$ loading_
Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.
复制安装指令，让 AI 自动完成配置 · 推荐新手
请帮我安装 askskill 上的 "azure-compliance" 技能： 1. 下载 https://raw.githubusercontent.com/microsoft/GitHub-Copilot-for-Azure/main/plugin/skills/azure-compliance/SKILL.md 2. 保存为 ~/.claude/skills/azure-compliance/SKILL.md 3. 装好后重载技能，告诉我可以用了
| Property | Details |
|---|---|
| Best for | Compliance scans, security audits, Key Vault expiration checks |
| Primary capabilities | Comprehensive Resources Assessment, Key Vault Expiration Monitoring |
| MCP tools | azqr, subscription and resource group listing, Key Vault item inspection |
Activate this skill when user wants to:
az login| Assessment | Reference |
|---|---|
| Comprehensive Compliance (azqr) | references/azure-quick-review.md |
| Key Vault Expiration | references/azure-keyvault-expiration-audit.md |
| Resource Graph Queries | references/azure-resource-graph.md |
| Tool | Purpose |
|---|---|
mcp_azure_mcp_extension_azqr | Run azqr compliance scans |
mcp_azure_mcp_subscription_list | List available subscriptions |
mcp_azure_mcp_group_list | List resource groups |
keyvault_key_list | List all keys in vault |
keyvault_key_get | Get key details including expiration |
keyvault_secret_list | List all secrets in vault |
keyvault_secret_get | Get secret details including expiration |
keyvault_certificate_list | List all certificates in vault |
keyvault_certificate_get | Get certificate details including expiration |
| Priority | Guidance |
|---|---|
| Critical | Immediate remediation required for high-impact exposure |
| High | Resolve within days to reduce risk |
| Medium | Plan a resolution in the next sprint |
| Low | Track and fix during regular maintenance |
| Error | Message | Remediation |
|---|---|---|
| Authentication required | "Please login" | Run az login and retry |
| Access denied | "Forbidden" | Confirm permissions and fix role assignments |
| Missing resource | "Not found" | Verify subscription and resource group selection |
For programmatic Key Vault access, see the condensed SDK guides:
…
指导完成 Microsoft Entra ID 应用注册、OAuth 配置与 MSAL 接入。
帮助开发者为 Web 应用接入 Azure Application Insights 并配置遥测采集。
帮助排查并解决 Azure Event Hubs 与 Service Bus SDK 的连接、认证和消息处理问题。
帮助你跨订阅或资源组快速查询、盘点和定位 Azure 资源。
帮助你端到端部署、评估、微调并持续优化 Microsoft Foundry 智能体与模型。
执行已准备好的 Azure 应用部署，并自动处理常见发布错误恢复。