# Azure Misconfiguration

> Detects common Azure security misconfigurations including public blob storage, overprivileged managed identities, and insecure ARM templates.

- Skill: `zakirkun/azure-misconfiguration` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add zakirkun/azure-misconfiguration`
- Raw SKILL.md: https://api.skillmd.com/api/skills/zakirkun/azure-misconfiguration/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: zakirkun (https://skillmd.com/u/zakirkun)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/zakirkun/azure-misconfiguration

---


# Azure Misconfiguration

## Overview
Common Azure security misconfigurations:
1. **Public blob containers**: Storage containers with anonymous read access
2. **Hardcoded connection strings**: Storage/database connection strings with keys in code
3. **Overprivileged managed identity**: Subscription-level contributor role
4. **No MFA for admin accounts**: Admin accounts without MFA requirement
5. **NSG allowing all inbound**: Network Security Groups open to internet
6. **Key Vault access policies too broad**: Full access granted to many principals

## Remediation
- Set Storage Account containers to private
- Use Managed Identity instead of hardcoded connection strings
- Apply Azure Policy to enforce security baselines
- Enable Microsoft Defender for Cloud