azure-review

To audit Azure infrastructure-as-code against the CIS benchmark, provide your Terraform, Bicep, or ARM template directory path. The skill evaluates configurations across identity, networking, and storage to generate a compliance report.

Yes, you can check Entra ID and Key Vault configurations before deployment. The skill performs pre-deployment validation by evaluating IaC inputs and configuration exports against CIS v2.1.0 security recommendations.

The best way to generate a prioritized remediation plan for Azure security posture is to run a CIS benchmark assessment. It produces evidence-driven findings with severity levels and remediation guidance mapped to specific CIS control IDs.

Yes, the Azure security review works with Bicep and ARM templates. It also supports Terraform and configuration exports to evaluate resources like NSG rules, Defender for Cloud settings, and App Service configurations.

CIS benchmark assessment results are classified using an evidence-driven status system. When evidence is insufficient, findings are marked as Not Evaluable or N-A, while verified configurations receive a Pass or Fail status.

The CIS Foundations Benchmark evaluation covers nine sections including Entra ID, Defender for Cloud, storage, databases, logging, networking, virtual machines, Key Vault, and App Service to ensure comprehensive posture review.