/

/azure-compliance

351

Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.

16 files
46.7 KB
MIT
Updated 3 weeks ago
GitHub
1 warning

Ask your Agent

Use this Skill: https://skilld.dev/gh/microsoft/skills/azure-compliance

This session only. Nothing lands on disk.

referencessdkazure-keyvault-keys-ts.md

1019 B raw

≈255 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Key Vault Keys — TypeScript SDK Quick Reference

Condensed from azure-keyvault-keys-ts. Full patterns (crypto operations, key rotation policies, backup/restore, CryptographyClient) in the azure-keyvault-keys-ts plugin skill if installed.

Install

npm install @azure/keyvault-keys @azure/identity

Quick Start

import { KeyClient } from "@azure/keyvault-keys";
import { DefaultAzureCredential } from "@azure/identity";
const keyClient = new KeyClient(`https://${vaultName}.vault.azure.net`, new DefaultAzureCredential());

Best Practices

Use DefaultAzureCredential for local development only. In production, use ManagedIdentityCredential — see auth-best-practices.md
Enable soft-delete — required for production vaults
Set expiration dates on keys
Use key rotation policies — automate key rotation
Limit key operations — only grant needed operations (encrypt, sign, etc.)
Browser not supported — this SDK is Node.js only

Source: SKILL.md on GitHub

Third-party checks

1 warning15d4 checks · Risk SAFE

Gen Agent Trust Hub15d
This skill provides a comprehensive framework for Azure compliance and security auditing, utilizing specialized tools and remediation templates. It adheres to industry-standard best practices by promoting managed identities and least-privilege access across Azure environments.
Socket15d
No alerts
Snyk15d
Risk: LOW · No issues
Runlayer7mo
15/15 files flagged

Provenance

Signed by skilld at b283057. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated 3 weeks ago

Capability

metadata: { "author": "Microsoft", "version": "1.2.2" }

/azure-compliance