Inventario de recursos Azure + dependencias¶
Grafo de dependencias (orden de creación)¶
flowchart TB
RG[Resource Group] --> LAW[Log Analytics]
LAW --> AI[App Insights]
RG --> KV[Key Vault]
RG --> MI[User Assigned Managed Identities]
RG --> ST[Storage Account]
RG --> SQL[Azure SQL Server + DB]
RG --> DI[Document Intelligence]
RG --> SRCH[AI Search]
RG --> OAI[Azure OpenAI / Foundry]
RG --> CAE[Container Apps Environment]
CAE --> CA[Container Apps]
RG --> APIM[API Management]
OAI --> AGENTS[Foundry Agents]
ENTRA[Entra App Regs + Groups] --> APIM
ENTRA --> APPS[Finance / HR Web]
MI --> KV
MI --> SQL
MI --> ST
MI --> OAI
MI --> SRCH
MI --> DI
CA --> MI
APIM --> CA
AGENTS --> APIM
AGENTS --> MCP[MCP Servers on CA]Lista detallada¶
| # | Recurso | Nombre sugerido | Depende de | Notas |
|---|---|---|---|---|
| 1 | Resource Group | rg-eai-dev-eus |
Suscripción | Contenedor único MVP |
| 2 | Log Analytics | log-eai-dev-eus |
RG | Base de logs |
| 3 | Application Insights | appi-eai-dev-eus |
LAW | Workspace-based |
| 4 | Key Vault | kv-eai-dev-eus |
RG + soft-delete | Secrets residuales |
| 5 | Managed Identity | id-eai-apps-dev |
RG | Compartida APIs/MCP (o una por app) |
| 6 | Storage Account | steaideveus01 |
RG | Containers: invoices, hr-policies |
| 7 | SQL Server | sql-eai-dev-eus |
RG | AAD auth preferido |
| 8 | SQL Database | sqldb-eai-finance-dev |
SQL Server | Finance + audit |
| 9 | Document Intelligence | di-eai-dev-eus |
RG | Invoice model |
| 10 | AI Search | srch-eai-dev-eus |
RG | Índice HR |
| 11 | Azure OpenAI / Foundry | oai-eai-dev-eus / project |
RG | Deployments chat + embeddings |
| 12 | ACA Environment | cae-eai-dev-eus |
RG + LAW | Log shipping |
| 13 | CA finance-api | ca-eai-finance-api-dev |
CAE, MI, SQL, KV | |
| 13b | CA finance-web | ca-eai-finance-web-dev |
CAE, MI, ACR | Portal Next.js (HITL) |
| 14 | CA hr-api | ca-eai-hr-api-dev |
CAE, MI | |
| 15 | CA mcp-hr | ca-eai-mcp-hr-dev |
CAE, Search, Blob | |
| 16 | CA mcp-suppliers | ca-eai-mcp-sup-dev |
CAE, SQL | Opcional demo |
| 17 | CA / Function invoice-processor | ca-eai-inv-proc-dev |
Blob, DI, Foundry | |
| 18 | APIM | apim-eai-dev-fz1d |
RG | Developer SKU + Developer Portal |
| 19 | Entra groups + apps | ver prerequisites | Tenant | |
| 20 | Front Door (shared) | afd-honne-edge-shared |
RG aparte rg-honne-edge-shared |
Manual · edge-front-door.md |
| 21 | WAF | wafhonneedgeshared |
Edge RG | Prevention · custom rules |
| 22 | Wiki Storage | steaidevwikifz1d |
RG | Static website · origin de AFD docs |
Variables de entorno (sin secretos en repo)¶
AZURE_OPENAI_ENDPOINT=
AZURE_OPENAI_DEPLOYMENT=
AZURE_OPENAI_EMBEDDING_DEPLOYMENT=
AZURE_OPENAI_API_VERSION=
AZURE_DI_ENDPOINT=
AZURE_SEARCH_ENDPOINT=
AZURE_SQL_SERVER=
AZURE_STORAGE_ACCOUNT=
APPLICATIONINSIGHTS_CONNECTION_STRING=
AZURE_KEY_VAULT_URI=
APIM_GATEWAY_URL=
Autenticación preferida: DefaultAzureCredential / Managed Identity.