mcpField
A
azure-private-link

azure-private-link

github.com/microsoftdocsCloud & DevOps796194 installsUpdated 3d ago
Repository

About azure-private-link

A reference skill for Azure Private Link users, covering DNS, architecture, security, configuration, and limits and quotas. It pairs a local quick-reference index with remote documentation retrieval for design and operational guidance.

Key features

  1. 01Private Endpoint DNS design
  2. 02Network security perimeter choices
  3. 03Hybrid network resolution architecture
  4. 04Limits, quotas, and service availability
  5. 05Security, RBAC, and traffic inspection
  6. 06Endpoint, DNS, and monitoring configuration

Use cases

  1. 01Plan DNS resolution for Private Endpoints
  2. 02Design hybrid network name resolution
  3. 03Check resource availability and quotas
  4. 04Configure endpoint security and network perimeters

MCP support

It can retrieve Microsoft documentation with mcp_microsoftdocs:microsoft_docs_fetch, with fetch_webpage as a fallback.

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-private-link

After installing, type/azure-private-linkin Claude Code to confirm it loaded.

Details

From the project README

Azure Private Link Skill

This skill provides expert guidance for Azure Private Link. Covers best practices, decision making, architecture & design patterns, limits & quotas, security, and configuration. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
Best PracticesL34-L38DNS design and configuration guidance for private endpoints, including zone setup, name resolution patterns, split-horizon DNS, and avoiding common DNS misconfigurations with Private Link
Decision MakingL39-L44Guidance on choosing perimeter access modes and designing Azure Private Link setups, focusing on security tradeoffs, cost optimization, and migration/transition considerations.
Architecture & Design PatternsL45-L49Designing DNS architectures for Private Endpoints using Azure Private Resolver, including name resolution patterns, forwarding rules, and integration with on-premises or hybrid networks
Limits & QuotasL50-L56Limits, quotas, and behaviors for Private Link/Endpoints, how to check service availability per resource, and how to request increases to VNet Private Endpoint limits.
SecurityL57-L64RBAC setup for Private Link and Network Security Perimeters, security best practices, and inspecting/controlling Private Endpoint traffic with Azure Firewall.
ConfigurationL65-L85Configuring Azure Private Link, endpoints, DNS, NSPs, policies, monitoring, and IPv4/IPv6 connectivity using portal, CLI, PowerShell, and Terraform.
Best Practices
TopicURL
Apply DNS integration best practices for Azure Private Endpointshttps://learn.microsoft.com/en-us/azure/private-link/private-endpoint-dns-integration
Decision Making
TopicURL
Choose and transition Azure network security perimeter access modeshttps://learn.microsoft.com/en-us/azure/private-link/network-security-perimeter-transition
Optimize Azure Private Link design for cost and securityhttps://learn.microsoft.com/en-us/azure/private-link/private-link-cost-optimization
Architecture & Design Patterns
TopicURL
Design DNS infrastructure for Private Endpoints with Azure Private Resolverhttps://learn.microsoft.com/en-us/azure/private-link/tutorial-dns-on-premises-private-resolver
Limits & Quotas
TopicURL
Check Azure Private Link service availability by resourcehttps://learn.microsoft.com/en-us/azure/private-link/availability
Increase Azure Private Endpoint VNet limitshttps://learn.microsoft.com/en-us/azure/private-link/increase-private-endpoint-vnet-limits
Azure Private Link limits, behaviors, and FAQshttps://learn.microsoft.com/en-us/azure/private-link/private-link-faq
Security
TopicURL
Configure RBAC permissions for Azure Network Security Perimeter operationshttps://learn.microsoft.com/en-us/azure/private-link/network-security-perimeter-role-based-access-control-requirements
Configure RBAC permissions for Azure Private Linkhttps://learn.microsoft.com/en-us/azure/private-link/rbac-permissions
Apply security best practices to Azure Private Linkhttps://learn.microsoft.com/en-us/azure/private-link/secure-private-link
Inspect and control Private Endpoint traffic using Azure Firewallhttps://learn.microsoft.com/en-us/azure/private-link/tutorial-inspect-traffic-azure-firewall
Configuration
TopicURL
Configure service tag access in Azure Network Security Perimeterhttps://learn.microsoft.com/en-us/azure/private-link/configure-network-security-perimeter-service-tag
Configure cross-perimeter links for Azure NSPshttps://learn.microsoft.com/en-us/azure/private-link/configure-perimeter-link
Configure Azure Private Link service Direct Connecthttps://learn.microsoft.com/en-us/azure/private-link/configure-private-link-service-direct-connect
Configure standard service endpoints using Azure CLIhttps://learn.microsoft.com/en-us/azure/private-link/configure-service-endpoint-standard-cli
Configure standard service endpoints in Azure portalhttps://learn.microsoft.com/en-us/azure/private-link/configure-service-endpoint-standard-portal
Configure standard service endpoints with PowerShellhttps://learn.microsoft.com/en-us/azure/private-link/configure-service-endpoint-standard-powershell
Configure Azure Private Link service endpoint with Terraformhttps://learn.microsoft.com/en-us/azure/private-link/configure-service-endpoint-standard-terraform
Create and manage network security perimeters with Azure CLIhttps://learn.microsoft.com/en-us/azure/private-link/create-network-security-perimeter-cli
Create and manage a network security perimeter in portalhttps://learn.microsoft.com/en-us/azure/private-link/create-network-security-perimeter-portal
Configure subnet network policies for private endpointshttps://learn.microsoft.com/en-us/azure/private-link/disable-private-endpoint-network-policy
Configure privateLinkServiceNetworkPolicies for Private Linkhttps://learn.microsoft.com/en-us/azure/private-link/disable-private-link-service-network-policy
Configure and manage Azure Private Endpoint propertieshttps://learn.microsoft.com/en-us/azure/private-link/manage-private-endpoint
Reference for Azure Private Link monitoring datahttps://learn.microsoft.com/en-us/azure/private-link/monitor-private-link-reference
Enable and store Network Security Perimeter diagnostic logshttps://learn.microsoft.com/en-us/azure/private-link/network-security-perimeter-diagnostic-logs
Configure and use Azure Network Security Perimeter metricshttps://learn.microsoft.com/en-us/azure/private-link/network-security-perimeter-metrics
Configure DNS zones for Azure Private Endpointshttps://learn.microsoft.com/en-us/azure/private-link/private-endpoint-dns
Configure SNAT bypass tags for Private Endpoint traffic via NVAhttps://learn.microsoft.com/en-us/azure/private-link/private-link-disable-snat
Configure Azure Private Link over IPv6 connectivityhttps://learn.microsoft.com/en-us/azure/private-link/private-link-ipv6

Comments

Markdown supported