What is azqr and how does this skill use it?

azqr (Azure Quick Review) is a tool for assessing Azure resources against best practices. This skill automates the scan process and analyzes the output to provide categorized remediation steps.

Can I use this skill to track expiring SSL certificates in Azure?

Yes, the skill specifically audits Key Vault for expiring certificates, keys, and secrets, allowing you to check for expirations within specific timeframes like the next 30 days.

Does this skill provide fix recommendations for security findings?

Yes, it classifies findings by priority (Critical, High, Medium, Low) and proposes specific remediation or fix steps for each identified issue.

What prerequisites are needed to run Azure compliance scans?

You must be authenticated via the Azure CLI (az login) and possess the necessary permissions to read resource configurations and Key Vault metadata.

Azure Compliance & Security Audit

Name: Azure Compliance & Security Audit
Author: microsoft

bymicrosoft

•

144

•

Security & Testing

Conducts comprehensive security audits and compliance assessments for Azure environments, including Key Vault monitoring and resource validation.

The Azure Compliance skill empowers developers and platform engineers to automate security posture evaluations and best practice assessments across their Azure infrastructure. By leveraging tools like azqr (Azure Quick Review) and direct Key Vault inspection, it identifies misconfigured resources, orphaned assets, and expiring secrets or certificates. This skill provides prioritized remediation steps and classification of findings, helping teams maintain high security standards and operational health while ensuring all cloud resources adhere to organizational policies.

Key Features

01Prioritized issue classification with actionable remediation guidance

02Resource configuration validation against Microsoft best practices

03144 GitHub stars

04Real-time monitoring of expiring Key Vault secrets, keys, and certificates

05Automated Azure Quick Review (azqr) compliance scans

06Identification of orphaned or misconfigured Azure resources

Use Cases

01Cleaning up orphaned cloud resources to optimize infrastructure costs and security

02Performing scheduled security audits of Azure subscriptions and resource groups

03Preventing service outages by identifying Key Vault secrets expiring within 30 days

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add microsoft/github-copilot-for-azure azure-compliance

For use in Claude.ai and ChatGPT

Download Skill