AgentSkillsCN

azure-compliance-ms

全面的Azure合规与安全审计能力，包括最佳实践评估、 Key Vault过期监控以及资源配置验证。 适用场景：合规扫描、安全审计、azqr、Azure最佳实践、Key Vault过期检查、 合规评估……

SKILL.md
--- frontmatter
name: azure-compliance-ms
description: |-
  Comprehensive Azure compliance and security auditing capabilities including best practices assessment,
  Key Vault expiration monitoring, and resource configuration validation.
  USE FOR: compliance scan, security audit, azqr, Azure best practices, Key Vault expiration check,
  compliance assess...
risk: safe
source: community
license: MIT

Azure Compliance & Security Auditing

Quick Reference

PropertyDetails
Best forCompliance scans, security audits, Key Vault expiration checks
Primary capabilitiesComprehensive Resources Assessment, Key Vault Expiration Monitoring
MCP toolsazqr, subscription and resource group listing, Key Vault item inspection

When to Use This Skill

  • •Run azqr or Azure Quick Review for compliance assessment
  • •Validate Azure resource configuration against best practices
  • •Identify orphaned or misconfigured resources
  • •Audit Key Vault keys, secrets, and certificates for expiration

Skill Activation Triggers

Activate this skill when user wants to:

  • •Check Azure compliance or best practices
  • •Assess Azure resources for configuration issues
  • •Run azqr or Azure Quick Review
  • •Identify orphaned or misconfigured resources
  • •Review Azure security posture
  • •"Show me expired certificates/keys/secrets in my Key Vault"
  • •"Check what's expiring in the next 30 days"
  • •"Audit my Key Vault for compliance"
  • •"Find secrets without expiration dates"
  • •"Check certificate expiration dates"

Prerequisites

  • •Authentication: user is logged in to Azure via az login
  • •Permissions to read resource configuration and Key Vault metadata

Assessments

AssessmentReference
Comprehensive Compliance (azqr)references/azure-quick-review.md
Key Vault Expirationreferences/azure-keyvault-expiration-audit.md
Resource Graph Queriesreferences/azure-resource-graph.md

MCP Tools

ToolPurpose
mcp_azure_mcp_extension_azqrRun azqr compliance scans
mcp_azure_mcp_subscription_listList available subscriptions
mcp_azure_mcp_group_listList resource groups
keyvault_key_listList all keys in vault
keyvault_key_getGet key details including expiration
keyvault_secret_listList all secrets in vault
keyvault_secret_getGet secret details including expiration
keyvault_certificate_listList all certificates in vault
keyvault_certificate_getGet certificate details including expiration

Assessment Workflow

  1. •Select scope (subscription or resource group) for Comprehensive Resources Assessment.
  2. •Run azqr and capture output artifacts.
  3. •Analyze Scan Results and summarize findings and recommendations.
  4. •Review Key Vault Expiration Monitoring output for keys, secrets, and certificates.
  5. •Classify issues and propose remediation or fix steps for each finding.

Priority Classification

PriorityGuidance
CriticalImmediate remediation required for high-impact exposure
HighResolve within days to reduce risk
MediumPlan a resolution in the next sprint
LowTrack and fix during regular maintenance

Error Handling

ErrorMessageRemediation
Authentication required"Please login"Run az login and retry
Access denied"Forbidden"Confirm permissions and fix role assignments
Missing resource"Not found"Verify subscription and resource group selection

Best Practices

  • •Run compliance scans on a regular schedule (weekly or monthly)
  • •Track findings over time and verify remediation effectiveness
  • •Separate compliance reporting from remediation execution
  • •Keep Key Vault expiration policies documented and enforced

SDK Quick References

For programmatic Key Vault access, see the condensed SDK guides: