skilld
All skills
microsoft avatar

/azure-deploy

@d0c21c0 official
by microsoftmicrosoft/github-copilot-for-azure253 stars
206

Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application — use azure-prepare instead. This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. Requires .azure/deployment-plan.md from azure-prepare and validated status from azure-validate. WHEN: "run azd up", "run azd deploy", "execute deployment", "push to production", "push to cloud", "go live", "ship it", "bicep deploy", "terraform apply", "publish to Azure", "launch on Azure". DO NOT USE WHEN: "create and deploy", "build and deploy", "create a new app", "set up infrastructure", "create and deploy to Azure using Terraform" — use azure-prepare for these.

Ask your Agent

Use this Skill: https://skilld.dev/gh/microsoft/github-copilot-for-azure/azure-deploy

This session only. Nothing lands on disk.

referencesrecipesbicepREADME.md

≈628 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Bicep Deploy Recipe

Deploy to Azure using Bicep templates directly.

Prerequisites

  • az CLI installed with Bicep extension
  • .azure/deployment-plan.md exists with status Validated
  • Bicep templates exist in infra/
  • Subscription and location confirmed → See Pre-Deploy Checklist

Workflow

Step Task Command
1 Pre-deploy checklist Confirm subscription/location with user
2 Build (optional) az bicep build --file main.bicep
3 Deploy az deployment sub create
4 Verify az resource list
5 Report Present deployed endpoint URLs to the user — see Verification

Deployment Commands

Subscription-Level Deployment

az deployment sub create \
  --location eastus2 \
  --template-file ./infra/main.bicep \
  --parameters ./infra/main.parameters.json

Resource Group Deployment

az deployment group create \
  --resource-group rg-myapp-dev \
  --template-file ./infra/main.bicep \
  --parameters ./infra/main.parameters.json

With Inline Parameters

az deployment sub create \
  --location eastus2 \
  --template-file ./infra/main.bicep \
  --parameters environmentName=dev location=eastus2

What-If (Preview Changes)

az deployment sub what-if \
  --location eastus2 \
  --template-file ./infra/main.bicep \
  --parameters environmentName=dev

Get Deployment Outputs

az deployment sub show \
  --name main \
  --query properties.outputs

References

MCP Tools

Tool Purpose
mcp_bicep_get_bicep_best_practices Best practices
mcp_bicep_get_az_resource_type_schema Resource schemas
mcp_bicep_list_avm_metadata Azure Verified Modules

AVM Verification Before Deploy

Before running deployment commands, verify generated templates followed AVM-first module selection:

  1. AVM Bicep Pattern Modules (prefer AVM+AZD patterns)
  2. AVM Bicep Resource Modules
  3. AVM Bicep Utility Modules

If no AVM+AZD pattern module is available, fallback must remain within AVM modules (resource -> utility).

Cleanup (DESTRUCTIVE)

az group delete --name <rg-name> --yes

⚠️ Permanently deletes ALL resources in the group.

Source: SKILL.md on GitHub

Third-party checks

1 alert16d4 checks · Risk SAFE
  • Gen Agent Trust Hub16d

    This skill provides comprehensive instructions and scripts for executing Azure deployments using various tools like the Azure Developer CLI (azd), Terraform, and Bicep. It includes several security considerations, such as the execution of deployment commands and the use of external scripts for database migrations. These operations are essential to the skill's intended purpose and are accompanied by extensive safety guidance, including the implementation of managed identities and mandatory user confirmation for destructive actions.

  • Socket16d

    1 alert: gptAnomaly

  • Snyk16d

    Risk: LOW · No issues

  • Runlayer6mo

    21/36 files flagged

Provenance

Signed by skilld at d0c21c0. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated 5 months ago

Capability

metadata
{
  "author": "Microsoft",
  "version": "0.0.0-placeholder"
}

Topics

README badge

README badge for microsoft/github-copilot-for-azure/azure-deploy

What it does

Executes Azure deployments for applications with prepared infrastructure and validated deployment plans, running azd up, azd deploy, terraform apply, and az deployment commands with error recovery. Use this skill only after azure-prepare and azure-validate have completed — it does not create applications or infrastructure, only deploys them.

Generated from the current SKILL.md.

Frequently asked

What prerequisites must be met before using this skill?
The azure-prepare skill must have completed (creating .azure/deployment-plan.md and infrastructure files) and the azure-validate skill must have run and confirmed status as 'Validated'. If either is missing, invoke those skills first.
Can I use this skill to create a new application?
No. This skill executes deployments for already-prepared applications only. Use the azure-prepare skill to create new applications or set up infrastructure.
What deployment methods does this skill support?
The skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery.
What happens if validation status is not 'Validated'?
The skill will not proceed. You must invoke azure-validate first and ensure the Validation Proof section in .azure/deployment-plan.md is populated with actual validation results.
Does this skill handle post-deployment configuration?
Yes. It configures SQL managed identity and applies Entity Framework migrations if applicable, following the post-deployment steps for the selected recipe.

Generated from the current SKILL.md. These answers refresh after source changes.