Azure attestation

Skill MicrosoftDocs/Agent-Skills/skills/azure-attestation

Expert knowledge for Azure Attestation development including troubleshooting, best practices, security, configuration, and deployment. Use when validating attestation tokens, authoring policies, enforcing SGX/TPM baselines, or configuring private endpoints, and other Azure Attestation related development tasks. Not for Azure Confidential Computing (use azure-confidential-computing), Azure Virtual Enclaves (use azure-virtual-enclaves), Azure Dedicated HSM (use azure-dedicated-hsm), Azure Key Vault (use azure-key-vault).From its SKILL.md

Install

npx -y skills add MicrosoftDocs/Agent-Skills --skill azure-attestation

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

fetches URLsInstructs the agent to fetch 8 URLs, including https://learn.microsoft.com/en-us/azure/attestation/troubleshoot-guide and 7 more.

SKILL.md

6.0 KB, ~1.2k tokens by cl100k_base, as published. Nobody here has run it

Azure Attestation Skill

This skill provides expert guidance for Azure Attestation. Covers troubleshooting, best practices, security, configuration, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Troubleshooting	L33-L37	Diagnosing and fixing common Azure Attestation failures, error codes, policy/quote validation issues, configuration mistakes, and connectivity or runtime problems.
Best Practices	L38-L46	Guidance on validating attestation tokens, writing secure attestation policies, and configuring/enforcing SGX and TPM attestation baselines using sample policies.
Security	L47-L52	Using Azure Policy with Attestation, enforcing compliance, and best practices to harden, secure, and protect Azure Attestation deployments and configurations.
Configuration	L53-L69	Configuring Azure Attestation policies (grammar, versions, claim rules), policy signer certs, and monitoring/logging via Azure Monitor, CLI, PowerShell, and log schema.
Deployment	L70-L73	How to create and configure a private endpoint for Azure Attestation using PowerShell, including network setup and secure access to attestation resources.

Troubleshooting

Topic	URL
Troubleshoot common Azure Attestation errors and issues	https://learn.microsoft.com/en-us/azure/attestation/troubleshoot-guide

Best Practices

Topic	URL
Interpret and validate Azure Attestation tokens with examples	https://learn.microsoft.com/en-us/azure/attestation/attestation-token-examples
Author secure and correct Azure Attestation policies	https://learn.microsoft.com/en-us/azure/attestation/author-sign-policy
Configure custom TCB baseline enforcement for SGX attestation	https://learn.microsoft.com/en-us/azure/attestation/custom-tcb-baseline-enforcement
Use sample SGX attestation policies in Azure	https://learn.microsoft.com/en-us/azure/attestation/policy-examples
Use sample TPM attestation policies in Azure	https://learn.microsoft.com/en-us/azure/attestation/tpm-attestation-sample-policies

Security

Topic	URL
Apply built-in Azure Policy definitions for Attestation	https://learn.microsoft.com/en-us/azure/attestation/policy-reference
Harden and secure Azure Attestation deployments	https://learn.microsoft.com/en-us/azure/attestation/secure-attestation

Configuration

Topic	URL
Use Azure Attestation claim rule functions and operators	https://learn.microsoft.com/en-us/azure/attestation/claim-rule-functions
Use Azure Attestation claim rule grammar in policies	https://learn.microsoft.com/en-us/azure/attestation/claim-rule-grammar
Understand Azure Attestation claim sets and categories	https://learn.microsoft.com/en-us/azure/attestation/claim-sets
Enable diagnostic logging for Azure Attestation	https://learn.microsoft.com/en-us/azure/attestation/enable-logging
Reference for Azure Attestation monitoring and log schema	https://learn.microsoft.com/en-us/azure/attestation/logs-data-reference
Monitor Azure Attestation with Azure Monitor	https://learn.microsoft.com/en-us/azure/attestation/monitor-logs
Configure Azure Attestation policy signer certificates	https://learn.microsoft.com/en-us/azure/attestation/policy-signer-examples
Configure Azure Attestation policy language version 1.0	https://learn.microsoft.com/en-us/azure/attestation/policy-version-1-0
Configure Azure Attestation policy language version 1.1	https://learn.microsoft.com/en-us/azure/attestation/policy-version-1-1
Configure Azure Attestation policy language version 1.2	https://learn.microsoft.com/en-us/azure/attestation/policy-version-1-2
Set up Azure Attestation using Azure CLI	https://learn.microsoft.com/en-us/azure/attestation/quickstart-azure-cli
Configure Azure Attestation provider with PowerShell	https://learn.microsoft.com/en-us/azure/attestation/quickstart-powershell
Understand and use Azure Attestation log data	https://learn.microsoft.com/en-us/azure/attestation/view-logs

Deployment

Topic	URL
Create Azure Attestation private endpoint with PowerShell	https://learn.microsoft.com/en-us/azure/attestation/private-endpoint-powershell

What ships with it

Read from the repository

Just SKILL.md. No reference files, no scripts.

Gives 0 of the 12 instructions most audit compliance skills give in ~1.2k tokens

Counted across 960 of the 1,589 authors here whose files we hold, read 2026-09-06

Read product marketing context before asking questionsin 29 of 960, across 11 files
Rank findings by severityin 29 of 960, across 22 files
Generate audit reportin 22 of 960
Run the audit scriptin 20 of 960, across 19 files
Generate a prioritized action plan reportin 19 of 960, across 11 files
Ensure one H1 per pagein 15 of 960, across 5 files
Ensure sitemap exists and is accessiblein 14 of 960, across 4 files
Verify alt text on all imagesin 12 of 960, across 3 files
Determine the audit scope before startingin 12 of 960, across 4 files
Verify important pages allowed in robots.txtin 11 of 960, across 2 files
Detect business type from homepage signalsin 11 of 960, across 7 files
Delegate specialized tasks to subagentsin 11 of 960, across 7 files

Said here and by no other author read

Use the category index to locate relevant sections
Use read_file with specified lines
Use read_file on linked reference files
Suggest pulling latest version if metadata is old
Suggest installing mcp_microsoftdocs if unavailable

Grouped from the skills themselves: near-identical wordings counted once, and counted by distinct author, so one author publishing three of these counts once. Length counted with cl100k_base; the agent that loads this file may tokenize it differently.