azure-deploy

To deploy an Azure application, this skill executes infrastructure commands like `azd up`, `terraform apply`, or `az deployment` using a prepared deployment plan. It safely applies the validated configuration and handles execution errors automatically with built-in recovery.

Before running an Azure infrastructure deployment, you must have a validated deployment plan. Specifically, the `.azure/deployment-plan.md` file must exist and have a `Validated` status, indicating that the `azure-prepare` and `azure-validate` phases have already been successfully completed.

Yes, the Azure deployment process verifies RBAC roles. It executes a pre-deploy checklist that checks RBAC health for Container Apps and ACR, and performs post-deployment verification to confirm live RBAC roles and report active endpoint URLs.

The best way to push code changes safely is using a validated deployment plan with built-in error recovery. This approach enforces prerequisite checks, executes infrastructure via `azd` or Terraform, and follows global rules for destructive actions to ensure reliable updates.

If a Terraform apply or `azd` deployment command fails during execution, the skill uses built-in error recovery to handle the failure safely. Because it operates on a validated deployment plan, it prevents unhandled destructive actions and manages infrastructure errors securely.