Adding Foundry Agent MCP Private Connectivity Lab

[pablocast]

Purpose

This pull request adds a new hands-on lab for demonstrating secure, private connectivity to Azure AI Foundry using Model Context Protocol (MCP), Azure API Management, and Azure Front Door. It introduces comprehensive documentation, sample agent scripts, infrastructure configuration, and a clean-up notebook. The lab guides users through deploying a fully private AI infrastructure, securely running MCP agents, and cleaning up resources.

Key changes:

Documentation and Lab Instructions

• Added a detailed README.MD describing the architecture, deployment steps, testing scenarios, and resource clean-up for the Azure AI Foundry Private Connectivity Lab. The documentation covers the use of private endpoints, APIM, Front Door, Key Vault, a jumpbox VM, and MCP integration, along with step-by-step instructions for setup and testing.

Agent Scripts and Secure Secret Loading

• Added agent/load_env_from_kv.py, a script for securely loading secrets from Azure Key Vault using managed identity and setting them as environment variables for the agent.
• Added agent/sample_agents_mcp.py, a comprehensive Python script that demonstrates creating and running an MCP-enabled AI agent, including secure authentication, dynamic tool approval, and step-by-step conversation logging.

Infrastructure Configuration

• Introduced bicepconfig.json to enable experimental extensibility features and Microsoft Graph extension support for Bicep deployments, supporting advanced infrastructure automation.

Resource Clean-up

• Added clean-up-resources.ipynb, a Jupyter notebook that provides a simple way to clean up all deployed Azure resources after the lab, helping users avoid unnecessary charges.

• ...

Does this introduce a breaking change?

[ ] Yes
[ X] No

Pull Request Type

What kind of change does this Pull Request introduce?

[ ] Bugfix
[X ] Feature
[ ] Code style update (formatting, local variables)
[ ] Refactoring (no functional changes, no api changes)
[ ] Documentation content changes
[ ] Other... Please describe:

[nourshaker-msft]

It is not printing out the secret value, just the secret key to help troubleshooting in a test environment