Setting the chapter. One moment.
Skills
Chapter 11 of 37
Run Azure compliance and security audits with azqr plus Key Vault expiration checks.
2 minutes · 389 words · 12 sections
| Property | Details |
|---|---|
| Best for | Compliance scans, security audits, Key Vault expiration checks |
| Primary capabilities | Comprehensive Resources Assessment, Key Vault Expiration Monitoring |
| MCP tools | azqr, subscription and resource group listing, Key Vault item inspection |
Activate this skill when user wants to:
az login| Assessment | Reference |
|---|---|
| Comprehensive Compliance (azqr) | references/azure-quick-review.md (opens in a new tab) |
| Key Vault Expiration | references/azure-keyvault-expiration-audit.md (opens in a new tab) |
| Resource Graph Queries | references/azure-resource-graph.md (opens in a new tab) |
| Tool | Purpose |
|---|---|
mcp_azure_mcp_extension_azqr | Run azqr compliance scans |
mcp_azure_mcp_subscription_list | List available subscriptions |
mcp_azure_mcp_group_list | List resource groups |
keyvault_key_list | List all keys in vault |
keyvault_key_get | Get key details including expiration |
keyvault_secret_list | List all secrets in vault |
keyvault_secret_get | Get secret details including expiration |
keyvault_certificate_list | List all certificates in vault |
keyvault_certificate_get | Get certificate details including expiration |
| Priority | Guidance |
|---|---|
| Critical | Immediate remediation required for high-impact exposure |
| High | Resolve within days to reduce risk |
| Medium | Plan a resolution in the next sprint |
| Low | Track and fix during regular maintenance |
| Error | Message | Remediation |
|---|---|---|
| Authentication required | “Please login” | Run az login and retry |
| Access denied | “Forbidden” | Confirm permissions and fix role assignments |
| Missing resource | “Not found” | Verify subscription and resource group selection |
For programmatic Key Vault access, see the condensed SDK guides:
Install this repository
npx skills add microsoft/azure-skills/plugin marketplace add microsoft/azure-skillsSkills install per repository, not per chapter — the CLI has no documented per-skill form, so we do not print one.
Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.
The verbatim description from this skill’s front matter — the string an agent matches on to decide whether to load it.
skills/azure-compliance/SKILL.mdmain, last pushed 10 August 2026.SKILL.md, not by matching a directory convention. 6 distinct layouts observed: skills/*/SKILL.md, skills/azure-app-onboard/*/SKILL.md, skills/azure-kubernetes/*/SKILL.md, skills/microsoft-foundry/*/SKILL.md, skills/microsoft-foundry/models/deploy-model/*/SKILL.md, skills/microsoft-foundry/models/*/SKILL.md.h1 and no skipped levels:.claude-plugin/marketplace.json by Microsoft, declaring 1 plugin. It is read for editorial metadata only — never as the skill index, which is always the repository tree./microsoft/azure-skills.md, and each chapter at its own .md URL.15 files · 43 KB
Everything this skill ships beside its prose. All of it is set here, as subchapters of chapter 11.
Documentation the agent loads on demand, rather than up front.
references/6 files · 32 KB
references/sdk/9 files · 11 KB