azure-compliance

作者： microsoft

Azure 合規性掃描、Key Vault 到期稽核，以及資源組態驗證。執行 azqr（Azure 快速審查）以針對訂閱與資源群組的最佳做法進行全面合規性評估。監控 Key Vault 金鑰、祕密與憑證的到期日期，並識別未設定到期原則的項目。使用 Resource Graph 查詢偵測孤立、設定錯誤及不合規的資源。依優先順序（重大、高、...）分類發現結果。

npx skills add https://github.com/microsoft/azure-skills --skill azure-compliance

下載 ZIP GitHub

Azure Compliance & Security Auditing

Quick Reference

Property	Details
Best for	Compliance scans, security audits, Key Vault expiration checks
Primary capabilities	Comprehensive Resources Assessment, Key Vault Expiration Monitoring
MCP tools	azqr, subscription and resource group listing, Key Vault item inspection

Prerequisites

Authentication: user is logged in to Azure via az login
Permissions to read resource configuration and Key Vault metadata

Assessments

Assessment	Reference
Comprehensive Compliance (azqr)	references/azure-quick-review.md
Key Vault Expiration	references/azure-keyvault-expiration-audit.md
Resource Graph Queries	references/azure-resource-graph.md

MCP Tools

Tool	Purpose
`mcp_azure_mcp_extension_azqr`	Run azqr compliance scans
`mcp_azure_mcp_subscription_list`	List available subscriptions
`mcp_azure_mcp_group_list`	List resource groups
`keyvault_key_list`	List all keys in vault
`keyvault_key_get`	Get key details including expiration
`keyvault_secret_list`	List all secrets in vault
`keyvault_secret_get`	Get secret details including expiration
`keyvault_certificate_list`	List all certificates in vault
`keyvault_certificate_get`	Get certificate details including expiration

Assessment Workflow

Select scope (subscription or resource group) for Comprehensive Resources Assessment.
Run azqr and capture output artifacts.
Analyze Scan Results and summarize findings and recommendations.
Review Key Vault Expiration Monitoring output for keys, secrets, and certificates.
Classify issues and propose remediation or fix steps for each finding.

Priority Classification

Priority	Guidance
Critical	Immediate remediation required for high-impact exposure
High	Resolve within days to reduce risk
Medium	Plan a resolution in the next sprint
Low	Track and fix during regular maintenance

Error Handling

Error	Message	Remediation
Authentication required	"Please login"	Run `az login` and retry
Access denied	"Forbidden"	Confirm permissions and fix role assignments
Missing resource	"Not found"	Verify subscription and resource group selection

Best Practices

Run compliance scans on a regular schedule (weekly or monthly)
Track findings over time and verify remediation effectiveness
Separate compliance reporting from remediation execution
Keep Key Vault expiration policies documented and enforced

SDK Quick References

For programmatic Key Vault access, see the condensed SDK guides:

Key Vault (Python): Secrets/Keys/Certs
Secrets: TypeScript | Rust | Java
Keys: .NET | Java | TypeScript | Rust
Certificates: Rust

來自 microsoft 的更多技能

開源增長駭客角色

agent-framework-azure-ai-py

使用Microsoft Agent Framework Python SDK（agent-framework-azure-ai）构建Azure AI Foundry代理。适用于使用AzureAIAgentsProvider创建持久化代理、使用托管工具（代码解释器、文件搜索、网络搜索）、集成MCP服务器、管理对话线程或实现流式响应。涵盖函数工具、结构化输出和多工具代理。

airunway-aks-setup

在AKS上設定AI Runway——從裸叢集到執行模型。涵蓋叢集驗證、控制器安裝、GPU評估、供應商設定及首次部署。時機：「設定AI Runway」、「上線AKS叢集」、「安裝AI Runway」、「airunway設定」、「部署模型至AKS」、「在AKS上進行GPU推論」、「在AKS上設定KAITO」、「在AKS上執行LLM」、「在AKS上使用vLLM」、「在AKS上設定模型服務」、「AI Runway控制器」。

appinsights-instrumentation

使用Azure Application Insights檢測Web應用程式的指南。提供遙測模式、SDK設定與組態參考。適用時機：如何檢測應用程式、App Insights SDK、遙測模式、什麼是App Insights、Application Insights指南、檢測範例、APM最佳實踐。

applicationinsights-web-ts

使用Application Insights JavaScript SDK（@microsoft/applicationinsights-web）為瀏覽器/Web應用程式進行檢測。適用於真實使用者監控（RUM）——頁面檢視、點擊、AJAX/fetch依賴、例外、自訂事件，以及與後端OpenTelemetry追蹤關聯的瀏覽器端GenAI代理追蹤。涵蓋SDK載入器指令碼與npm設定、框架擴充（React、React Native、Angular）、點擊分析、遙測初始化器，以及從瀏覽器發出的代理/工具/模型span的OTel GenAI語意慣例。

azure-ai-anomalydetector-java

使用適用於 Java 的 Azure AI 異常偵測器 SDK 建置異常偵測應用程式。在實作單變量/多變量異常偵測、時間序列分析或 AI 驅動監控時使用。

azure-ai-language-conversations-py

使用 azure-ai-language-conversations Python SDK 實作對話語言理解（CLU）。當使用 ConversationAnalysisClient 分析對話意圖與實體、建置 NLP 功能，或將語言理解整合至應用程式時使用。

Azure Machine Learning SDK v2 for Python。用於機器學習工作區、作業、模型、資料集、計算資源與管線。觸發詞：「azure-ai-ml」、「MLClient」、「workspace」、「model registry」、「training jobs」、「datasets」。