azure-policy-audit

Audit built-in Azure Policy definitions for unassigned policies in a tenant or subscription.

3|1|Updated Mar 10, 2026
One-click install
npx skills add https://github.com/anwather/epac-skills --skill azure-policy-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-policy-audit
Source: https://github.com/anwather/epac-skills/tree/main/skills/azure-policy-audit
Command: npx skills add https://github.com/anwather/epac-skills --skill azure-policy-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps identify gaps in your Azure policy coverage by auditing existing policies against your environment, ensuring compliance and security.

Core Features & Use Cases

  • Identify Unassigned Policies: Finds built-in Azure policies for a specified service that are not currently assigned in your tenant or subscription.
  • Check Specific Policies: Allows you to verify the assignment status of individual policy definitions by name or ID.
  • Service-Specific Audits: Focuses audits on particular Azure services like Storage, Compute, or KeyVault.
  • Use Case: You need to ensure all Azure Storage accounts in your environment comply with security best practices. This skill can identify any built-in security policies related to storage that you haven't yet assigned.

Quick Start

Audit all built-in Storage policies in my Azure environment.

Frequently Asked Questions about azure-policy-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find unassigned Azure Policy definitions in my subscription?

To find unassigned Azure Policy definitions, audit built-in policies for a specified service to identify coverage gaps within your tenant or subscription. This process compares existing policy assignments against available built-in definitions to highlight missing compliance configurations.

Can I check if a specific Azure policy is assigned by name or ID?

Yes, you can check specific Azure policy assignments by name or ID. This verifies the assignment status of individual policy definitions within your environment to ensure critical governance rules are actively applied.

How do I audit Azure Storage accounts for missing security policies?

To audit Azure Storage accounts for missing security policies, run a service-specific audit targeting Storage. This identifies built-in security policies related to storage that have not yet been assigned to your environment.

Do I need the Az PowerShell module to audit Azure policy coverage gaps?

Yes, you need the Az PowerShell module to audit Azure policy coverage gaps. The module must be authenticated to an Azure tenant to query policy definitions and assignment statuses successfully.

Can I filter Azure policy audits by sub-topic keywords like HTTPS or encryption?

Yes, you can filter Azure policy audits by sub-topic keywords like HTTPS or encryption. This narrows the audit results to specific compliance areas, helping you focus on particular security configurations.