1# AZD Verification
2 
3Verify deployment success and application health.
4 
5## Step 1: Verify Resources
6 
7```bash
8azd show
9```
10 
11Expected output:
12```text
13Showing deployed resources:
14  Resource Group: rg-myapp-dev
15  Services:
16    api - Endpoint: https://api-xxxx.azurecontainerapps.io
17```
18 
19## Step 2: Health Check
20 
21```bash
22# Get endpoint
23ENDPOINT=$(azd env get-values | grep -E "SERVICE_.*_URI|.*_ENDPOINT" | head -1 | cut -d'=' -f2)
24 
25# Test endpoint
26curl -f "$ENDPOINT/health" || curl -f "$ENDPOINT"
27```
28 
29**PowerShell:**
30```powershell
31# Get endpoint
32$Endpoint = azd env get-values | Select-String -Pattern 'SERVICE_.*_URI|.*_ENDPOINT' |
33    Select-Object -First 1 | ForEach-Object { ($_ -split '=', 2)[1] }
34 
35# Test endpoint
36try { Invoke-WebRequest "$Endpoint/health" } catch { Invoke-WebRequest $Endpoint }
37```
38 
39Expected: HTTP 200 response.
40 
41## Step 3: Report Results to User
42 
43> ⛔ **MANDATORY** — You **MUST** present the deployed endpoint URLs to the user in your response. A deployment is not considered complete until the user has received the URLs.
44 
45> ⛔ **ALWAYS run `azd show`** after deployment to extract endpoint URLs. Do NOT rely on the `azd deploy` output alone — it is frequently truncated before endpoint URLs appear.
46 
47```bash
48azd show
49```
50 
51Parse the `Endpoint:` lines from the `azd show` output to collect all deployed service URLs.
52 
53**Present a summary to the user that includes:**
54 
55| Item | Source |
56|------|--------|
57| Deployed service endpoint(s) | `Endpoint:` lines from `azd show` |
58| Aspire Dashboard URL (if applicable) | `Aspire Dashboard:` line from `azd show` |
59| Azure Portal deployment link (if available) | Portal URL from provisioning output |
60 
61Example response format:
62 
63```text
64✅ Deployment succeeded!
65 
66| Service | Endpoint |
67|---------|----------|
68| apiservice | https://apiservice.xxx.azurecontainerapps.io |
69 
70Aspire Dashboard: https://aspire-dashboard.xxx.azurecontainerapps.io
71```
72 
73> ⚠️ **Always use fully-qualified URLs with the `https://` scheme.** If a command returns a bare hostname (e.g. `myapp.azurestaticapps.net`), prepend `https://` before presenting it to the user.
74 
75## Step 4: Post-Deployment Verification (if applicable)
76 
77For deployments with Azure SQL Database and managed identity:
78 
79### Verify SQL Access
80 
81> ⚠️ **Warning:** `az sql db query` requires the `rdbms-connect` extension: `az extension add --name rdbms-connect --yes`
82 
83```bash
84# Load environment variables
85eval $(azd env get-values)
86 
87# Check managed identity user exists in database
88az sql db query \
89  --server "$SQL_SERVER" \
90  --database "$SQL_DATABASE" \
91  --resource-group "$AZURE_RESOURCE_GROUP" \
92  --auth-mode ActiveDirectoryDefault \
93  --queries "SELECT name, type_desc FROM sys.database_principals WHERE type = 'E'"
94```
95 
96**PowerShell:**
97```powershell
98# Load environment variables
99azd env get-values | ForEach-Object {
100    $name, $value = $_.Split('=', 2)
101    Set-Item "env:$name" $value
102}
103 
104# Check managed identity user exists in database
105az sql db query `
106  --server $env:SQL_SERVER `
107  --database $env:SQL_DATABASE `
108  --resource-group $env:AZURE_RESOURCE_GROUP `
109  --auth-mode ActiveDirectoryDefault `
110  --queries "SELECT name, type_desc FROM sys.database_principals WHERE type = 'E'"
111```
112 
113**Expected:** Should list the App Service or Container App managed identity.
114 
115### Verify Database Schema
116 
117For EF Core applications:
118 
119```bash
120# Check tables exist
121az sql db query \
122  --server "$SQL_SERVER" \
123  --database "$SQL_DATABASE" \
124  --resource-group "$AZURE_RESOURCE_GROUP" \
125  --auth-mode ActiveDirectoryDefault \
126  --queries "SELECT TABLE_NAME FROM INFORMATION_SCHEMA.TABLES WHERE TABLE_TYPE='BASE TABLE'"
127```
128 
129**PowerShell:**
130```powershell
131az sql db query `
132  --server $env:SQL_SERVER `
133  --database $env:SQL_DATABASE `
134  --resource-group $env:AZURE_RESOURCE_GROUP `
135  --auth-mode ActiveDirectoryDefault `
136  --queries "SELECT TABLE_NAME FROM INFORMATION_SCHEMA.TABLES WHERE TABLE_TYPE='BASE TABLE'"
137```
138 
139**Expected:** Should list application tables (not just `__EFMigrationsHistory`).
140 
141### Check Application Logs
142 
143```bash
144# For App Service
145az webapp log tail --name <app-name> --resource-group <resource-group>
146 
147# For Container Apps
148az containerapp logs show --name <app-name> --resource-group <resource-group> --follow
149```
150 
151**Look for:**
152- ✅ No SQL authentication errors
153- ✅ Successful database connection
154- ✅ Application started successfully
155 
156## Common Issues
157 
158| Symptom | Cause | Fix |
159|---------|-------|-----|
160| HTTP 500 on startup | SQL authentication failure | See [sql-managed-identity.md](sql-managed-identity.md) |
161| "Invalid object name" errors | Migrations not applied | See [ef-migrations.md](ef-migrations.md) |
162| Endpoint not accessible | Service still starting | Wait 1-2 minutes, retry |
163| Health check fails | Application error | Check logs with `az webapp log tail` |
164 
165## References
166 
167- [Post-Deployment Steps](post-deployment.md)
168- [SQL Managed Identity Access](sql-managed-identity.md)
169- [EF Core Migrations](ef-migrations.md)
170