Azure App Service Skill

SkillCloud & infra

Expert knowledge for Azure App Service development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when configuring App Service plans/ASEs, VNet and auth, CI/CD deployments, TLS/certs, or Azure OpenAI chatbots, and other Azure App Service related development tasks. Not for Azure Functions (use azure-functions), Azure Container Apps (use azure-container-apps), Azure Static Web Apps (use azure-static-web-apps), Azure Spring Apps (use azure-spring-apps).

Available today. Use it from your connected AI after setup.

Connect ahel once, and every AI you use reads what you have installed.

Then ask your AI: use the Azure App Service Skill skill

What this skill tells your AI

The instructions your AI receives, as published by microsoftdocs/agent-skills in skills/azure-app-service/SKILL.md and read by ahel’s review.

This skill provides expert guidance for Azure App Service. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
TroubleshootingL37-L45Diagnosing and fixing App Service issues using built-in diagnostics, logs, Azure Monitor, site status, and guidance for common WordPress-specific problems.
Best PracticesL46-L56Best practices for App Service deployments, handling inbound/outbound and TLS IP changes, minimizing maintenance downtime, and using Traffic Manager for high availability and failover.
Decision MakingL57-L74Guidance on migration choices, hosting tiers, networking, authentication, domains, and cost planning to design and move apps into the right Azure App Service setup.
Architecture & Design PatternsL75-L80Patterns for scaling App Service apps: geo-distributed deployments with App Service Environments and designing RAG chatbots using Foundry on App Service.
Limits & QuotasL81-L85App Service resource limits (CPU, memory, connections), quota types, how they’re measured/monitored, and how to use metrics to detect and avoid hitting plan or app quotas.
SecurityL86-L133Securing App Service apps: auth (Entra, social, OIDC, MCP), certificates/TLS, IP/VNet/firewall, managed identities, Key Vault, storage/SQL/Graph access, and end‑to‑end network isolation.
ConfigurationL134-L189Configuring App Service apps and environments: app settings, runtimes, containers/sidecars, networking/VNet, domains/SSL, storage, scaling, auth, health checks, and backups.
Integrations & Coding PatternsL190-L199Patterns for integrating App Service apps with APM tools, TLS/SSL certs, Application Gateway, MCP, Azure OpenAI chatbots (Node/Flask), and event-driven jobs via WebJobs bindings.
DeploymentL200-L221Deploying and managing App Service apps: CI/CD (GitHub Actions, Azure Pipelines), ZIP/FTP/local Git deploy, deployment slots, ASE setup/scale, DNS migration, and maintenance/patch automation.

Troubleshooting

TopicURL
Use App Service diagnostics to troubleshoot appshttps://learn.microsoft.com/en-us/azure/app-service/overview-diagnostics
Enable and access Azure App Service diagnostic logshttps://learn.microsoft.com/en-us/azure/app-service/troubleshoot-diagnostic-logs
Troubleshoot App Service apps with Azure Monitorhttps://learn.microsoft.com/en-us/azure/app-service/tutorial-troubleshoot-monitor
Use App Service site status page for runtime issueshttps://learn.microsoft.com/en-us/azure/app-service/use-app-service-site-status-page
Resolve common WordPress on Azure App Service issueshttps://learn.microsoft.com/en-us/azure/app-service/wordpress-faq

Best Practices

TopicURL
Apply best practices and troubleshooting for Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/app-service-best-practices
Apply deployment best practices for App Servicehttps://learn.microsoft.com/en-us/azure/app-service/deploy-best-practices
Prepare App Service apps for inbound IP address changeshttps://learn.microsoft.com/en-us/azure/app-service/ip-address-change-inbound
Prepare App Service apps for outbound IP address changeshttps://learn.microsoft.com/en-us/azure/app-service/ip-address-change-outbound
Handle TLS/SSL IP address changes for App Service bindingshttps://learn.microsoft.com/en-us/azure/app-service/ip-address-change-ssl
Minimize downtime from Azure App Service maintenancehttps://learn.microsoft.com/en-us/azure/app-service/routine-maintenance-downtime
Configure Azure Traffic Manager with App Service endpointshttps://learn.microsoft.com/en-us/azure/app-service/web-sites-traffic-manager

Decision Making

TopicURL
Choose and use .NET migration tools for App Servicehttps://learn.microsoft.com/en-us/azure/app-service/app-service-asp-net-migration
Configure and evaluate App Service Premium v3 tierhttps://learn.microsoft.com/en-us/azure/app-service/app-service-configure-premium-v3-tier
Assess .NET web apps before App Service migrationhttps://learn.microsoft.com/en-us/azure/app-service/app-service-migration-assess-net
Plan migration of App Service apps from Windows to Linuxhttps://learn.microsoft.com/en-us/azure/app-service/app-service-migration-windows-linux
Choose between App Service Environment v3 and multitenanthttps://learn.microsoft.com/en-us/azure/app-service/environment/ase-multi-tenant-comparison
Choose the right authentication option for App Servicehttps://learn.microsoft.com/en-us/azure/app-service/identity-scenarios
Migrate App Service VNet integration from gateway to regionalhttps://learn.microsoft.com/en-us/azure/app-service/migrate-gateway-based-vnet-integration
Decide and plan migration from Docker Compose to sidecarshttps://learn.microsoft.com/en-us/azure/app-service/migrate-sidecar-multi-container-apps
Choose appropriate networking features for Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/networking-features
Choose and configure App Gateway with App Servicehttps://learn.microsoft.com/en-us/azure/app-service/overview-app-gateway-integration
Plan and manage custom domains for App Servicehttps://learn.microsoft.com/en-us/azure/app-service/overview-custom-domains
Select and scale Azure App Service hosting planshttps://learn.microsoft.com/en-us/azure/app-service/overview-hosting-plans
Plan and manage Azure App Service costshttps://learn.microsoft.com/en-us/azure/app-service/overview-manage-costs
Choose secure connectivity methods for App Servicehttps://learn.microsoft.com/en-us/azure/app-service/tutorial-connect-overview

Architecture & Design Patterns

TopicURL
Design geo-distributed scale with App Service Environmentshttps://learn.microsoft.com/en-us/azure/app-service/environment/app-service-app-service-environment-geo-distributed-scale
Design RAG chatbots with Foundry on App Servicehttps://learn.microsoft.com/en-us/azure/app-service/scenario-ai-chatbot-retrieval-augmented-generation

Limits & Quotas

TopicURL
Understand quotas and metrics for Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/web-sites-monitor

Security

TopicURL
Set up IP and VNet access restrictions for App Servicehttps://learn.microsoft.com/en-us/azure/app-service/app-service-ip-restrictions
Configure Key Vault references in App Service settingshttps://learn.microsoft.com/en-us/azure/app-service/app-service-key-vault-references
Handle App Service Managed Certificate changes and validationhttps://learn.microsoft.com/en-us/azure/app-service/app-service-managed-certificate-changes-july-2025
Configure TLS mutual authentication in Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/app-service-web-configure-tls-mutual-auth
Configure Entra auth for Foundry OpenAPI tools on App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-authentication-ai-foundry-openapi-tool
Customize sign-in and sign-out behavior in App Service authhttps://learn.microsoft.com/en-us/azure/app-service/configure-authentication-customize-sign-in-out
Configure MCP server authorization in Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-authentication-mcp
Secure MCP servers on App Service with Entra authenticationhttps://learn.microsoft.com/en-us/azure/app-service/configure-authentication-mcp-server-vscode
Manage OAuth tokens with App Service authenticationhttps://learn.microsoft.com/en-us/azure/app-service/configure-authentication-oauth-tokens
Configure Microsoft Entra authentication for App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-aad
Enable Sign in with Apple for App Service appshttps://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-apple
Set up Facebook authentication for App Service appshttps://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-facebook
Configure GitHub authentication for App Service appshttps://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-github
Configure Google authentication for Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-google
Configure custom OpenID Connect providers for App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-openid-connect
Configure X (Twitter) authentication for App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-twitter
Access user identities with App Service authenticationhttps://learn.microsoft.com/en-us/azure/app-service/configure-authentication-user-identities
Disable basic auth for App Service deployments securelyhttps://learn.microsoft.com/en-us/azure/app-service/configure-basic-auth-disable
Encrypt Azure App Service app content at rest with CMKhttps://learn.microsoft.com/en-us/azure/app-service/configure-encrypt-at-rest-using-cmk
Configure security settings for Java apps on Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-language-java-security
Configure TLS/SSL bindings for Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-ssl-bindings
Configure TLS/SSL certificates for Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate
Choose authentication methods for Azure App Service deploymentshttps://learn.microsoft.com/en-us/azure/app-service/deploy-authentication-types
Handle TLS certificate policy changes in App Servicehttps://learn.microsoft.com/en-us/azure/app-service/industry-wide-certificate-changes
Secure App Service outbound traffic with Azure Firewallhttps://learn.microsoft.com/en-us/azure/app-service/network-secure-outbound-traffic-azure-firewall
Configure App Service access restrictions and firewall ruleshttps://learn.microsoft.com/en-us/azure/app-service/overview-access-restrictions
Use Entra agent identity with App Service and Functionshttps://learn.microsoft.com/en-us/azure/app-service/overview-agent-identity
Configure App Service built-in authentication and authorizationhttps://learn.microsoft.com/en-us/azure/app-service/overview-authentication-authorization
Configure managed identities for Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/overview-managed-identity
Configure TLS/SSL security for Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/overview-tls
Prevent dangling subdomain takeovers in Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/reference-dangling-subdomain-prevention
Secure .NET App Service access to Microsoft Graph with managed identityhttps://learn.microsoft.com/en-us/azure/app-service/scenario-secure-app-access-microsoft-graph-as-app
Grant delegated Microsoft Graph access for App Service usershttps://learn.microsoft.com/en-us/azure/app-service/scenario-secure-app-access-microsoft-graph-as-user
Secure App Service access to Azure Storage with managed identitieshttps://learn.microsoft.com/en-us/azure/app-service/scenario-secure-app-access-storage
Enable and configure App Service authenticationhttps://learn.microsoft.com/en-us/azure/app-service/scenario-secure-app-authentication-app-service
Use Azure Policy compliance controls for App Servicehttps://learn.microsoft.com/en-us/azure/app-service/security-controls-policy
Manage minimum TLS versions for App Service and Functionshttps://learn.microsoft.com/en-us/azure/app-service/tls-minimum-version
Secure App Service apps end-to-end with built-in authhttps://learn.microsoft.com/en-us/azure/app-service/tutorial-auth-aad
Connect App Service to SQL on behalf of signed-in userhttps://learn.microsoft.com/en-us/azure/app-service/tutorial-connect-app-access-sql-database-as-user-dotnet
Secure database access from App Service with managed identityhttps://learn.microsoft.com/en-us/azure/app-service/tutorial-connect-msi-azure-database
Secure SQL access with managed identity in App Servicehttps://learn.microsoft.com/en-us/azure/app-service/tutorial-connect-msi-sql-database
Isolate Azure App Service traffic with VNet integrationhttps://learn.microsoft.com/en-us/azure/app-service/tutorial-networking-isolate-vnet
Secure App Service apps with custom domains and certificateshttps://learn.microsoft.com/en-us/azure/app-service/tutorial-secure-domain-certificate
Secure N-tier Azure App Service with private networkinghttps://learn.microsoft.com/en-us/azure/app-service/tutorial-secure-ntier-app

Configuration

TopicURL
Configure Azure App Service App Configuration referenceshttps://learn.microsoft.com/en-us/azure/app-service/app-service-configuration-references
Configure Hybrid Connections for Azure App Service appshttps://learn.microsoft.com/en-us/azure/app-service/app-service-hybrid-connections
Manage App Service authentication API and runtime versionshttps://learn.microsoft.com/en-us/azure/app-service/configure-authentication-api-version
Configure App Service authentication using file-based settingshttps://learn.microsoft.com/en-us/azure/app-service/configure-authentication-file-based
Configure core settings for Azure App Service appshttps://learn.microsoft.com/en-us/azure/app-service/configure-common
Mount Azure Storage file shares in App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-connect-to-azure-storage
Configure custom containers for Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-custom-container
Configure Traffic Manager with App Service custom domainshttps://learn.microsoft.com/en-us/azure/app-service/configure-domain-traffic-manager
Configure custom error pages in Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-error-pages
Configure gateway-required VNet integration for App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-gateway-required-vnet-integration
Configure gRPC applications on Azure App Service for Linuxhttps://learn.microsoft.com/en-us/azure/app-service/configure-grpc
Configure Aspire apps on Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-language-aspire
Configure ASP.NET apps on Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-language-dotnet-framework
Configure ASP.NET Core apps on Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-language-dotnetcore
Configure Java data sources on Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-language-java-data-sources
Deploy and configure Java apps on Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-language-java-deploy-run
Configure Node.js applications on Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-language-nodejs
Configure PHP applications on Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-language-php
Configure Python apps on Azure App Service Linuxhttps://learn.microsoft.com/en-us/azure/app-service/configure-language-python
Open SSH sessions to App Service containershttps://learn.microsoft.com/en-us/azure/app-service/configure-linux-open-ssh-session
Configure Managed Instance settings for Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-managed-instance
Configure built-in MCP for Azure App Service APIshttps://learn.microsoft.com/en-us/azure/app-service/configure-mcp-built-in
Configure sidecars for Azure App Service on Linuxhttps://learn.microsoft.com/en-us/azure/app-service/configure-sidecar
Configure and manage App Service SSL certificateshttps://learn.microsoft.com/en-us/azure/app-service/configure-ssl-app-service-certificate
Configure VNet integration for Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/configure-vnet-integration-enable
Configure routing for App Service regional VNet integrationhttps://learn.microsoft.com/en-us/azure/app-service/configure-vnet-integration-routing
Configure zone redundancy for Azure App Service planshttps://learn.microsoft.com/en-us/azure/app-service/configure-zone-redundancy
Configure ASE-wide custom settings via ARM templateshttps://learn.microsoft.com/en-us/azure/app-service/environment/app-service-app-service-environment-custom-settings
Configure networking for App Service Environment v3https://learn.microsoft.com/en-us/azure/app-service/environment/configure-network-settings
Enable zone redundancy for App Service Environments and Isolated planshttps://learn.microsoft.com/en-us/azure/app-service/environment/configure-zone-redundancy-environment
Create and configure an App Service Environmenthttps://learn.microsoft.com/en-us/azure/app-service/environment/creation
Create App Service Environment v3 with ARM templatehttps://learn.microsoft.com/en-us/azure/app-service/environment/how-to-create-from-template
Configure custom domain suffix for App Service Environmenthttps://learn.microsoft.com/en-us/azure/app-service/environment/how-to-custom-domain-suffix
Manage certificates and bindings in App Service Environmenthttps://learn.microsoft.com/en-us/azure/app-service/environment/overview-certificates
Configure web apps in Azure App Service Environmenthttps://learn.microsoft.com/en-us/azure/app-service/environment/using
Back up and restore Azure App Service appshttps://learn.microsoft.com/en-us/azure/app-service/manage-backup
Buy and configure Azure App Service managed domainshttps://learn.microsoft.com/en-us/azure/app-service/manage-custom-dns-buy-domain
Configure per-app scaling in Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/manage-scale-per-app
Reference monitoring data for Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/monitor-app-service-reference
Configure and use Health check for App Servicehttps://learn.microsoft.com/en-us/azure/app-service/monitor-instances-health-check
Understand OS-level capabilities for Windows apps on App Servicehttps://learn.microsoft.com/en-us/azure/app-service/operating-system-functionality
Manage inbound and outbound IP addresses for App Servicehttps://learn.microsoft.com/en-us/azure/app-service/overview-inbound-outbound-ips
Configure and manage App Service local cachehttps://learn.microsoft.com/en-us/azure/app-service/overview-local-cache
Configure DNS and name resolution for Azure App Service appshttps://learn.microsoft.com/en-us/azure/app-service/overview-name-resolution
Configure Azure NAT Gateway integration for App Servicehttps://learn.microsoft.com/en-us/azure/app-service/overview-nat-gateway-integration
Use private endpoints with Azure App Service appshttps://learn.microsoft.com/en-us/azure/app-service/overview-private-endpoint
Configure App Service virtual network integration optionshttps://learn.microsoft.com/en-us/azure/app-service/overview-vnet-integration
Reference environment variables for Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/reference-app-settings
Reference environment variables for Azure App Servicehttps://learn.microsoft.com/en-us/azure/app-service/reference-app-settings
Configure sidecar containers for Linux custom apps in App Servicehttps://learn.microsoft.com/en-us/azure/app-service/tutorial-custom-container-sidecar
Configure sidecar containers for Linux apps on App Servicehttps://learn.microsoft.com/en-us/azure/app-service/tutorial-sidecar
Configure WebJobs execution behavior with Kudu settingshttps://learn.microsoft.com/en-us/azure/app-service/webjobs-execution

Integrations & Coding Patterns

TopicURL
Integrate Java apps on App Service with APM platformshttps://learn.microsoft.com/en-us/azure/app-service/configure-language-java-apm
Use App Service TLS/SSL certificates in application codehttps://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate-in-code
Integrate App Service Environment with Azure Application Gatewayhttps://learn.microsoft.com/en-us/azure/app-service/environment/integrate-with-application-gateway
Integrate Node.js Express chatbot with Azure OpenAI via App Servicehttps://learn.microsoft.com/en-us/azure/app-service/tutorial-ai-openai-chatbot-node
Integrate Python Flask chatbot with Azure OpenAI via App Servicehttps://learn.microsoft.com/en-us/azure/app-service/tutorial-ai-openai-chatbot-python
Implement event-driven jobs with Azure WebJobs SDK bindingshttps://learn.microsoft.com/en-us/azure/app-service/webjobs-sdk-how-to

Shortened here. Read the whole file on GitHub.

Signals

GitHub stars
742
Forks
120
Last commit
Sep 2026

ahel review

  • S4info
    community integration — published by microsoftdocs, not azure

Automated review, not a security audit. Ruleset v1+k2.

Advanced
Catalog kind
skill
Gateway key
azure-app-service-microsoftdocs
Source
github.com/microsoftdocs/agent-skills