Setting the file. One moment.
Subchapter 7.7
references/service-mapping.mdMarkdown8 KBView on GitHub
Component→Azure service selection. Apply context.json.intent as modifiers, context.json.overrides[] as hard constraints, and policy constraints as filters.
⛔ Implicit dependencies: When selecting Container Apps and the component has a Dockerfile (or
hasDockerfile: truein prereq), ALWAYS include Container Registry (Basic) inservices[]. Container Apps requires ACR to host custom images — omitting it forces an imperative add during deploy, wasting a healing round. ACR Basic is $0.17/day (~$5/mo).
| Component Type | Primary Service | Alternatives | Selection Signal |
|---|---|---|---|
| SPA Frontend | Static Web Apps | Blob + CDN | React/Vue/Angular, no SSR |
| SSR Web App | Container Apps | App Service, AKS | Next.js/Nuxt, server-rendered |
| REST/GraphQL API | Container Apps | App Service, Functions, AKS | Express/Fastify/Flask/FastAPI |
| Background Worker | Container Apps (scale-to-zero) | Functions, AKS | Celery/Bull/Agenda, no HTTP |
| Scheduled Task | Functions (Timer) | Container Apps Jobs | Cron patterns, periodic execution |
| Event Processor | Functions | Container Apps + KEDA | Event-driven, queue/topic consumer |
| Microservices (K8s) | AKS | Container Apps | kubectl/helm in repo, CRDs, service mesh |
| GPU/ML Workloads | AKS | Azure ML | GPU requirements, training workloads |
Stack shortcuts: Containers (Docker, microservices) → Container Apps or AKS. Serverless (event-driven, variable traffic) → Functions. Traditional web (PaaS preference) → App Service.
AKS vs Container Apps: Use Container Apps when scale-to-zero needed, no K8s expertise, or KEDA-driven event processing. Delegate AKS planning to azure-kubernetes skill.
App Service vs Container Apps: App Service preferred when user wants free tier (F1 $0 / B1 ~$13/mo) or single-process with no container orchestration. Container Apps preferred for REST/GraphQL APIs (scaffold generates Dockerfile if missing), scale-to-zero, multi-container/sidecar, or event-driven KEDA scaling. Budget affects SKU tier (Consumption vs Dedicated), not compute service type. Container Apps Consumption has no fixed free tier but scales to zero.
Static Dockerfile sites (nginx/httpd serving HTML):
⛔ SWA region availability: Validate via
az provider show --namespace Microsoft.Web --query "resourceTypes[?resourceType=='staticSites'].locations" -o tsv.
index.html natively) or Linux F1 (linuxFxVersion: 'STATICSITE|1.0'). ⛔ Do NOT use NODE|*/PHP|*/PYTHON|* for static sites — causes 504/503 cold start.Plain HTML (no package manager, no Dockerfile): Windows App Service F1 preferred (IIS serves natively). Linux: linuxFxVersion: 'STATICSITE|1.0'. Or Static Web Apps Free.
| Need | Primary Service | Alternatives | Selection Signal |
|---|---|---|---|
| Relational | Azure SQL | PostgreSQL Flexible, MySQL Flexible | SQL schema, transactions, joins |
| Document/NoSQL | Cosmos DB | — | JSON docs, global distribution |
| Graph (Gremlin) | Cosmos DB (Gremlin API) | — | Graph traversal, relationships |
Cosmos DB Serverless: Each Serverless account supports ONE API type (SQL, MongoDB, Gremlin, Table, Cassandra). Multi-API apps require separate Serverless accounts.
| Cache | Redis Cache | — | Session store, rate limiting |
| Files/Blobs | Blob Storage | Files Storage | File uploads, static assets |
| Search | AI Search | — | Full-text search requirements |
| MariaDB/MySQL | MySQL Flexible Server | — | mariadb:* or mysql:* in compose / connection config |
| Elasticsearch/OpenSearch | AI Search | Azure Monitor (for Kibana) | elasticsearch:* or opensearch:* in compose |
| S3-compatible / MinIO | Blob Storage | — | minio/* in compose, S3 SDK usage |
| Need | Primary Service | Selection Signal |
|---|---|---|
| Message Queue | Service Bus | Point-to-point, ordered, transactions |
| Pub/Sub | Event Grid | Event routing, fan-out |
| Streaming / Kafka | Event Hubs | High-throughput telemetry, logs. Kafka protocol compatible — apps using kafka-clients, Spring Kafka, confluent-kafka-python connect by changing bootstrap URL + SASL config only |
| Multi-step orchestration | Durable Functions + Durable Task Scheduler | DTS is the recommended managed backend |
| Low-code workflow | Logic Apps | Integration-heavy, visual designer |
docker-compose → Azure mapping: Map each
detectedServices[].typeto its PaaS equivalent using these tables. Unmapped services (SSH daemons, custom sidecars — no managed equivalent): offer a Linux VM (B1s ~$7/mo) as companion at the scaffold gate. Present as option, not forced. Write topostDeployRecommendations[].
| Service | Purpose |
|---|---|
| Log Analytics | Centralized logging |
| Application Insights | Monitoring + APM |
| Key Vault | Secrets management |
| Managed Identity | Service-to-service auth (zero secrets) |
Check before mapping — delegate to specialized skill if matched:
| Signal | Delegate To |
|---|---|
Copilot SDK, @github/copilot-sdk | azure-hosted-copilot-sdk |
| Foundry agent, AI agent deployment | microsoft-foundry |
⛔ Non-Azure cloud SDK deps (AWS/GCP/Firebase) are handled by prereq — the pipeline does NOT reach prepare with cloud SDK findings present. If you see cloud SDK findings here, prereq failed to stop — HALT and do NOT continue architecture planning.
When context.json.detectedInfraProvider.terraform is "gcp" or "aws", read existing .tf files and map cloud resources to Azure equivalents. These mappings provide architecture signal for service selection — use alongside component detection.
| GCP Terraform Resource | Azure Equivalent | Notes |
|---|---|---|
google_cloud_run_v2_service | Container Apps | Map scaling, env vars, VPC config |
google_sql_database_instance (POSTGRES) | PostgreSQL Flexible Server | Map tier, backup, maintenance config |
google_sql_database_instance (MYSQL) | MySQL Flexible Server | Map tier, backup config |
google_artifact_registry_repository | Container Registry (ACR) | Basic tier unless geo-replication needed |
google_pubsub_topic / google_pubsub_subscription | Service Bus | Map topic/subscription model |
google_secret_manager_secret | Key Vault | Map secret references |
google_firestore_database | Cosmos DB (NoSQL API) | Map indexes, TTL config |
google_cloudfunctions2_function | Azure Functions | Map triggers, runtime |
google_service_account + google_project_iam_member | Managed Identity + RBAC | Map role bindings |
Other GCP resources (storage, redis, compute network, VPC connector, cloud tasks) map 1:1 to their Azure equivalents (Blob Storage, Redis Cache, VNet, Queue Storage).
| AWS Terraform Resource | Azure Equivalent | Notes |
|---|---|---|
aws_ecs_service / aws_ecs_task_definition | Container Apps | Map task def → container config |
aws_rds_instance (postgres/mysql) | PostgreSQL/MySQL Flexible Server | Map instance class → SKU |
aws_lambda_function | Azure Functions | Map runtime, handler, triggers |
aws_dynamodb_table | Cosmos DB (NoSQL API) | Map capacity, indexes |
aws_sns_topic | Service Bus or Event Grid | Map subscriptions |
aws_secretsmanager_secret | Key Vault | Map secret references |
Other AWS resources (S3, ECR, SQS, ElastiCache) map 1:1 to their Azure equivalents (Blob Storage, ACR, Queue Storage/Service Bus, Redis Cache). SQS → Service Bus if FIFO ordering needed.