·
Last changedVersion:
This version passed the hardening gate. Hardening updated the skill content and independently checked the resulting changes. Classified findings before hardening: 2. Classified findings closed: 0. Classified findings remaining: 2. Unclassified scanner findings remaining: 0. Review findings closed: 1. Review findings remaining: 8.
1
1
1
1
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Excessive Agency & Rogue Autonomy | — | Medium | Open | |
SKILL.md | Malicious Code & Command Execution | Command injection | Low | Open |
2 findings
What are Azure Quotas?
Azure quotas (also called service limits) are the maximum number of resources you can deploy in a subscription. Quotas:
Key Concept: Quotas = Resource Availability
If you don't have quota, you cannot deploy resources. Always check quotas when planning deployments or selecting regions.
Invoke this skill when:
| Property | Details |
|---|---|
Primary Tool | Azure CLI ( |
Extension Required |
|
Key Commands |
|
Complete CLI Reference | |
Azure Portal | My quotas - Use only as fallback |
REST API | Microsoft.Quota provider - Unreliable, do NOT use first |
MCP Server |
|
Required Permission | Reader (view) or Quota Request Operator (manage) |
| Type | Adjustability | Approval | Examples |
|---|---|---|---|
Adjustable | Can increase via Portal/CLI/API | Usually auto-approved | VM vCPUs, Public IPs, Storage accounts |
Non-adjustable | Fixed limits | Cannot be changed | Subscription-wide hard limits |
Important: Requesting quota increases is free. You only pay for resources you actually use, not for quota allocation.
⚠️ CRITICAL: There is NO 1:1 mapping between ARM resource types and quota resource names.
| ARM Resource Type | Quota Resource Name |
|---|---|
|
|
|
|
|
|
Never assume the quota resource name from the ARM type. Always use this workflow:
List all quotas for the resource provider:
Match by localizedValue (human-readable description) to find the relevant quota
Use the name field (not ARM resource type) in subsequent commands:
Pre-built scripts handle usage queries and capacity calculation. A single call returns limits, usage, and available capacity.
| Script | Purpose | Usage |
|---|---|---|
| Returns limit, usage, and available capacity for all quotas (or a single quota when resource name is provided) | Primary script for quota checks |
| Same as above (bash) | Primary script for quota checks |
Scenario: Verify quota limits and current usage before deployment
Run the script with the resource provider and region. It returns a table of all quotas with their limit, current usage, and available capacity in a single call:
To check a single resource, add the resource name:
Example:
Example Output:
| Resource | Region | Limit | Usage | Available |
|---|---|---|---|---|
cores | eastus | 100 | 50 | 50 |
standardDSv3Family | eastus | 350 | 50 | 300 |
virtualMachines | eastus | 25000 | 5 | 24995 |
... | ... | ... | ... | ... |
Scenario: Find the best region for deployment based on available capacity
Scenario: Current quota is insufficient for deployment
Approval Process:
Scenario: Understand all quotas for a resource provider in a region
| Error | Cause | Solution |
|---|---|---|
REST API "No Limit" | Misleading — not unlimited | Use CLI instead; see warning in Quick Reference |
| Quota extension not installed |
|
| Resource provider not supported by quota API | Check service limits docs |
| Microsoft.Quota provider not registered |
|
| Deployment would exceed quota | Request increase or choose different region |
| Incorrect scope format | Use pattern: |
CLI commands fail entirely | Auth, extension, or environment issue | Verify Azure CLI login ( |
Known unsupported providers:
Confirmed working providers:
| Resource | Link |
|---|---|
CLI Commands Reference | commands.md - Complete syntax, parameters, examples |
Azure Quotas Overview | |
Service Limits Documentation | |
Azure Portal - My Quotas | |
Request Quota Increases |
az quota list first - Discover correct quota resource names--output table for quick scanningGet started with chainctlchainctl skill install public/microsoft/azure-quotas:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/microsoft/skills/azure-quotas:latest
MIT
HARDENING.md
LICENSE
SKILL.md
references/advanced-commands.md
references/commands.md
scripts/check-quota.ps1
scripts/check-quota.sh