azure-deploy Skill for Claude Code: Run Azure Deployments With Checks
Runs the Azure deployment of an app you already prepared, with a checklist, error recovery and a check of the result.
- Installs
- 574.6K
- on skills.sh
- Stars
- 1.6K
- on GitHub
- Files
- 40
- besides SKILL.md
- Updated
- Oct 2026
- last repo commit
azure-deploy is the last of three steps: azure-prepare, then azure-validate, then azure-deploy. It refuses to run until a .azure/deployment-plan.md exists with the status Validated and a filled-in Validation Proof section. Then it works through a pre-deploy checklist, loads the right recipe, executes azd up, azd deploy, terraform apply or az deployment, and verifies the endpoints.
It will not create apps or write infrastructure code. Its rules say destructive actions require asking you first. It spends money and changes your Azure account, so use it on a subscription and resource group you chose.
Good for
- Developers shipping an app to Azure with azd, Bicep or Terraform
- Teams that want validation before every deploy
- Platform engineers who want deploy errors handled by a runbook
Install azure-deploy
Claude Code
- 1
Copy this prompt.
Install the azure-deploy skill in Claude Code. Run this command: /plugin install azure@claude-plugins-official Then check that it loaded and tell me how to use it.
- 2
Paste it into Claude Code. It shows the change and asks before running it.
Requires Azure account, Node.js 18+, Azure CLI signed in (az login).
This installs the Azure plugin, which includes azure-deploy with the other Azure skills and the Azure MCP server. Sign in to azd with azd auth login if you plan to deploy. Update with /plugin update azure@claude-plugins-official.
From the project README. Source.
What's in the skill
When it loads
Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application — use azure-prepare instead. This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. Requires .azure/deployment-plan.md from azure-prepare and validated status from azure-validate. WHEN: "run azd up", "run azd deploy", "execute deployment", "push to production", "push to cloud", "go live", "ship it", "bicep deploy", "terraform apply", "publish to Azure", "launch on Azure". DO NOT USE WHEN: "create and deploy", "build and deploy", "create a new app", "set up infrastructure", "create and deploy to Azure using Terraform" — use azure-prepare for these.
Sections in SKILL.md
- Triggers
- Rules
- Steps
- SDK Quick References
- MCP Tools
- References
Key facts
- Author
- Microsoft
- Installs on skills.sh
- 574,606 (Nov 2, 2026)
- GitHub stars
- 1,609 (Nov 2, 2026)
- License
- MIT
- Last repo commit
- Oct 30, 2026
- Files next to SKILL.md
- 40 files
- skills.sh audits
- Gen Agent Trust Hub pass, Socket warn, Snyk pass
What it includes
Reads .azure/deployment-plan.md and confirms status is Validated with proof
Files ·
1. Check the planMandatory steps before any deploy
Read ·
2. Pre-deploy checklistazd, azure cli, Bicep, Terraform or CI/CD, based on the plan
Read ·
3. Load a recipeFor Container Apps with ACR, provisions and checks the AcrPull role first
Runs code ·
4. RBAC health checkRuns azd up, azd deploy, terraform apply or az deployment
Runs code ·
5. Execute the deploySets up SQL managed identity and applies EF migrations if needed
Runs code ·
6. Post-deployConfirms endpoints work, checks roles, prints https:// URLs
Runs code ·
7. Verify and report
From the official docs
Permissions
High risk
What it can do
- Read your data
- Create and change things
- Delete things
- Read-only mode
Watch out for
It deploys real, billed resources to your Azure account
Use a test subscription and resource group first, and read each command before you approve it. github.com
It can grant roles and run database migrations
Post-deploy steps set up SQL managed identity and apply EF migrations. Review them before approving. github.com
Bundled shell and PowerShell scripts run on your machine
The skill ships apply-migrations and grant-and-migrate scripts. Read them before the agent runs them. github.com
skills.sh shows a Socket warning for this skill
Read the SKILL.md before you install if you must pass a security review. skills.sh
Technical details
| Talks to | Azure through azd, az, Terraform and the Azure MCP server |
|---|---|
| Scopes |
|
Questions
What does azure-deploy do?
It deploys an already-prepared app to Azure by running azd, Terraform or az commands, then verifies the result. It does not create new apps or infrastructure code.
How do I install azure-deploy?
Use the install box at the top and install the whole Azure plugin. azure-deploy needs azure-prepare and azure-validate, and the plugin includes the set.
Why does it refuse to deploy?
Its SKILL.md blocks deploys unless .azure/deployment-plan.md exists and reads Validated with a Validation Proof section. Run azure-prepare and azure-validate first.
Will it delete things?
The rules say destructive actions require asking you first. Still, deployments change your Azure resources, so read each command it asks to run.
What do I need before using it?
An Azure account, Node.js 18+, the Azure CLI signed in with az login and azd signed in with azd auth login.
Is it safe?
It runs deploy commands that create billed Azure resources and, with SQL, grants roles and runs migrations. Use a test subscription first. Skills.sh audits: Gen Agent Trust Hub pass, Socket warn, Snyk pass.
Information
updated Nov 2, 2026
- Repository
- microsoft/azure-skills
- Folder
skills/azure-deploy
Sources
Docs, issue trackers and discussions this page is built from.
Show all 3Hide
- Azure Skills README · github.com
- azure-deploy SKILL.md · github.com
- azure-deploy on skills.sh · skills.sh