/azure-deploy

by microsoftmicrosoft/github-copilot-for-azure253 stars

206

Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application — use azure-prepare instead. This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. Requires .azure/deployment-plan.md from azure-prepare and validated status from azure-validate. WHEN: "run azd up", "run azd deploy", "execute deployment", "push to production", "push to cloud", "go live", "ship it", "bicep deploy", "terraform apply", "publish to Azure", "launch on Azure". DO NOT USE WHEN: "create and deploy", "build and deploy", "create a new app", "set up infrastructure", "create and deploy to Azure using Terraform" — use azure-prepare for these.

42 files
130.1 KB
MIT
Updated 5 months ago
GitHub
1 alert

Ask your Agent

Use this Skill: https://skilld.dev/gh/microsoft/github-copilot-for-azure/azure-deploy

This session only. Nothing lands on disk.

referencesregion-availability.md

3 KB raw

≈758 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Azure Region Availability Reference

AUTHORITATIVE SOURCE — Consult this file BEFORE recommending any region.

Official reference: https://azure.microsoft.com/en-us/explore/global-infrastructure/products-by-region/table

How to Use

Check if your architecture includes any limited availability services below
If yes → refer to the table or use the MCP tool for that service to list supported regions with sufficient quota, and only offer regions that support ALL services
If all services are "available everywhere" → offer common regions

MCP Tools Used

Tool	Purpose
`mcp_azure_mcp_quota`	Check Azure region availability and quota by setting `command` to `quota_usage_check` or `quota_region_availability_list`

Services with LIMITED Region Availability

Azure Static Web Apps (SWA)

⚠️ NOT available in many common regions

✅ Available	❌ NOT Available (will FAIL)
`westus2`	`eastus`
`centralus`	`northeurope`
`eastus2`	`southeastasia`
`westeurope`	`uksouth`
`eastasia`	`canadacentral`
	`australiaeast`
	`westus3`

Azure Kubernetes Service (AKS)

It has limited quota in some regions, to get available regions with enough quota, use mcp_azure_mcp_quota tool.

Azure Database for PostgreSQL

It has limited quota in some regions, to get available regions with enough quota, use mcp_azure_mcp_quota tool.

Azure OpenAI

⚠️ Very limited — varies by model

Region	GPT-4o	GPT-4	GPT-3.5	Embeddings
`eastus`	✅	✅	✅	✅
`eastus2`	✅	✅	✅	✅
`westus`	⚠️	⚠️	✅	✅
`westus3`	✅	⚠️	✅	✅
`southcentralus`	✅	✅	✅	✅
`swedencentral`	✅	✅	✅	✅
`westeurope`	⚠️	✅	✅	✅

Check https://learn.microsoft.com/azure/ai-services/openai/concepts/models for current model availability.

Services Available in Most Regions

These services are available in all major Azure regions — no special consideration needed:

Container Apps
Azure Functions
App Service
Azure SQL Database
Cosmos DB
Key Vault
Storage Account
Service Bus
Event Grid
Application Insights / Log Analytics

Common Architecture Patterns

Pattern	Recommended Regions
SWA only	`westus2`, `centralus`, `eastus2`, `westeurope`, `eastasia`
SWA + backend services	`westus2`, `centralus`, `eastus2`, `westeurope`, `eastasia`
Container Apps (no SWA)	`eastus`, `eastus2`, `westus2`, `centralus`, `westeurope`
With Azure OpenAI (GPT-4o/4/3.5 + embeddings)	`eastus`, `eastus2`, `swedencentral`
SWA + Azure OpenAI (GPT-4o/4/3.5 + embeddings)	`eastus2` (only region with full SWA + model overlap)

Last updated: 2026-03-03

Source: SKILL.md on GitHub

Third-party checks

1 alert16d4 checks · Risk SAFE

Gen Agent Trust Hub16d
This skill provides comprehensive instructions and scripts for executing Azure deployments using various tools like the Azure Developer CLI (azd), Terraform, and Bicep. It includes several security considerations, such as the execution of deployment commands and the use of external scripts for database migrations. These operations are essential to the skill's intended purpose and are accompanied by extensive safety guidance, including the implementation of managed identities and mandatory user confirmation for destructive actions.
Socket16d
1 alert: gptAnomaly
Snyk16d
Risk: LOW · No issues
Runlayer6mo
21/36 files flagged

Provenance

Signed by skilld at d0c21c0. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated 5 months ago

Capability

metadata: { "author": "Microsoft", "version": "0.0.0-placeholder" }

Topics

Infrastructure
azure
deployment
azd
bicep
terraform
cloud

What it does

Executes Azure deployments for applications with prepared infrastructure and validated deployment plans, running azd up, azd deploy, terraform apply, and az deployment commands with error recovery. Use this skill only after azure-prepare and azure-validate have completed — it does not create applications or infrastructure, only deploys them.

Generated from the current SKILL.md.

Frequently asked

What prerequisites must be met before using this skill?

The azure-prepare skill must have completed (creating .azure/deployment-plan.md and infrastructure files) and the azure-validate skill must have run and confirmed status as 'Validated'. If either is missing, invoke those skills first.

Can I use this skill to create a new application?

No. This skill executes deployments for already-prepared applications only. Use the azure-prepare skill to create new applications or set up infrastructure.

What deployment methods does this skill support?

The skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery.

What happens if validation status is not 'Validated'?

The skill will not proceed. You must invoke azure-validate first and ensure the Validation Proof section in .azure/deployment-plan.md is populated with actual validation results.

Does this skill handle post-deployment configuration?

Yes. It configures SQL managed identity and applies Entity Framework migrations if applicable, following the post-deployment steps for the selected recipe.

Generated from the current SKILL.md. These answers refresh after source changes.