All skills
microsoft avatar

/azure-deploy

@b3c238e
by microsoftmicrosoft/skills3.1k stars
351

Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application — use azure-prepare instead. This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. Requires .azure/deployment-plan.md from azure-prepare and validated status from azure-validate. WHEN: "run azd up", "run azd deploy", "execute deployment", "push to production", "push to cloud", "go live", "ship it", "bicep deploy", "terraform apply", "publish to Azure", "launch on Azure". DO NOT USE WHEN: "create and deploy", "build and deploy", "create a new app", "set up infrastructure", "create and deploy to Azure using Terraform" — use azure-prepare for these.

Use this Skill: https://skilld.dev/gh/microsoft/skills/azure-deploy

This session only. Nothing lands on disk.

referencesrecipesbicepREADME.md

≈628 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Bicep Deploy Recipe

Deploy to Azure using Bicep templates directly.

Prerequisites

  • az CLI installed with Bicep extension
  • .azure/deployment-plan.md exists with status Validated
  • Bicep templates exist in infra/
  • Subscription and location confirmed → See Pre-Deploy Checklist

Workflow

Step Task Command
1 Pre-deploy checklist Confirm subscription/location with user
2 Build (optional) az bicep build --file main.bicep
3 Deploy az deployment sub create
4 Verify az resource list
5 Report Present deployed endpoint URLs to the user — see Verification

Deployment Commands

Subscription-Level Deployment

az deployment sub create \
  --location eastus2 \
  --template-file ./infra/main.bicep \
  --parameters ./infra/main.parameters.json

Resource Group Deployment

az deployment group create \
  --resource-group rg-myapp-dev \
  --template-file ./infra/main.bicep \
  --parameters ./infra/main.parameters.json

With Inline Parameters

az deployment sub create \
  --location eastus2 \
  --template-file ./infra/main.bicep \
  --parameters environmentName=dev location=eastus2

What-If (Preview Changes)

az deployment sub what-if \
  --location eastus2 \
  --template-file ./infra/main.bicep \
  --parameters environmentName=dev

Get Deployment Outputs

az deployment sub show \
  --name main \
  --query properties.outputs

References

MCP Tools

Tool Purpose
mcp_bicep_get_bicep_best_practices Best practices
mcp_bicep_get_az_resource_type_schema Resource schemas
mcp_bicep_list_avm_metadata Azure Verified Modules

AVM Verification Before Deploy

Before running deployment commands, verify generated templates followed AVM-first module selection:

  1. AVM Bicep Pattern Modules (prefer AVM+AZD patterns)
  2. AVM Bicep Resource Modules
  3. AVM Bicep Utility Modules

If no AVM+AZD pattern module is available, fallback must remain within AVM modules (resource -> utility).

Cleanup (DESTRUCTIVE)

az group delete --name <rg-name> --yes

⚠️ Permanently deletes ALL resources in the group.

Source: SKILL.md on GitHub

2 warnings15d4 checks · Risk SAFE
  • Gen Agent Trust Hub15d

    This skill provides a robust framework for executing Azure deployments using various infrastructure-as-code tools. It includes several security considerations such as remote script installation and command execution, which are essential for its deployment functionality and are managed through strict prerequisite checks and user confirmation rules.

  • Socket15d

    1 alert: gptAnomaly

  • Snyk15d

    Risk: LOW · No issues

  • Runlayer7mo

    30/31 files flagged

Signed by skilld at b3c238e. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub 19 hours ago.

Activeupdated 2 months ago
metadata
{
  "author": "Microsoft",
  "version": "1.2.1"
}

README badge

README badge for microsoft/skills/azure-deploy