azure-security-analyzer

Azure security posture checks validate ARM templates by analyzing resource configurations against Microsoft best practices. The analyzer produces a per-resource security assessment, citing exact evidence from the template and distinguishing explicit configurations from platform defaults.

The best way to identify security gaps in deployed Azure resources is performing a post-deployment review. The analyzer evaluates resource configurations against Microsoft MCP best-practices security controls and generates an evidence-backed report with remediation guidance.

An Azure security analyzer distinguishes between platform defaults and explicit configurations by verifying evidence directly against the ARM template. It evaluates the provided configurations against Microsoft MCP best-practices security controls to ensure accurate findings.

Yes, you can use the Azure security analyzer for post-deployment audits. It analyzes deployed resource configurations against Microsoft security best practices to identify security gaps and deliver a structured report with actionable remediation guidance.

Yes, you need to provide a complete ARM template. The analyzer uses the template as direct evidence to validate each resource against Microsoft MCP best-practices security controls and generate a per-resource security assessment.