ato-source-azure

To collect NIST 800-53 evidence from Azure for ATO readiness, trigger the orchestrator in read-only mode, which uses ambient authentication to extract metadata and non-sensitive telemetry without modifying resources.

Azure evidence collection for ATO does not modify your resources. It strictly enforces non-modifying az commands to gather metadata and telemetry, ensuring your Azure state remains completely unaltered during the audit.

You cannot gather NIST 800-53 evidence from Azure regions outside the US. The collection process restricts operations to US regions only to prevent misconfigurations and ensure audit readiness.

Read-only Azure compliance evidence exports in JSON format under an established evidence schema. This standardized output structure ensures the aggregated data is ready for governance, audit, and risk assessment workflows.

You do not need to configure authentication manually for Azure ATO evidence collection. The process uses ambient authentication, relying on your existing authenticated az CLI session to access the configured Azure scope.

Azure ATO evidence collection cannot be triggered directly outside an approved collection to enforce scope-confined operation. This design prevents misconfigurations by ensuring the Skill is only invoked by the orchestrator when an Azure scope is properly configured.