# Step 1 -- Tooling and Prerequisites

## Required Tools

-   Git
-   GitHub CLI (`gh`)
-   Azure CLI (`az`)
-   Bicep CLI through Azure CLI
-   PowerShell 7 (`pwsh`)
-   VS Code or preferred editor
-   Claude Code

## PowerShell Modules

``` powershell
Install-Module Az.Accounts -Scope CurrentUser
Install-Module Az.Resources -Scope CurrentUser
Install-Module Az.OperationalInsights -Scope CurrentUser
Install-Module Az.SecurityInsights -Scope CurrentUser
Install-Module Az.Monitor -Scope CurrentUser
```

Likely later: `Az.ManagedServiceIdentity`, `Az.LogicApp`, and selected
Microsoft Graph modules when justified.

## Verify

``` bash
git --version
gh --version
az version
az bicep version
pwsh --version
claude --version
```

## Decisions

-   Safe internal Azure test subscription/resource group?
-   GitHub Actions permitted?
-   OIDC/workload identity federation permitted?
-   Atlassian MCP permitted?
-   What Azure permissions can development identities receive?

## Not Needed Yet

Terraform, private Bicep registry, customer credentials, custom MCP
servers, or a dedicated drift platform.