC和Chocolatey设置持续部署https://learn.microsoft.com/en-us/azure/automation/automation-dsc-cd-chocolatey
部署Linux Hybrid Runbook Worker代理https://learn.microsoft.com/en-us/azure/automation/automation-linux-hrw-install
在Azure Automation中部署基于代理的Windows Hybrid Runbook Workerhttps://learn.microsoft.com/en-us/azure/automation/automation-windows-hrw-install
部署适用于Windows和Linux的基于扩展的Hybrid Runbook Workerhttps://learn.microsoft.com/en-us/azure/automation/extension-based-hybrid-runbook-worker-install