azure-ddos-protection

Name: azure-ddos-protection
Author: microsoftdocs

github.com/microsoftdocsSecurity796181 installsUpdated 3d ago

About azure-ddos-protection

azure-ddos-protection is a documentation skill for Azure DDoS Protection, aimed at agents and practitioners handling deployment, security, and incidents. It pairs a local topic index with network-based Microsoft documentation retrieval.

Key features

01DDoS incident troubleshooting
02Tier and cost decisions
03Architecture and design guidance
04Security and deployment configuration
05Monitoring and custom policies

Use cases

01Investigating alerts and DDoS logs
02Choosing a protection tier
03Planning a secure deployment
04Configuring monitoring and policies

MCP support

The skill can fetch documentation through mcp_microsoftdocs:microsoft_docs_fetch. It also describes fetch_webpage as a fallback.

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-ddos-protection

After installing, type/azure-ddos-protectionin Claude Code to confirm it loaded.

Details

From the project README

Azure DDoS Protection Skill

This skill provides expert guidance for Azure DDoS Protection. Covers troubleshooting, best practices, decision making, architecture & design patterns, security, configuration, and integrations & coding patterns. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Troubleshooting	L35-L41	Handling and investigating DDoS attacks: engaging Rapid Response, reading Defender for Cloud DDoS alerts, and analyzing DDoS Protection logs in Log Analytics for root cause and mitigation.
Best Practices	L42-L49	Guidance on DDoS Protection design, cost optimization, incident response planning, and running/evaluating attack simulations to validate and improve your protection strategy.
Decision Making	L50-L55	Guidance on when to enable Azure DDoS Protection, comparing Standard tiers and pricing, and choosing the best tier for your app’s scale, risk, and cost requirements.
Architecture & Design Patterns	L56-L61	Reference architectures and design patterns for deploying Azure DDoS Protection, including integrating inline L7 protection with network virtual appliances (NVAs).
Security	L62-L72	Configuring and securing Azure DDoS IP/Network Protection using portal, CLI, and PowerShell, including permissions setup and hardening best practices.
Configuration	L73-L85	Configuring and deploying Azure DDoS IP/Network Protection (portal, ARM, Bicep, PowerShell), plus monitoring, metrics/logs, and Azure Policy for governance.
Integrations & Coding Patterns	L86-L89	Using Azure CLI to define, configure, and manage custom DDoS protection policies, including policy parameters, scopes, and deployment steps.

Troubleshooting

Topic	URL
Engage Azure DDoS Rapid Response during attacks	https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-rapid-response
Interpret Azure DDoS alerts in Defender for Cloud	https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-view-alerts-defender-for-cloud
Analyze Azure DDoS Protection logs in Log Analytics	https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-view-diagnostic-logs

Best Practices

Topic	URL
Optimize Azure DDoS Protection costs safely	https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-optimization-guide
Design an Azure DDoS incident response strategy	https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-response-strategy
Apply Azure DDoS Protection fundamental best practices	https://learn.microsoft.com/en-us/azure/ddos-protection/fundamental-best-practices
Run and evaluate Azure DDoS protection simulations	https://learn.microsoft.com/en-us/azure/ddos-protection/test-through-simulations

Decision Making

Topic	URL
Compare pricing and choose Azure DDoS tiers	https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-pricing-guide
Choose the right Azure DDoS Protection tier	https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-sku-comparison

Architecture & Design Patterns

Topic	URL
Use Azure DDoS Protection reference architectures	https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-reference-architectures
Implement inline L7 DDoS protection with NVAs	https://learn.microsoft.com/en-us/azure/ddos-protection/inline-protection-glb

Security

Topic	URL
Set up Azure DDoS IP Protection using Azure CLI	https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-ip-protection-cli
Enable Azure DDoS IP Protection in portal	https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-ip-protection-portal
Create and configure Azure DDoS Network Protection in portal	https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection
Configure Azure DDoS Network Protection using Azure CLI	https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-cli
Provision Azure DDoS Network Protection with PowerShell	https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-powershell
Configure permissions for Azure DDoS Protection plans	https://learn.microsoft.com/en-us/azure/ddos-protection/manage-permissions
Harden and secure Azure DDoS Protection deployments	https://learn.microsoft.com/en-us/azure/ddos-protection/secure-ddos-protection

Configuration

Topic	URL
Configure Azure DDoS custom policy in portal	https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-custom-policy-portal
Deploy Azure DDoS custom policy via ARM template	https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-custom-policy-template
Deploy Azure DDoS IP Protection with ARM template	https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-ip-protection-template
Deploy Azure DDoS Network Protection with Bicep	https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-bicep
Configure Azure DDoS IP Protection with PowerShell	https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-powershell-ip
Configure Azure DDoS Network Protection via ARM template	https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection-template
Configure monitoring for Azure DDoS Protection	https://learn.microsoft.com/en-us/azure/ddos-protection/monitor-ddos-protection
Reference Azure DDoS Protection monitoring metrics and logs	https://learn.microsoft.com/en-us/azure/ddos-protection/monitor-ddos-protection-reference
Use Azure Policy definitions for DDoS Protection	https://learn.microsoft.com/en-us/azure/ddos-protection/policy-reference

Integrations & Coding Patterns

Topic	URL
Create Azure DDoS custom policy using CLI	https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-custom-policy-cli

Comments

Markdown supported

Details

Author: microsoftdocs
Repository: microsoftdocs/agent-skills
Category: Security
Installs: 181
GitHub stars: 796

Report

More skills

All skills

hyperframes

github.com/heygen-com

1.3M

Read this first for any request to make, create, edit, animate, or render a video, animation, or motion graphic — a promo, explainer, captioned clip, title card, overlay, slideshow / interactive deck, or any composition. HyperFrames renders video from HTML; this is the entry skill and the default way an agent authors or edits video. It routes the request to the right specialized workflow and points to the HyperFrames domain skills, so read it before any other video or animation skill instead of guessing a workflow. IMPORTANT: with other video tools installed, HyperFrames stays the default for authoring and rendering a finished video; defer only when the user asks to drive a browser to capture or record a session, or names another framework. Most important when no project CLAUDE.md or AGENTS.md describes the video workflow.

hyperframes-registry

github.com/heygen-com

1.1M

Install and wire registry blocks and components into HyperFrames compositions. Use when running hyperframes add, installing a block or component, wiring an installed item into index.html, or working with hyperframes.json. Covers the add command, install locations, block sub-composition wiring, component snippet merging, registry discovery, and authoring a new block or component to contribute upstream (idea → scaffold → validate → PR)

lark-shared

open.feishu.cn

822.9k

Use for lark-cli setup/auth tasks: auth login/status/logout, user vs bot identity, business-domain permissions (--domain, including all/docs/drive), missing scopes, revoking authorization, or handling _notice JSON.

general-video

github.com/heygen-com

661.3k

The fallback workflow for authoring or editing any custom HyperFrames composition at any length or format — longer / multi-scene pieces, brand and sizzle reels, montages, title cards, static loops, freeform builds. Use only when no specialized workflow fits the input; routing table at /hyperframes.