Azure Policy Advisor

Recommend Azure Policy assignments for ARM template resources by combining three sources of truth: existing Azure subscription policy state (assignments + definitions), Microsoft Learn built-in recommendations, and ARM template configuration analysis. The skill analyses each resource, queries the live subscription, classifies gaps, and produces per-resource recommendations with severity ratings, built-in/custom definition IDs, and ready-to-use implementation options.

USE FOR

• "What Azure Policies should we enforce on this template?"
• "Audit our subscription against CIS Azure Foundations / NIST SP 800-53"
• "Which built-in initiative covers governance for this deployment?"
• "Split policy work between template fixes vs subscription-level assignments"
• "Recommend baseline policy assignments for a new subscription"

DO NOT USE FOR