Enterprise-grade Azure governance, security, and compliance framework. Combines Microsoft Cloud Adoption Framework (CAF) naming standards with comprehensive security architecture (Zero Trust), compliance frameworks (NIST, SOC2, PCI-DSS, HIPAA), and best practices. Provides naming validation, security audits, RBAC design, and compliance checklists for production-ready Azure deployments.
Master enterprise-level Azure governance, security, and compliance. This skill combines Microsoft Cloud Adoption Framework (CAF) naming standards with comprehensive security architecture (Zero Trust principles), compliance frameworks (NIST, SOC 2, PCI-DSS, HIPAA), and operational best practices. Design secure, compliant, and scalable Azure infrastructure aligned with industry standards.
Design and validate Azure resource naming strategies that are:
🎯 Interactive Decision Guide:
Use references/naming-decision-guide.md for step-by-step guidance:
📚 Detailed Reference:
See references/naming-conventions.md for:
Usage Pattern:
python scripts/generate_naming.py for interactive helppython scripts/validate_naming.py --resource-group <name>Implement security controls across Azure infrastructure using:
Reference references/security-best-practices.md for:
Key Security Principles:
Validate resource naming and security configurations using Python scripts in scripts/:
validate_naming.py
python scripts/validate_naming.py --resource-group mygroup --check-allsecurity_audit.py
python scripts/security_audit.py --resource-group mygroup --severity highcompliance_checker.py
python scripts/compliance_checker.py --framework nist --resource-group mygroupStructure Azure resources using hierarchies that support:
Hierarchy Template:
Subscription (billing boundary)
├── Resource Group: rg-{org}-{workload}-{env}
│ ├── Compute: asp-{org}-{workload}-{env}
│ ├── Storage: st{org}{env}001
│ ├── Database: sqldb-{org}-{workload}-{env}
│ └── Security: kv-{org}-{env}
├── Resource Group: rg-{org}-{workload}-{env}
└── Resource Group: rg-{org}-platform-{env}
validate_naming.py against all resource namessecurity-best-practices.md checklistcompliance_checker.py for your frameworksecurity_audit.py to establish baseline# Validate current resources
python scripts/validate_naming.py --resource-group oldgroup --check-all
# Identify violations
python scripts/validate_naming.py --resource-group oldgroup --report violations.json
# Create migration plan with new compliant names
# Use references/naming-conventions.md to determine new names
references/security-best-practices.md section on Zero Trustpython scripts/security_audit.py --resource-group mygrouppython scripts/security_audit.py --resource-group mygrouppython scripts/compliance_checker.py --framework soc2references/security-best-practices.mdpython scripts/compliance_checker.py --framework soc2 --schedule monthlyreferences/naming-conventions.md section on multi-tenant patternsrg-{tenant}-{workload}-{env}