56 results available
Sign in
Skills directory

azure-quotas

microsoft

·

Last changed
Hardened

This skill has been hardened by Chainguard

Last changed

This version passed the hardening gate. Hardening updated the skill content and independently checked the resulting changes. Classified findings before hardening: 2. Classified findings closed: 0. Classified findings remaining: 2. Unclassified scanner findings remaining: 0. Review findings closed: 1. Review findings remaining: 8.


Open before hardening

1

Medium

1

Low
Open after hardening

1

Medium

1

Low

Expand
File
Group
Subtype
Severity
Status
SKILL.md

Excessive Agency & Rogue Autonomy

—

Medium
Open
SKILL.md

Malicious Code & Command Execution

Command injection

Low
Open

2 findings


SKILL.md

Azure Quotas - Service Limits & Capacity Management

Overview

What are Azure Quotas?

Azure quotas (also called service limits) are the maximum number of resources you can deploy in a subscription. Quotas:

  • Prevent accidental over-provisioning
  • Ensure fair resource distribution across Azure
  • Represent available capacity in each region
  • Can be increased (adjustable quotas) or are fixed (non-adjustable)

Key Concept: Quotas = Resource Availability

If you don't have quota, you cannot deploy resources. Always check quotas when planning deployments or selecting regions.

When to Use This Skill

Invoke this skill when:

  • Planning a new deployment - Validate capacity before deployment
  • Selecting an Azure region - Compare quota availability across regions
  • Troubleshooting quota exceeded errors - Check current usage vs limits
  • Requesting quota increases - Submit increase requests via CLI or Portal
  • Comparing regional capacity - Find regions with available quota
  • Validating provisioning limits - Ensure deployment won't exceed quotas

Quick Reference

PropertyDetails

Primary Tool

Azure CLI (az quota)

Extension Required

az extension add --name quota

Key Commands

az quota list, az quota show, az quota usage list, az quota usage show

Complete CLI Reference

commands.md

Azure Portal

My quotas - Use only as fallback

REST API

Microsoft.Quota provider - Unreliable, do NOT use first

MCP Server

azure-quota MCP server — It is unreliable.

Required Permission

Reader (view) or Quota Request Operator (manage)

Quota Types

TypeAdjustabilityApprovalExamples

Adjustable

Can increase via Portal/CLI/API

Usually auto-approved

VM vCPUs, Public IPs, Storage accounts

Non-adjustable

Fixed limits

Cannot be changed

Subscription-wide hard limits

Important: Requesting quota increases is free. You only pay for resources you actually use, not for quota allocation.

Understanding Resource Name Mapping

⚠️ CRITICAL: There is NO 1:1 mapping between ARM resource types and quota resource names.

Example Mappings

ARM Resource TypeQuota Resource Name

Microsoft.App/managedEnvironments

ManagedEnvironmentCount

Microsoft.Compute/virtualMachines

standardDSv3Family, cores, virtualMachines

Microsoft.Network/publicIPAddresses

PublicIPAddresses, IPv4StandardSkuPublicIpAddresses

Discovery Workflow

Never assume the quota resource name from the ARM type. Always use this workflow:

  1. List all quotas for the resource provider:

    az quota list --scope /subscriptions/<id>/providers/<ProviderNamespace>/locations/<region>
  2. Match by localizedValue (human-readable description) to find the relevant quota

  3. Use the name field (not ARM resource type) in subsequent commands:

    az quota show --resource-name ManagedEnvironmentCount --scope ...
    az quota usage show --resource-name ManagedEnvironmentCount --scope ...

Scripts

Pre-built scripts handle usage queries and capacity calculation. A single call returns limits, usage, and available capacity.

ScriptPurposeUsage

scripts/check-quota.ps1

Returns limit, usage, and available capacity for all quotas (or a single quota when resource name is provided)

Primary script for quota checks

scripts/check-quota.sh

Same as above (bash)

Primary script for quota checks

Core Workflows

Workflow 1: Check Quota for a Specific Resource

Scenario: Verify quota limits and current usage before deployment

Run the script with the resource provider and region. It returns a table of all quotas with their limit, current usage, and available capacity in a single call:

.\scripts\check-quota.ps1 -ResourceProvider <provider> -Region <region>
./scripts/check-quota.sh <provider> <region>

To check a single resource, add the resource name:

.\scripts\check-quota.ps1 -ResourceProvider <provider> -Region <region> -ResourceName <resource-name>
./scripts/check-quota.sh <provider> <region> <resource-name>

Example:

.\scripts\check-quota.ps1 -ResourceProvider Microsoft.Compute -Region eastus

Example Output:

ResourceRegionLimitUsageAvailable

cores

eastus

100

50

50

standardDSv3Family

eastus

350

50

300

virtualMachines

eastus

25000

5

24995

...

...

...

...

...

Workflow 2: Compare Quotas Across Regions

Scenario: Find the best region for deployment based on available capacity

# Define candidate regions
REGIONS=("eastus" "eastus2" "westus2" "centralus")
VM_FAMILY="standardDSv3Family"
SUBSCRIPTION_ID="<subscription-id>"

# Check quota availability across regions
for region in "${REGIONS[@]}"; do
  echo "=== Checking $region ==="
  
  # Get limit
  LIMIT=$(az quota show \
    --resource-name $VM_FAMILY \
    --scope "/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.Compute/locations/$region" \
    --query "properties.limit.value" -o tsv)
  
  # Get current usage
  USAGE=$(az quota usage show \
    --resource-name $VM_FAMILY \
    --scope "/subscriptions/$SUBSCRIPTION_ID/providers/Microsoft.Compute/locations/$region" \
    --query "properties.usages.value" -o tsv)
  
  # Calculate available
  AVAILABLE=$((LIMIT - USAGE))
  
  echo "Region: $region | Limit: $LIMIT | Usage: $USAGE | Available: $AVAILABLE"
done

Workflow 3: Request Quota Increase

Scenario: Current quota is insufficient for deployment

# Request increase for VM quota
az quota update \
  --resource-name standardDSv3Family \
  --scope /subscriptions/<subscription-id>/providers/Microsoft.Compute/locations/eastus \
  --limit-object value=500 \
  --resource-type dedicated

# Check request status
az quota request status list \
  --scope /subscriptions/<subscription-id>/providers/Microsoft.Compute/locations/eastus

Approval Process:

  • Most adjustable quotas are auto-approved within minutes
  • Some requests require manual review (hours to days)
  • Non-adjustable quotas require Azure Support ticket

Workflow 4: List All Quotas for Planning

Scenario: Understand all quotas for a resource provider in a region

# List all compute quotas in East US (table format)
az quota list \
  --scope /subscriptions/<subscription-id>/providers/Microsoft.Compute/locations/eastus \
  --output table

# List all network quotas
az quota list \
  --scope /subscriptions/<subscription-id>/providers/Microsoft.Network/locations/eastus \
  --output table

# List all Container Apps quotas
az quota list \
  --scope /subscriptions/<subscription-id>/providers/Microsoft.App/locations/eastus \
  --output table

Troubleshooting

Common Errors

ErrorCauseSolution

REST API "No Limit"

Misleading — not unlimited

Use CLI instead; see warning in Quick Reference

ExtensionNotFound

Quota extension not installed

az extension add --name quota

BadRequest

Resource provider not supported by quota API

Check service limits docs

MissingRegistration

Microsoft.Quota provider not registered

az provider register --namespace Microsoft.Quota

QuotaExceeded

Deployment would exceed quota

Request increase or choose different region

InvalidScope

Incorrect scope format

Use pattern: /subscriptions/<id>/providers/<namespace>/locations/<region>

CLI commands fail entirely

Auth, extension, or environment issue

Verify Azure CLI login (az account show), reinstall quota extension, check network. azure-quota MCP server — it is unreliable.

Unsupported Resource Providers

Known unsupported providers:

Confirmed working providers:

  • ✅ Microsoft.Compute (VMs, disks, cores)
  • ✅ Microsoft.Network (VNets, IPs, load balancers)
  • ✅ Microsoft.App (Container Apps)
  • ✅ Microsoft.Storage (storage accounts)
  • ✅ Microsoft.MachineLearningServices (ML compute)

Additional Resources

ResourceLink

CLI Commands Reference

commands.md - Complete syntax, parameters, examples

Azure Quotas Overview

Microsoft Learn

Service Limits Documentation

Azure subscription limits

Azure Portal - My Quotas

Portal Link

Request Quota Increases

How to request increases

Best Practices

  1. ✅ Always check quotas before deployment - Prevent quota exceeded errors
  2. ✅ Run az quota list first - Discover correct quota resource names
  3. ✅ Compare regions - Find regions with available capacity
  4. ✅ Account for growth
  5. ✅ Use table output for overview - --output table for quick scanning
  6. ✅ Monitor usage trends - Set up alerts at 80% threshold (via Portal)

Install

Install with chainctl
chainctl skill install public/microsoft/azure-quotas:latest
Get started with chainctl
View source

Harden your own skills

Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.

Provenance

Upstream sourcehttps://github.com/microsoft/azure-skills
Upstream commit0dd4679823d2bf1bdab3136a203ff65309f9c025
OCI reference

skills.cgr.dev/public/github.com/microsoft/skills/azure-quotas:latest

License

MIT

Files

HARDENING.md

LICENSE

SKILL.md

references/advanced-commands.md

references/commands.md

scripts/check-quota.ps1

scripts/check-quota.sh


The trusted source for open source

Talk to an expert
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsChainguard OS PackagesChainguard ActionsChainguard Agent SkillsIntegrationsPricing
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.