iac-security
Installation
SKILL.md
Infrastructure-as-Code Security on Azure
Most cloud breaches now route through misconfigured infrastructure that was provisioned by code. Hardening the IaC pipeline — Bicep, ARM, Terraform, and the CI/CD that runs them — moves security left of the deploy: misconfigurations get caught at PR review instead of in a Defender for Cloud finding three weeks later.
When to use
Designing or hardening the IaC pipeline (GitHub Actions / Azure DevOps / GitLab) for Azure, including scanning, policy-as-code, pipeline identity, and supply-chain controls.
Do not use this skill for K8s admission control alone (defender-for-containers),
general CI/CD architecture, or app-layer security.