azure-policy-advisor

What problem does it solve?

Policy governance for Azure deployments requires aligning ARM templates, existing policy assignments, and organization-specific definitions with compliance frameworks to prevent drift and enforce security controls.

Core Features & Use Cases

• Assess and align an ARM template's resources with subscription policy state (assignments and definitions).
• Identify unassigned custom policies relevant to the deployed resource types.
• Suggest built-in policies and initiatives from Microsoft Learn that address gaps.
• Generate actionable remediation steps for template changes and subscription-level policy assignments.
• Support compliance frameworks like CIS/NIST.

Quick Start

Run the policy-advisor after you complete the azure-security-analyzer step to generate subscription-level policy recommendations for the current deployment.