azure-confidential-computing
About azure-confidential-computing
azure-confidential-computing is a skill that combines local references and remote documentation for agents working with Azure confidential computing. It covers solution selection, architecture, security, configuration, integrations, and deployment for teams designing or operating confidential workloads.
Key features
- 01Choose confidential computing options and models
- 02Design VM, AKS, and enclave architectures
- 03Review SGX capacity, quotas, and sizing
- 04Configure attestation, keys, and security policies
- 05Deploy confidential VMs, AKS, and containers
Use cases
- 01Select Azure compute for protected workloads
- 02Plan confidential AI or container architectures
- 03Configure attestation and key-release flows
- 04Deploy confidential VMs or AKS nodes
MCP support
The skill recommends retrieving remote documentation with mcp_microsoftdocs:microsoft_docs_fetch, with fetch_webpage as a fallback.
Install
Copy the command and run it in a terminal.
npx skills add https:/After installing, type/azure-confidential-computingin Claude Code to confirm it loaded.
Details
From the project READMEAzure Confidential Computing Skill
This skill provides expert guidance for Azure Confidential Computing. Covers decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.
How to Use This Skill
IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g.,
L35-L120), useread_filewith the specified lines. For categories with file links (e.g.,[security.md](security.md)), useread_fileon the linked reference file
IMPORTANT for Agent: If
metadata.generated_atis more than 3 months old, suggest the user pull the latest version from the repository. Ifmcp_microsoftdocstools are not available, suggest the user install it: Installation Guide
This skill requires network access to fetch documentation content:
- Preferred: Use
mcp_microsoftdocs:microsoft_docs_fetchwith query stringfrom=learn-agent-skill. Returns Markdown. - Fallback: Use
fetch_webpagewith query stringfrom=learn-agent-skill&accept=text/markdown. Returns Markdown.
Category Index
| Category | Lines | Description |
|---|---|---|
| Decision Making | L35-L46 | Guidance on choosing Azure confidential computing options: VMs (AMD/Intel), containers, GPUs, deployment models, capabilities, products, and use cases for secure workloads. |
| Architecture & Design Patterns | L47-L55 | Architectural patterns and design guidance for using Azure confidential VMs, SGX enclaves, AKS, and multi-party analytics to build secure AI and containerized workloads. |
| Limits & Quotas | L56-L61 | Intel SGX capacity, quotas, and sizing for Azure confidential computing: AKS confidential node limits, SGX VM sizing guidance, and FAQ on SGX resource constraints. |
| Security | L62-L77 | Attestation, vTPM, and hardening guidance for Azure confidential VMs, AKS confidential containers, and SGX enclaves, including guest attestation, Defender integration, and secure key/secret management. |
| Configuration | L78-L89 | Configuring and deploying Azure confidential VMs and AKS (SGX, containers), managing keys and secure key release policies, and using/opt-ing out of VMMD metablob disks. |
| Integrations & Coding Patterns | L90-L101 | Patterns and samples for integrating Intel SGX/AMD SEV-SNP, confidential containers/VMs, attestation (dm-verity/IMA), Fortanix CCM, and secure key release (SKR) with Azure services. |
| Deployment | L102-L110 | How to deploy and migrate Azure confidential VMs/VMSS and AKS (SGX and confidential node pools), create custom images, and set up Fortanix CCM using CLI and ARM templates. |
Decision Making
Architecture & Design Patterns
| Topic | URL |
|---|---|
| Apply confidential computing to AI workloads on Azure | https://learn.microsoft.com/en-us/azure/confidential-computing/confidential-ai |
| Design solutions with Azure confidential computing options | https://learn.microsoft.com/en-us/azure/confidential-computing/confidential-computing-solutions |
| Use SGX enclave nodes in AKS workloads | https://learn.microsoft.com/en-us/azure/confidential-computing/confidential-nodes-aks-overview |
| Design enclave-aware container applications on AKS | https://learn.microsoft.com/en-us/azure/confidential-computing/enclave-aware-containers |
| Architect multi-party analytics on Azure confidential computing | https://learn.microsoft.com/en-us/azure/confidential-computing/multi-party-data |
Limits & Quotas
| Topic | URL |
|---|---|
| AKS confidential nodes Intel SGX capacity details | https://learn.microsoft.com/en-us/azure/confidential-computing/confidential-nodes-aks-faq |
| Deploy and size Intel SGX VMs on Azure | https://learn.microsoft.com/en-us/azure/confidential-computing/virtual-machine-solutions-sgx |
Security
Configuration
Integrations & Coding Patterns
Deployment
| Topic | URL |
|---|---|
| Deploy AKS cluster with SGX enclave nodes via CLI | https://learn.microsoft.com/en-us/azure/confidential-computing/confidential-enclave-nodes-aks-get-started |
| Use confidential VM node pools in AKS | https://learn.microsoft.com/en-us/azure/confidential-computing/confidential-node-pool-aks |
| Create custom images for Azure confidential VMs with CLI | https://learn.microsoft.com/en-us/azure/confidential-computing/how-to-create-custom-image-confidential-vm |
| Deploy Fortanix CCM as Azure managed app | https://learn.microsoft.com/en-us/azure/confidential-computing/how-to-fortanix-confidential-computing-manager |
| Migrate nested Azure confidential VMs across regions | https://learn.microsoft.com/en-us/azure/confidential-computing/migrate-nested-confidential-vms |
| Deploy VM scale sets with hardened Linux images | https://learn.microsoft.com/en-us/azure/confidential-computing/vmss-deployment-from-hardened-linux-image |