azure-to-aws

Files (121)

• SKILL.md
• aks-eks-sizing.json · knowledge/design/
• appservice-eb-sizing.json · knowledge/design/
• azure-region-map.json · knowledge/design/
• cosmos-dynamodb-conversion.json · knowledge/design/
• disk-ebs-sizing.json · knowledge/design/
• fast-path-services.json · knowledge/design/
• flexible-server-rds-sizing.json · knowledge/design/
• vm-ec2-sizing.json · knowledge/design/
• estimate-defaults.json · knowledge/estimate/
• rightsizing-thresholds.json · knowledge/estimate/
• classification-rules.md · references/clustering/
• clustering-algorithm.md · references/clustering/
• tiering.md · references/clustering/
• typed-edges-strategy.md · references/clustering/
• ai.md · references/design-refs/
• analytics.md · references/design-refs/
• compute.md · references/design-refs/
• database.md · references/design-refs/
• fast-path.md · references/design-refs/
• identity.md · references/design-refs/
• index.md · references/design-refs/
• messaging.md · references/design-refs/
• networking.md · references/design-refs/
• specialist-gates.md · references/design-refs/
• storage.md · references/design-refs/
• clarify-ai-only.md · references/phases/clarify/
• clarify-ai.md · references/phases/clarify/
• clarify-assemble.md · references/phases/clarify/
• clarify-compute.md · references/phases/clarify/
• clarify-database.md · references/phases/clarify/
• clarify-global.md · references/phases/clarify/
• clarify-identity.md · references/phases/clarify/
• clarify-licensing.md · references/phases/clarify/
• clarify.md · references/phases/clarify/
• design-ai.md · references/phases/design/
• design-assemble.md · references/phases/design/
• design-infra.md · references/phases/design/
• design.md · references/phases/design/
• discover-anthropic-api.md · references/phases/discover/
• discover-app-code.md · references/phases/discover/
• discover-assemble.md · references/phases/discover/
• discover-iac.md · references/phases/discover/
• discover-live.md · references/phases/discover/
• discover-openai-api.md · references/phases/discover/
• discover-openrouter-api.md · references/phases/discover/
• discover-rdfa.md · references/phases/discover/
• discover.md · references/phases/discover/
• estimate-ai.md · references/phases/estimate/
• estimate-assemble.md · references/phases/estimate/
• estimate-infra.md · references/phases/estimate/
• estimate.md · references/phases/estimate/
• feedback-assemble.md · references/phases/feedback/
• feedback-collect.md · references/phases/feedback/
• feedback.md · references/phases/feedback/
• generate-artifacts-ai.md · references/phases/generate/
• generate-artifacts-docs.md · references/phases/generate/
• generate-artifacts-infra.md · references/phases/generate/
• generate-artifacts-report.md · references/phases/generate/
• generate-assemble.md · references/phases/generate/
• …and 61 more

SKILL.md (first lines)

# Azure-to-AWS Migration Skill

> **Build status.** Discover, Clarify, Design, Estimate, Generate, and the
> what-if workshop are implemented. A `## Status` block records which build
> step filled a file in. It is not a signal to skip the file or to treat its
> body as a stub. Still missing: Bicep, ARM templates; the feedback
> sidebar (wiring only); and `patterns.md`, `licensing.md`, and `gpu-hpc.md`.
> RDfA archive parsing is implemented (`discover-rdfa.md`).
> The live `az` capture path is implemented (`discover-live.md`). OpenAI,
> OpenRouter, and Anthropic usage-API discovery (interactive, consent-gated,
> main-window — same shape as `discover-live.md`'s pre-dispatch live-`az`
> capture) is implemented.

## Optional usage telemetry

Before starting or resuming, load `references/vendored/telemetry/PROTOCOL.md` and
run its read-only status check. Use the returned reporting mode rather than the
model's identity. Complete the existing notice exchange only when that protocol
requires it; unavailable or declined telemetry never blocks this skill.

## Philosophy

- **Re-platform by default**: pick the AWS service that matches the Azure workload type (App Service → Elastic Beanstalk, AKS → EKS, VMs → EC2, Flexible Server → RDS/Aurora, Azure Cache for Redis → ElastiCache). Re-architecting is a user decision, not a default.
- **Do not recommend AWS App Runner** (no longer accepting new customers as of April 2026). App Service maps to **Elastic Beanstalk** by default, with Fargate as the override for direct container control and EKS for teams that already run Kubernetes. ECS Express Mode may be mentioned only as a forward-look on the Fargate override path.
- **Live-first discovery, read-only and consent-gated**: the user's authenticated `az` CLI is a first-class source — most startups have no `azurerm_*` Terraform, and the tenant is authoritative for what actually runs. **The live-`az` capture path is implemented** (`discover-live.md`): consent + read-only `az resource list`/`list` capture run as main-window pre-work, and a file-only fragment parses the capture into the same inventory contract as the Terraform path (a live-only workspace no longer halts — it discovers). Resource Discovery for Azure (RDfA) is offered as the **accuracy upgrade** when right-sizing dollars matter, and recommended outright above roughly a handful of subscriptions. Live capture is strictly read-only, never captures app-setting or connection-string VALUES, and never mints a token.
- **Holistic first, per-resource second**: the report leads with cluster-level architecture rationale. A 40-row per-resource mapping table is an appendix, not the headline.
- **Pre-determined where there is no ambiguity**: an architecture-invariant primitive (Blob → S3, VNet → VPC) is a deterministic table lookup and never routed through a rubric that could reason its way somewhere else. A pattern may narrow the rubric's candidate set; **a pattern may never change a `deterministic` mapping's target.**
- **Dev sizing unless specified**: default to development-tier capacity (single AZ, `db.t4g.micro`-class). Upgrade only on user direction or on measured utilization.
- **x86_64 is the default architecture here, not Graviton**: Azure fleets carry Windows and .NET far more often than GCP or Heroku fleets do, and `references/shared/graviton.md`'s escape path (Windows, .NET Framework, GPU/CUDA, RDS SQL Server) fires routinely. Graviton is offered as an optimization, not assumed.
- **Startup-weighted, not enterprise-weighted**: Azure Database for PostgreSQL/MySQL Flexible Server and Cosmos DB Core API get full depth. Azure SQL Database / Managed Instance / SQL-on-VM, Azure Hybrid Use Benefit licensing, elastic-pool consolidation, and Synapse sit behind specialist gates that fire only on detection.
- **No human one-time migration costs**: do not present human labor, professional services, or people-time as dollar estimates or a "one-time migration cost" budget line. Vendor charges grounded in data (Azure invoice line items in the baseline) are allowed.
- **Generate is opt-in**: Design and Estimate always run. Terraform, migration scripts, and docs are produced only after the user chooses Execute at the post-Estimate decision gate (`run_mode: decide_and_execute`).

---

## Definitions

- **"Load"** = Read the file using the Read tool and follow its instructions. Do not summarize or skip sections.
- **`$MIGRATION_DIR`** = The run-specific directory under `.migration/` (e.g. `.migration/0315-1030/`). Set during Discover.
- **`$AZURE_SUBSCRIPTION`** = The subscription id passed explicitly on every `az` command. Never rely on the CLI's ambient active-subscription context.
- **Canonical type** = an ARM resource type string (`Microsoft.Web/sites`). All mapping tables key off these, never off Terraform types; `azurerm_*` is translated during discovery.

---

## Phase Structure (frontmatter)

Phase and unit files carry a YAML frontmatter block that declares how the phase is
composed — its inputs, the fragments it runs, the assembler that combines them,
what it produces, its gates, and what it requires/advances-to. The DSL interpreter
contract is the vendored `references/vendored/dsl/INTERPRETER.md`: it defines every
frontmatter key, the fragment/assembler model, and the interpreter loop. **Load it
first** (once, at the start of a migration), then execute a phase file's prose
body. Elsewhere in this skill, `INTERPRETER.md` (without a path) refers to this
same loaded contract.

The phase set, its order, the gates, and the state transitions are all DERIVED from
that frontmatter. They are deliberately not restated anywhere in this file — a
hand-maintained phase table is exactly the drift surface the frontmatter exists to
remove.

---

## Context Loading Rules

Each phase loads reference files on demand. To keep per-turn context manageable and prevent instruction-following degradation:

- **Budget:** Each phase should load no more than ~800 lines of instructions (excluding user artifacts like JSON inventories and MCP tool results).
- **Conditional loading:** Reference files with trigger conditions MUST NOT be loaded unless the condition is met. Do not speculatively load files.
- **No duplication:** Mapping tables, pricing data, and shared warnings exist in one canonical file. Other files reference them; they do not copy them inline.
- **Progressive depth:** Phase orchestrators contain short routing logic that points at detailed sub-files. Load the sub-file only when its path is selected.

Each phase declares its own conditional reference/knowledge loads in frontmatter (a fragment `_trigger` or a `_knowledge` entry's `_when`); do not maintain a separate load-condition table here.

Azure's discovery phase is the one at real risk of blowing this budget: one IaC
fragment covers Terraform, Bicep, and ARM. It keeps the single contract and pushes
per-dialect extraction rules into `references/shared/extract-*.md` files it loads
only for the dialects actually present.

**AI workloads add a second budget risk.** When both `azure-resource-inventory.json`
and `ai-workload-profile.json` exist (an infrastructure estate that also runs AI), the
Design and Estimate phases load the infra rubrics AND the AI refs
(`vendored/ai/*`, `design-refs/ai.md`), which together approach the ~800-line budget.
The AI units are conditional fragments: they load ONLY when `ai-workload-profile.json`
is present, keyed on `summary.ai_source` (`azure_openai | openai | anthropic | both |
other`). For a large hybrid stack, offer the user a two-pass run — infrastructure first,
then AI workloads alone — so neither pass degrades the other. Azure OpenAI routes through
the same OpenAI→Bedrock guide as a direct-OpenAI workload, because the Bedrock target does
not depend on which endpoint served the calls.

---

## Execution

This skill is driven by the interpreter loop in `INTERPRETER.md` (§ The interpreter
loop): it reads `.phase-status.json`, determines the current phase, runs each
phase's `_preconditions` / fragments / `_assemble` / `_postconditions`, advances on
`HANDOFF_OK` via `_advances_to`, and validates state.

**Cold start (entry phase).** On a cold start — no `.migration/` run with a
`.phase-status.json` yet — begin at `references/phases/discover/discover.md`, this
skill's entry phase (the one carrying `_init: true`). The interpreter loads THIS
phase directly; it does not scan every phase's frontmatter to discover the root.
All subsequent phases are reached by following each phase's `_advances_to`. On a
warm start, `current_phase` in `.phase-status.json` is authoritative **except**
when deferred-advance sidebar resume applies (`INTERPRETER.md` § The interpreter
loop step 2 — Estimate completed + `workshop` pending/in_progress must not re-run
Estimate).

**Clarify is mandatory.** Do not skip Clarify or jump straight to Design, Estimate,
or Generate even if the user asks — there is no exception for "quick" or "obvious"
migrations. A `preferences.json` that was not produced by an actual Clarify run
does not count. Azure estates make this stricter, not looser: licensing posture and
App Service Plan isolation are not inferable from configuration, and getting either
wrong moves the estimate by multiples.

**Clarify has a fast path, and the fast path is still Clarify.** When Discover marks
the estate eligible (`azure-resource-inventory.json` → `metadata.clarify_fast_path`,
`discover-assemble.md` § Assembly rule 9 — no AI, no Windows/SQL licensing signal, no
VMs, no Cosmos Core, no HA database, one region, small cluster count), `clarify.md`

From aws/agent-toolkit-for-aws, Apache-2.0.

More from aws/agent-toolkit-for-aws