{"id":"6b3f1dde-1ac4-4921-9367-27981791b59d","shortId":"GY9Y4Q","kind":"skill","title":"azure-sovereign-us","tagline":"Expert knowledge for Azure US Government development including decision making, architecture & design patterns, security, configuration, integrations & coding patterns, and deployment. Use when handling FedRAMP/DoD IL5 scope, SACA patterns, Gov CI/CD, Gov Marketplace, or sovereig","description":"# Azure US Government Skill\n\nThis skill provides expert guidance for Azure US Government. Covers decision making, architecture & design patterns, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.\n\n## How to Use This Skill\n\n> **IMPORTANT for Agent**: Use the **Category Index** below to locate relevant sections. For categories with line ranges (e.g., `L35-L120`), use `read_file` with the specified lines. For categories with file links (e.g., `[security.md](security.md)`), use `read_file` on the linked reference file\n\n> **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https://github.com/MicrosoftDocs/mcp/blob/main/README.md)\n\nThis skill requires **network access** to fetch documentation content:\n- **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown.\n- **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text/markdown`. Returns Markdown.\n\n## Category Index\n\n| Category | Lines | Description |\n|----------|-------|-------------|\n| Decision Making | L34-L46 | Guidance on choosing Azure Government vs global, FedRAMP/DoD scope and ATO, CSP reseller options, marketplace and DoD regions, and sector-specific compliance (NERC CIP, public safety, worldwide public sector). |\n| Architecture & Design Patterns | L47-L51 | Guidance on applying Secure Azure Computing Architecture (SACA) patterns to design compliant, secure, and resilient solutions in Azure Sovereign Cloud environments. |\n| Security | L52-L64 | Security and compliance for Azure Government: FedRAMP/DoD scope, IL5 isolation, TIC, secure configuration, identity/Entra auth, naming to avoid data leaks, and protecting workloads/data. |\n| Configuration | L65-L73 | Guidance for configuring and operating Azure Government: app deployment, VM extensions, EA billing, marketplace images, and Azure Monitor logs in sovereign US regions. |\n| Integrations & Coding Patterns | L74-L80 | Coding patterns and connection guidance for Azure Government: building Foundry Tools apps, connecting SSMS to Gov SQL, and using Azure Storage APIs in sovereign clouds. |\n| Deployment | L81-L87 | Guides for deploying apps and solutions to Azure Government: CI/CD with Azure Pipelines, ASE baseline with DISA CAP, App Service deployment, and publishing to Gov Marketplace. |\n\n### Decision Making\n| Topic | URL |\n|-------|-----|\n| Choose between Azure Government and global Azure | https://learn.microsoft.com/en-us/azure/azure-government/compare-azure-government-global-azure |\n| Accelerate FedRAMP ATO on Azure with tooling | https://learn.microsoft.com/en-us/azure/azure-government/compliance/documentation-accelerate-compliance |\n| Become an Azure Government CSP reseller | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-csp-application |\n| Find authorized Azure Government CSP resellers | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-csp-list |\n| Use Azure Government Marketplace solutions | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-manage-marketplace |\n| Use Azure Government DoD regions for workloads | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-overview-dod |\n| Run public safety and justice workloads on Azure | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-overview-jps |\n| Apply NERC CIP standards to Azure cloud use | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-overview-nerc |\n| Adopt Azure for worldwide public sector securely | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-overview-wwps |\n\n### Architecture & Design Patterns\n| Topic | URL |\n|-------|-----|\n| Apply Secure Azure Computing Architecture (SACA) | https://learn.microsoft.com/en-us/azure/azure-government/compliance/secure-azure-computing-architecture |\n\n### Security\n| Topic | URL |\n|-------|-----|\n| Implement secure isolation in Azure environments | https://learn.microsoft.com/en-us/azure/azure-government/azure-secure-isolation-guidance |\n| Understand FedRAMP and DoD compliance scope for Azure clouds | https://learn.microsoft.com/en-us/azure/azure-government/compliance/azure-services-in-fedramp-auditscope |\n| Meet Trusted Internet Connections using Azure | https://learn.microsoft.com/en-us/azure/azure-government/compliance/compliance-tic |\n| Configure Azure securely for FedRAMP Rev5 | https://learn.microsoft.com/en-us/azure/azure-government/compliance/recommended-secure-configuration |\n| Integrate Microsoft Entra auth on Azure Government | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-aad-auth-qs |\n| Name Azure resources without exposing sensitive data | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-concept-naming-resources |\n| Configure Azure Government for DoD IL5 isolation | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-impact-level-5 |\n| Plan identity architecture for Azure Government | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-plan-identity |\n| Secure Azure Government workloads and data | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-plan-security |\n\n### Configuration\n| Topic | URL |\n|-------|-----|\n| Develop and deploy applications on Azure Government | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-developer-guide |\n| List and use VM extensions in Azure Government | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-extension |\n| Access and manage EA billing in Azure Government | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-how-to-access-enterprise-agreement-billing-account |\n| Use Azure Government Marketplace image gallery | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-image-gallery |\n| Use Azure Monitor logs in Azure Government | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-manage-oms |\n\n### Integrations & Coding Patterns\n| Topic | URL |\n|-------|-----|\n| Develop Foundry Tools apps on Azure Government | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-cognitiveservices |\n| Connect SSMS to Azure Government SQL resources | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-connect-ssms |\n| Use Azure Storage APIs in Azure Government | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-get-started-connect-to-storage |\n\n### Deployment\n| Topic | URL |\n|-------|-----|\n| Set up Azure Pipelines CI/CD to Azure Government | https://learn.microsoft.com/en-us/azure/azure-government/connect-with-azure-pipelines |\n| Baseline ASE deployment with DISA CAP in Azure Gov | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-ase-disa-cap |\n| Deploy Azure App Service apps to Azure Government | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-howto-deploy-webandmobile |\n| Publish solutions to Azure Government Marketplace | https://learn.microsoft.com/en-us/azure/azure-government/documentation-government-manage-marketplace-partners |","tags":["azure","sovereign","agent","skills","microsoftdocs","agent-skills","agentic-skills","agentskill","ai-agents","ai-coding","azure-functions","azure-kubernetes-service"],"capabilities":["skill","source-microsoftdocs","skill-azure-sovereign-us","topic-agent","topic-agent-skills","topic-agentic-skills","topic-agentskill","topic-ai-agents","topic-ai-coding","topic-azure","topic-azure-functions","topic-azure-kubernetes-service","topic-azure-openai","topic-azure-sql-database","topic-azure-storage"],"categories":["Agent-Skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-sovereign-us","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add MicrosoftDocs/Agent-Skills","source_repo":"https://github.com/MicrosoftDocs/Agent-Skills","install_from":"skills.sh"}},"qualityScore":"0.698","qualityRationale":"deterministic score 0.70 from registry signals: · indexed on github topic:agent-skills · 497 github stars · SKILL.md body (7,682 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-04-22T00:53:37.659Z","embedding":null,"createdAt":"2026-04-18T22:00:09.347Z","updatedAt":"2026-04-22T00:53:37.659Z","lastSeenAt":"2026-04-22T00:53:37.659Z","tsv":"'/en-us/azure/azure-government/azure-secure-isolation-guidance':506 '/en-us/azure/azure-government/compare-azure-government-global-azure':402 '/en-us/azure/azure-government/compliance/azure-services-in-fedramp-auditscope':518 '/en-us/azure/azure-government/compliance/compliance-tic':527 '/en-us/azure/azure-government/compliance/documentation-accelerate-compliance':412 '/en-us/azure/azure-government/compliance/recommended-secure-configuration':536 '/en-us/azure/azure-government/compliance/secure-azure-computing-architecture':494 '/en-us/azure/azure-government/connect-with-azure-pipelines':687 '/en-us/azure/azure-government/documentation-government-aad-auth-qs':546 '/en-us/azure/azure-government/documentation-government-ase-disa-cap':699 '/en-us/azure/azure-government/documentation-government-cognitiveservices':653 '/en-us/azure/azure-government/documentation-government-concept-naming-resources':556 '/en-us/azure/azure-government/documentation-government-connect-ssms':663 '/en-us/azure/azure-government/documentation-government-csp-application':421 '/en-us/azure/azure-government/documentation-government-csp-list':430 '/en-us/azure/azure-government/documentation-government-developer-guide':597 '/en-us/azure/azure-government/documentation-government-extension':608 '/en-us/azure/azure-government/documentation-government-get-started-connect-to-storage':673 '/en-us/azure/azure-government/documentation-government-how-to-access-enterprise-agreement-billing-account':619 '/en-us/azure/azure-government/documentation-government-howto-deploy-webandmobile':710 '/en-us/azure/azure-government/documentation-government-image-gallery':628 '/en-us/azure/azure-government/documentation-government-impact-level-5':566 '/en-us/azure/azure-government/documentation-government-manage-marketplace':438 '/en-us/azure/azure-government/documentation-government-manage-marketplace-partners':719 '/en-us/azure/azure-government/documentation-government-manage-oms':638 '/en-us/azure/azure-government/documentation-government-overview-dod':448 '/en-us/azure/azure-government/documentation-government-overview-jps':459 '/en-us/azure/azure-government/documentation-government-overview-nerc':470 '/en-us/azure/azure-government/documentation-government-overview-wwps':480 '/en-us/azure/azure-government/documentation-government-plan-identity':575 '/en-us/azure/azure-government/documentation-government-plan-security':584 '/microsoftdocs/mcp/blob/main/readme.md)':164 '3':135 'acceler':403 'accept':203 'access':169,609 'adopt':471 'agent':84,128,187,201 'api':355,667 'app':312,345,366,381,647,702,704 'appli':255,460,486 'applic':591 'architectur':15,55,247,259,481,490,569 'ase':376,689 'ato':227,405 'auth':292,540 'author':423 'avail':154 'avoid':295 'azur':2,8,39,49,220,257,270,282,310,321,340,353,370,374,395,399,407,415,424,432,440,456,465,472,488,502,514,524,529,542,548,558,571,577,593,604,615,621,630,634,649,657,665,669,679,683,695,701,706,714 'azure-sovereign-us':1 'baselin':377,688 'becom':413 'bill':317,613 'build':342 'cap':380,693 'capabl':76 'categori':87,95,111,207,209 'choos':219,393 'ci/cd':34,372,681 'cip':241,462 'cloud':272,358,466,515 'code':21,61,329,334,640 'combin':66 'complianc':239,280,511 'compliant':264 'comput':258,489 'configur':19,59,290,301,307,528,557,585 'connect':337,346,522,654 'content':71,173 'cover':52 'csp':228,417,426 'data':296,553,581 'decis':13,53,212,389 'deploy':24,64,313,359,365,383,590,674,690,700 'descript':211 'design':16,56,248,263,482 'develop':11,588,644 'disa':379,692 'doc':179 'document':74,172 'dod':233,442,510,561 'e.g':99,115 'ea':316,612 'entra':539 'environ':273,503 'expert':5,46 'expos':551 'extens':315,602 'fallback':191 'fedramp':404,508,532 'fedramp/dod':28,224,284 'fetch':75,171,180,193 'file':105,113,120,125 'find':422 'foundri':343,645 'galleri':625 'github.com':163 'github.com/microsoftdocs/mcp/blob/main/readme.md)':162 'global':223,398 'gov':33,35,349,387,696 'govern':10,41,51,221,283,311,341,371,396,416,425,433,441,543,559,572,578,594,605,616,622,635,650,658,670,684,707,715 'guid':161,363 'guidanc':47,217,253,305,338 'handl':27 'ident':568 'identity/entra':291 'il5':29,286,562 'imag':319,624 'implement':498 'import':82,126 'includ':12 'index':88,208 'instal':158,160 'integr':20,60,328,537,639 'internet':521 'isol':287,500,563 'justic':453 'knowledg':6 'l120':102 'l34':215 'l34-l46':214 'l35':101 'l35-l120':100 'l46':216 'l47':251 'l47-l51':250 'l51':252 'l52':276 'l52-l64':275 'l64':277 'l65':303 'l65-l73':302 'l73':304 'l74':332 'l74-l80':331 'l80':333 'l81':361 'l81-l87':360 'l87':362 'latest':143 'leak':297 'learn':186,200 'learn-agent-skil':185,199 'learn.microsoft.com':401,411,420,429,437,447,458,469,479,493,505,517,526,535,545,555,565,574,583,596,607,618,627,637,652,662,672,686,698,709,718 'learn.microsoft.com/en-us/azure/azure-government/azure-secure-isolation-guidance':504 'learn.microsoft.com/en-us/azure/azure-government/compare-azure-government-global-azure':400 'learn.microsoft.com/en-us/azure/azure-government/compliance/azure-services-in-fedramp-auditscope':516 'learn.microsoft.com/en-us/azure/azure-government/compliance/compliance-tic':525 'learn.microsoft.com/en-us/azure/azure-government/compliance/documentation-accelerate-compliance':410 'learn.microsoft.com/en-us/azure/azure-government/compliance/recommended-secure-configuration':534 'learn.microsoft.com/en-us/azure/azure-government/compliance/secure-azure-computing-architecture':492 'learn.microsoft.com/en-us/azure/azure-government/connect-with-azure-pipelines':685 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-aad-auth-qs':544 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-ase-disa-cap':697 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-cognitiveservices':651 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-concept-naming-resources':554 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-connect-ssms':661 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-csp-application':419 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-csp-list':428 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-developer-guide':595 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-extension':606 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-get-started-connect-to-storage':671 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-how-to-access-enterprise-agreement-billing-account':617 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-howto-deploy-webandmobile':708 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-image-gallery':626 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-impact-level-5':564 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-manage-marketplace':436 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-manage-marketplace-partners':717 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-manage-oms':636 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-overview-dod':446 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-overview-jps':457 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-overview-nerc':468 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-overview-wwps':478 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-plan-identity':573 'learn.microsoft.com/en-us/azure/azure-government/documentation-government-plan-security':582 'line':97,109,210 'link':114,123 'list':598 'local':67 'locat':91 'log':323,632 'make':14,54,213,390 'manag':611 'markdown':190,206 'marketplac':36,231,318,388,434,623,716 'mcp':149,176 'meet':519 'metadata.generated':130 'microsoft':178,538 'microsoftdoc':150,177 'monitor':322,631 'month':136 'name':293,547 'nerc':240,461 'network':168 'old':137 'oper':309 'option':230 'pattern':17,22,32,57,62,249,261,330,335,483,641 'pipelin':375,680 'plan':567 'prefer':174 'protect':299 'provid':45 'public':242,245,450,475 'publish':385,711 'pull':141 'queri':182,196 'quick':69 'quick-refer':68 'rang':98 'read':104,119 'refer':70,124 'region':234,327,443 'relev':92 'remot':73 'repositori':147 'requir':167 'resel':229,418,427 'resili':267 'resourc':549,660 'return':189,205 'rev5':533 'run':449 'saca':31,260,491 'safeti':243,451 'scope':30,225,285,512 'section':93 'sector':237,246,476 'sector-specif':236 'secur':18,58,256,265,274,278,289,477,487,495,499,530,576 'security.md':116,117 'sensit':552 'servic':382,703 'set':677 'skill':42,44,81,166,188,202 'skill-azure-sovereign-us' 'solut':268,368,435,712 'source-microsoftdocs' 'sovereig':38 'sovereign':3,271,325,357 'specif':238 'specifi':108 'sql':350,659 'ssms':347,655 'standard':463 'storag':354,666 'string':183,197 'suggest':138,155 'text/markdown':204 'tic':288 'tool':151,344,409,646 'topic':391,484,496,586,642,675 'topic-agent' 'topic-agent-skills' 'topic-agentic-skills' 'topic-agentskill' 'topic-ai-agents' 'topic-ai-coding' 'topic-azure' 'topic-azure-functions' 'topic-azure-kubernetes-service' 'topic-azure-openai' 'topic-azure-sql-database' 'topic-azure-storage' 'trust':520 'understand':507 'url':392,485,497,587,643,676 'us':4,9,40,50,326 'use':25,79,85,103,118,175,192,352,431,439,467,523,600,620,629,664 'user':140,157 'version':144 'vm':314,601 'vs':222 'webpag':194 'without':550 'workload':445,454,579 'workloads/data':300 'worldwid':244,474","prices":[{"id":"eb05c162-ea01-4760-bf18-1d629fc9668e","listingId":"6b3f1dde-1ac4-4921-9367-27981791b59d","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"MicrosoftDocs","category":"Agent-Skills","install_from":"skills.sh"},"createdAt":"2026-04-18T22:00:09.347Z"}],"sources":[{"listingId":"6b3f1dde-1ac4-4921-9367-27981791b59d","source":"github","sourceId":"MicrosoftDocs/Agent-Skills/azure-sovereign-us","sourceUrl":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-sovereign-us","isPrimary":false,"firstSeenAt":"2026-04-18T22:00:09.347Z","lastSeenAt":"2026-04-22T00:53:37.659Z"}],"details":{"listingId":"6b3f1dde-1ac4-4921-9367-27981791b59d","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"MicrosoftDocs","slug":"azure-sovereign-us","github":{"repo":"MicrosoftDocs/Agent-Skills","stars":497,"topics":["agent","agent-skills","agentic-skills","agentskill","ai","ai-agents","ai-coding","azure","azure-functions","azure-kubernetes-service","azure-openai","azure-sql-database","azure-storage","azure-virtual-machine","claude-code","github-copilot","microsoft-learn","openai-codex","skills"],"license":"cc-by-4.0","html_url":"https://github.com/MicrosoftDocs/Agent-Skills","pushed_at":"2026-04-19T02:43:40Z","description":"Curated Agent Skills for Microsoft & Azure – giving AI coding assistants structured, real-time expertise from Microsoft Learn docs.","skill_md_sha":"320a0fe4dd3e951abeb13559ac3b136a9cfb0aeb","skill_md_path":"skills/azure-sovereign-us/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-sovereign-us"},"layout":"multi","source":"github","category":"Agent-Skills","frontmatter":{"name":"azure-sovereign-us","description":"Expert knowledge for Azure US Government development including decision making, architecture & design patterns, security, configuration, integrations & coding patterns, and deployment. Use when handling FedRAMP/DoD IL5 scope, SACA patterns, Gov CI/CD, Gov Marketplace, or sovereign APIs, and other Azure US Government related development tasks. Not for Azure Local (use azure-local), Azure Arc (use azure-arc), Azure Networking (use azure-networking), Azure Security (use azure-security).","compatibility":"Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation."},"skills_sh_url":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-sovereign-us"},"updatedAt":"2026-04-22T00:53:37.659Z"}}