Azure Validate

Name: Azure Validate
Author: microsoft

microsoft/azure-skills

482k installs
1.3k repo stars
Updated July 26, 2026
microsoft/azure-skills

azure-validate is a Claude agent skill that runs deep pre-deployment checks on Azure config, IaC, RBAC roles, and managed identities before an app is deployed.

About

azure-validate is a Microsoft agent skill that runs pre-deployment checks on Azure configuration and infrastructure before a production push. It reads the .azure/deployment-plan.md produced by azure-prepare, then runs recipe-specific validation commands (such as azd provision --preview, bicep build, terraform validate), verifies RBAC role assignments and managed identity permissions, and records proof in the plan. A developer uses it to confirm an app is ready to deploy and to troubleshoot deployment errors. It sits between azure-prepare and azure-deploy in the workflow and blocks deploy until every check passes.

Preflight checks before production deploy
Validates Bicep/Terraform and azure.yaml
Verifies RBAC roles and managed identity
Blocks deploy until all checks pass

Azure Validate by the numbers

481,558 all-time installs (skills.sh)
Security screen: CRITICAL risk (skills.sh audit)
Data as of Jul 28, 2026 (Skillselion catalog sync)

At a glance

azure-validate capabilities & compatibility

Free MIT-licensed skill; validation commands run against your own Azure subscription.

Capabilities: deployment validation · preflight checks · rbac verification · iac validation
Works with: azure · terraform
Use cases: devops · ci cd · security audit
Pricing: Free

From the docs

What azure-validate says it does

Pre-deployment validation for Azure readiness.

SKILL.md

verify RBAC roles, check role assignments, review managed identity permissions, what-if analysis

SKILL.md

All checks must pass—do not deploy with failures

SKILL.md

npx skills add https://github.com/microsoft/azure-skills --skill azure-validate

Add your badge

Show developers this skill is listed on Skillselion. Paste this into your README.

[![Listed on Skillselion](https://skillselion.com/badge/skills/microsoft/azure-skills/azure-validate.svg)](https://skillselion.com/skills/microsoft/azure-skills/azure-validate)

Installs	482k
repo stars	★ 1.3k
Security audit	2 / 3 scanners passed
Last updated	July 26, 2026
Repository	microsoft/azure-skills ↗

Is my Azure app actually ready to deploy, and are the RBAC roles and identities wired correctly?

devops

Who is it for?

Developers who have generated Azure infrastructure and want to confirm deployment readiness and correct RBAC/identity wiring before pushing to production.

Skip if: Preparing or generating infrastructure (use azure-prepare) or executing the deploy (use azure-deploy).

When should I use this skill?

The user asks to validate an app, check deployment readiness, run preflight checks, verify RBAC roles, or troubleshoot deployment errors.

What you get

A deployment plan with recorded validation proof and a Validated status, or a list of failures to fix before deploy.

Recorded validation proof (plan Section 7)
Validated deployment-plan status
List of errors to resolve

By the numbers

9-step validation workflow
Validates Bicep, Terraform, and azure.yaml

Files

SKILL.mdMarkdownGitHub ↗

Azure Validate

AUTHORITATIVE GUIDANCE — Follow these instructions exactly unless they contradict security policies given to you.

⛔ STOP — PREREQUISITE CHECK REQUIRED

Before proceeding, verify this prerequisite is met:

azure-prepare was invoked and completed → .azure/deployment-plan.md exists with status Approved or later

If the plan is missing, STOP IMMEDIATELY and invoke azure-prepare first.

The complete workflow ensures success:

azure-prepare → azure-validate → azure-deploy

Triggers

Check if app is ready to deploy
Validate azure.yaml or Bicep
Run preflight checks
Troubleshoot deployment errors

Rules

1. Run after azure-prepare, before azure-deploy 2. All checks must pass—do not deploy with failures 3. ⛔ Destructive actions require `ask_user` — global-rules

Steps

#	Action	Reference
1	Load Plan — Read `.azure/deployment-plan.md` for recipe and configuration. If missing → run azure-prepare first	`.azure/deployment-plan.md`
2	Add Validation Steps — Copy recipe "Validation Steps" to `.azure/deployment-plan.md` as children of "All validation checks pass"	recipes/README.md, `.azure/deployment-plan.md`
3	Run Validation — Execute recipe-specific validation commands	recipes/README.md
4	Build Verification — Build the project and fix any errors before proceeding	See recipe
5	Static Role Verification — Review Bicep/Terraform for correct RBAC role assignments in code	role-verification.md
6	Record Proof — Populate Section 7: Validation Proof with commands run and results	`.azure/deployment-plan.md`
7	Resolve Errors — Fix failures before proceeding	See recipe's `errors.md`
8	Update Status — Only after ALL checks pass, set status to `Validated`	`.azure/deployment-plan.md`
9	Deploy — Invoke azure-deploy skill	—

⛔ VALIDATION AUTHORITY

This skill is the officially verified way to set plan status to Validated. You MUST follow these steps to make sure every prerequisite is fulfilled before setting status to Validated:

1. Run actual validation commands (azd provision --preview, bicep build, terraform validate, etc.)

2. Populate Section 7: Validation Proof with the commands you ran and their results

3. Only then set status to Validated

Do NOT set status to Validated without running checks and recording proof.

---

⚠️ MANDATORY NEXT STEP — DO NOT SKIP

After ALL validations pass, you MUST invoke azure-deploy to execute the deployment. Do NOT attempt to run azd up, azd deploy, or any deployment commands directly. Let azure-deploy handle execution.