azure-compliance

What problem does it solve? Azure environments drift out of compliance over time, and expired Key Vault secrets or certificates cause unexpected outages. This Skill automates compliance and security audits so you can detect misconfigurations, orphaned resources, and expiring credentials before they become incidents. ## Core Features & Use Cases - Comprehensive Compliance Scans: Run Azure Quick Review (azqr) against subscriptions, resource groups, or management groups and analyze findings across security, reliability, cost, and operations categories. - Key Vault Expiration Auditing: Enumerate keys, secrets, and certificates to find expired items, items expiring within a configurable threshold, and resources missing expiration dates. - Remediation Guidance: Get prioritized findings (Critical/High/Medium/Low) with ready-to-use Azure CLI and Bicep remediation templates, plus Azure Resource Graph KQL queries for custom audits. - Use Case: Before a quarterly security review, run an azqr scan on your production subscription, audit all Key Vaults for certificates expiring in the next 30 days, and receive a prioritized remediation plan. ## Quick Start Ask the assistant to run an azqr compliance scan on your subscription and check your Key Vault for any secrets or certificates expiring in the next 30 days.