skills.rest
AlastairThomson
AlastairThomsonCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

ato-source-azure

Collect NIST 800-53 evidence from Azure via the az CLI in read-only mode.

Updated Aug 27, 2026
Search Tags:#audit#azure#compliance#evidence#read-only#az-cli#nist-800-53
One-click install
npx skills add https://github.com/AlastairThomson/AgentSkills --skill ato-source-azure-alastairthomson
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ato-source-azure
Source: https://github.com/AlastairThomson/AgentSkills/tree/main/skills/global-scope/ato-source-azure
Command: npx skills add https://github.com/AlastairThomson/AgentSkills --skill ato-source-azure-alastairthomson

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Collects NIST 800-53 evidence from Azure via the az CLI in a strictly read-only, ambient-auth mode.

Core Features & Use Cases

  • Read-only Azure evidence collection across policy assignments, RBAC definitions, authentication sessions, diagnostic settings, activity logs, and key vault metadata.
  • Applies to US-region deployments with scope-confirmed boundaries to prevent resource modification.
  • Exports per-evidence JSON artifacts to the configured evidence store and emits a citations batch for auditing, redacting sensitive fields.

Quick Start

Run this skill to begin collecting read-only Azure evidence for the configured scope and write the results to the evidence store.

Frequently Asked Questions about ato-source-azure

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I collect NIST 800-53 compliance evidence from Azure using az CLI?▼

You can collect NIST 800-53 evidence from Azure by running this skill in a strictly read-only, ambient-auth mode via the az CLI. It gathers policy assignments, RBAC definitions, and diagnostic settings, then exports JSON artifacts to your evidence store.

Can I gather Azure compliance evidence without modifying cloud resources?▼

Yes, this Azure compliance evidence collection operates in a strictly read-only mode. It applies scope-confirmed boundaries to prevent resource modification while gathering policy assignments, RBAC definitions, and activity logs.

Does this Azure NIST 800-53 audit tool work with deployments outside the US region?▼

No, this Azure NIST 800-53 evidence collection skill is specifically applied to US-region deployments. It uses scope-confirmed boundaries to ensure read-only auditing without modifying resources.

How do I export Azure audit logs and RBAC definitions for compliance auditing?▼

This skill exports per-evidence JSON artifacts for compliance auditing by collecting Azure RBAC definitions, authentication sessions, diagnostic settings, and activity logs. It redacts sensitive fields and emits a citations batch to your configured evidence store.

What Azure resources are covered when collecting NIST 800-53 audit evidence?▼

NIST 800-53 audit evidence collection covers Azure policy assignments, RBAC definitions, authentication sessions, diagnostic settings, activity logs, and key vault metadata, ensuring comprehensive read-only compliance data extraction.

Is sensitive data redacted when exporting Azure compliance evidence to the evidence store?▼

Yes, sensitive fields are redacted when exporting Azure compliance evidence. The skill collects read-only NIST 800-53 audit data and emits a citations batch with redacted JSON artifacts to your configured evidence store.

Related Skills

Explore More Legal & Compliance Skills→
AI-Strategy-LLCAI-Strategy-LLC

ato-source-azure

Extract NIST 800-53 evidence from Azure using read-only az commands.

Official
Advanced
josemlopezjosemlopez
8

tm-compliance

Map threats and controls to compliance frameworks and generate audit-ready reports.

Community
Advanced
abnejLLCabnejLLC

compliance-tracker

Automate compliance monitoring, gap detection, and report generation across regulatory frameworks.

Community
Intermediate
DCx7C5DCx7C5

cloud-SKILL.md

Aggregate cloud misconfigurations from AWS Security Hub, Azure Defender, and open-source tools.

Community
Advanced