Skip to content
cccskills
FreePublished on GitHub

azure-attestation

Expert knowledge for Azure Attestation development including troubleshooting, best practices, security, configuration, and deployment. Use when validating attestation tokens, authoring policies, enforcing SGX/TPM baselines, or configuring private endpoints, and other Azure Attestation related development tasks. Not for Azure Confidential Computing (use azure-confidential-computing), Azure Virtual Enclaves (use azure-virtual-enclaves), Azure Dedicated HSM (use azure-dedicated-hsm), Azure Key Vault (use azure-key-vault).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills
Works withAzure
See how to install

Files included (1)

  • SKILL.md6.0 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Azure Attestation Skill

This skill provides expert guidance for Azure Attestation. Covers troubleshooting, best practices, security, configuration, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
TroubleshootingL33-L37Diagnosing and fixing common Azure Attestation failures, error codes, policy/quote validation issues, configuration mistakes, and connectivity or runtime problems.
Best PracticesL38-L46Guidance on validating attestation tokens, writing secure attestation policies, and configuring/enforcing SGX and TPM attestation baselines using sample policies.
SecurityL47-L52Using Azure Policy with Attestation, enforcing compliance, and best practices to harden, secure, and protect Azure Attestation deployments and configurations.
ConfigurationL53-L69Configuring Azure Attestation policies (grammar, versions, claim rules), policy signer certs, and monitoring/logging via Azure Monitor, CLI, PowerShell, and log schema.
DeploymentL70-L73How to create and configure a private endpoint for Azure Attestation using PowerShell, including network setup and secure access to attestation resources.

Troubleshooting

TopicURL
Troubleshoot common Azure Attestation errors and issueshttps://learn.microsoft.com/en-us/azure/attestation/troubleshoot-guide

Best Practices

TopicURL
Interpret and validate Azure Attestation tokens with exampleshttps://learn.microsoft.com/en-us/azure/attestation/attestation-token-examples
Author secure and correct Azure Attestation policieshttps://learn.microsoft.com/en-us/azure/attestation/author-sign-policy
Configure custom TCB baseline enforcement for SGX attestationhttps://learn.microsoft.com/en-us/azure/attestation/custom-tcb-baseline-enforcement
Use sample SGX attestation policies in Azurehttps://learn.microsoft.com/en-us/azure/attestation/policy-examples
Use sample TPM attestation policies in Azurehttps://learn.microsoft.com/en-us/azure/attestation/tpm-attestation-sample-policies

Security

TopicURL
Apply built-in Azure Policy definitions for Attestationhttps://learn.microsoft.com/en-us/azure/attestation/policy-reference
Harden and secure Azure Attestation deploymentshttps://learn.microsoft.com/en-us/azure/attestation/secure-attestation

Configuration

TopicURL
Use Azure Attestation claim rule functions and operatorshttps://learn.microsoft.com/en-us/azure/attestation/claim-rule-functions
Use Azure Attestation claim rule grammar in policieshttps://learn.microsoft.com/en-us/azure/attestation/claim-rule-grammar
Understand Azure Attestation claim sets and categorieshttps://learn.microsoft.com/en-us/azure/attestation/claim-sets
Enable diagnostic logging for Azure Attestationhttps://learn.microsoft.com/en-us/azure/attestation/enable-logging
Reference for Azure Attestation monitoring and log schemahttps://learn.microsoft.com/en-us/azure/attestation/logs-data-reference
Monitor Azure Attestation with Azure Monitorhttps://learn.microsoft.com/en-us/azure/attestation/monitor-logs
Configure Azure Attestation policy signer certificateshttps://learn.microsoft.com/en-us/azure/attestation/policy-signer-examples
Configure Azure Attestation policy language version 1.0https://learn.microsoft.com/en-us/azure/attestation/policy-version-1-0
Configure Azure Attestation policy language version 1.1https://learn.microsoft.com/en-us/azure/attestation/policy-version-1-1
Configure Azure Attestation policy language version 1.2https://learn.microsoft.com/en-us/azure/attestation/policy-version-1-2
Set up Azure Attestation using Azure CLIhttps://learn.microsoft.com/en-us/azure/attestation/quickstart-azure-cli
Configure Azure Attestation provider with PowerShellhttps://learn.microsoft.com/en-us/azure/attestation/quickstart-powershell
Understand and use Azure Attestation log datahttps://learn.microsoft.com/en-us/azure/attestation/view-logs

Deployment

TopicURL
Create Azure Attestation private endpoint with PowerShellhttps://learn.microsoft.com/en-us/azure/attestation/private-endpoint-powershell

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

azure-active-directory-b2c

Free

Expert knowledge for Azure Active Directory B2C development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when building B2C user flows/custom policies, configuring IdPs/MFA, securing APIs, automating CI/CD, or monitoring with Sentinel, and other Azure Active Directory B2C related development tasks. Not for Azure Role-based access control (use azure-rbac), Azure Information Protection (use azure-information-protection), Azure Security (use azure-security), Azure Sentinel (use azure-sentinel).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

azure-advisor

Free

Expert knowledge for Azure Advisor development including best practices, decision making, limits & quotas, security, configuration, and integrations & coding patterns. Use when managing Advisor alerts, digests, recommendation states, Resource Graph queries, or RBAC access, and other Azure Advisor related development tasks. Not for Cost Management (use azure-cost-management), Azure Monitor (use azure-monitor), Azure Policy (use azure-policy), Azure Security (use azure-security).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

azure-ai-vision

Free

Expert knowledge for Azure AI Vision development including decision making, limits & quotas, configuration, integrations & coding patterns, and deployment. Use when using Image Analysis, Read OCR containers, smart-crop thumbnails, background removal, or video frame analysis, and other Azure AI Vision related development tasks. Not for Azure AI Custom Vision (use azure-custom-vision), Azure AI Video Indexer (use azure-video-indexer), Azure AI Document Intelligence (use azure-document-intelligence), Azure AI Immersive Reader (use azure-immersive-reader).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

azure-aks-edge-essentials

Free

Expert knowledge for Azure Kubernetes Service Edge Essentials development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when deploying AKS Edge/Hybrid with Arc, Azure Local, GitOps, IoT/OPC/ONVIF, or Key Vault-integrated workloads, and other Azure Kubernetes Service Edge Essentials related development tasks. Not for Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure IoT Edge (use azure-iot-edge), Azure Stack Edge (use azure-stack-edge), Azure Container Apps (use azure-container-apps).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

azure-analysis-services

Free

Expert knowledge for Azure Analysis Services development including troubleshooting. Use when resolving server connectivity, firewall/VNet, DNS, client connection, or network error issues, and other Azure Analysis Services related development tasks. Not for Azure Synapse Analytics (use azure-synapse-analytics), Azure SQL Database (use azure-sql-database), Azure SQL Managed Instance (use azure-sql-managed-instance), SQL Server on Azure Virtual Machines (use azure-sql-virtual-machines).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

azure-anyscale-on-azure

Free

Expert knowledge for Azure Anyscale On Azure development including limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when registering AKS as Anyscale clouds, wiring ACR images, enabling Private Link/RBAC, ARM-based deployments, or region checks, and other Azure Anyscale On Azure related development tasks. Not for Azure Databricks (use azure-databricks), Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure Machine Learning (use azure-machine-learning), Azure HDInsight (use azure-hdinsight).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

See all skills by MicrosoftDocs

Report a problem with this skill