azure-policy-advisor

To check ARM template alignment with Azure policy, the template's resources are analyzed against existing subscription assignments and definitions. This identifies policy state drift and generates prioritized recommendations for template fixes to enforce compliance.

Finding unassigned custom policies involves analyzing existing assignments against built-in and custom definitions relevant to deployed resource types. This identifies coverage gaps and suggests applicable Microsoft Learn built-in policies and initiatives to strengthen cloud governance.

Generating remediation steps for Azure policy compliance requires analyzing template configurations and subscription scope state. The process produces a structured JSON output containing assignments, unassigned definitions, template gaps, and recommended subscription-level actions.

Yes, this approach supports compliance frameworks like CIS and NIST for Azure governance. It tailors prioritized policy recommendations and template fixes to the selected compliance framework, ensuring deployments meet specific security controls and prevent drift.

Yes, you can assess subscription-level policy state automatically by analyzing existing assignments and definitions against ARM template configurations. This identifies unassigned definitions and template gaps, outputting structured recommendations without manual review of each policy.