AuditClaw Azure

Companion skill for auditclaw-grc. Collects compliance evidence from Azure subscriptions using read-only API calls.

12 checks | Reader + Security Reader roles only | Evidence stored in shared GRC database

Security Model

• Read-only access: Requires only Reader + Security Reader roles (subscription-level). No write/modify permissions.
• Credentials: Uses DefaultAzureCredential (service principal env vars, az login, or managed identity). No credentials stored by this skill.
• Dependencies: Azure SDK packages (all pinned in requirements.txt)
• Data flow: Check results stored as evidence in ~/.openclaw/grc/compliance.sqlite via auditclaw-grc

Prerequisites

• Azure credentials configured (service principal or az login)
• pip install -r scripts/requirements.txt
• auditclaw-grc skill installed and initialized