For bulk resource discovery across subscriptions, use Azure Resource Graph queries. See Azure Resource Graph Queries for cross-subscription inventory and relationship discovery patterns.

Once you have the resource group:

1. Query all resources in the resource group using Azure MCP tools or az.

2. Analyze each resource type and capture:

   • Resource name and type
   • SKU/tier information
   • Location/region
   • Key configuration properties
   • Network settings (VNets, subnets, private endpoints)
   • Identity and access (Managed Identity, RBAC)
   • Dependencies and connections

3. Map relationships by identifying:

   • Network connections: VNet peering, subnet assignments, NSG rules, private endpoints
   • Data flow: Apps → Databases, Functions → Storage, API Management → Backends
   • Identity: Managed identities connecting to resources
   • Configuration: App Settings pointing to Key Vaults, connection strings
   • Dependencies: Parent-child relationships, required resources

Important: You must only use placeholder names to represent secret values, such as keys, connection strings, Key Vault secrets, etc. Use meaningful placeholder names to represent each secret in the diagram. Never put secret values in the resource diagram.

Step 3: Diagram Construction

Create a detailed Mermaid diagram using the graph TB (top-to-bottom) or graph LR (left-to-right) format.

See example-diagram.md for a complete sample architecture diagram.

Key Diagram Requirements:

• Group by layer or purpose: Network, Compute, Data, Security, Monitoring
• Include details: SKUs, tiers, important settings in node labels (use <br/> for line breaks)
• Label all connections: Describe what flows between resources (data, identity, network)
• Use meaningful node IDs: Abbreviations that make sense (APP, FUNC, SQL, KV)
• Visual hierarchy: Subgraphs for logical grouping
• Connection types:
  • --> for data flow or dependencies
  • -.-> for optional/conditional connections
  • ==> for critical/primary paths

Resource Type Examples:

• App Service: Include plan tier (B1, S1, P1v2)
• Functions: Include runtime (.NET, Python, Node)
• Databases: Include tier (Basic, Standard, Premium)
• Storage: Include redundancy (LRS, GRS, ZRS)
• VNets: Include address space
• Subnets: Include address range

Step 4: File Creation

Use template-architecture.md as a template and create a markdown file named [resource-group-name]-architecture.md with:

…

markdown-token-optimizer

分析并精简 Markdown 内容，降低 token 消耗并提升 AI 处理效率。

arch-viewer

帮助分析代码库架构、查询依赖关系并生成交互式可视化图谱。