az-clilisted

# az CLI Skill for everyday Azure operations from a shell. Covers login, subscription selection, resource group lifecycle, AKS, managed identity, storage, key vault, and resource querying. ## Login `az login` opens a device-code or browser flow. In CI use `az login --service-principal -u <appId> -p <secret> --tenant <tenant>` or, preferably, federated workload-identity. Always run `az account show` afterwards to verify the active subscription. ## Subscription discipline Most account incidents trace back to running a command against the wrong subscription. `az account set --subscription <name-or-id>` before any mutating command, and prefer `--subscription` on the command itself in scripts. ## Resource groups A resource group is the unit of cleanup. Create one per environment (`rg-app-prod`, `rg-app-dev`); when the environment is gone, `az group delete -n <name>` reclaims everything inside it. ```sh az group create -n <name> -l <location> az group delete -n <name> --yes ``` ## AKS — Kubernetes Service Fetch kubeconfig credentials for an AKS cluster so `kubectl` can reach it. The subcommand is `az aks` followed by the `get-credentials` operation: ```sh az aks get-credentials -g <resource-group> -n <cluster-name> # example: -g myrg -n mycluster ``` ## Managed identity Assign a system-managed identity to a VM so it can authenticate to Azure services without a stored secret. Use the `az vm identity` subgroup with the `assign` operation: ```sh az vm identity assign -g