azure-compliance

Automate Azure governance and security compliance assessments across subscriptions.

Updated Aug 27, 2026

Search Tags:#azure #compliance #governance #policy #key-vault #azqr #defender

Ready to run

npx skills add https://github.com/iinoshirozheng/SinoCloudChat --skill azure-compliance-iinoshirozheng

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: azure-compliance
Source: https://github.com/iinoshirozheng/SinoCloudChat/tree/main/.agents/skills/azure-compliance
Command: npx skills add https://github.com/iinoshirozheng/SinoCloudChat --skill azure-compliance-iinoshirozheng

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Azure environments often struggle with maintaining consistent governance, security posture, and policy compliance across multiple subscriptions. This Skill provides automated Azure Quick Review scans (azqr) combined with Key Vault expiration auditing to surface misconfigurations, governance gaps, and expired credentials, enabling faster remediation.

Core Features & Use Cases

Automated compliance assessments using Azure Quick Review (azqr) across subscriptions, resource groups, and services.
Key Vault expiration auditing for keys, secrets, and certificates with prioritization of findings.
Consolidated reporting and guidance with remediation patterns and Defender/Advisor integrations.
Use Case: You need a quarterly governance pass or a quick security posture check before deployment.

Quick Start

Run a full Azure compliance scan on my subscription and generate a prioritized remediation report.

Frequently Asked Questions about azure-compliance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate Azure compliance and security posture checks across my subscriptions?▼

Azure compliance automation runs Azure Quick Review (azqr) scans and Key Vault expiration audits across subscriptions to surface policy non-compliance, Defender for Cloud findings, and credential risks for remediation.

What's the best way to audit Key Vault keys, secrets, and certificates for expiration risks?▼

Key Vault expiration auditing prioritizes findings for keys, secrets, and certificates across single or multi-vault scenarios, consolidating expired credential risks into a prioritized report for faster remediation.

Can I run azqr scans across resource groups and multiple subscriptions?▼

Azqr scans support subscription-wide, resource-group, and multi-vault audit scenarios, surfacing misconfigurations and governance gaps across your Azure environment for consolidated reporting.

How does Azure Policy non-compliance detection work with Defender for Cloud recommendations?▼

Azure Policy checks and Defender for Cloud recommendations are consolidated during the compliance assessment, surfacing governance gaps and security findings alongside remediation guidance patterns.

Do I need Azure Quick Review installed to generate a remediation report for my subscription?▼

The compliance assessment applies azqr-based scans to your subscription, generating a prioritized remediation report that includes policy checks, Defender findings, and Key Vault expiration risks.

When should I run an Azure governance pass and what limitations exist for multi-vault audits?▼

Run a quarterly governance pass or pre-deployment security posture check; multi-vault audits surface Key Vault expiration risks and policy non-compliance but require active subscription access for scanning.