azure-security-scanner

# Azure Security Scanner Skill ## Purpose Automated Azure security configuration scanning and hardening to identify misconfigurations, compliance violations, and security risks across Azure subscriptions and tenants. ## Capabilities ### Azure Security Center Assessments - Run Microsoft Defender for Cloud security assessments - Check secure score and recommendations - Review security alerts and incidents - Validate just-in-time VM access - Check adaptive application controls - Monitor regulatory compliance dashboards ### Azure AD Security Analysis - Analyze Azure AD conditional access policies - Check MFA enforcement status - Review privileged identity management (PIM) - Identify risky sign-ins and users - Analyze app registrations and service principals - Check guest user access configurations ### Network Security Group Analysis - Review NSG rules for overly permissive access - Check for open management ports (RDP, SSH) - Validate application security groups - Review Azure Firewall configurations - Check DDoS protection status - Analyze virtual network configurations ### Storage Account Security - Identify publicly accessible storage accounts - Check encryption configurations (SSE, CMK) - Review shared access signatures (SAS) - Validate network access rules - Check secure transfer requirements - Review access keys rotation ### Key Vault Security - Check Key Vault access policies - Validate network restrictions - Review key expiration policies - Check certificate confi...