Can this skill automatically fix the security issues it finds?

This skill focuses on auditing and identification. For active security hardening or resource deployment, you should use the dedicated azure-security-hardening or azure-deploy skills.

How does this skill help with Azure Key Vault management?

It automatically scans your Key Vaults to identify expired or soon-to-expire secrets, keys, and certificates, helping you avoid service interruptions through proactive monitoring.

Can I target specific subscriptions or resource groups?

Yes, the assessment workflow is designed to let you select a specific scope, such as a subscription or resource group, for targeted compliance reporting.

Do I need specific permissions to use this skill?

Yes, the user must be authenticated via 'az login' and possess the necessary RBAC permissions to read resource configurations and Key Vault metadata.

What is azqr and how is it used here?

azqr (Azure Quick Review) is an assessment tool that this skill triggers to scan your Azure resources against established best practices and compliance standards.

Azure Compliance & Security Audit

Name: Azure Compliance & Security Audit
Author: microsoft

bymicrosoft

•

1,777

•

보안 및 테스팅

Audits Azure environments for compliance, security vulnerabilities, and resource configuration best practices.

The Azure Compliance skill provides a robust framework for auditing cloud environments, ensuring resources align with security standards and organizational policies. It leverages tools like azqr (Azure Quick Review) to perform comprehensive assessments, identifies orphaned or misconfigured resources, and proactively monitors Azure Key Vaults for expiring secrets, keys, and certificates. By generating prioritized remediation steps, this skill helps developers and security teams maintain a strong security posture and prevent service disruptions caused by expired credentials or non-compliant configurations.

주요 기능

01Detailed Resource Graph queries for deep infrastructure visibility

02Automated Azure Quick Review (azqr) for comprehensive compliance scans

031,777 GitHub stars

04Real-time Key Vault monitoring for secret, key, and certificate expirations

05Identification of orphaned, misconfigured, and non-compliant resources

06Prioritized remediation guidance for critical and high-impact findings

사용 사례

01Identifying and cleaning up unused or misconfigured Azure resources

02Auditing Key Vaults to prevent outages from expired secrets or certificates

03Conducting security posture reviews before production releases

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add microsoft/skills azure-compliance

For use in Claude.ai and ChatGPT

Download Skill