Back to Skills

azure-deploy

Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application — use azure-prepare instead. This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. Requires .azure/deployment-plan.md from azure-prepare and validated status from azure-validate. WHEN: "run azd up", "run azd deploy", "execute deployment", "push

597stars91forksUpdated 4/9/2026

Security Assessment

Critical Risk(25/100)

Detected risks:

Destructive Operations([references/global-rules.md] rm -rf)
Remote Code Execution([references/sdk/azd-deployment.md] curl -fsSL https://aka.ms/install-azd.sh | bash)
Sensitive File Access([references/recipes/azd/ef-migrations.md] .Env, [references/recipes/azd/errors.md] .Env, [references/auth-best-practices.md] .env)
Security Score25/100

About azure-deploy

The azure-deploy skill is designed to execute deployments for applications that have already been prepared using the azure-prepare skill. It ensures that only validated deployment plans are executed, mitigating risks associated with incomplete or unverified infrastructure. By leveraging this skill, users can safely push updates, run deployment commands, and ship applications to production environments without manually handling Azure CLI commands or Terraform scripts. The skill enforces a strict workflow to prevent errors, ensuring that the deployment plan exists and has been validated before proceeding.

Key features of azure-deploy include automated execution of azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. The skill verifies that the deployment plan status is marked as `Validated` and requires completion of a pre-deploy checklist to guarantee readiness. It also respects safety rules, such as requiring explicit user approval for destructive actions and limiting its scope strictly to deployment execution. Additionally, it supports deployment of applications that include pre-configured API Management (APIM) gateways or AI governance policies, but does not generate infrastructure or scaffold new projects.

This skill is primarily intended for cloud engineers, DevOps professionals, and developers who manage ongoing Azure applications and need a reliable, repeatable deployment process. Typical use cases include pushing updates to production, deploying changes to pre-existing infrastructure, or running deployment pipelines for applications with complex dependencies. Users seeking to create new applications or infrastructure should use azure-prepare first, followed by azure-validate, before invoking azure-deploy, ensuring a controlled and successful deployment workflow.

FAQ

Can I use azure-deploy to create a new application from scratch?

No. azure-deploy only works with applications that have already been prepared using azure-prepare. For creating new applications or infrastructure, you should use azure-prepare first.

What prerequisites are required before running azure-deploy?

You must have an existing .azure/deployment-plan.md file created by azure-prepare, and the deployment plan must be validated using azure-validate with status `Validated`.

Which commands does azure-deploy execute?

The skill runs azd up, azd deploy, terraform apply, and az deployment commands, all through an error recovery and verification pipeline.

Can I skip validation or manually mark the plan as validated?

No. Skipping validation or manually changing the status is forbidden. Only azure-validate can set the plan status to `Validated` after proper checks.

Does azure-deploy handle APIM gateway creation?

No. It only deploys applications with pre-existing APIM or AI gateway infrastructure. For creating or modifying these resources, use azure-prepare or the azure-aigateway skill.

All Files

41 files
references/recipes/azd/scripts/apply-migrations.ps11.8 KB
View
references/recipes/azd/scripts/apply-migrations.sh1.8 KB
View
references/recipes/azd/verify.md4.8 KB
View
references/recipes/bicep/errors.md0.5 KB
View
references/recipes/cicd/examples/github-azd.yml0.8 KB
View
references/recipes/bicep/verify.md0.8 KB
View
references/recipes/cicd/errors.md0.5 KB
View
references/recipes/cicd/examples/azdo-azd.yml0.5 KB
View
references/recipes/cicd/examples/github-bicep.yml0.7 KB
View
references/recipes/azcli/verify.md2.1 KB
View
references/recipes/azd/README.md3.7 KB
View
references/recipes/azd/ef-migrations.md4.8 KB
View
references/recipes/azd/scripts/grant-and-migrate.ps13.7 KB
View
references/recipes/azd/errors.md13.4 KB
View
references/recipes/azd/scripts/grant-and-migrate.sh3.7 KB
View
references/recipes/azd/functions-deploy.md3.4 KB
View
references/recipes/terraform/errors.md0.5 KB
View
references/recipes/azd/post-deployment.md4.2 KB
View
references/recipes/azd/sql-managed-identity.md7.3 KB
View
SKILL.md6.4 KB
View
references/auth-best-practices.md6.0 KB
View
references/global-rules.md1.2 KB
View
references/live-role-verification.md3.8 KB
View
references/pre-deploy-checklist.md8.6 KB
View
references/recipes/README.md0.4 KB
View
references/recipes/azcli/README.md1.7 KB
View
references/recipes/azcli/errors.md0.5 KB
View
references/recipes/azd/sql-entra-auth.md2.1 KB
View
references/recipes/cicd/README.md1.2 KB
View
references/recipes/cicd/verify.md0.8 KB
View
references/sdk/azure-identity-dotnet.md0.9 KB
View
references/recipes/bicep/README.md2.4 KB
View
references/recipes/cicd/examples/azdo-multistage.yml0.8 KB
View
references/recipes/terraform/verify.md0.8 KB
View
references/sdk/azure-identity-ts.md1.1 KB
View
references/recipes/terraform/README.md2.2 KB
View
references/sdk/azure-identity-java.md1.2 KB
View
references/region-availability.md2.9 KB
View
references/troubleshooting.md8.0 KB
View
references/sdk/azd-deployment.md0.8 KB
View
references/sdk/azure-identity-py.md1.1 KB
View

Install azure-deploy

Download and extract the skill files to your .claude/skills/ directory.

Quick Setup:

  1. Copy the skill folder to .claude/skills/
  2. Claude will automatically detect and use the skill