skilld
All skills
microsoft avatar

/azure-deploy

@b3c238e
by microsoftmicrosoft/skills3.1k stars
351

Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application — use azure-prepare instead. This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. Requires .azure/deployment-plan.md from azure-prepare and validated status from azure-validate. WHEN: "run azd up", "run azd deploy", "execute deployment", "push to production", "push to cloud", "go live", "ship it", "bicep deploy", "terraform apply", "publish to Azure", "launch on Azure". DO NOT USE WHEN: "create and deploy", "build and deploy", "create a new app", "set up infrastructure", "create and deploy to Azure using Terraform" — use azure-prepare for these.

Ask your Agent

Use this Skill: https://skilld.dev/gh/microsoft/skills/azure-deploy

This session only. Nothing lands on disk.

referencesrecipesazdREADME.md

≈957 tokens on demand. Your agent reads this file only when SKILL.md points to it.

AZD Deploy Recipe

Deploy to Azure using Azure Developer CLI (azd).

💡 Note: azd supports both Bicep and Terraform as IaC providers. The deployment workflow is identical regardless of which you use.

Prerequisites

  • azd CLI installed → Run mcp_azure_mcp_extension_cli_install with cli-type: azd if needed
  • .azure/deployment-plan.md exists with status Validated
  • azure.yaml exists and validated
  • Infrastructure files exist (Bicep: infra/main.bicep, Terraform: infra/*.tf)
  • AZD environment configured → Done in azure-validate
  • Subscription and location confirmed → See Pre-deploy Checklist

Workflow

Step Task Command
1 Verify environment azd env get-values — Confirm AZURE_SUBSCRIPTION_ID and AZURE_LOCATION set
2 Provision infrastructure azd provision --no-prompt
3 RBAC health check (Container Apps + ACR only) After provisioning, verify AcrPull role has propagated before deploying — see Pre-Deploy Checklist
4 Deploy application azd deploy --no-prompt
5 Post-Deploy Post-Deployment Steps — If using SQL + managed identity
6 Verify See Verification
7 Report Present deployed endpoint URLs to the user — see Verification Step 3

⚠️ Important: For Container Apps that use a managed identity to pull from ACR, always run azd provision and azd deploy as separate steps (not azd up) and complete the RBAC health check between them. This ensures the managed identity AcrPull role assignment has propagated before the Container App revision attempts to pull the image.

⚠️ Important: For .NET Aspire projects or projects using azd "limited mode" (no explicit infra/ folder), verify that azd provision populated all required environment variables. If azd deploy fails with errors about missing AZURE_CONTAINER_REGISTRY_ENDPOINT, AZURE_CONTAINER_REGISTRY_MANAGED_IDENTITY_ID, or MANAGED_IDENTITY_CLIENT_ID, see Error Handling for the resolution.

Common Mistakes

❌ Wrong Why It Fails
azd up --location eastus2 --location is not a valid flag for azd up
azd up without azd env new Prompts for input, fails with --no-prompt
mkdir .azure then azd env new --no-prompt Creates env folder structure incorrectly
Setting AZURE_LOCATION without checking RG "Invalid resource group location" if RG exists elsewhere
Ignoring azd-service-name tag conflicts in same RG "found '2' resources tagged with..." error
language: html or language: static Not valid - use language: js with dist: . for static sites

Deployment Commands

⚠️ azd up takes 5-15 min. Run with output streamed visibly to the user — do NOT run silently or suppress output. The user must see provisioning progress in real time.

Full Deployment

Provisions infrastructure AND deploys application:

azd up --no-prompt

Infrastructure Only

azd provision --no-prompt

Application Only

Deploy code to existing infrastructure:

azd deploy --no-prompt

Single Service

azd deploy api --no-prompt

References

Source: SKILL.md on GitHub

Third-party checks

2 warnings15d4 checks · Risk SAFE
  • Gen Agent Trust Hub15d

    This skill provides a robust framework for executing Azure deployments using various infrastructure-as-code tools. It includes several security considerations such as remote script installation and command execution, which are essential for its deployment functionality and are managed through strict prerequisite checks and user confirmation rules.

  • Socket15d

    1 alert: gptAnomaly

  • Snyk15d

    Risk: LOW · No issues

  • Runlayer7mo

    30/31 files flagged

Provenance

Signed by skilld at b3c238e. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub 20 hours ago.

Activeupdated 2 months ago

Capability

metadata
{
  "author": "Microsoft",
  "version": "1.2.1"
}

README badge

README badge for microsoft/skills/azure-deploy