菜单
Review FederalAVD configuration evidence against documented NIST, FedRAMP High, DoD IL4 or IL5, CMMC, HIPAA, CJIS, StateRAMP, IRS 1075, ISO 27001, or Zero Trust mappings. Use when assessing parameter files, identifying control gaps, or producing a control-to-feature evidence table.
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/Azure/FederalAVD --skill federalavd-compliance-review命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
Modify and validate FederalAVD Bicep templates, generated ARM JSON, parameters, and uiFormDefinition files. Use when changing deployment resources, adding parameters or outputs, synchronizing Bicep with JSON, publishing Template Specs, or debugging portal form behavior.
Create and review KQL for the FederalAVD AVD Alerts add-on. Use when adding or changing scheduled query alerts, comparing alert logic with Microsoft AVD Insights workbooks, investigating query failures, or documenting intentional workbook deviations.
Review FederalAVD deployments and image artifacts for Azure Government Secret or Top Secret air-gapped readiness. Use when auditing downloads.json, finding public network dependencies, preparing transfer inventories, validating pre-staged files, or checking that image builds and host pools avoid internet runtime downloads.
正在显示 SKILL.md
| name | federalavd-compliance-review |
| description | Review FederalAVD configuration evidence against documented NIST, FedRAMP High, DoD IL4 or IL5, CMMC, HIPAA, CJIS, StateRAMP, IRS 1075, ISO 27001, or Zero Trust mappings. Use when assessing parameter files, identifying control gaps, or producing a control-to-feature evidence table. |
| argument-hint | [framework and parameter files] |
This skill produces engineering evidence, not an authorization, attestation, or certification.
Ask for the target framework, impact level, Azure cloud, workload type, and all deployment parameter files in scope.
Read docs/compliance.md as the repository authority and verify cited external framework or
Azure requirements against current official sources when the conclusion depends on them.
Collect relevant parameter evidence across all supplied files:
& .github/skills/federalavd-compliance-review/scripts/Get-ComplianceParameterEvidence.ps1 `
-ParameterPath <security-parameters>,<image-management-parameters>,<host-pool-parameters>
Separate controls into automatic, configurable, partial, external, and out of scope. Do not describe a configurable control as implemented without parameter or deployed-resource evidence.
Map each control to the exact Bicep resource, parameter value, diagnostic setting, policy, or external responsibility that provides evidence.
Account for conditional applicability such as pooled versus personal backup, Commercial versus Government regions, and Dedicated Host requirements in IL5 Government regions.
Surface documented gaps, including supplemental Windows Security event collection, MFA and Conditional Access, SIEM integration, ASR where required, and organizational procedures.
Identify absent or conflicting parameter evidence as Not verified, not automatically non-compliant. Defaults must be confirmed in the exact deployed template version.
Produce a table with control, requirement, implementation type, evidence, status, gap, and owner.
State the review scope, source versions or retrieval dates, assumptions, and required assessor validation. Never claim that FederalAVD alone guarantees compliance.
See review boundaries before reporting conclusions.