p00318821-eng/skills-plugins-hooks-agents/azure-compliance

Azure Compliance & Security Auditing

Quick Reference

When to Use This Skill

• Run azqr or Azure Quick Review for compliance assessment
• Validate Azure resource configuration against best practices
• Identify orphaned or misconfigured resources
• Audit Key Vault keys, secrets, and certificates for expiration

Skill Activation Triggers

Activate this skill when user wants to:

• Check Azure compliance or best practices
• Assess Azure resources for configuration issues
• Run azqr or Azure Quick Review
• Identify orphaned or misconfigured resources
• Review Azure security posture
• "Show me expired certificates/keys/secrets in my Key Vault"
• "Check what's expiring in the next 30 days"
• "Audit my Key Vault for compliance"
• "Find secrets without expiration dates"
• "Check certificate expiration dates"

Prerequisites

• Authentication: user is logged in to Azure via az login
• Permissions to read resource configuration and Key Vault metadata

Assessments

MCP Tools

Assessment Workflow

1. Select scope (subscription or resource group) for Comprehensive Resources Assessment.
2. Run azqr and capture output artifacts.
3. Analyze Scan Results and summarize findings and recommendations.
4. Review Key Vault Expiration Monitoring output for keys, secrets, and certificates.
5. Classify issues and propose remediation or fix steps for each finding.

Priority Classification

Error Handling

Best Practices

• Run compliance scans on a regular schedule (weekly or monthly)
• Track findings over time and verify remediation effectiveness
• Separate compliance reporting from remediation execution
• Keep Key Vault expiration policies documented and enforced

SDK Quick References

For programmatic Key Vault access, see the condensed SDK guides:

• Key Vault (Python): Secrets/Keys/Certs
• Secrets: TypeScript | Rust | Java
• Keys: .NET | Java | TypeScript | Rust
• Certificates: Rust