Question

Your team maintains Azure SQL Database infrastructure using Bicep files stored in a Git repository. Before applying changes to the production environment through an Azure DevOps pipeline, the change-management policy requires that reviewers see exactly which resources would be created, modified, or deleted—without actually deploying anything. Which action should you add to the pipeline to satisfy this requirement?

Accepted Answer

Run az deployment group what-if with the Bicep template against the target resource group

Answer

Run az deployment group create with the --confirm-with-what-if flag suppressed

Answer

Run bicep build to compile the Bicep file to ARM JSON and inspect the output

Answer

Run az deployment group validate to check the template for syntax errors