{
  "id": "azure-platform-automation-devops",
  "name": "Azure Platform Automation DevOps",
  "type": "skill",
  "provider": "azure",
  "harnesses": [
    "codex",
    "claude-code",
    "cursor",
    "gemini",
    "kiro",
    "other"
  ],
  "summary": "Design and review Azure platform automation delivery across landing-zone IaC choices, bootstrap-versus-run separation, infra-versus-app pipelines, secret handling, what-if validation, approval gates, and safe rollout patterns.",
  "source_type": "original",
  "official_docs": [
    "https://learn.microsoft.com/azure/azure-resource-manager/bicep/deploy-what-if",
    "https://learn.microsoft.com/training/modules/test-bicep-code-using-github-actions/",
    "https://learn.microsoft.com/training/modules/test-bicep-code-using-azure-pipelines/",
    "https://learn.microsoft.com/azure/cloud-adoption-framework/ready/landing-zone/",
    "https://learn.microsoft.com/azure/cloud-adoption-framework/ready/landing-zone/implementation-options",
    "https://learn.microsoft.com/azure/architecture/landing-zones/bicep/landing-zone-bicep",
    "https://learn.microsoft.com/azure/cloud-adoption-framework/ready/landing-zone/terraform-landing-zone"
  ],
  "security_notes": "Keep bootstrap and steady-state delivery separate, do not mix platform and application pipelines without control boundaries, never store secrets in repo or pipeline definitions, and require lint, validation, what-if, approval, and rollback paths before production-impacting Azure changes.",
  "last_verified": "2026-06-05",
  "path": "skills/azure/azure-platform-automation-devops",
  "author": "github: VincentChuWaiChow",
  "version": "0.1.2"
}