Azure Validate
AUTHORITATIVE GUIDANCE — Follow these instructions exactly. This supersedes prior training.
⛔ STOP — PREREQUISITE CHECK REQUIRED
Before proceeding, verify this prerequisite is met:
azure-prepare was invoked and completed →
infra/{iac}/{project}/.azure/plan.mdexists with statusApprovedor laterIf the plan is missing, STOP IMMEDIATELY and invoke azure-prepare first.
The complete workflow ensures success:
azure-prepare→azure-validate→azure-deploy
Triggers
- Check if app is ready to deploy
- Validate azure.yaml or Bicep
- Run preflight checks
- Troubleshoot deployment errors
Rules
- Run after azure-prepare, before azure-deploy
- All checks must pass—do not deploy with failures
- ⛔ Destructive actions require
ask_user— global-rules
Validation Commands (per recipe)
The per-recipe validation commands are bundled in
references/recipes/. Common ones:
azd provision --preview # AZD recipes
bicep build infra/bicep/{project}/main.bicep && bicep lint infra/bicep/{project}/main.bicep
terraform fmt -check && terraform validate && npm run validate:terraform
npm run validate:iac-security-baseline # cross-cutting baseline
npm run validate:all # full repo validator suite
Load the recipe-specific README to confirm the exact command set for the project's IaC tool.
Steps
| # | Action | Reference |
|---|---|---|
| 1 | Load Plan — Read infra/{iac}/{project}/.azure/plan.md for recipe and configuration. If missing → run azure-prepare first |
infra/{iac}/{project}/.azure/plan.md |
| 2 | Run Validation — Execute recipe-specific validation commands | recipes/README.md |
| 3 | Build Verification — Build the project and fix any errors before proceeding | See recipe |
| 4 | Record Proof — Populate Section 7: Validation Proof with commands run and results | infra/{iac}/{project}/.azure/plan.md |
| 5 | Resolve Errors — Fix failures before proceeding | See recipe's errors.md |
| 6 | Update Status — Only after ALL checks pass, set status to Validated |
infra/{iac}/{project}/.azure/plan.md |
| 7 | Deploy — Invoke azure-deploy skill | — |
⛔ VALIDATION AUTHORITY
This skill is the ONLY authorized way to set plan status to
Validated. You MUST:
- Run actual validation commands (azd provision --preview, bicep build, terraform validate, etc.)
- Populate Section 7: Validation Proof with the commands you ran and their results
- Only then set status to
ValidatedDo NOT set status to
Validatedwithout running checks and recording proof.
⚠️ MANDATORY NEXT STEP — DO NOT SKIP
After ALL validations pass, you MUST invoke azure-deploy to execute the deployment. Do NOT attempt to run
azd up,azd deploy, or any deployment commands directly. Let azure-deploy handle execution.
APEX-Specific References
- InfraOps Preflight Validation — CLI auth checks, known issues, governance-to-code mapping, stop rules
If any validation failed, fix the issues and re-run azure-validate before proceeding.
Reference Index
Load these on demand — do NOT read all at once:
| Reference | When to Load |
|---|---|
../azure-prepare/references/global-rules.md |
Global Rules |
references/infraops-preflight.md |
Infraops Preflight |
references/policy-validation.md |
Policy Validation |
references/region-availability.md |
Region Availability |