Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceMedium
A global consulting firm uses Azure to host various client projects. They need to ensure that all resources deployed for a specific client project adhere to a consistent set of configurations, such as VM sizes, allowed resource types, and tagging standards. They want to automate the deployment of these configurations and ensure ongoing compliance. Which Azure governance feature should they use to achieve this?
- AAzure Blueprints
- BAzure Management Groups
- CAzure Resource Locks
- DAzure Monitor
Show answer & explanationAnswer & explanation
Correct answer: A. Azure Blueprints
Azure Blueprints allow you to define a repeatable set of Azure resources, policies, role assignments, and resource groups that implement and adhere to an organization's standards, patterns, and requirements. It helps to deploy consistent environments and ensure ongoing compliance, which is perfect for client projects.
Why the other options are wrong
- B. Azure Management Groups organize subscriptions into a hierarchy, but Azure Blueprints are used to define and deploy the actual consistent configurations across those subscriptions.
- C. Azure Resource Locks prevent accidental deletion or modification of resources but do not define initial configurations or ensure ongoing compliance with standards.
- D. Azure Monitor collects and analyzes telemetry data but does not define or enforce resource configurations.
Azure Blueprints
A service that allows you to define a repeatable set of Azure resources, policies, and role assignments that implement and adhere to an organization's standards and requirements.
- Orchestrates deployment of various resource types.
- Combines resource templates, policies, and RBAC.
- Ensures consistent environments and ongoing compliance.
Memory trick: Blueprint your environment for repeatable success.