azure-governance-discovery

Discover and analyze Azure Policy assignments and exemptions with Python.

Updated Apr 21, 2026
One-click install
npx skills add https://github.com/cassm199-mita/azure-agentic-infraops-accelerator --skill azure-governance-discovery-cassm199-mita
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-governance-discovery
Source: https://github.com/cassm199-mita/azure-agentic-infraops-accelerator/tree/main/.github/skills/azure-governance-discovery
Command: npx skills add https://github.com/cassm199-mita/azure-agentic-infraops-accelerator --skill azure-governance-discovery-cassm199-mita

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python, azure-cli, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the discovery and analysis of Azure Policy assignments, simplifying governance and compliance processes.

Core Features & Use Cases

  • Policy Discovery: Lists effective policy assignments and definitions at subscription scope.
  • Exemptions: Pulls and classifies exemptions for policy assignments.
  • Classification: Categorizes effects of policies as blockers, auto-remediate, or informational.
  • Use Case: Use this Skill as part of a governance workflow to automatically identify and analyze policy violations, enabling quicker remediation and compliance.

Quick Start

Execute the discovery script for a specific project and output the results to a JSON file.

python .github/skills/azure-governance-discovery/scripts/discover.py \
    --project my-project \
    --out agent-output/my-project/04-governance-constraints.json

Frequently Asked Questions about azure-governance-discovery

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Azure Policy discovery and compliance analysis?

You can automate Azure Policy discovery by running a Python script that lists effective policy assignments and definitions at the subscription scope, outputting the compliance results to a JSON file for analysis.

What is the best way to list Azure Policy exemptions and classify their effects?

The best way to list Azure Policy exemptions is to use an automated discovery script that pulls and classifies exemptions, categorizing policy effects as blockers, auto-remediate, or informational for governance workflows.

Do I need Python and Azure CLI to analyze Azure governance constraints?

Yes, you need Python 3.10+ and Azure CLI installed to execute the discovery script that analyzes Azure governance constraints and generates policy compliance reports.

Can I output Azure Policy assignment data to a JSON file for governance tracking?

Yes, you can output Azure Policy assignment data to a JSON file by executing the discovery script with the --out parameter, directing the compliance analysis results to your specified path.

When should I use an automated script for Azure Policy compliance instead of manual checks?

You should use an automated script for Azure Policy compliance when you need to quickly identify and analyze policy violations across a project, enabling quicker remediation and continuous governance tracking.

Why are some Azure Policy assignments categorized as blockers or informational during discovery?

Azure Policy assignments are categorized as blockers, auto-remediate, or informational during discovery to classify their effects, helping you prioritize governance remediation based on the policy's operational impact.