Azure Best Practices & Checklist

# Root Management Group
# ├── Platform
# │   ├── Identity (Azure AD, PIM)
# │   ├── Management (Monitoring, Log Analytics)
# │   └── Connectivity (Hub networking, DNS)
# ├── Landing Zones
# │   ├── Production (STRICT guardrails)
# │   │   └── sub-prod-001
# │   ├── Staging (Moderate guardrails)
# │   │   └── sub-staging-001
# │   └── Development (Minimal guardrails)
# │       └── sub-dev-001
# └── Sandbox (AI Agent Testing)
#     └── sub-sandbox-001

# Create management groups
az account management-group create --name "platform" --display-name "Platform"
az account management-group create --name "landing-zones" --display-name "Landing Zones"
az account management-group create --name "lz-production" --display-name "Production" --parent "landing-zones"
az account management-group create --name "lz-staging" --display-name "Staging" --parent "landing-zones"
az account management-group create --name "lz-development" --display-name "Development" --parent "landing-zones"
az account management-group create --name "sandbox" --display-name "Sandbox"

# Apply strict deny-delete policy at Production management group level
az policy assignment create \
  --name "deny-delete-production" \
  --policy "deny-delete-critical-resources" \
  --scope "/providers/Microsoft.Management/managementGroups/lz-production" \
  --enforcement-mode Default

# Development agent identity - has Contributor minus delete
az identity create --name uai-agent-dev --resource-group rg-identities
az role assignment create \
  --assignee $(az identity show --name uai-agent-dev --resource-group rg-identities --query principalId -o tsv) \
  --role "AI Agent Safe Deployer" \
  --scope "/subscriptions/DEV-SUBSCRIPTION-ID"

# Staging agent identity - has Reader plus limited write
az identity create --name uai-agent-staging --resource-group rg-identities
az role assignment create \
  --assignee $(az identity show --name uai-agent-staging --resource-group rg-identities --query principalId -o tsv) \
  --role "AI Agent Safe Deployer" \
  --scope "/subscriptions/STAGING-SUBSCRIPTION-ID"

# Production - agent has Reader ONLY (no write, no delete)
az identity create --name uai-agent-prod --resource-group rg-identities
az role assignment create \
  --assignee $(az identity show --name uai-agent-prod --resource-group rg-identities --query principalId -o tsv) \
  --role "Reader" \
  --scope "/subscriptions/PROD-SUBSCRIPTION-ID"

{
  "properties": {
    "displayName": "AI Agent Safe Landing Zone",
    "description": "Blueprint that deploys a subscription with AI agent safety guardrails",
    "targetScope": "subscription",
    "parameters": {},
    "resourceGroups": {
      "rg-monitoring": {
        "name": "rg-monitoring",
        "location": "eastus"
      }
    },
    "blueprintId": "/providers/Microsoft.Management/managementGroups/landing-zones/providers/Microsoft.Blueprint/blueprints/ai-agent-safe-lz"
  },
  "artifacts": [
    {
      "kind": "policyAssignment",
      "properties": {
        "displayName": "Deny delete on critical resources",
        "policyDefinitionId": "/subscriptions/SUB/providers/Microsoft.Authorization/policyDefinitions/deny-delete-critical-resources"
      }
    },
    {
      "kind": "roleAssignment",
      "properties": {
        "displayName": "AI Agent Safe Deployer",
        "roleDefinitionId": "/providers/Microsoft.Authorization/roleDefinitions/CUSTOM-ROLE-ID",
        "principalIds": ["[parameters('agentPrincipalId')]"]
      }
    },
    {
      "kind": "template",
      "properties": {
        "displayName": "Deploy resource locks",
        "template": {
          "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
          "contentVersion": "1.0.0.0",
          "resources": [
            {
              "type": "Microsoft.Authorization/locks",
              "apiVersion": "2020-05-01",
              "name": "subscription-lock",
              "properties": {
                "level": "CanNotDelete",
                "notes": "Applied by AI Agent Safety Blueprint"
              }
            }
          ]
        }
      }
    }
  ]
}

#!/bin/bash
# azure-kill-agent.sh - Emergency script to disable AI agent access
# Usage: ./azure-kill-agent.sh

set -e

echo "=== EMERGENCY: Disabling AI Agent Access ==="
echo "Timestamp: $(date -u +"%Y-%m-%dT%H:%M:%SZ")"

# Disable user-assigned managed identity
IDENTITY_NAME="uai-ai-agent"
IDENTITY_RG="rg-identities"

# Method 1: Remove all role assignments for the agent identity
PRINCIPAL_ID=$(az identity show \
  --name "$IDENTITY_NAME" \
  --resource-group "$IDENTITY_RG" \
  --query principalId -o tsv)

echo "Removing all role assignments for principal: $PRINCIPAL_ID"

az role assignment list \
  --assignee "$PRINCIPAL_ID" \
  --query "[].id" -o tsv | \
while read assignment_id; do
  echo "  Removing: $assignment_id"
  az role assignment delete --ids "$assignment_id"
done

# Method 2: If using a service principal instead
# az ad sp update --id "$SP_OBJECT_ID" --set accountEnabled=false

echo ""
echo "=== Agent access has been revoked ==="
echo "Next steps:"
echo "  1. Check Activity Log for any recent destructive operations"
echo "  2. Run recovery procedures if needed"
echo "  3. File an incident report"
echo "  4. Schedule a post-incident review"