{
  "id": "azure-live-arm-deployment-stack-guard",
  "name": "Azure Live ARM Deployment Stack Guard",
  "type": "skill",
  "provider": "azure",
  "harnesses": [
    "codex",
    "claude-code",
    "cursor",
    "gemini",
    "kiro",
    "other"
  ],
  "summary": "Guard live ARM, Bicep, and Deployment Stack changes with what-if evidence, deny-settings review, action-on-unmanage safety, managed-resource diff, rollback posture, and approval gates.",
  "source_type": "original",
  "official_docs": [
    "https://learn.microsoft.com/azure/azure-resource-manager/templates/deploy-what-if",
    "https://learn.microsoft.com/azure/azure-resource-manager/bicep/deployment-stacks",
    "https://learn.microsoft.com/azure/templates/microsoft.resources/deploymentstacks",
    "https://learn.microsoft.com/azure/role-based-access-control/deny-assignments",
    "https://learn.microsoft.com/azure/azure-resource-manager/templates/best-practices"
  ],
  "security_notes": "Never execute an ARM, Bicep, or Deployment Stack change without confirmed scope, template/parameter provenance, what-if or managed-resource diff, deny-settings review, action-on-unmanage review, rollback constraints, and explicit human approval.",
  "last_verified": "2026-06-05",
  "path": "skills/azure/azure-live-arm-deployment-stack-guard",
  "author": "github: VincentChuWaiChow",
  "version": "0.1.5"
}