Azure Networking Auditv0.1.1

After migrating workloads to Azure, verify VNet connectivity, NSG rules, and UDR entries to ensure no misconfiguration caused by the migration. Use Azure CLI read-only commands to compare pre- and post-migration network topology and security rules.

Document VNet segmentation, NSG justification, and Azure Firewall logging for auditors. The skill provides step-by-step inventory and security assessment to meet PCI-DSS or ISO 27001 requirements for network isolation and access control.

Identify overly permissive NSG rules, default NSG exposure, and missing Azure Firewall policies. Use Azure CLI to list all NSG rules with priorities and detect rules allowing all traffic from public IP ranges.

Diagnose ExpressRoute BGP peering failures, VPN Gateway tunnel drops, or VNet Peering asymmetric routing. The skill guides through VNet inventory, route table analysis, and cross-region connectivity checks.

Identify unused public IPs, orphaned NICs, and underutilized Application Gateway instances to reduce Azure networking costs. Use Azure CLI to query resources and cross-reference usage metrics.

Offer recurring VNet security audits as part of a managed security service. Use this skill to automate read-only checks across client subscriptions, generating compliance reports and remediation recommendations.

Include VNet audit as a post-migration validation step in cloud migration projects. The skill ensures connectivity and security posture are verified before handoff to operations.

Integrate this skill into a SaaS platform that provides on-demand VNet security audits for Azure customers. Customers pay per audit or subscribe monthly for continuous monitoring.