azure-sweep

Automates Azure compliance sweeps across eight layers and outputs remediation code in Bicep, Terraform, and CLI.

5|2|Updated Mar 20, 2026
One-click install
npx skills add https://github.com/srnichols/plan-forge --skill azure-sweep
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-sweep
Source: https://github.com/srnichols/plan-forge/tree/main/presets/azure-iac/.github/skills/azure-sweep
Command: npx skills add https://github.com/srnichols/plan-forge --skill azure-sweep

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires az, resource-graph, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill solves the problem of maintaining compliance with Azure governance by running a full 8-layer sweep of the Azure environment.

Core Features & Use Cases

  • Compliance Sweep: Runs a prioritized compliance sweep across WAF, CAF, Landing Zone, Policy, Org Rules, Resource Graph, Telemetry, and Remediation layers.
  • Findings Report: Outputs a structured findings report with Bicep, Terraform, and CLI remediation code.
  • Use Case: Before a production deployment, after an environment is provisioned, or during quarterly compliance reviews, this Skill can be used to ensure governance compliance.

Quick Start

Execute the azure-sweep skill to perform a compliance sweep on the current subscription.

Frequently Asked Questions about azure-sweep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate an Azure governance compliance sweep across my environment?

You can automate an Azure governance compliance sweep by running a comprehensive scan across eight Azure layers, including Policy, Resource Graph, and WAF, to identify non-compliance issues and generate remediation code.

What is the best way to generate remediation code for Azure non-compliance findings?

The best way to generate remediation code for Azure non-compliance findings is to run a full compliance sweep that outputs a structured findings report containing Bicep, Terraform, and CLI remediation scripts.

Do I need the Azure CLI and Resource Graph extension to perform a compliance check?

Yes, you need the Azure CLI and the Resource Graph extension installed, along with specific instructions files, to execute the automated compliance sweep across your Azure subscriptions.

When should I run an Azure compliance sweep on my cloud environment?

You should run an Azure compliance sweep before a production deployment, immediately after an environment is provisioned, or during quarterly compliance reviews to ensure strict governance adherence.

What Azure layers are checked during a governance compliance sweep?

A governance compliance sweep checks eight prioritized Azure layers: WAF, CAF, Landing Zone, Policy, Org Rules, Resource Graph, Telemetry, and Remediation, ensuring full environment coverage.