Results for “azure-ad”

Detect lateral movement in Azure AD/Entra ID environments using Microsoft Graph API audit logs, Azure Sentinel KQL hunting queries, and sign-in anomaly correlation to identify privilege escalation, token theft, and cross-tenant pivoting.

Configure Microsoft Entra Privileged Identity Management to enforce just-in-time role activation, approval workflows, and access reviews for Azure AD privileged roles.

Queries Azure Monitor activity logs and sign-in logs via azure-monitor-query to detect suspicious administrative operations, impossible travel, privilege escalation, and resource modifications.

Runs a local Node.js proxy that adapts Azure OpenAI endpoints for OpenClaw, fixing the api-version query parameter issue and enabling Azure credits for subagents.

Expert knowledge for Azure Translator development including troubleshooting, best practices, decision making, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when using text/document translation APIs, Custom Translator models, containers, glossaries, or Azure AD/keys auth, and other Azure Translator related development tasks. Not for Azure AI Language (use azure-language-service), Azure AI Speech (use azure-speech), Azure AI Immersive Reader (use azure-immersive-reader), Azure AI Search (use azure-cognitive-search).

Expert knowledge for Azure Files development including best practices, decision making, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when using Azure Files/File Sync for SMB/NFS shares, cloud tiering, DFS, AD/Kerberos auth, or RAG app patterns, and other Azure Files related development tasks. Not for Azure Blob Storage (use azure-blob-storage), Azure NetApp Files (use azure-netapp-files), Azure Managed Lustre (use azure-managed-lustre).

Guides through interactive deployment of Azure OpenAI models with full control over version, SKU, capacity, content filtering, and advanced options.

Enables comprehensive security monitoring across Azure subscriptions, including cloud security posture management, workload protection, regulatory compliance assessment, and adaptive security controls.

Configure Microsoft Entra ID (Azure AD) Conditional Access policies for zero trust access control, covering signal-based policy design, device compliance, risk-based authentication, named locations, session controls, and NIST SP 1800-35 integration.

Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration for authenticating users and accessing Azure resources.

Audit Azure Blob and ADLS storage accounts for public access exposure, weak or long-lived SAS tokens, missing encryption at rest, disabled HTTPS-only traffic, and outdated TLS versions using the azure-mgmt-storage Python SDK.

Detect and investigate Azure service principal abuse including privilege escalation, credential compromise, admin consent bypass, and unauthorized enumeration in Microsoft Entra ID environments.

Execute Azure deployments for already-prepared applications using azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery and verification.

Generates CI/CD pipeline configurations for Adobe App Builder projects, including GitHub Actions workflows, Azure DevOps, and GitLab CI templates with OAuth S2S secrets injection and multi-workspace promotion.

Generate infrastructure code (Bicep/Terraform), azure.yaml, and Dockerfiles for Azure deployment, with a mandatory planning workflow.

Assess and improve the reliability posture of Azure Functions and App Service applications by scanning for zone redundancy, ZRS storage, health probes, and multi-region failover, then driving staged remediation with user confirmation.

Generates a Node.js build script that converts VitePress/GFM markdown to Azure DevOps Wiki format, handling Mermaid syntax, front matter, and links.

Run pre-deployment validation checks for Azure readiness, including configuration, infrastructure (Bicep or Terraform), RBAC role assignments, and managed identity permissions.

Integrate with Azure AI services including Search, Speech, OpenAI, and Document Intelligence for search, transcription, OCR, and text-to-speech tasks.

Detect risky OAuth application consent grants in Azure AD / Microsoft Entra ID using Microsoft Graph API, audit logs, and permission analysis to identify illicit consent grant attacks.

Provisions and manages Azure cloud services for Flutter backends, including AKS clusters, Azure Functions, SQL databases, Cosmos DB, Blob Storage, and Key Vault.

Plan and execute Azure deployments safely and repeatably for applications and infrastructure. Use this skill when users ask to deploy, publish, release, or provision workloads in Azure. Covers Infrastructure-as-Code, idempotency, health validation, and rollback strategies.

Prepare Azure environments and prerequisites before deployment. Use this skill when users ask for readiness checks, environment setup, or preflight planning. Covers landing zones, networking, identity, governance, and cost controls per Cloud Adoption Framework.

Designs Azure architectures and configures compute, storage, database, networking, identity, and security services.

Search Azure AI Search indexes using the Python SDK for full-text, vector, hybrid, and semantic search with AI enrichment.

Build search applications with full-text, vector, semantic, and hybrid search using the Azure AI Search SDK for .NET.

Retrieves real-time Azure retail pricing from the public Azure Retail Prices API and estimates Copilot Studio agent credit consumption.

Provides shared authentication utilities and data structures for Azure Communication Services, including token credential management, user identifiers, and token refresh.

Analyze Azure resource groups and generate detailed Mermaid architecture diagrams showing relationships between resources.

Manage Azure AI Foundry projects with .NET SDK: create and run agents, manage connections, datasets, deployments, evaluations, and indexes.