audit-azure-environment

Define the audit scope (tenant, subscriptions, resource groups, exclusions) and provide collected evidence such as resource inventories, policy states, and identity assignments. The assessment evaluates RBAC, network exposure, secret handling, encryption, and threat protection, producing findings with evidence references.

Environment auditing assesses the live, deployed state of a tenant or subscription using collected runtime evidence. Design-time review of infrastructure code in a repository is a separate concern handled by an architecture-review skill, not this one.

No. The assessment is strictly read-only and never mutates Azure resources or policy state. Any command that would modify the environment requires separate explicit approval outside this workflow.

It produces a machine-readable report at reports/azure-audit-findings.json. Each finding includes a reproducible evidence path, affected scope, impact, confidence level, and remediation direction, plus explicit limitations for unavailable evidence.

The assessment fails closed when scope authority or evidence provenance cannot be established. It returns a partial assessment only when covered scope is explicit and separated from unknown scope, and never claims compliance for areas without supporting evidence.