Use this skill when writing the validation and preview parts of the landing zone workflow.
Objectives
- Fail early on invalid Bicep, missing parameters, or obvious scope mistakes.
- Surface Azure changes through preview output before deployment.
- Keep deployment jobs deterministic and reviewable.
Recommended stages
- Syntax and structure validation
- Static checks on naming, parameters, and required files
- Bicep build or lint
- What-if or preview execution
- Deploy only after preview succeeds
- Post-deploy verification
Guardrails to enforce
- Do not deploy if validation or preview fails.
- Keep preview output as an artifact or summary.
- Use path filters where they reduce unnecessary infra runs.
- Make manual dispatch inputs explicit for higher-risk changes.
- Treat bootstrap constraints as first-class: the workflow must still work before the VMSS runner platform exists.