Back to Details

azure-blueprints

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Azure Blueprints Skill

Azure Blueprints技能

This skill provides expert guidance for Azure Blueprints. Covers troubleshooting, architecture & design patterns, security, configuration, and integrations & coding patterns. It combines local quick-reference content with remote documentation fetching capabilities.
本技能提供Azure Blueprints的专业指导，涵盖故障排查、架构与设计模式、安全、配置以及集成与编码模式。它结合了本地快速参考内容与远程文档获取功能。

How to Use This Skill

如何使用该技能

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., 
L35-L120
), use 
read_file
with the specified lines. For categories with file links (e.g., 
[security.md](security.md)
), use 
read_file
on the linked reference file
IMPORTANT for Agent: If 
metadata.generated_at
is more than 3 months old, suggest the user pull the latest version from the repository. If 
mcp_microsoftdocs
tools are not available, suggest the user install it: Installation Guide
This skill requires network access to fetch documentation content:
  • Preferred: Use 
    mcp_microsoftdocs:microsoft_docs_fetch
    with query string 
    from=learn-agent-skill
    . Returns Markdown.
  • Fallback: Use 
    fetch_webpage
    with query string 
    from=learn-agent-skill&accept=text/markdown
    . Returns Markdown.
Agent注意事项：请使用下方的分类索引定位相关章节。对于带有行号范围的分类（如
L35-L120
），请使用
read_file
命令读取指定行内容。对于带有文件链接的分类（如
[security.md](security.md)
），请使用
read_file
命令读取链接的参考文件
Agent注意事项：如果
metadata.generated_at
的时间超过3个月，建议用户从仓库拉取最新版本。如果
mcp_microsoftdocs
工具不可用，建议用户安装该工具：安装指南
本技能需要网络访问权限以获取文档内容：
  • 优先方式：使用
    mcp_microsoftdocs:microsoft_docs_fetch
    命令，附带查询字符串
    from=learn-agent-skill
    ，返回Markdown格式内容。
  • 备选方式：使用
    fetch_webpage
    命令，附带查询字符串
    from=learn-agent-skill&accept=text/markdown
    ，返回Markdown格式内容。

Category Index

分类索引

CategoryLinesDescription
TroubleshootingL33-L37Diagnosing and fixing common Azure Blueprint creation/assignment errors, including policy, role, and resource lock issues, and interpreting error messages during deployment.
Architecture & Design PatternsL38-L46Blueprint reference architectures for Azure landing zones and workloads, showing how security, governance, and ISO 27001 controls are implemented and structured in Azure.
SecurityL47-L63Security-focused Azure Blueprint deployment, locks, operator setup, and using/mapping built‑in compliance blueprints (PBMM, ISM PROTECTED, ISO 27001, SWIFT, UK OFFICIAL/NHS) to Policy and RBAC
ConfigurationL64-L77Designing and configuring Azure Blueprint definitions: parameters, deployment order, built-in functions, and setup of security/compliance blueprint samples (CAF, ASB, ISO 27001, SWIFT, ISM).
Integrations & Coding PatternsL78-L85Automating Azure Blueprints as code using CLI, PowerShell, and REST: create, import/export, and manage blueprint definitions and assignments programmatically.
分类行号描述
故障排查L33-L37诊断并修复Azure Blueprint创建/分配过程中的常见错误，包括策略、角色和资源锁问题，以及解读部署期间的错误信息。
架构与设计模式L38-L46适用于Azure登陆区域和工作负载的蓝图参考架构，展示安全、治理和ISO 27001控制措施在Azure中的实现和结构。
安全L47-L63以安全为重点的Azure Blueprint部署、锁设置、操作员配置，以及使用/映射内置合规蓝图（PBMM、ISM PROTECTED、ISO 27001、SWIFT、UK OFFICIAL/NHS）到策略和RBAC
配置L64-L77设计并配置Azure Blueprint定义：参数、部署顺序、内置函数，以及安全/合规蓝图示例（CAF、ASB、ISO 27001、SWIFT、ISM）的设置。
集成与编码模式L78-L85使用CLI、PowerShell和REST将Azure Blueprints作为代码实现自动化：以编程方式创建、导入/导出和管理蓝图定义与分配。

Troubleshooting

故障排查

TopicURL
Troubleshoot common Azure Blueprint creation and assignment errorshttps://learn.microsoft.com/en-us/azure/governance/blueprints/troubleshoot/general
主题URL
排查Azure Blueprint创建和分配的常见错误https://learn.microsoft.com/en-us/azure/governance/blueprints/troubleshoot/general

Architecture & Design Patterns

架构与设计模式

TopicURL
Architecture of Azure Security Benchmark blueprint foundationhttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/azure-security-benchmark-foundation/
CAF foundation blueprint architecture for Azure landing zoneshttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/caf-foundation/
CAF migration landing zone blueprint architecturehttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/caf-migrate-landing-zone/
Architecture of ISO 27001 ASE/SQL workload blueprinthttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/iso27001-ase-sql-workload/
Architecture of ISO 27001 shared services blueprinthttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/iso27001-shared/
主题URL
Azure安全基准蓝图基础架构https://learn.microsoft.com/en-us/azure/governance/blueprints/samples/azure-security-benchmark-foundation/
适用于Azure登陆区域的CAF基础蓝图架构https://learn.microsoft.com/en-us/azure/governance/blueprints/samples/caf-foundation/
CAF迁移登陆区域蓝图架构https://learn.microsoft.com/en-us/azure/governance/blueprints/samples/caf-migrate-landing-zone/
ISO 27001 ASE/SQL工作负载蓝图架构https://learn.microsoft.com/en-us/azure/governance/blueprints/samples/iso27001-ase-sql-workload/
ISO 27001共享服务蓝图架构https://learn.microsoft.com/en-us/azure/governance/blueprints/samples/iso27001-shared/

Security

安全

TopicURL
Understand security-related stages of Azure Blueprint deploymenthttps://learn.microsoft.com/en-us/azure/governance/blueprints/concepts/deployment-stages
Configure resource locking behavior in Azure Blueprintshttps://learn.microsoft.com/en-us/azure/governance/blueprints/concepts/resource-locking
Configure environment for Azure Blueprint Operator rolehttps://learn.microsoft.com/en-us/azure/governance/blueprints/how-to/configure-for-blueprint-operator
Use Canada Federal PBMM blueprint for governance controlshttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/canada-federal-pbmm
Use ISM PROTECTED blueprint for Australian compliancehttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/ism-protected/
Map ISM PROTECTED controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/ism-protected/control-mapping
Apply ISO 27001 blueprint for Azure governancehttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/iso-27001-2013
Map ISO 27001 ASE/SQL controls to Policy and RBAChttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/iso27001-ase-sql-workload/control-mapping
Map ISO 27001 shared services controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/iso27001-shared/control-mapping
Use SWIFT CSP-CSCF 2020 blueprint for Azure compliancehttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/swift-2020/
Map SWIFT CSP-CSCF 2020 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/swift-2020/control-mapping
Use UK OFFICIAL and NHS blueprint for Azure governancehttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/ukofficial-uknhs
Protect Azure Blueprint-deployed resources with lockshttps://learn.microsoft.com/en-us/azure/governance/blueprints/tutorials/protect-new-resources
主题URL
了解Azure Blueprint部署的安全相关阶段https://learn.microsoft.com/en-us/azure/governance/blueprints/concepts/deployment-stages
配置Azure Blueprints中的资源锁定行为https://learn.microsoft.com/en-us/azure/governance/blueprints/concepts/resource-locking
配置Azure Blueprint Operator角色的环境https://learn.microsoft.com/en-us/azure/governance/blueprints/how-to/configure-for-blueprint-operator
使用加拿大联邦PBMM蓝图实现治理控制https://learn.microsoft.com/en-us/azure/governance/blueprints/samples/canada-federal-pbmm
使用ISM PROTECTED蓝图满足澳大利亚合规要求https://learn.microsoft.com/en-us/azure/governance/blueprints/samples/ism-protected/
将ISM PROTECTED控制措施映射到Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/ism-protected/control-mapping
应用ISO 27001蓝图实现Azure治理https://learn.microsoft.com/en-us/azure/governance/blueprints/samples/iso-27001-2013
将ISO 27001 ASE/SQL控制措施映射到策略和RBAChttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/iso27001-ase-sql-workload/control-mapping
将ISO 27001共享服务控制措施映射到Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/iso27001-shared/control-mapping
使用SWIFT CSP-CSCF 2020蓝图满足Azure合规要求https://learn.microsoft.com/en-us/azure/governance/blueprints/samples/swift-2020/
将SWIFT CSP-CSCF 2020控制措施映射到Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/swift-2020/control-mapping
使用UK OFFICIAL和NHS蓝图实现Azure治理https://learn.microsoft.com/en-us/azure/governance/blueprints/samples/ukofficial-uknhs
使用锁定保护Azure Blueprint部署的资源https://learn.microsoft.com/en-us/azure/governance/blueprints/tutorials/protect-new-resources

Configuration

配置

TopicURL
Use static and dynamic parameters in Azure Blueprintshttps://learn.microsoft.com/en-us/azure/governance/blueprints/concepts/parameters
Control Azure Blueprint artifact deployment sequencehttps://learn.microsoft.com/en-us/azure/governance/blueprints/concepts/sequencing-order
Use Azure Blueprint functions in definitions and artifactshttps://learn.microsoft.com/en-us/azure/governance/blueprints/reference/blueprint-functions
Configure and deploy Azure Security Benchmark blueprint samplehttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/azure-security-benchmark-foundation/deploy
Configure and deploy CAF foundation blueprint samplehttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/caf-foundation/deploy
Configure and deploy CAF migration landing zone blueprinthttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/caf-migrate-landing-zone/deploy
Configure and deploy ISM PROTECTED blueprint samplehttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/ism-protected/deploy
Configure and deploy ISO 27001 ASE/SQL workload blueprinthttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/iso27001-ase-sql-workload/deploy
Configure and deploy ISO 27001 shared services blueprinthttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/iso27001-shared/deploy
Configure and deploy SWIFT CSP-CSCF 2020 blueprinthttps://learn.microsoft.com/en-us/azure/governance/blueprints/samples/swift-2020/deploy
主题URL
在Azure Blueprints中使用静态和动态参数https://learn.microsoft.com/en-us/azure/governance/blueprints/concepts/parameters
控制Azure Blueprint工件的部署顺序https://learn.microsoft.com/en-us/azure/governance/blueprints/concepts/sequencing-order
在定义和工件中使用Azure Blueprint函数https://learn.microsoft.com/en-us/azure/governance/blueprints/reference/blueprint-functions
配置并部署Azure安全基准蓝图示例https://learn.microsoft.com/en-us/azure/governance/blueprints/samples/azure-security-benchmark-foundation/deploy
配置并部署CAF基础蓝图示例https://learn.microsoft.com/en-us/azure/governance/blueprints/samples/caf-foundation/deploy
配置并部署CAF迁移登陆区域蓝图https://learn.microsoft.com/en-us/azure/governance/blueprints/samples/caf-migrate-landing-zone/deploy
配置并部署ISM PROTECTED蓝图示例https://learn.microsoft.com/en-us/azure/governance/blueprints/samples/ism-protected/deploy
配置并部署ISO 27001 ASE/SQL工作负载蓝图https://learn.microsoft.com/en-us/azure/governance/blueprints/samples/iso27001-ase-sql-workload/deploy
配置并部署ISO 27001共享服务蓝图https://learn.microsoft.com/en-us/azure/governance/blueprints/samples/iso27001-shared/deploy
配置并部署SWIFT CSP-CSCF 2020蓝图https://learn.microsoft.com/en-us/azure/governance/blueprints/samples/swift-2020/deploy

Integrations & Coding Patterns

集成与编码模式

TopicURL
Create Azure Blueprints using Azure CLI commandshttps://learn.microsoft.com/en-us/azure/governance/blueprints/create-blueprint-azurecli
Create and manage Azure Blueprints with PowerShellhttps://learn.microsoft.com/en-us/azure/governance/blueprints/create-blueprint-powershell
Create Azure Blueprints via REST API requestshttps://learn.microsoft.com/en-us/azure/governance/blueprints/create-blueprint-rest-api
Import and export Azure Blueprints as code with PowerShellhttps://learn.microsoft.com/en-us/azure/governance/blueprints/how-to/import-export-ps
Manage Azure Blueprint assignments with Az.Blueprint PowerShellhttps://learn.microsoft.com/en-us/azure/governance/blueprints/how-to/manage-assignments-ps
主题URL
使用Azure CLI命令创建Azure Blueprintshttps://learn.microsoft.com/en-us/azure/governance/blueprints/create-blueprint-azurecli
使用PowerShell创建和管理Azure Blueprintshttps://learn.microsoft.com/en-us/azure/governance/blueprints/create-blueprint-powershell
通过REST API请求创建Azure Blueprintshttps://learn.microsoft.com/en-us/azure/governance/blueprints/create-blueprint-rest-api
使用PowerShell以代码形式导入和导出Azure Blueprintshttps://learn.microsoft.com/en-us/azure/governance/blueprints/how-to/import-export-ps
使用Az.Blueprint PowerShell管理Azure Blueprint分配https://learn.microsoft.com/en-us/azure/governance/blueprints/how-to/manage-assignments-ps