Back to Details

azure-managed-applications

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Azure Managed Applications Skill

Azure Managed Applications Skill

This skill provides expert guidance for Azure Managed Applications. Covers limits & quotas, security, configuration, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.
本Skill为Azure托管应用程序提供专业指导，涵盖限制与配额、安全、配置和部署。它结合了本地快速参考内容和远程文档获取功能。

How to Use This Skill

如何使用本Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., 
L35-L120
), use 
read_file
with the specified lines. For categories with file links (e.g., 
[security.md](security.md)
), use 
read_file
on the linked reference file
IMPORTANT for Agent: If 
metadata.generated_at
is more than 3 months old, suggest the user pull the latest version from the repository. If 
mcp_microsoftdocs
tools are not available, suggest the user install it: Installation Guide
This skill requires network access to fetch documentation content:
  • Preferred: Use 
    mcp_microsoftdocs:microsoft_docs_fetch
    with query string 
    from=learn-agent-skill
    . Returns Markdown.
  • Fallback: Use 
    fetch_webpage
    with query string 
    from=learn-agent-skill&accept=text/markdown
    . Returns Markdown.
Agent重要提示：使用下方的分类索引查找相关章节。对于带有行范围的分类（例如
L35-L120
），使用
read_file
并指定对应行；对于带有文件链接的分类（例如
[security.md](security.md)
），对链接的参考文件使用
read_file
Agent重要提示：如果
metadata.generated_at
已超过3个月，建议用户从仓库拉取最新版本。如果
mcp_microsoftdocs
工具不可用，建议用户安装：安装指南
本Skill需要网络访问权限来获取文档内容：
  • 推荐方式：使用
    mcp_microsoftdocs:microsoft_docs_fetch
    ，并携带查询字符串
    from=learn-agent-skill
    ，返回Markdown格式内容。
  • 备用方式：使用
    fetch_webpage
    ，并携带查询字符串
    from=learn-agent-skill&accept=text/markdown
    ，返回Markdown格式内容。

Category Index

分类索引

CategoryLinesDescription
Limits & QuotasL32-L37Guidance on storage-related limits: using StorageAccountSelector with naming rules and configuring external storage for large managed application definition packages.
SecurityL38-L49Security and access control for managed apps: JIT access, Azure Policy associations, managed identities (incl. cross-tenant), Key Vault/CMK use, and avoiding hardcoded credentials.
ConfigurationL50-L94Designing and configuring managed application UI and deployment: createUiDefinition.json, UI elements, functions, parameters, networking, policies, webhooks, and template/view references.
DeploymentL95-L99Creating and publishing Azure Managed Application definitions using Bicep and deploying them into an internal service catalog for reuse.
分类行范围描述
限制与配额L32-L37存储相关限制的指导：结合命名规则使用StorageAccountSelector，以及为大型托管应用程序定义包配置外部存储。
安全L38-L49托管应用程序的安全与访问控制：JIT访问、Azure Policy关联、托管标识（包括跨租户）、Key Vault/CMK的使用，以及避免硬编码凭据。
配置L50-L94托管应用程序界面与部署的设计和配置：createUiDefinition.json、界面元素、函数、参数、网络、策略、webhook，以及模板/视图参考。
部署L95-L99使用Bicep创建和发布Azure托管应用程序定义，并将其部署到内部服务目录以供重用。

Limits & Quotas

限制与配额

TopicURL
Use StorageAccountSelector UI element and name constraintshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-storage-storageaccountselector
Use custom storage for large managed app definitionshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/publish-service-catalog-bring-your-own-storage
主题链接
使用StorageAccountSelector界面元素和命名约束https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-storage-storageaccountselector
为大型托管应用程序定义使用自定义存储https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/publish-service-catalog-bring-your-own-storage

Security

安全

TopicURL
Approve publisher just-in-time access to managed appshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/approve-just-in-time-access
Use Azure Policy to associate managed applicationshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/concepts-built-in-policy
Configure delegatedManagedIdentityResourceId for cross-tenant appshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/concepts-delegated-managed-identity-resource-id
Deploy storage with customer-managed keys in managed appshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-storage-customer-managed-key
Comply with hardcoded credential restrictions in templateshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/hardcoded-credentials-restrictions
Grant Key Vault access for managed app deploymentshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/key-vault-access
Configure managed identity for Azure managed applicationshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/publish-managed-identity
Request just-in-time access to managed resourceshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/request-just-in-time-access
主题链接
批准发布者对托管应用程序的即时访问https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/approve-just-in-time-access
使用Azure Policy关联托管应用程序https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/concepts-built-in-policy
为跨租户应用配置delegatedManagedIdentityResourceIdhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/concepts-delegated-managed-identity-resource-id
在托管应用程序中部署使用客户管理密钥的存储https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-storage-customer-managed-key
遵守模板中的硬编码凭据限制https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/hardcoded-credentials-restrictions
为托管应用程序部署授予Key Vault访问权限https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/key-vault-access
为Azure托管应用程序配置托管标识https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/publish-managed-identity
请求对托管资源的即时访问https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/request-just-in-time-access

Configuration

配置

TopicURL
Configure artifactsLocation parameters for managed appshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/artifacts-location
Use collection functions in UI definitionshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-collection-functions
Use conversion functions in UI definitionshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-conversion-functions
Use date functions in UI definitionshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-date-functions
Use logical functions in UI definitionshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-logical-functions
Use math functions in UI definitionshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-math-functions
Use referencing functions in UI definitionshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-referencing-functions
Use string functions in UI definitionshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-string-functions
Configure elements in createUiDefinition.jsonhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-uidefinition-elements
Use functions in createUiDefinition.jsonhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-uidefinition-functions
Author createUiDefinition.json for managed appshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-uidefinition-overview
Configure managed apps to use existing virtual networkshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/existing-vnet-integration
Configure Microsoft.Common.CheckBox UI elementhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-checkbox
Configure Microsoft.Common.DropDown UI elementhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-dropdown
Configure Microsoft.Common.EditableGrid UI elementhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-editablegrid
Configure Microsoft.Common.FileUpload UI elementhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-fileupload
Configure Microsoft.Common.InfoBox UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-infobox
Configure Microsoft.Common.OptionsGroup UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-optionsgroup
Configure Microsoft.Common.PasswordBox UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-passwordbox
Configure Microsoft.Common.Section UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-section
Configure ServicePrincipalSelector UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-serviceprincipalselector
Configure Microsoft.Common.Slider UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-slider
Configure TagsByResource UI element for ARM deploymentshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-tagsbyresource
Configure Microsoft.Common.TextBlock UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-textblock
Configure Microsoft.Common.TextBox UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-textbox
Configure Microsoft.Compute.CredentialsCombo UI elementhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-compute-credentialscombo
Configure Microsoft.Compute.SizeSelector UI element for VMshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-compute-sizeselector
Configure Microsoft.Compute.UserNameTextBox UI elementhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-compute-usernametextbox
Configure KeyVaultCertificateSelector UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-keyvault-keyvaultcertificateselector
Configure ManagedIdentity IdentitySelector UI elementhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-managedidentity-identityselector
Configure PublicIpAddressCombo UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-network-publicipaddresscombo
Configure VirtualNetworkCombo UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-network-virtualnetworkcombo
Configure ArmApiControl UI element for ARM API callshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-solutions-armapicontrol
Configure ResourceSelector UI element for existing resourceshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-solutions-resourceselector
Configure MultiStorageAccountCombo UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-storage-multistorageaccountcombo
Configure StorageBlobSelector UI element in ARMhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-storage-storageblobselector
Reference built-in Azure Policy definitions for Managed Appshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/policy-reference
Configure webhook notifications for managed applicationshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/publish-notifications
Reference schema for createUiDefinition artifacthttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/reference-createuidefinition-artifact
Reference mainTemplate.json for managed applicationshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/reference-main-template-artifact
Reference viewDefinition.json for managed applicationshttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/reference-view-definition-artifact
主题链接
为托管应用程序配置artifactsLocation参数https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/artifacts-location
在界面定义中使用集合函数https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-collection-functions
在界面定义中使用转换函数https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-conversion-functions
在界面定义中使用日期函数https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-date-functions
在界面定义中使用逻辑函数https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-logical-functions
在界面定义中使用数学函数https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-math-functions
在界面定义中使用引用函数https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-referencing-functions
在界面定义中使用字符串函数https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-ui-definition-string-functions
在createUiDefinition.json中配置元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-uidefinition-elements
在createUiDefinition.json中使用函数https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-uidefinition-functions
为托管应用程序编写createUiDefinition.jsonhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/create-uidefinition-overview
配置托管应用程序以使用现有虚拟网络https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/existing-vnet-integration
配置Microsoft.Common.CheckBox界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-checkbox
配置Microsoft.Common.DropDown界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-dropdown
配置Microsoft.Common.EditableGrid界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-editablegrid
配置Microsoft.Common.FileUpload界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-fileupload
在ARM中配置Microsoft.Common.InfoBox界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-infobox
在ARM中配置Microsoft.Common.OptionsGroup界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-optionsgroup
在ARM中配置Microsoft.Common.PasswordBox界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-passwordbox
在ARM中配置Microsoft.Common.Section界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-section
在ARM中配置ServicePrincipalSelector界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-serviceprincipalselector
在ARM中配置Microsoft.Common.Slider界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-slider
为ARM部署配置TagsByResource界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-tagsbyresource
在ARM中配置Microsoft.Common.TextBlock界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-textblock
在ARM中配置Microsoft.Common.TextBox界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-common-textbox
配置Microsoft.Compute.CredentialsCombo界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-compute-credentialscombo
为VM配置Microsoft.Compute.SizeSelector界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-compute-sizeselector
配置Microsoft.Compute.UserNameTextBox界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-compute-usernametextbox
在ARM中配置KeyVaultCertificateSelector界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-keyvault-keyvaultcertificateselector
配置ManagedIdentity IdentitySelector界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-managedidentity-identityselector
在ARM中配置PublicIpAddressCombo界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-network-publicipaddresscombo
在ARM中配置VirtualNetworkCombo界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-network-virtualnetworkcombo
为ARM API调用配置ArmApiControl界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-solutions-armapicontrol
为现有资源配置ResourceSelector界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-solutions-resourceselector
在ARM中配置MultiStorageAccountCombo界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-storage-multistorageaccountcombo
在ARM中配置StorageBlobSelector界面元素https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/microsoft-storage-storageblobselector
参考托管应用程序的内置Azure Policy定义https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/policy-reference
为托管应用程序配置webhook通知https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/publish-notifications
参考createUiDefinition工件的架构https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/reference-createuidefinition-artifact
参考托管应用程序的mainTemplate.jsonhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/reference-main-template-artifact
参考托管应用程序的viewDefinition.jsonhttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/reference-view-definition-artifact

Deployment

部署

TopicURL
Deploy managed app definitions with Bicephttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/publish-bicep-definition
Publish Azure Managed Application to service cataloghttps://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/publish-service-catalog-app
主题链接
使用Bicep部署托管应用程序定义https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/publish-bicep-definition
将Azure托管应用程序发布到服务目录https://learn.microsoft.com/en-us/azure/azure-resource-manager/managed-applications/publish-service-catalog-app