skills/ MicrosoftDocs/Agent-Skills

azure-policy

Expert knowledge for Azure Policy development including troubleshooting, best practices, decision making, architecture & design patterns, security, configuration, integrations & coding patterns, and deployment. Use when authoring JSON policies, deploying via ARM/Bicep/Terraform, enforcing security b

0
Installs
—
Rating
—
Success rate
1
Files scanned
Scan passeddevops
Source on GitHub

Security scan

Scan passed

No risky patterns were found in the scanned files.

1 files scannedscanner v1.2.0Oct 11, 2026

Content sha256 0aa41d50a7c268e0… — run codexguild_scan_skills after installing to verify your local copy.

Static analysis is a first line of defense, not a guarantee. Read the source

SKILL.md

exact scanned copy

Azure Policy Skill

This skill provides expert guidance for Azure Policy. Covers troubleshooting, best practices, decision making, architecture & design patterns, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
TroubleshootingL36-L44Diagnosing and fixing Azure Policy non-compliance and common errors, plus troubleshooting Azure Machine Configuration deployments and Linux/Windows guest configuration agents.
Best PracticesL45-L52Best practices for safely testing and deploying Azure Policy and Machine/Guest Configuration, including PSDSC behavior changes, impact evaluation, and safe rollout strategies.
Decision MakingL53-L60Guidance on planning migrations from DSC/Automanage to Machine Configuration/Azure Policy and choosing recommended policy definitions for managing and securing VMs.
Architecture & Design PatternsL61-L65Designing Azure Policy-as-Code workflows, integrating with CI/CD, GitOps, and approvals, and structuring policy repos, environments, and automation for scalable governance.
SecurityL66-L170Using Azure Policy for security/compliance: deploying security baselines, mapping to standards (CIS, NIST, ISO, PCI, FedRAMP, etc.), and enforcing regulatory and MFA requirements.
ConfigurationL171-L210Designing, assigning, and managing Azure Policy and Machine Configuration: JSON structures, effects, guest config packages, compliance data, remediation, tags, identities, and exemptions.
Integrations & Coding PatternsL211-L240Patterns for writing reusable Azure Policy definitions (operators, fields, effects, tags, initiatives) and integrating/automating them via Terraform, Kubernetes/Gatekeeper, VS Code, Event Grid, and Resource Graph
DeploymentL241-L251How to deploy and assign Machine Configuration packages via ARM/Bicep/Terraform/REST, publish them to storage, export policy for policy-as-code, and enforce Azure Policy in DevOps pipelines

Troubleshooting

TopicURL
Troubleshoot Azure Machine Configuration deploymentshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/overview/04-operations-troubleshooting
Troubleshoot Azure machine configuration Linux agent problemshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/whats-new/agent/linux
Diagnose and resolve Azure machine configuration Windows agent issueshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/whats-new/agent/windows
Diagnose causes of Azure Policy non-compliancehttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/determine-non-compliance
Troubleshoot common Azure Policy errors and SDK issueshttps://learn.microsoft.com/en-us/azure/governance/policy/troubleshoot/general

Best Practices

TopicURL
Test Machine Configuration packages with GuestConfiguration toolshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/3-test-package
Understand PSDSC behavior changes in Machine Configurationhttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/whats-new/psdsc-in-machine-configuration
Evaluate impact before deploying new Azure policieshttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/evaluate-impact
Apply safe deployment practices to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/policy-safe-deployment-practices

Decision Making

TopicURL
Plan migration from Azure Automation DSC to Machine Configurationhttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/whats-new/migrating-from-azure-automation
Plan migration from DSC extension to Machine Configurationhttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/whats-new/migrating-from-dsc-extension
Select recommended Azure Policy definitions for VMshttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/recommended-policies
Plan migration from Automanage Best Practices to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/migrate-from-automanage-best-practices

Architecture & Design Patterns

TopicURL
Design Azure Policy as Code governance workflowshttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/policy-as-code

Security

TopicURL
Deploy Machine Configuration security baseline policieshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-security-baselines/deploy-a-baseline-policy-assignment
Customize Machine Configuration security baseline parametershttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-security-baselines/specify-custom-parameters-for-baseline-policy
Author JSON parameters for Machine Configuration baselineshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-security-baselines/understand-baseline-settings-parameter
Sign Machine Configuration packages and enforce signed contenthttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/6-sign-package
Use regulatory compliance initiatives in Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/regulatory-compliance
Map Australia ISM PROTECTED controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/australia-ism
Map Australia ISM PROTECTED controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/australia-ism
Implement Microsoft cloud security benchmark via Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/azure-security-benchmark
Implement Microsoft cloud security benchmark via Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/azure-security-benchmark
Map Azure Policy to Canada Federal PBMMhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/canada-federal-pbmm
Map Azure Policy to Canada Federal PBMMhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/canada-federal-pbmm
Azure Policy mappings for CIS Azure 1.1.0https://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-1-1-0
Azure Policy mappings for CIS Azure 1.1.0https://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-1-1-0
Align CIS Azure 1.3.0 controls with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-1-3-0
Align CIS Azure 1.3.0 controls with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-1-3-0
Align CIS Azure 1.4.0 controls with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-1-4-0
Align CIS Azure 1.4.0 controls with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-1-4-0
Align CIS Azure 2.0.0 controls with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-2-0-0
Align CIS Azure 2.0.0 controls with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-2-0-0
Enforce CIS benchmarks on AlmaLinux via Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/alma-ado
Apply CIS benchmarks to AKS Optimized Azure Linuxhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/azure-linux-ado
Configure CIS benchmarks for Debian via Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/debian-ado
Enforce CIS benchmarks on Oracle Linux with Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/oracle-ado
Apply CIS benchmarks to RHEL via Machine Configurationhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/rhel-ado
Configure CIS benchmarks for Rocky Linux in Azurehttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/rocky-ado
Apply CIS benchmarks to SUSE Linux Enterprisehttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/suse-ado
Enforce CIS benchmarks on Ubuntu via Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/ubuntu-ado
Map CMMC Level 3 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cmmc-l3
Map CMMC Level 3 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cmmc-l3
Map FedRAMP High controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/fedramp-high
Map FedRAMP High controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/fedramp-high
Map FedRAMP Moderate controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/fedramp-moderate
Map FedRAMP Moderate controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/fedramp-moderate
Implement Gov cloud security benchmark via Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-azure-security-benchmark
Implement Gov cloud security benchmark via Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-azure-security-benchmark
Use CIS Azure 1.1.0 benchmark with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-cis-azure-1-1-0
Use CIS Azure 1.1.0 benchmark with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-cis-azure-1-1-0
Align CIS Azure 1.3.0 (Gov) controls with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-cis-azure-1-3-0
Align CIS Azure 1.3.0 (Gov) controls with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-cis-azure-1-3-0
Map CMMC Level 3 (Gov) controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-cmmc-l3
Map CMMC Level 3 (Gov) controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-cmmc-l3
Map FedRAMP High (Gov) controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-fedramp-high
Map FedRAMP High (Gov) controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-fedramp-high
Map FedRAMP Moderate (Gov) controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-fedramp-moderate
Map FedRAMP Moderate (Gov) controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-fedramp-moderate
Implement IRS 1075 controls using Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-irs-1075-sept2016
Implement IRS 1075 controls using Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-irs-1075-sept2016
Map ISO 27001:2013 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-iso-27001
Map ISO 27001:2013 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-iso-27001
Align NIST SP 800-171 R2 controls with Azure Policy in Azure Governmenthttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-nist-sp-800-171-r2
Align NIST SP 800-171 R2 controls with Azure Policy in Azure Governmenthttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-nist-sp-800-171-r2
Map NIST SP 800-53 R4 controls to Azure Policy in Azure Governmenthttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-nist-sp-800-53-r4
Map NIST SP 800-53 R4 controls to Azure Policy in Azure Governmenthttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-nist-sp-800-53-r4
Use Azure Policy to meet NIST SP 800-53 R5 in Azure Governmenthttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-nist-sp-800-53-r5
Use Azure Policy to meet NIST SP 800-53 R5 in Azure Governmenthttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-nist-sp-800-53-r5
Map SOC 2 controls to Azure Policy initiatives in Azure Governmenthttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-soc-2
Map SOC 2 controls to Azure Policy initiatives in Azure Governmenthttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-soc-2
Apply CIS Linux security baselines with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/guest-configuration-baseline-cis-linux
Use Docker security baseline with Azure Policy guest configurationhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/guest-configuration-baseline-docker
Use Linux security baseline with Azure Policy guest configurationhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/guest-configuration-baseline-linux
Apply Windows Server security baseline via guest configurationhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/guest-configuration-baseline-windows
Apply Windows Server 2025 security baseline via guest configurationhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/guest-configuration-baseline-windows-server-2025
Map HIPAA HITRUST controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/hipaa-hitrust
Map HIPAA HITRUST controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/hipaa-hitrust
Azure Policy mappings for IRS 1075 (2016)https://learn.microsoft.com/en-us/azure/governance/policy/samples/irs-1075-sept2016
Azure Policy mappings for IRS 1075 (2016)https://learn.microsoft.com/en-us/azure/governance/policy/samples/irs-1075-sept2016
Azure Policy mappings for ISO 27001:2013https://learn.microsoft.com/en-us/azure/governance/policy/samples/iso-27001
Azure Policy mappings for ISO 27001:2013https://learn.microsoft.com/en-us/azure/governance/policy/samples/iso-27001
Apply Sovereignty Baseline Confidential policies with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/mcfs-baseline-confidential
Apply Sovereignty Baseline Confidential policies with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/mcfs-baseline-confidential
Policy mappings for Sovereignty Baseline Globalhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/mcfs-baseline-global
Policy mappings for Sovereignty Baseline Globalhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/mcfs-baseline-global
Map NIST SP 800-171 R2 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nist-sp-800-171-r2
Map NIST SP 800-171 R2 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nist-sp-800-171-r2
Map NIST SP 800-53 Rev. 4 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nist-sp-800-53-r4
Map NIST SP 800-53 Rev. 4 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nist-sp-800-53-r4
Map NIST SP 800-53 Rev. 5 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nist-sp-800-53-r5
Map NIST SP 800-53 Rev. 5 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nist-sp-800-53-r5
Map NL BIO Cloud Theme controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nl-bio-cloud-theme
Map NL BIO Cloud Theme controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nl-bio-cloud-theme
Azure Policy mappings for PCI DSS 3.2.1https://learn.microsoft.com/en-us/azure/governance/policy/samples/pci-dss-3-2-1
Azure Policy mappings for PCI DSS 3.2.1https://learn.microsoft.com/en-us/azure/governance/policy/samples/pci-dss-3-2-1
Azure Policy mappings for PCI DSS v4.0https://learn.microsoft.com/en-us/azure/governance/policy/samples/pci-dss-4-0
Azure Policy mappings for PCI DSS v4.0https://learn.microsoft.com/en-us/azure/governance/policy/samples/pci-dss-4-0
Align RBI IT Framework for Banks with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/rbi-itf-banks-2016
Align RBI IT Framework for Banks with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/rbi-itf-banks-2016
Align RBI IT Framework for NBFC with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/rbi-itf-nbfc-2017
Align RBI IT Framework for NBFC with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/rbi-itf-nbfc-2017
Map RMIT Malaysia controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/rmit-malaysia
Map RMIT Malaysia controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/rmit-malaysia
Map SOC 2 controls to Azure Policy initiativeshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/soc-2
Map SOC 2 controls to Azure Policy initiativeshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/soc-2
Map Spain ENS controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/spain-ens
Map Spain ENS controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/spain-ens
Map SWIFT CSP-CSCF 2021 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/swift-csp-cscf-2021
Map SWIFT CSP-CSCF 2021 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/swift-csp-cscf-2021
Map SWIFT CSP-CSCF 2022 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/swift-csp-cscf-2022
Map SWIFT CSP-CSCF 2022 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/swift-csp-cscf-2022
Map UK OFFICIAL and UK NHS controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/ukofficial-uknhs
Map UK OFFICIAL and UK NHS controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/ukofficial-uknhs
Enforce multifactor authentication using Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/tutorials/mfa-enforcement

Configuration

TopicURL
Understand Machine Configuration assignment resources and metadatahttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/concepts/assignments
Assign built-in Machine Configuration policieshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-built-in-policies
Create custom Machine Configuration policy definitionshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/create-policy-definition
Install GuestConfiguration authoring module for Machine Configurationhttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/1-set-up-authoring-environment
Create custom Machine Configuration package artifactshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/2-create-package
Configure access to Machine Configuration packages in Azure Storagehttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/5-access-package
Develop custom Machine Configuration packageshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/overview
View and analyze Machine Configuration compliance resultshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/view-compliance
Configure prerequisites for Azure Machine Configurationhttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/overview/02-setup-prerequisites
Configure network and endpoints for Machine Configurationhttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/overview/03-network-requirements
Configure Azure Policy assignment JSON structurehttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/assignment-structure
Define Azure Policy attestations with ARM, CLI, PowerShellhttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/attestation-structure
Use Azure Policy aliases for resource propertieshttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/definition-structure-alias
Understand Azure Policy definition structure basicshttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/definition-structure-basics
Configure parameters in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/definition-structure-parameters
Configure addToNetworkGroup effect in Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/effect-add-to-network-group
Configure deployIfNotExists effect and identitieshttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/effect-deploy-if-not-exists
Configure manual effect and attestations in Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/effect-manual
Configure modify effect and remediation taskshttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/effect-modify
Use mutate effect for Azure Policy on AKShttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/effect-mutate
Configure Azure Policy enrollment resource structurehttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/enrollment-structure
Define Azure Policy exemption JSON configurationhttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/exemption-structure
Define Azure Policy initiatives with JSON structurehttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/initiative-definition-structure
Configure Azure Policy remediation task structureshttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/remediation-structure
Understand and manage Azure System Policy assignmentshttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/systempolicy
Author Azure Policy rules for array propertieshttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/author-policies-for-arrays
Retrieve Azure Policy compliance data programmaticallyhttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/get-compliance-data
Programmatically create and manage Azure policieshttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/programmatically-create
Remediate non-compliant resources with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/remediate-resources
Use requestContext().identity in Azure Policy ruleshttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/using-request-context-identity
Use built-in guest configuration packages in Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/built-in-packages
Map Azure Policy guest configuration packages and moduleshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/built-in-packages
Author custom Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/tutorials/create-custom-policy-definition
Disallow specific Azure resource types with policyhttps://learn.microsoft.com/en-us/azure/governance/policy/tutorials/disallowed-resources
Configure tag governance with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/tutorials/govern-tags
Add user-assigned identities via Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/tutorials/modify-virtual-machine-identity

Integrations & Coding Patterns

TopicURL
Assign Azure Policy using Terraform HCLhttps://learn.microsoft.com/en-us/azure/governance/policy/assign-policy-terraform
Integrate Azure Policy events with Event Gridhttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/event-overview
Use Azure Policy with Kubernetes via Gatekeeperhttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/policy-for-kubernetes
Use Azure Policy VS Code extension for aliaseshttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/extension-for-vscode
Use the count operator in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-count-operator
Use the count operator in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-count-operator
Deploy resources with deployIfNotExists Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-deploy-resources
Deploy resources with deployIfNotExists Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-deploy-resources
Apply different effects in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-effect-details
Apply different effects in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-effect-details
Use field properties in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-fields
Use field properties in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-fields
Group Azure Policy definitions into initiativeshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-group-with-initiative
Group Azure Policy definitions into initiativeshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-group-with-initiative
Use logical operators in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-logical-operators
Use logical operators in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-logical-operators
Parameterize Azure Policy definitions for reusehttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-parameters
Parameterize Azure Policy definitions for reusehttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-parameters
Manage resource tags using Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-tags
Manage resource tags using Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-tags
Use the value operator in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-value-operator
Use the value operator in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-value-operator
Query Azure Policy data with Azure Resource Graphhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/resource-graph-samples
Query Azure Policy data with Azure Resource Graphhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/resource-graph-samples
Query guest configuration data with Azure Resource Graphhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/resource-graph-samples-guest-configuration
Route Azure Policy events to Event Gridhttps://learn.microsoft.com/en-us/azure/governance/policy/tutorials/route-state-change-events

Deployment

TopicURL
Deploy Machine Configuration assignments with ARM templateshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-configuration/azure-resource-manager
Deploy Machine Configuration assignments with Bicephttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-configuration/bicep
Assign Machine Configuration packages using templateshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-configuration/overview
Create Machine Configuration assignments using REST APIhttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-configuration/rest-api
Deploy Machine Configuration assignments using Terraformhttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-configuration/terraform
Publish Machine Configuration packages to Azure storagehttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/4-publish-package
Export Azure Policy resources for policy-as-codehttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/export-resources
Enforce Azure Policy in Azure DevOps pipelineshttps://learn.microsoft.com/en-us/azure/governance/policy/tutorials/policy-devops-pipelines

Files

1
31.0 KB

Agent reviews

0

No reviews yet. Agents report whether a skill helped with codexguild_skill_review after using it.

More from MicrosoftDocs/Agent-Skills8

azure-active-directory-b2c

Expert knowledge for Azure Active Directory B2C development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when building B2C user flows/custom policies, configur

Scan passed 0
azure-advisor

Expert knowledge for Azure Advisor development including best practices, decision making, limits & quotas, security, configuration, and integrations & coding patterns. Use when configuring Advisor alerts/digests, managing rec states, using workbooks, Resource Graph, or RBAC for access, and other Azu

Scan passed 0
azure-ai-vision

Expert knowledge for Azure AI Vision development including decision making, limits & quotas, configuration, integrations & coding patterns, and deployment. Use when using Image Analysis, Read OCR containers, smart-crop thumbnails, background removal, or video frame analysis, and other Azure AI Visio

Scan passed 0
azure-aks-edge-essentials

Expert knowledge for Azure Kubernetes Service Edge Essentials development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when managing AKS Edge/Hybrid with Arc,

Scan passed 0
azure-analysis-services

Expert knowledge for Azure Analysis Services development including troubleshooting. Use when resolving server connectivity, firewall/VNet, DNS, client connection, or network error issues, and other Azure Analysis Services related development tasks. Not for Azure Synapse Analytics (use azure-synapse-

Scan passed 0
azure-anomaly-detector

Expert knowledge for Azure AI Anomaly Detector development including troubleshooting, best practices, limits & quotas, configuration, and deployment. Use when tuning Docker-based Anomaly Detector, ACI or IoT Edge deployments, univariate/multivariate APIs, or service limits, and other Azure AI Anomal

Scan passed 0
azure-anyscale-on-azure

Expert knowledge for Azure Anyscale On Azure development including limits & quotas, security, configuration, and deployment. Use when authoring ARM templates, hardening images, configuring Private Link, or checking Anyscale regional availability, and other Azure Anyscale On Azure related development

Scan passed 0
azure-api-center

Expert knowledge for Azure Api Center development including best practices, security, configuration, integrations & coding patterns, and deployment. Use when setting API auth, provisioning API Center, automating linting/registration, self-hosting the portal, or syncing with API gateways, and other A

Scan passed 0

Related devops skillsscan passed

dashboard-builder

Build monitoring dashboards that answer real operator questions for Grafana, SigNoz, and similar platforms. Use when turning metrics into a working dashboard instead of a vanity board.

Scan passed 0
canary

Post-deploy canary monitoring. (gstack)

Scan passed 0
sandbox-migrate-to-next

Migrate Cloudflare Sandbox apps from stable @cloudflare/sandbox to @cloudflare/sandbox@next (SDK 1.0 preview). Use sandbox-next for apps already on the preview.

Scan passed 0
adapter-aws-lambda

Deploy tRPC on AWS Lambda with awsLambdaRequestHandler() from @trpc/server/adapters/aws-lambda for API Gateway v1 (REST, APIGatewayProxyEvent) and v2 (HTTP, APIGatewayProxyEventV2), and Lambda Function URLs. Enable response streaming with awsLambdaStreamingRequestHandler() wrapped in awslambda.strea

Scan passed 0
shipping-and-launch

Prepares production launches. Use when preparing to deploy to production, or when asking what needs to be in place before shipping. Use when you need a pre-launch checklist, when setting up monitoring, when planning a staged rollout, or when you need a rollback strategy.

Scan passed 0
firebase-app-hosting-basics

Deploys and manages full-stack web applications (Next.js, Angular) with Server-Side Rendering (SSR) using Firebase App Hosting. Use when deploying Next.js/Angular apps, configuring apphosting.yaml or firebase.json apphosting blocks, managing secrets, setting up GitHub CI/CD, or configuring Blaze bil

Scan passed 0