Security & Compliance

Deploys and manages Vercel projects using token-based auth read from the environment, covering deploy, env vars, domains, and inspection without interactive login.

Provisions Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance agent identities via Graph, wiring OAuth fmi_path token exchange and per-agent permissions.

Guides Microsoft Entra ID app registration, OAuth 2.0 setup, API permissions, client credentials, and MSAL integration via portal, CLI, or Bicep.

Runs Azure compliance and security audits with azqr plus Key Vault expiration checks, classifying findings by priority and proposing remediation across resources and certs.

Finds the least-privilege Azure RBAC role for an identity and generates the CLI commands and Bicep to assign it, including custom role definitions when no built-in fits.