Operating Azure Infra with GitHub Copilot CLI

A hands-on lab where you run GitHub Copilot CLI in your terminal and operate Azure in plain language. Instead of hunting through the portal, you ask and infra work happens — and risky changes are always previewed and approved first.

🔐 Safe even in a production tenant: participant access is limited to subscription Reader (read-only) + Contributor on your own lab RG. You can see production but cannot change it. Cost is $0–3, and deleting the RG returns it to $0.

What you'll do (M0–M6)

• Estate visibility — natural language → Azure Resource Graph across the subscription (read-only, free)
• IaC + what-if — Copilot writes secure-by-default Bicep, previews, deploys to your RG only
• Operational automation — tagging, cleanup, VM auto-shutdown scripts (dry-run first)
• Observability & KQL — turn natural language into KQL to troubleshoot
• Governance (audit) + cost — safely assign a built-in audit policy to your RG; find cost waste
• BYOC — put your own recurring ops problem to Copilot

Info

• Duration: ~5 hours · Level: Intermediate · Where: terminal (GitHub Copilot CLI) + Azure
• Bring: GitHub Copilot subscription, an Azure subscription (admin pre-provisions an isolated RG + roles), az/Node.js/git
• Safety: write only in the isolated RG · preview with what-if/dry-run · approve each change

The full step-by-step guide, setup scripts, Bicep, cheat sheet and instructor notes live in the GitHub repo below.