Azure Security Assessment — SOMA ☁️

To run an Azure security assessment, you need Azure CLI installed and configured. The assessment systematically scans your infrastructure to identify and document security misconfigurations in detection mode.

A cloud security misconfiguration detection scan checks IAM/RBAC, storage, virtual machines, key vault, active directory, SQL, functions, and container registry to identify potential vulnerabilities.

Yes, you need Azure CLI installed and access to the target Azure environment to perform Azure infrastructure security assessments. The Skill relies on it to operate and discover misconfigurations.

No, you cannot use Azure security assessment to exploit vulnerabilities. It operates strictly in detection mode, focusing only on identifying and documenting security misconfigurations without exploitation.

Findings for detected Azure misconfigurations are documented using a structured output schema. This includes the finding type, affected resource, severity, CVSS score, authentication requirements, and impact.

The best way to assess Azure Key Vault and SQL security posture is through a systematic detection-first methodology. It identifies misconfigurations across these services without actively exploiting them.