Skip to content

Azure investigations ​

Azure projects are a different workflow from code. They run read-only az investigations against your subscription and save the findings to the project's docs. No repo, no git worktree, no changes to your cloud.

Setup ​

  1. Install the az CLI and sign in with az login.
  2. Create an Azure project in the Projects view — it needs no repository path.

The Azure panel ​

The Azure panel is the guarded, read-only az surface:

  • Auth status — confirms you're signed in.
  • Quick presets — common queries (list resources, check network security groups, review permissions, and so on).
  • Free-form command box — run a custom az command.
  • Results — structured output plus the raw JSON.
  • Summary — an AI-generated digest of what the results mean.
  • Save to docs — persist the findings into the project docs.

Read-only by design ​

The panel is hard-guarded to read-only az commands. It can't create, update or delete anything in Azure — investigations are safe to run against production. Write operations are simply not available.

From findings to action ​

Saved findings become project docs that agents can reference. A typical flow:

  1. Investigate infrastructure with presets or custom queries.
  2. Save to docs the relevant findings.
  3. Toggle Include for AI so future agents use them as context.

Import from Azure DevOps ​

Separately, you can connect Azure DevOps in Settings to import work items as tasks — see Projects. This is distinct from the read-only az investigation flow above.