federalavd-deployment-dependency-review

Validate FederalAVD deployment sequencing and output-to-input dependencies across Networking, Security and Monitoring, Image Management, Image Build, Host Pool, and add-ons. Use when planning deployment order, wiring deployment outputs into parameter files, reusing shared resources, or diagnosing missing resource IDs.

Jump to install

Repository: Azure/FederalAVD
Last source activity: August 18, 2026 at 18:24
Detected SKILL.md language: English
Stars: 17
Forks: 19

Install options

The review-first prompt is selected by default. You can switch to a direct command or download a local copy.

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

A direct command skips the review prompt. Inspect the source before running it.

npx skills add https://github.com/Azure/FederalAVD --skill federalavd-deployment-dependency-review

The command stays on one line. Scroll horizontally to inspect it before copying.

Prefer a local copy? Download the files currently available to SkillsMP.

Review the source files

Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.

File Explorer

3 files

SKILL.md

Source instructions · Read-only preview

Back to search Back to installation

federalavd-bicep-maintenance

Modify and validate FederalAVD Bicep templates, generated ARM JSON, parameters, and uiFormDefinition files. Use when changing deployment resources, adding parameters or outputs, synchronizing Bicep with JSON, publishing Template Specs, or debugging portal form behavior.

2026-08-20

avd-alert-kql-validation

Create and review KQL for the FederalAVD AVD Alerts add-on. Use when adding or changing scheduled query alerts, comparing alert logic with Microsoft AVD Insights workbooks, investigating query failures, or documenting intentional workbook deviations.

2026-08-18

federalavd-air-gapped-readiness

Review FederalAVD deployments and image artifacts for Azure Government Secret or Top Secret air-gapped readiness. Use when auditing downloads.json, finding public network dependencies, preparing transfer inventories, validating pre-staged files, or checking that image builds and host pools avoid internet runtime downloads.

2026-08-18

View all from this repository

FederalAVD Deployment Dependency Review

Procedure

Read docs/automation-guide.md and identify the requested scenario: marketplace or custom image, CMK or platform keys, shared monitoring, existing networking, and applicable add-ons.

Reduce the plan to only required steps: Networking -> Security and Monitoring -> Image Management -> Image Build -> Host Pool. Optional steps may be skipped only when their outputs are not consumed downstream.

For CMK, deploy Security and Monitoring before Image Management or Host Pool and grant the deploying identity the documented Key Vault data-plane role.

Record each required output with its producing deployment, consuming parameter, and whether an empty conditional output is valid. Use dependency map.

Run deterministic checks across the parameter files available for the scenario:

& .github/skills/federalavd-deployment-dependency-review/scripts/Test-DeploymentDependencies.ps1 `
  -ParameterPath <image-management-parameters>,<image-build-parameters>,<host-pool-parameters>

Resolve conflicting values across files before deployment. Resource IDs must reference the intended subscription, resource group, cloud, and region where applicable.

Confirm artifacts are uploaded after Image Management and before Image Build whenever the build consumes artifact blob names.

Confirm the Image Build output customImageResourceId is supplied to Host Pool only for custom image deployment. Image refresh replaces session hosts; it does not require host-pool redeployment.

For policy-governed subscriptions, determine whether monitoring must be deployed first to satisfy diagnostic-settings policy assignments.

Return exactly one ordered deployment plan plus an output-to-input table and unresolved blockers.