azure-compliance
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- Azure Security Auditing and Compliance: The skill implements a structured workflow for performing security audits using tools like Azure Quick Review (azqr). It assesses resources against best practices for reliability, security, and operational excellence.
- Key Vault Lifecycle Management: Includes specific auditing patterns for tracking the expiration of keys, secrets, and certificates within Azure Key Vault, helping to prevent service disruptions through proactive rotation and monitoring.
- Remediation and Hardening Templates: Provides validated Azure CLI and Bicep snippets to assist in remediating common security findings, such as enabling private endpoints, soft delete, and encryption for various PaaS services.
- Standard Authentication Guidance: Encourages the transition to passwordless authentication and managed identities for production environments, referencing official SDKs to ensure secure implementation of Azure services.
Audit Metadata