azure-compliance

Scan Azure resources and validate configurations for compliance and security.

Updated Apr 19, 2026
One-click install
npx skills add https://github.com/Avihai-H/infraops --skill azure-compliance-avihai-h
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-compliance
Source: https://github.com/Avihai-H/infraops/tree/main/.github/skills/azure-compliance
Command: npx skills add https://github.com/Avihai-H/infraops --skill azure-compliance-avihai-h

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires azqr, mcp_azure_mcp_extension_azqr, mcp_azure_mcp_subscription_list, mcp_azure_mcp_group_list, keyvault_key_list, keyvault_key_get, keyvault_secret_list, keyvault_secret_get, keyvault_certificate_list, keyvault_certificate_get, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the challenge of maintaining Azure compliance and security posture by providing automated auditing and validation against best practices.

Core Features & Use Cases

  • Compliance Scanning: Automated compliance scans for security and governance standards.
  • Resource Configuration Validation: Validates Azure resource configurations against best practices.
  • Key Vault Expiration Monitoring: Monitors and reports on Key Vault keys, secrets, and certificates for expiration.
  • Use Case: Use this Skill to ensure that your Azure resources adhere to compliance requirements and security best practices, reducing the risk of misconfigurations and potential breaches.

Quick Start

Run the azure-compliance skill to scan your Azure resources for compliance issues.

Frequently Asked Questions about azure-compliance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Azure compliance auditing for my resource configurations?

Azure compliance auditing is automated by scanning resources, validating configurations against best practices, and generating governance reports. This skill uses azqr to inspect subscriptions and resource groups to identify security misconfigurations.

How do I monitor Azure Key Vault certificates and secrets for expiration?

Azure Key Vault expiration monitoring is handled by listing and retrieving keys, secrets, and certificates to track their validity periods. This skill automates these inspections to prevent unexpected expirations and potential security breaches.

Does this Azure security auditing tool require specific subscription permissions?

Azure security auditing requires permissions to list subscriptions and resource groups via azure mcp extensions, and access to read Key Vault items. These dependencies are necessary to scan configurations and validate governance standards effectively.

What is the best way to validate Azure resources against security best practices?

Validating Azure resources against security best practices is best achieved through automated compliance scanning using azqr. This approach checks your resource configurations systematically rather than relying on manual security audits.

Can I scan specific resource groups for compliance issues instead of an entire subscription?

Scanning specific resource groups for compliance issues is supported by utilizing the resource group listing capabilities. You can target your azure compliance validation to particular groups rather than evaluating the entire subscription scope.