Azure Resource Discovery

Patterns for tracing Azure resource dependencies, mapping networking and security topology, and generating architecture diagrams.

SAFETY: All discovery operations are strictly READ-ONLY. NEVER execute az commands that create, modify, or delete resources. Only use show, list, get, and query operations. This skill is for observation and documentation only.

When to Use

• Tracing all dependencies of a specific Azure resource (networking, security, identity, monitoring)
• Documenting how a container app, VM, AKS cluster, or other resource connects to its environment
• Generating topology diagrams showing resource relationships
• Auditing networking and security configuration (VNets, NSGs, private endpoints)

Prerequisites

• Azure CLI (az) installed and authenticated (az login)
• Reader role (minimum) on the target subscription or resource group
• Azure Resource Graph extension: required for az graph query. Usually auto-installed on first use; if not, the user must run az extension add --name resource-graph
• Graphviz (optional): dot command for rendering complex topologies. Install via brew install graphviz (macOS) or apt install graphviz (Linux). Falls back to Mermaid if not available.