azure-compliance

Identify Azure compliance and security issues across subscriptions, resource groups, and Key Vault resources.

Updated Apr 20, 2026
One-click install
npx skills add https://github.com/qprjack86/apexbase --skill azure-compliance-qprjack86
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-compliance
Source: https://github.com/qprjack86/apexbase/tree/main/.github/skills/azure-compliance
Command: npx skills add https://github.com/qprjack86/apexbase --skill azure-compliance-qprjack86

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

It helps teams quickly identify Azure compliance gaps, security risks, and resource misconfigurations before they cause outages or audit failures.

Core Features & Use Cases

  • Compliance Assessment: Run Azure Quick Review scans to find best-practice violations across subscriptions, resource groups, or management groups.
  • Security Auditing: Inspect Key Vault keys, secrets, and certificates for expiration, missing expiration dates, and disabled resources.
  • Remediation Guidance: Use documented fix patterns and Azure Resource Graph queries to prioritize and correct findings with clear next steps.

Quick Start

Ask the skill to scan your Azure subscription for compliance issues and summarize the highest-priority security and configuration findings.

Frequently Asked Questions about azure-compliance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Azure subscriptions for compliance and security risks?

To audit Azure subscriptions for compliance and security risks, run Azure Quick Review scans to identify best-practice violations and resource misconfigurations across management groups, subscriptions, and resource groups. This process highlights configuration gaps before they cause outages.

How do I check Azure Key Vault certificates and secrets for expiration?

Checking Azure Key Vault certificates and secrets for expiration involves inspecting keys, secrets, and certificates to find missing expiration dates, disabled resources, and upcoming expirations. This security auditing identifies vulnerable credentials requiring immediate rotation.

What is needed to perform an Azure compliance assessment?

Performing an Azure compliance assessment requires Azure authentication, read permissions, and MCP compliance tools. These prerequisites allow you to inspect Key Vault resources, execute policy checks, and analyze orphaned resource reviews for remediation.

How do I use Azure Resource Graph queries for compliance remediation?

Using Azure Resource Graph queries for compliance remediation involves applying documented fix patterns to prioritize and correct identified findings. This approach provides clear next steps to resolve misconfigurations found during Azure Quick Review scans.

What is the best way to find orphaned resources in Azure?

The best way to find orphaned resources in Azure is to conduct orphaned resource reviews using Azure Quick Review assessments. This compliance assessment identifies unused configurations across resource groups to prevent security risks and audit failures.

Can I run Azure policy checks across multiple management groups?

You can run Azure policy checks across multiple management groups, subscriptions, and resource groups using Azure Quick Review scans. This compliance assessment evaluates your environment against best-practice violations and generates prioritized remediation guidance.