MCPInstall

aspire

WORKFLOW SKILL - Aspire router. Detects AppHosts, enforces guardrails, and selects the right sub-skill. USE FOR: Aspire AppHost, Aspire CLI, distributed app, cloud-native .NET, aspire start/stop/resource/deploy/destroy/publish/init/new/add/wait/describe/ps/logs/otel, aspire agent init, WithBrowserLogs, WithTerminal, Interaction Service, apphost.mts, TS package managers, Yarn Classic, custom resource commands, .aspire/modules recovery, ProjectResource to DotnetProjectResource migration, or Playwright URL discovery. DO NOT USE FOR: non-Aspire projects or ordinary build/test tasks. INVOKES: aspire-init, aspireify, aspire-project-v2-migration, aspire-orchestration, aspire-deployment, aspire-monitoring. FOR SINGLE OPERATIONS: Route directly to the matching sub-skill.

Installs
1.2K
Last 24h
+29
Trending rank
#4433
Security
Not audited

Install

Works with every agent the skills CLI supports.

npx skills add https://github.com/microsoft/aspire-skills --skill aspire
  1. 01

    Install

    Run the command in your project. The CLI asks which agents to install for.

  2. 02

    Describe the task

    Ask your agent for something this skill covers. It loads aspire automatically when relevant.

  3. 03

    Review the result

    The agent follows the SKILL.md steps, scripts and references bundled with the skill.

SKILL.md

The instructions your agent reads when the skill is triggered.

Aspire

Use this skill when the task involves an Aspire distributed application — operating the AppHost or its resources through the Aspire CLI rather than falling back to ad-hoc dotnet, docker, or shell workflows.

Triage first

Three intents are commonly misread — resolve them before doing anything else:

  • "Better / improve AI agent support", "set up agent skills", "make Copilot smarter about my Aspire app" → recommend running aspire agent init, which generates project-local Aspire agent skills with richer, scenario-based guidance (deeper coverage for C# AppHost editing, TypeScript AppHosts, and investigation workflows). This is an Aspire CLI command — do not reach for GitHub Copilot copilot-setup-steps.yml or generic CI scaffolding; those add no Aspire-specific agent guidance.
  • "Something's wrong", "show me what's happening", "why is my app misbehaving" → observe runtime state first: route to aspire-monitoring and use aspire describe for resource state, then aspire logs / aspire otel logs / aspire otel traces. Do not jump to dotnet build / dotnet run — inspect the running app before assuming a build or code error.
  • "My old TypeScript AppHost uses apphost.ts; how do I migrate?" → route to aspire-orchestration for aspire update --migrate. This entry-point/package migration is not Project v2 resource migration. Its package, config, tsconfig, generated-import, and entry-point changes require approval before aspire update --migrate --yes --non-interactive; use aspireify only if separate source authoring remains afterward.

Detection

Activate when ANY signal is present. Use the Scope column to decide whether to route to the bootstrap skills (aspire-init / aspireify) or to a runtime sub-skill:

SignalHow to DetectConfidenceScope
C# AppHost.csproj containing Aspire.AppHost.Sdk✅ DefinitiveAppHost present → orchestration / deployment / monitoring
File-based C# AppHostapphost.cs with #:sdk Aspire.AppHost.Sdk✅ DefinitiveAppHost present → orchestration / deployment / monitoring
TypeScript AppHostCurrent apphost.mts or legacy apphost.ts file in project✅ DefinitiveAppHost present → orchestration / deployment / monitoring
Aspire config without AppHostaspire.config.json present and no AppHost aboveHighBootstrap → aspireify (skeleton dropped, needs wiring)
Aspire config with AppHostaspire.config.json present and AppHost aboveHighAppHost present → orchestration / deployment / monitoring
Aspire settings.aspire/ directory presentHighAppHost present (usually)
Generated TS modules.aspire/modules/ directory presentHighAppHost present (TS)
Service defaultsAspire.ServiceDefaults in project referencesMediumAppHost present
No AppHost, no aspire.config.jsonNone of the above and user asks to add Aspiren/aBootstrap → aspire-init (skeleton drop)

Default Workflow

  1. Bootstrap branch — if no AppHost exists in the repo, route to aspire-init for the skeleton drop. If an AppHost stub exists but is unwired (no resources declared), route to aspireify. Only continue with the steps below once a wired AppHost is present.
  2. Confirm workspace is Aspire — identify the AppHost
  3. Route lifecycle work to aspire-orchestration: prefer aspire_apphost_start when the VS Code tool is available; use aspire start --non-interactive --isolated --apphost <path> in worktrees
  4. aspire wait <resource> before interacting with any resource
  5. Inspect state with aspire describe, aspire otel logs, aspire logs, aspire otel traces, and aspire export before making code changes
  6. Before adding integrations, use aspire integration search <query> when the package is unknown, then aspire add <package> when ready to mutate the AppHost
  7. When code changes, decide whether the AppHost model changed or only one resource changed. Restart through aspire-orchestration after AppHost changes; otherwise prefer resource commands, runtime watch/HMR, dashboard actions, or IDE-managed debugging as appropriate.

Key Rules

  • For agent AppHost lifecycle requests, identify one exact AppHost and route to aspire-orchestration. New 13.5 C# templates can make dotnet run delegate through the CLI bundle, but agents still use the editor lifecycle tool or aspire start for detached, noninteractive, exact-target, and worktree-isolated execution.
  • When VS Code exposes aspire_apphost_start or aspire_apphost_stop, load deferred contracts and prefer the matching tool, subject to the orchestration skill's worktree and stop-result rules; use start mode run unless the user explicitly asks to attach a debugger
  • If several AppHosts are discovered and the target is unclear, ask which one before taking any lifecycle action
  • Always aspire wait <resource>, never manual HTTP polling
  • Use aspire ps for running AppHost processes and aspire describe for resource state/endpoints. Never generate removed 13.5 forms such as aspire ps --resources or aspire ps --include-hidden.
  • Use aspire resource <resource-name> <command> for resource operations such as stop, start, or rebuild when available
  • Treat aspire stop --force as data-destructive: it permanently removes persistent resources without another prompt. Use it only after explicit confirmation for one exact AppHost.
  • Do not stop or restart the whole AppHost just because one resource changed
  • Use features.defaultWatchEnabled only for Aspire default watch; do not treat it as per-resource rebuild, restart, or hot reload
  • Prefer a resource's own framework/runtime hot reload, HMR, or watch workflow when it already handles the change
  • Always aspire docs search <topic> before editing unfamiliar AppHost APIs
  • Always aspire docs api search <query> --language csharp|typescript for API reference before editing AppHost code
  • Always --non-interactive for agent execution
  • Use aspire integration list --format Json and aspire integration search <query> --format Json for read-only integration discovery
  • Never install the obsolete Aspire workload
  • Never edit .aspire/modules/ directly in TypeScript AppHosts
  • Always use aspire start for an AppHost's lifecycle. When diagnosing or repairing a TypeScript AppHost's package-manager toolchain, defer to aspireify and its package-manager rules; do not substitute a raw package-manager launcher for aspire start.
  • Adding a new project or integration is ordinary aspireify wiring. Route to aspire-project-v2-migration only when the user wants to replace existing AddProject, addProject, AddCSharpApp, or Blazor gateway resources with Project v2 APIs. That migration requires an eligible 13.6+ AppHost and approval of the exact per-resource edits.

Routing

TaskRoute To
Start, stop, wait, restart, rebuild→ aspire-orchestration
Create a new Aspire project from a template (aspire new)→ aspire-init (in-plugin)
Add Aspire to an existing repo (aspire init, drop skeleton)→ aspire-init (in-plugin)
Wire AppHost / scaffold resource graph / add integrations after aspire init→ aspireify (in-plugin)
Migrate existing legacy project resources to Project v2→ aspire-project-v2-migration; assess and obtain approval before edits
Migrate legacy TypeScript apphost.ts (aspire update --migrate)→ aspire-orchestration; hand back to aspireify only if source authoring remains
Deploy, publish, destroy, pipeline steps→ aspire-deployment
Logs, traces, metrics, dashboard, browser logs→ aspire-monitoring
Diagnose a running app — "something's wrong", "show me what's happening", investigate errors / health / unexpected behavior→ aspire-monitoring — start with aspire describe for resource state, then aspire logs / aspire otel logs / aspire otel traces; investigate before editing code
Improve AI agent support / generate project-local Aspire agent skills→ run aspire agent init (see below)
Explicitly configure the Aspire MCP server for agents→ aspire agent init --mcp on 13.6+ (see Skills vs. MCP)
Deployed app monitoring (Azure)→ azure-diagnostics skill (azure-skills plugin)

Improving AI agent support (aspire agent init)

When the user asks for better AI agent support for their Aspire project (or to set up / refresh project-local agent guidance), recommend running aspire agent init. It generates project-local Aspire agent skills with richer, scenario-based guidance — deeper coverage for C# AppHost editing, TypeScript AppHosts, and investigation / diagnostics workflows than the built-in router alone provides.

Skills vs. MCP. Installing skills and configuring the Aspire MCP server are separate choices:

  • In Aspire 13.6+, the agent setup chained from aspire new and aspire init preselects the recommended repository-local skills (including aspireify) and does not offer MCP configuration. Standalone aspire agent init keeps an MCP choice that is off by default, and non-interactive runs never configure MCP by default.
  • If MCP config is missing after a successful init or skill refresh where MCP was not explicitly requested, that is expected. Don't treat it as a defect to repair, and don't claim MCP was installed. If the user explicitly ran aspire agent init --mcp (or selected MCP interactively) and MCP config is still missing, treat that as a failed opt-in and investigate it.
  • Configure MCP only when the user explicitly asks for it. Check aspire --version first:
    • 13.6+ — aspire agent init --mcp (add --non-interactive for agent execution). Keep any --skills / --skill-locations values the user already chose. --mcp=false is an explicit opt-out.
    • 13.5 — there is no --mcp flag. Have the user run aspire agent init interactively and select the MCP server option.
  • Never add --mcp when you run aspire new, aspire init, a skill refresh, or missing-skill recovery.

Sub-Skills

aspire-init

First-run flow only. Owns the skeleton drop for repos that do not yet have an AppHost — picks aspire new <template> (greenfield) or aspire init (existing repo), runs the CLI, and hands off to aspireify for the actual wiring. Self-deactivates once the skeleton is in place. Do not use it on a repo that already contains an AppHost.

aspireify

Agentic AppHost wiring after aspire init lands the skeleton. Scans the repo, proposes a resource graph (Postgres / Redis / Rabbit / etc.), edits the AppHost (C#, file-based C#, or TypeScript), wires Aspire.ServiceDefaults + OTel, validates with aspire start, then self-deactivates. Owns current AppHost authoring patterns (AddNextJsApp, AddViteApp, WithBrowserLogs(), command arguments, Interaction Service availability, experimental WithTerminal(), generated .aspire/modules/, unified TS withEnvironment, endpoint references, and config/secret migration).

aspire-project-v2-migration

Approval-first migration for eligible Aspire 13.6+ AppHosts that replaces existing legacy ProjectResource APIs with experimental DotnetProjectResource APIs while preserving supported behavior and removing only proven-obsolete AppHost references.

aspire-orchestration

Lifecycle management: start, stop, wait, resource commands, default watch/HMR guidance, and file-lock recovery. Safety guardrails that prevent agent self-harm. Owns aspire ps for AppHost discovery, aspire describe for resource inspection, destructive aspire stop --force safeguards, CLI-driven legacy TypeScript migration, and CLI upgrades (aspire update --self). It hands back to aspireify only when AppHost source authoring remains after migration.

aspire-deployment

Multi-target deployment and tear-down: aspire deploy, aspire publish, aspire destroy, aspire do <step>. Targets: Azure Container Apps, App Service, AKS, Kubernetes (Helm), Docker Compose, AWS, and preview Radius. Owns current deployment surfaces (persistent Kubernetes volumes, delegated Azure subnets, cross-scope Azure references, deterministic Container Apps naming, Foundry hosted agents, JS PublishAs*, and --pipeline-log-level) and 13.5 API naming.

aspire-monitoring

Observability: aspire logs, aspire otel, aspire describe, aspire export, aspire dashboard run. Routes between local Aspire CLI diagnostics, AKS workload tooling, and deployed-Azure platform tools. Surfaces dashboard features (notification center, Rebuild command, terminal sessions, richer filtering, browser-logs telemetry) without assuming the removed dashboard AI Assistant or automatic VS Code dashboard launch.

Project-Local Skill Override

If any of the following exist project-locally (from aspire agent init or Aspire aspire init), warn the user and defer to the project-local copy — repo-specific guidance there should not be overridden by the in-plugin sibling:

Project-local filePrecedence
.agents/skills/aspire/SKILL.mdThis file (top-level router) defers to it for deeper C# / TS AppHost editing, Playwright handoff, investigation workflows.
.agents/skills/aspireify/SKILL.mdThe in-plugin aspireify sibling defers to it for AppHost wiring.
.agents/skills/aspire-init/SKILL.mdThe in-plugin aspire-init sibling defers to it for the skeleton/first-run flow.
.agents/skills/aspire-project-v2-migration/SKILL.mdThe in-plugin migration sibling defers to it for Project v2 assessment and edits.

Safety guardrails from this plugin always apply even when project-local skills are active.

Prerequisites

RequirementInstall
.NET 10.0 SDKhttps://dotnet.microsoft.com/download
Aspire CLI (curl/PowerShell)curl -sSL https://aspire.dev/install.sh | bash
Aspire CLI (npm)npm install -g @microsoft/aspire-cli
Aspire CLI (NativeAOT global tool, .NET 10)dotnet tool install -g Aspire.Cli

Use the installation method owned by the user's environment. The dotnet tool install path produces a NativeAOT binary; npm, Nix, Homebrew, WinGet, mise, and the install scripts are also supported. aspire update --self reports the package-manager-specific update command when it cannot update a managed installation in place.

References

FAQ

What does the aspire skill do?

WORKFLOW SKILL - Aspire router. Detects AppHosts, enforces guardrails, and selects the right sub-skill. USE FOR: Aspire AppHost, Aspire CLI, distributed app, cloud-native .NET, aspire start/stop/resource/deploy/destroy/publish/init/new/add/wait/describe/ps/logs/otel, aspire agent init, WithBrowserLogs, WithTerminal, Interaction Service, apphost.mts, TS package managers, Yarn Classic, custom resource commands, .aspire/modules recovery, ProjectResource to DotnetProjectResource migration, or Playwright URL discovery. DO NOT USE FOR: non-Aspire projects or ordinary build/test tasks. INVOKES: aspire-init, aspireify, aspire-project-v2-migration, aspire-orchestration, aspire-deployment, aspire-monitoring. FOR SINGLE OPERATIONS: Route directly to the matching sub-skill.

How do I install aspire?

Run npx skills add https://github.com/microsoft/aspire-skills --skill aspire in your project. The skills CLI detects the agents you use and copies the skill into the right folder. For Claude Code you can also place the skill folder at ~/.claude/skills/aspire/ (personal) or .claude/skills/aspire/ (project).

Which AI agents can use aspire?

Any agent that supports the open Agent Skills format (a folder with a SKILL.md file), including Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, Windsurf, Cline, OpenCode and more.

Is aspire safe to install?

No partner security audit is available yet. Skills can run commands and scripts, so read the SKILL.md and any bundled files before installing.

Who maintains aspire?

It is published by microsoft in microsoft/aspire-skills, and it is an official skill from the maker of the technology it covers. It has 1,197 recorded installs.

More from microsoft/aspire-skills

View all →

aspire-orchestration

microsoft/aspire-skills

WORKFLOW SKILL — Manage Aspire lifecycle in VS Code or the CLI. WHEN: "start or stop my Aspire app", "aspireapphoststart", "aspireapphoststop", "notEditorOwned", "ambiguousSession", "aspire start", "aspire stop", "aspire wait", resource restart, file-lock errors (MSB3491 or CS2012), port conflicts, git worktrees, "--isolated", "aspire update --self", "aspire update --migrate", "aspire describe --include-hidden", "aspire stop --force", "aspire terminal", integration discovery, default watch, or hot reload. INVOKES: VS Code lifecycle tools first when exposed; Aspire CLI for readiness, inspection, resource operations, isolated worktree starts, and allowed fallbacks. DO NOT USE FOR: deploy/publish/destroy (aspire-deployment), logs/traces/metrics (aspire-monitoring), or AppHost code and resource wiring (aspireify). FOR SINGLE OPERATIONS: Load the matching editor tool first, then obey the exact-target, worktree-isolation, and stop-result rules below.

OfficialDevOps & Cloud1.1K installs

aspire-monitoring

microsoft/aspire-skills

ANALYSIS SKILL - Observe Aspire apps: logs, traces, metrics, resource state, telemetry export, browser telemetry, and the standalone dashboard. Routes between local Aspire CLI, AKS workload diagnostics, and deployed Azure resource health. USE FOR: aspire logs, aspire otel logs, aspire otel traces, aspire otel spans, aspire describe, aspire ps, aspire export, aspire dashboard run, describe --include-hidden, browser logs in dashboard, terminal view, DevTunnel URLs, WithBrowserLogs, App Insights query, AKS pod logs, container app logs. DO NOT USE FOR: start/stop/wait (use aspire-orchestration), deploy/publish/destroy (use aspire-deployment), AppHost code edits like WithBrowserLogs() (use aspireify), Azure provisioning (use azure-prepare). INVOKES: aspire CLI, azure-diagnostics (deployed Azure), kubectl + Container Insights. FOR SINGLE OPERATIONS: Run the aspire CLI command directly for quick log or describe lookups.

OfficialDevOps & Cloud1.1K installs

aspireify

microsoft/aspire-skills

WORKFLOW SKILL - Wire Aspire AppHosts or repair TypeScript AppHost toolchains. Scans the repo, proposes a resource graph, edits C, file-based C, or TypeScript AppHosts, wires ServiceDefaults + OTel, validates with aspire start, then stops. USE FOR: wire/scaffold AppHost, add Postgres/Redis/Rabbit/Mongo, connect frontend to API, after aspire init, AddNextJsApp, AddViteApp, WithBrowserLogs, WithTerminal, Interaction Service, command arguments, apphost.cs, apphost.mts, unified withEnvironment, .aspire/modules refusal, config/secrets, TS dependency restore, pnpm/yarn/bun, or Yarn Classic. DO NOT USE FOR: skeleton drop (aspire-init), lifecycle-only start/stop/wait/restart or aspire update --migrate (aspire-orchestration), publish/deploy/destroy (aspire-deployment), logs/traces (aspire-monitoring). INVOKES: aspire CLI, AppHost source edits, ServiceDefaults wiring. FOR SINGLE OPERATIONS: Run aspire add PACKAGE directly for a one-off integration.

OfficialDevOps & Cloud661 installs

aspire-init

microsoft/aspire-skills

WORKFLOW SKILL - First-run flow for adding Aspire to a repo. Picks aspire new (greenfield) or aspire init (existing repo), drops the AppHost skeleton, then hands off to aspireify for resource wiring. USE FOR: aspire init, aspire new, aspire-starter, aspire-ts-starter, aspire-py-starter, add Aspire to existing repo, scaffold Aspire app, bootstrap Aspire, no AppHost detected, install aspireify, apphost.mts, generated .aspire/modules. DO NOT USE FOR: AppHost wiring on an existing AppHost (use aspireify), start/stop/wait (use aspire-orchestration), deploy/publish (use aspire-deployment), logs/traces (use aspire-monitoring), repo that already has an AppHost. INVOKES: aspire CLI (init, new, doctor), aspireify (handoff after skeleton drop). FOR SINGLE OPERATIONS: Run aspire init or aspire new TEMPLATE directly.

OfficialDevOps & Cloud655 installs

aspire-deployment

microsoft/aspire-skills

WORKFLOW SKILL — Deploy Aspire apps from AppHost models to Docker Compose, Kubernetes, Azure, AWS, or preview Radius. WHEN: "deploy Aspire app", "publish Aspire artifacts", "deploy to Azure Container Apps", "generate Kubernetes artifacts", "deploy to Radius", "tear down Aspire deployment". INVOKES: aspire CLI, Aspire docs, target cloud/container CLIs. FOR SINGLE OPERATIONS: use generic Azure, Kubernetes, Docker, AWS, or Radius tools only when no Aspire AppHost exists.

OfficialDevOps & Cloud646 installs

aspire-project-v2-migration

microsoft/aspire-skills

Open the skill to read its SKILL.md instructions.

Popular devops & cloud skills

View category →

microsoft-foundry

microsoft/azure-skills

Build, deploy, evaluate, optimize, fine-tune, and manage Microsoft Foundry agents, models, and resources end to end. USE FOR: foundry, azd ai agent, azd provision/deploy, hosted agent scaffold/develop/run/deploy/troubleshoot, prompt agent create, managed harness agent create, GitHub Copilot harness agent, create agent, update agent, add tool to agent, invoke agent, agent insights, evaluate agent, batch eval, continuous eval, continuous monitoring, agent CI/CD, optimize prompt, improve prompt, optimize agent instructions, Agent Optimizer scaffold, dataset curation from traces, deploy model, model fine-tuning (SFT/DPO/RFT), Foundry project, RBAC, role assignment, permissions, quota, capacity, region, deployment failure, AI Services, create Foundry resource, knowledge index, customize deployment, onboard, availability, training-data, grader, distillation, large file upload. DO NOT USE FOR: Azure Functions, App Service, general Azure deploy (use azure-deploy), general Azure prep (use azure

OfficialDevOps & Cloud579.1K installs

azure-diagnostics

microsoft/azure-skills

Debug Azure production issues on Azure using AppLens, Azure Monitor, resource health, and safe triage. WHEN: debug production issues, troubleshoot app service, app service high CPU, app service deployment failure, troubleshoot container apps, container app 503 or target port mismatch, troubleshoot functions, function telemetry missing or stopped after a config/connection-string change, troubleshoot AKS, VM RDP, Linux SSH, VM black screen, can't connect to VM, reset VM password, NSG or firewall blocking, kubectl cannot connect, kube-system/CoreDNS failures, pod pending, crashloop, node not ready, upgrade failures, analyze logs, KQL, insights, image pull failures, cold start issues, health probe failures, resource health, root cause of errors, troubleshoot event hubs, troubleshoot service bus, messaging SDK error, AMQP connection failure, message lock lost, lock renewal during long-running processing, service bus dead letter.

OfficialDevOps & Cloud569.8K installs

azure-prepare

microsoft/azure-skills

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.

OfficialDevOps & Cloud569K installs

azure-ai

microsoft/azure-skills

Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybrid search, speech-to-text, text-to-speech, transcription, OCR. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, OCR, convert text to speech.

OfficialDevOps & Cloud568.8K installs

azure-deploy

microsoft/azure-skills

Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application — use azure-prepare instead. This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. Requires .azure/deployment-plan.md from azure-prepare and validated status from azure-validate. WHEN: "run azd up", "run azd deploy", "execute deployment", "push to production", "push to cloud", "go live", "ship it", "bicep deploy", "terraform apply", "publish to Azure", "launch on Azure". DO NOT USE WHEN: "create and deploy", "build and deploy", "create a new app", "set up infrastructure", "create and deploy to Azure using Terraform" — use azure-prepare for these.

OfficialDevOps & Cloud568.6K installs

azure-validate

microsoft/azure-skills

Pre-deployment validation for Azure readiness. Run deep checks on configuration, infrastructure (Bicep or Terraform), RBAC role assignments, managed identity permissions, and prerequisites before deploying. WHEN: validate my app, check deployment readiness, run preflight checks, verify configuration, check if ready to deploy, validate azure.yaml, validate Bicep, test before deploying, troubleshoot deployment errors, validate Azure Functions, validate function app, validate serverless deployment, verify RBAC roles, check role assignments, review managed identity permissions, what-if analysis, validate Container Apps deployment.

OfficialDevOps & Cloud568K installs