azure-bicep-github-copilot

```yaml
# GitHub Copilot Agent Mode: Azure Bicep Deployment Automation
name: bicep-deploy-pipeline
version: 1.0.0
config:
  resource_types:
    - Microsoft.Storage/storageAccounts
    - Microsoft.Web/serverfarms
    - Microsoft.Web/sites
  environment: staging
  github_repo: https://github.com/acmecorp/azure-infra
  validation_rules:
    - arm_template_compatibility
    - security_best_practices
    - cost_optimization
  deployment_steps:
    - name: Validate Bicep
      command: az deployment group validate
      params: --resource-group staging-rg --template-file main.bicep
    - name: Deploy Infrastructure
      command: az deployment group create
      params: --resource-group staging-rg --template-file main.bicep --parameters @params.json
    - name: Post-Deployment Verification
      command: az resource list --resource-group staging-rg --query "[].{Name:name, Type:type}"
      expected_output: "Storage account: acmestagingstorage (Microsoft.Storage/storageAccounts)"
```

### Key Features Implemented:
1. **Multi-Resource Deployment**: Automates provisioning of storage accounts and App Service resources with environment-specific parameters.
2. **Validation Pipeline**: Runs ARM template compatibility checks before deployment to catch errors early.
3. **Security Checks**: Embeds security best practices (e.g., storage account encryption, managed identities for App Services).
4. **Cost Optimization**: Flags resources with potential cost savings (e.g., suggests Premium SSD for dev environments).

### Workflow Integration:
- **GitHub Actions**: The agent mode generates a reusable workflow file (`.github/workflows/bicep-deploy.yml`) that GitHub Copilot can auto-complete.
- **Azure CLI**: Uses `az deployment group` commands for idempotent deployments.
- **Prometheus Integration**: After deployment, the agent suggests Prometheus alert rules for monitoring deployed resources (e.g., storage account availability, App Service response times).

### Example Output from Agent:
```
✅ Validation passed for main.bicep in staging environment.
🚀 Deploying resources to staging-rg...
✅ Storage account 'acmestagingstorage' created (SKU: Standard_LRS).
✅ App Service Plan 'acme-staging-plan' deployed (Tier: Basic).
🔍 Post-deployment verification:
   - Storage account: acmestagingstorage (Microsoft.Storage/storageAccounts)
   - App Service: acme-staging-app (Microsoft.Web/sites)
📊 Suggested Prometheus alerts:
   - storage_account_availability{resource_group="staging-rg"}
   - app_service_http_5xx_errors{resource_group="staging-rg"}
```