azure-validate

Validate Azure configurations and infrastructure for deployment readiness.

Updated Apr 10, 2026
One-click install
npx skills add https://github.com/attentiondotnet/azure-skills --skill azure-validate-attentiondotnet
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-validate
Source: https://github.com/attentiondotnet/azure-skills/tree/main/.github/plugins/azure-skills/skills/azure-validate
Command: npx skills add https://github.com/attentiondotnet/azure-skills --skill azure-validate-attentiondotnet

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill prevents deployments from failing by running comprehensive pre-deployment checks on configuration, infrastructure-as-code, RBAC, managed identities, policy, and build/package readiness so teams do not push broken or non-compliant changes to Azure.

Core Features & Use Cases

  • Preflight Validation: Validate azure.yaml, Bicep, Terraform, and AZD preview steps to catch template, syntax, and packaging errors before deployment.
  • RBAC & Role Verification: Statically review role assignments in Bicep/Terraform to ensure least-privilege and correct data-plane roles for managed identities.
  • Policy, Region, and Quota Guidance: Run MCP policy checks and consult region availability to avoid policy violations and unsupported service-region combinations.
  • Auditable Proof & Guardrails: Record commands and results in Section 7: Validation Proof within .azure/deployment-plan.md, require azure-prepare as a prerequisite, and enforce ask_user confirmation for destructive actions.

Quick Start

Run azure-validate after azure-prepare to execute pre-deployment checks and record Validation Proof in the deployment plan.

Frequently Asked Questions about azure-validate

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run preflight validation checks on Bicep and Terraform templates before deploying to Azure?

Preflight validation checks Bicep and Terraform templates by running tool-driven commands like az bicep and terraform to catch template, syntax, and packaging errors before deployment. Results are recorded in .azure/deployment-plan.md to verify deployment readiness.

What is the best way to verify RBAC role assignments and least-privilege compliance for Azure managed identities?

To verify RBAC role assignments, statically review role definitions in Bicep or Terraform templates to ensure least-privilege and correct data-plane roles for managed identities. This pre-deployment check prevents non-compliant or broken identity configurations from reaching Azure.

How do I check Azure policy compliance and region availability before deploying infrastructure as code?

Check Azure policy compliance by running MCP policy checks and consulting region availability queries before deployment. This avoids policy violations and unsupported service-region combinations when provisioning infrastructure as code.

Does azure-validate require any prerequisite steps before checking Azure deployment readiness?

Yes, azure-validate requires the azure-prepare prerequisite step to be completed first. It enforces this guardrail and also requires explicit ask_user confirmation before executing any destructive actions during the validation process.

Can I validate azure.yaml and AZD workflow configurations for build and packaging readiness?

Yes, you can validate azure.yaml and AZD preview steps to catch configuration, build, and packaging errors early. The validation process applies tool-driven checks to ensure AZD workflows are fully prepared for deployment.