skillZs
★ LIVE SKILL TAGS ★
>>> LIVE SKILLS INDEX <<<
* OPEN SOURCE *
NO LOGIN, NO TRACKING
※ REAL INSTALL DATA ※
← back to all skills
microsoftdocs/agent-skills194 installs

azure-policy

Expert knowledge for Azure Policy development including troubleshooting, best practices, decision making, architecture & design patterns, security, configuration, integrations & coding patterns, and deployment. Use when authoring Azure Policy JSON, deploying via ARM/Bicep/Terraform, enforcing security baselines, automating CI/CD, or using Machine Configuration, and other Azure Policy related development tasks. Not for Azure Blueprints (use azure-blueprints), Azure Role-based access control (use azure-rbac), Azure Resource Manager (use azure-resource-manager), Azure Security (use azure-security).

How do I install this agent skill?

npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-policy
view source ↗

Is this agent skill safe to install?

  • Gen Agent Trust Hubpass

    The skill provides expert guidance for Azure Policy by linking to and fetching documentation from official Microsoft Learn resources. All external references target official domains and repositories associated with the author.

  • Socketpass

    No alerts

  • Snykwarn

    Risk: MEDIUM · 1 issue

  • Runlayerpass

    1/1 file flagged

  • ZeroLeakspass

    Score: 93/100 · 2 sections analyzed

What does this agent skill do?

Azure Policy Skill

This skill provides expert guidance for Azure Policy. Covers troubleshooting, best practices, decision making, architecture & design patterns, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
TroubleshootingL36-L42Diagnosing and fixing Azure Policy non-compliance, Machine Configuration deployment issues, and common policy/SDK errors (evaluation failures, assignment problems, and API/CLI issues).
Best PracticesL43-L50Best practices for safely testing and deploying Azure Policy and Machine/Guest Configuration, including PSDSC behavior changes, impact evaluation, and safe rollout strategies.
Decision MakingL51-L58Guidance on planning migrations from DSC/Automanage to Machine Configuration/Azure Policy and choosing recommended policy definitions for managing and securing VMs.
Architecture & Design PatternsL59-L63Designing Azure Policy-as-Code workflows, integrating with CI/CD, GitOps, and approvals, and structuring policy repos, environments, and automation for scalable governance.
SecurityL64-L168Using Azure Policy for security/compliance: deploying security baselines, mapping to standards (CIS, NIST, ISO, PCI, FedRAMP, etc.), and enforcing regulatory and MFA requirements.
ConfigurationL169-L208Designing, assigning, and managing Azure Policy and Machine Configuration: JSON structures, effects, guest config packages, compliance data, remediation, tags, identities, and exemptions.
Integrations & Coding PatternsL209-L238Patterns for writing reusable Azure Policy definitions (operators, fields, effects, tags, initiatives) and integrating/automating them via Terraform, Kubernetes/Gatekeeper, VS Code, Event Grid, and Resource Graph
DeploymentL239-L249How to deploy and assign Machine Configuration packages via ARM/Bicep/Terraform/REST, publish them to storage, export policy for policy-as-code, and enforce Azure Policy in DevOps pipelines

Troubleshooting

TopicURL
Troubleshoot Azure Machine Configuration deploymentshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/overview/04-operations-troubleshooting
Diagnose causes of Azure Policy non-compliancehttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/determine-non-compliance
Troubleshoot common Azure Policy errors and SDK issueshttps://learn.microsoft.com/en-us/azure/governance/policy/troubleshoot/general

Best Practices

TopicURL
Test Machine Configuration packages with GuestConfiguration toolshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/3-test-package
Understand PSDSC behavior changes in Machine Configurationhttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/whats-new/psdsc-in-machine-configuration
Evaluate impact before deploying new Azure policieshttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/evaluate-impact
Apply safe deployment practices to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/policy-safe-deployment-practices

Decision Making

TopicURL
Plan migration from Azure Automation DSC to Machine Configurationhttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/whats-new/migrating-from-azure-automation
Plan migration from DSC extension to Machine Configurationhttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/whats-new/migrating-from-dsc-extension
Select recommended Azure Policy definitions for VMshttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/recommended-policies
Plan migration from Automanage Best Practices to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/migrate-from-automanage-best-practices

Architecture & Design Patterns

TopicURL
Design Azure Policy as Code governance workflowshttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/policy-as-code

Security

TopicURL
Deploy Machine Configuration security baseline policieshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-security-baselines/deploy-a-baseline-policy-assignment
Customize Machine Configuration security baseline parametershttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-security-baselines/specify-custom-parameters-for-baseline-policy
Author JSON parameters for Machine Configuration baselineshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-security-baselines/understand-baseline-settings-parameter
Sign Machine Configuration packages and enforce signed contenthttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/6-sign-package
Use regulatory compliance initiatives in Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/regulatory-compliance
Map Australia ISM PROTECTED controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/australia-ism
Map Australia ISM PROTECTED controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/australia-ism
Implement Microsoft cloud security benchmark via Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/azure-security-benchmark
Implement Microsoft cloud security benchmark via Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/azure-security-benchmark
Map Azure Policy to Canada Federal PBMMhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/canada-federal-pbmm
Map Azure Policy to Canada Federal PBMMhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/canada-federal-pbmm
Azure Policy mappings for CIS Azure 1.1.0https://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-1-1-0
Azure Policy mappings for CIS Azure 1.1.0https://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-1-1-0
Align CIS Azure 1.3.0 controls with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-1-3-0
Align CIS Azure 1.3.0 controls with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-1-3-0
Align CIS Azure 1.4.0 controls with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-1-4-0
Align CIS Azure 1.4.0 controls with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-1-4-0
Align CIS Azure 2.0.0 controls with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-2-0-0
Align CIS Azure 2.0.0 controls with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-2-0-0
Enforce CIS benchmarks on AlmaLinux via Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/alma-ado
Apply CIS benchmarks to AKS Optimized Azure Linuxhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/azure-linux-ado
Configure CIS benchmarks for Debian via Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/debian-ado
Enforce CIS benchmarks on Oracle Linux with Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/oracle-ado
Apply CIS benchmarks to RHEL via Machine Configurationhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/rhel-ado
Configure CIS benchmarks for Rocky Linux in Azurehttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/rocky-ado
Apply CIS benchmarks to SUSE Linux Enterprisehttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/suse-ado
Enforce CIS benchmarks on Ubuntu via Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-linux/ubuntu-ado
Map CMMC Level 3 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cmmc-l3
Map CMMC Level 3 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/cmmc-l3
Map FedRAMP High controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/fedramp-high
Map FedRAMP High controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/fedramp-high
Map FedRAMP Moderate controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/fedramp-moderate
Map FedRAMP Moderate controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/fedramp-moderate
Implement Gov cloud security benchmark via Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-azure-security-benchmark
Implement Gov cloud security benchmark via Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-azure-security-benchmark
Use CIS Azure 1.1.0 benchmark with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-cis-azure-1-1-0
Use CIS Azure 1.1.0 benchmark with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-cis-azure-1-1-0
Align CIS Azure 1.3.0 (Gov) controls with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-cis-azure-1-3-0
Align CIS Azure 1.3.0 (Gov) controls with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-cis-azure-1-3-0
Map CMMC Level 3 (Gov) controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-cmmc-l3
Map CMMC Level 3 (Gov) controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-cmmc-l3
Map FedRAMP High (Gov) controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-fedramp-high
Map FedRAMP High (Gov) controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-fedramp-high
Map FedRAMP Moderate (Gov) controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-fedramp-moderate
Map FedRAMP Moderate (Gov) controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-fedramp-moderate
Implement IRS 1075 controls using Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-irs-1075-sept2016
Implement IRS 1075 controls using Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-irs-1075-sept2016
Map ISO 27001:2013 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-iso-27001
Map ISO 27001:2013 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-iso-27001
Align NIST SP 800-171 R2 controls with Azure Policy in Azure Governmenthttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-nist-sp-800-171-r2
Align NIST SP 800-171 R2 controls with Azure Policy in Azure Governmenthttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-nist-sp-800-171-r2
Map NIST SP 800-53 R4 controls to Azure Policy in Azure Governmenthttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-nist-sp-800-53-r4
Map NIST SP 800-53 R4 controls to Azure Policy in Azure Governmenthttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-nist-sp-800-53-r4
Use Azure Policy to meet NIST SP 800-53 R5 in Azure Governmenthttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-nist-sp-800-53-r5
Use Azure Policy to meet NIST SP 800-53 R5 in Azure Governmenthttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-nist-sp-800-53-r5
Map SOC 2 controls to Azure Policy initiatives in Azure Governmenthttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-soc-2
Map SOC 2 controls to Azure Policy initiatives in Azure Governmenthttps://learn.microsoft.com/en-us/azure/governance/policy/samples/gov-soc-2
Apply CIS Linux security baselines with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/guest-configuration-baseline-cis-linux
Use Docker security baseline with Azure Policy guest configurationhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/guest-configuration-baseline-docker
Use Linux security baseline with Azure Policy guest configurationhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/guest-configuration-baseline-linux
Apply Windows Server security baseline via guest configurationhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/guest-configuration-baseline-windows
Apply Windows Server 2025 security baseline via guest configurationhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/guest-configuration-baseline-windows-server-2025
Map HIPAA HITRUST controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/hipaa-hitrust
Map HIPAA HITRUST controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/hipaa-hitrust
Azure Policy mappings for IRS 1075 (2016)https://learn.microsoft.com/en-us/azure/governance/policy/samples/irs-1075-sept2016
Azure Policy mappings for IRS 1075 (2016)https://learn.microsoft.com/en-us/azure/governance/policy/samples/irs-1075-sept2016
Azure Policy mappings for ISO 27001:2013https://learn.microsoft.com/en-us/azure/governance/policy/samples/iso-27001
Azure Policy mappings for ISO 27001:2013https://learn.microsoft.com/en-us/azure/governance/policy/samples/iso-27001
Apply Sovereignty Baseline Confidential policies with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/mcfs-baseline-confidential
Apply Sovereignty Baseline Confidential policies with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/mcfs-baseline-confidential
Policy mappings for Sovereignty Baseline Globalhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/mcfs-baseline-global
Policy mappings for Sovereignty Baseline Globalhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/mcfs-baseline-global
Map NIST SP 800-171 R2 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nist-sp-800-171-r2
Map NIST SP 800-171 R2 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nist-sp-800-171-r2
Map NIST SP 800-53 Rev. 4 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nist-sp-800-53-r4
Map NIST SP 800-53 Rev. 4 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nist-sp-800-53-r4
Map NIST SP 800-53 Rev. 5 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nist-sp-800-53-r5
Map NIST SP 800-53 Rev. 5 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nist-sp-800-53-r5
Map NL BIO Cloud Theme controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nl-bio-cloud-theme
Map NL BIO Cloud Theme controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/nl-bio-cloud-theme
Azure Policy mappings for PCI DSS 3.2.1https://learn.microsoft.com/en-us/azure/governance/policy/samples/pci-dss-3-2-1
Azure Policy mappings for PCI DSS 3.2.1https://learn.microsoft.com/en-us/azure/governance/policy/samples/pci-dss-3-2-1
Azure Policy mappings for PCI DSS v4.0https://learn.microsoft.com/en-us/azure/governance/policy/samples/pci-dss-4-0
Azure Policy mappings for PCI DSS v4.0https://learn.microsoft.com/en-us/azure/governance/policy/samples/pci-dss-4-0
Align RBI IT Framework for Banks with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/rbi-itf-banks-2016
Align RBI IT Framework for Banks with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/rbi-itf-banks-2016
Align RBI IT Framework for NBFC with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/rbi-itf-nbfc-2017
Align RBI IT Framework for NBFC with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/rbi-itf-nbfc-2017
Map RMIT Malaysia controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/rmit-malaysia
Map RMIT Malaysia controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/rmit-malaysia
Map SOC 2 controls to Azure Policy initiativeshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/soc-2
Map SOC 2 controls to Azure Policy initiativeshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/soc-2
Map Spain ENS controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/spain-ens
Map Spain ENS controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/spain-ens
Map SWIFT CSP-CSCF 2021 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/swift-csp-cscf-2021
Map SWIFT CSP-CSCF 2021 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/swift-csp-cscf-2021
Map SWIFT CSP-CSCF 2022 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/swift-csp-cscf-2022
Map SWIFT CSP-CSCF 2022 controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/swift-csp-cscf-2022
Map UK OFFICIAL and UK NHS controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/ukofficial-uknhs
Map UK OFFICIAL and UK NHS controls to Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/ukofficial-uknhs
Enforce multifactor authentication using Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/tutorials/mfa-enforcement

Configuration

TopicURL
Understand Machine Configuration assignment resources and metadatahttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/concepts/assignments
Assign built-in Machine Configuration policieshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-built-in-policies
Create custom Machine Configuration policy definitionshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/create-policy-definition
Install GuestConfiguration authoring module for Machine Configurationhttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/1-set-up-authoring-environment
Create custom Machine Configuration package artifactshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/2-create-package
Configure access to Machine Configuration packages in Azure Storagehttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/5-access-package
Develop custom Machine Configuration packageshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/overview
View and analyze Machine Configuration compliance resultshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/view-compliance
Configure prerequisites for Azure Machine Configurationhttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/overview/02-setup-prerequisites
Configure network and endpoints for Machine Configurationhttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/overview/03-network-requirements
Configure Azure Policy assignment JSON structurehttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/assignment-structure
Define Azure Policy attestations with ARM, CLI, PowerShellhttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/attestation-structure
Use Azure Policy aliases for resource propertieshttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/definition-structure-alias
Understand Azure Policy definition structure basicshttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/definition-structure-basics
Configure parameters in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/definition-structure-parameters
Configure addToNetworkGroup effect in Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/effect-add-to-network-group
Configure deployIfNotExists effect and identitieshttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/effect-deploy-if-not-exists
Configure manual effect and attestations in Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/effect-manual
Configure modify effect and remediation taskshttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/effect-modify
Use mutate effect for Azure Policy on AKShttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/effect-mutate
Configure Azure Policy enrollment resource structurehttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/enrollment-structure
Define Azure Policy exemption JSON configurationhttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/exemption-structure
Define Azure Policy initiatives with JSON structurehttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/initiative-definition-structure
Configure Azure Policy remediation task structureshttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/remediation-structure
Understand and manage Azure System Policy assignmentshttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/systempolicy
Author Azure Policy rules for array propertieshttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/author-policies-for-arrays
Retrieve Azure Policy compliance data programmaticallyhttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/get-compliance-data
Programmatically create and manage Azure policieshttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/programmatically-create
Remediate non-compliant resources with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/remediate-resources
Use requestContext().identity in Azure Policy ruleshttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/using-request-context-identity
Use built-in guest configuration packages in Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/built-in-packages
Map Azure Policy guest configuration packages and moduleshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/built-in-packages
Author custom Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/tutorials/create-custom-policy-definition
Disallow specific Azure resource types with policyhttps://learn.microsoft.com/en-us/azure/governance/policy/tutorials/disallowed-resources
Configure tag governance with Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/tutorials/govern-tags
Add user-assigned identities via Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/tutorials/modify-virtual-machine-identity

Integrations & Coding Patterns

TopicURL
Assign Azure Policy using Terraform HCLhttps://learn.microsoft.com/en-us/azure/governance/policy/assign-policy-terraform
Integrate Azure Policy events with Event Gridhttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/event-overview
Use Azure Policy with Kubernetes via Gatekeeperhttps://learn.microsoft.com/en-us/azure/governance/policy/concepts/policy-for-kubernetes
Use Azure Policy VS Code extension for aliaseshttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/extension-for-vscode
Use the count operator in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-count-operator
Use the count operator in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-count-operator
Deploy resources with deployIfNotExists Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-deploy-resources
Deploy resources with deployIfNotExists Azure Policyhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-deploy-resources
Apply different effects in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-effect-details
Apply different effects in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-effect-details
Use field properties in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-fields
Use field properties in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-fields
Group Azure Policy definitions into initiativeshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-group-with-initiative
Group Azure Policy definitions into initiativeshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-group-with-initiative
Use logical operators in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-logical-operators
Use logical operators in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-logical-operators
Parameterize Azure Policy definitions for reusehttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-parameters
Parameterize Azure Policy definitions for reusehttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-parameters
Manage resource tags using Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-tags
Manage resource tags using Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-tags
Use the value operator in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-value-operator
Use the value operator in Azure Policy definitionshttps://learn.microsoft.com/en-us/azure/governance/policy/samples/pattern-value-operator
Query Azure Policy data with Azure Resource Graphhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/resource-graph-samples
Query Azure Policy data with Azure Resource Graphhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/resource-graph-samples
Query guest configuration data with Azure Resource Graphhttps://learn.microsoft.com/en-us/azure/governance/policy/samples/resource-graph-samples-guest-configuration
Route Azure Policy events to Event Gridhttps://learn.microsoft.com/en-us/azure/governance/policy/tutorials/route-state-change-events

Deployment

TopicURL
Deploy Machine Configuration assignments with ARM templateshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-configuration/azure-resource-manager
Deploy Machine Configuration assignments with Bicephttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-configuration/bicep
Assign Machine Configuration packages using templateshttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-configuration/overview
Create Machine Configuration assignments using REST APIhttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-configuration/rest-api
Deploy Machine Configuration assignments using Terraformhttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-configuration/terraform
Publish Machine Configuration packages to Azure storagehttps://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/develop-custom-package/4-publish-package
Export Azure Policy resources for policy-as-codehttps://learn.microsoft.com/en-us/azure/governance/policy/how-to/export-resources
Enforce Azure Policy in Azure DevOps pipelineshttps://learn.microsoft.com/en-us/azure/governance/policy/tutorials/policy-devops-pipelines

Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.

<a href="https://skillzs.dev/skills/microsoftdocs/agent-skills/azure-policy">View azure-policy on skillZs</a>