Provide Azure security hardening guidance for identity, access, secrets, and policy enforcement.
npx skills add https://github.com/tomz/agent-skills --skill azure-security-tomz
Please help me install this Agent Skill. Skill: azure-security Source: https://github.com/tomz/agent-skills/tree/main/azure-security Command: npx skills add https://github.com/tomz/agent-skills --skill azure-security-tomz
Azure security teams often struggle to consistently apply identity, access, and data protection controls across subscriptions. This skill consolidates Microsoft Entra ID, RBAC, Key Vault, Managed Identity, Defender for Cloud, Sentinel, Conditional Access, PIM, and Azure Policy into actionable, repeatable guidance.
Initiate a basic security hardening by aligning RBAC with least privilege, enabling Key Vault safeguards, and enabling Defender and Conditional Access in your Azure tenant.
High-intent search queries and answers about installing and using this skill.
Implement least privilege RBAC by assigning specific Entra ID roles to identities and management groups, ensuring users only have necessary access. This skill provides structured design patterns to enforce these controls across dev, staging, and production environments.
Manage Azure Key Vault secrets by enabling RBAC permissions for data plane access and utilizing managed identities for authentication. This skill covers operational best practices for encryption, access control, and safeguarding secrets during cloud deployment workflows.
Set up just-in-time Azure access by configuring Entra ID Privileged Identity Management (PIM) and Conditional Access policies to restrict permissions dynamically. This skill offers operational playbooks to govern identity and access with these specific Entra ID features.
Yes, you can audit Azure security posture using Defender for Cloud and Sentinel to monitor threats and compliance. This skill guides you through enabling these services and deploying Azure Policy initiatives for ongoing security operations and audit readiness.
Yes, this covers subscription onboarding and Azure Policy enforcement for development, staging, and production environments. It provides repeatable guidance to establish security guardrails, configure conditional access, and ensure compliance readiness across multiple Azure tenants.
rysweetProvision users, assign RBAC, and deploy Azure resources via CLI.
claudcherejiAutomate vulnerability scanning and compliance reporting for cloud infrastructure.
appliedailearnerDesign, troubleshoot, and deploy Azure Resource Manager solutions with ARM/Bicep templates.
DCx7C5Aggregate cloud misconfigurations from AWS Security Hub, Azure Defender, and open-source tools.
