How do I install the Cis Azure Database 2.5 skill?

Run npx skillmds@latest add cyberstrikeus/cis-azure-database-2-5 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Cis Azure Database 2.5 skill do?

Ensure that 'System Assigned Managed Identity' is set to 'On' It is listed under DevOps & Infra on SkillMD.

Is Cis Azure Database 2.5 safe to use?

SkillMD's automated safety review verdict for this skill is PASS. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Cis Azure Database 2.5?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Cis Azure Database 2.5 free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Cis Azure Database 2.5?

cyberstrikeus (@cyberstrikeus) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Cis Azure Database 2.5 by cyberstrikeus

Name: Cis Azure Database 2.5
Author: cyberstrikeus

File contents

2.5 Ensure that 'System Assigned Managed Identity' is set to 'On' (Manual)

Profile Applicability

Level 1

Description

System Assigned Managed Identities provide the Azure Cache for Redis instance with a unique account like a service principle but automatically assigned and managed by Azure. These identities are unique to the resource instance they are created for, and removed when the resource is deleted.

Rationale

The System Assigned Managed Identity is authenticated with Entra ID, and allows for privileges required for the instance of Azure Cache for Redis to be granted or restricted using Azure Role Based Access Control (RBAC). Additionally, the managed identity provides a means for the Azure Cache for Redis instance to authenticate without storing credentials in code.

Impact

No additional cost or performance impact is expected.

Audit Procedure

Audit From Azure Portal

Search for and open the Azure Cache for Redis service
For each instance, repeat the remaining steps
Click on the name of the instance
In the blade menu on the left, under Settings, click on Identity
Under the System assigned tab, ensure that Status is set to On.

If Yes is selected and Object (principal) ID is populated, the configuration for that instance is compliant.

Expected Result

The System assigned managed identity Status should be set to On and an Object (principal) ID should be populated.

Remediation

Remediate From Azure Portal

Search for and open the Azure Cache for Redis service
For each instance, repeat the remaining steps
Click on the name of the instance
In the blade menu on the left, under Settings, click on Identity
Under the System assigned tab, toggle the status to On
Click the Save button
In the pop-up dialog titled Enable system assigned managed identity that appears after clicking save, click the Yes button.

Default Value

By default, System Assigned Managed Identity of Off.

References

https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-managed-identity

CIS Controls

Controls Version	Control	IG 1	IG 2	IG 3
v8	5.5 Establish and Maintain an Inventory of Service Accounts		X	X

---name: cis-azure-database-2-5description: Ensure that 'System Assigned Managed Identity' is set to 'On'---# 2.5 Ensure that 'System Assigned Managed Identity' is set to 'On' (Manual)## Profile Applicability- Level 1## DescriptionSystem Assigned Managed Identities provide the Azure Cache for Redis instance with a unique account like a service principle but automatically assigned and managed by Azure. These identities are unique to the resource instance they are created for, and removed when the resource is deleted.## RationaleThe System Assigned Managed Identity is authenticated with Entra ID, and allows for privileges required for the instance of Azure Cache for Redis to be granted or restricted using Azure Role Based Access Control (RBAC). Additionally, the managed identity provides a means for the Azure Cache for Redis instance to authenticate without storing credentials in code.## ImpactNo additional cost or performance impact is expected.## Audit Procedure### Audit From Azure Portal1. Search for and open the `Azure Cache for Redis` service2. For each instance, repeat the remaining steps3. Click on the name of the instance4. In the blade menu on the left, under Settings, click on **Identity**5. Under the `System assigned` tab, ensure that `Status` is set to **On**.If **Yes** is selected and `Object (principal) ID` is populated, the configuration for that instance is compliant.## Expected ResultThe `System assigned` managed identity `Status` should be set to **On** and an `Object (principal) ID` should be populated.## Remediation### Remediate From Azure Portal1. Search for and open the `Azure Cache for Redis` service2. For each instance, repeat the remaining steps3. Click on the name of the instance4. In the blade menu on the left, under Settings, click on **Identity**5. Under the `System assigned` tab, toggle the status to **On**6. Click the **Save** button7. In the pop-up dialog titled `Enable system assigned managed identity` that appears after clicking save, click the **Yes** button.## Default ValueBy default, System Assigned Managed Identity of **Off**.## References1. [https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-managed-identity](https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-managed-identity)## CIS Controls| Controls Version | Control | IG 1 | IG 2 | IG 3 || ---------------- | ----------------------------------------------------------- | ---- | ---- | ---- || v8 | 5.5 Establish and Maintain an Inventory of Service Accounts | | X | X |

Frequently asked questions

Cis Azure Database 2.5