Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceMedium
A global enterprise uses Azure for various business units, each with its own subscription. They need to ensure that specific compliance requirements, such as data residency in Europe for European customers, are met consistently across all relevant subscriptions without manually configuring each resource. Which Azure governance feature should they implement?
- AAzure Blueprints
- BAzure Management Groups
- CAzure Policy
- DAzure Resource Locks
Show answer & explanationAnswer & explanation
Correct answer: A. Azure Blueprints
Azure Blueprints allow you to define a repeatable set of Azure resources, policies, and role assignments that can be deployed consistently across subscriptions, ensuring compliance with organizational standards, including data residency requirements.
Why the other options are wrong
- B. Azure Management Groups help organize subscriptions into containers for unified governance, but they don't deploy resource configurations.
- C. Azure Policy enforces rules and effects on resources, but Blueprints orchestrate the deployment of multiple policy definitions, resource groups, ARM templates, and role assignments.
- D. Azure Resource Locks prevent accidental deletion or modification of critical resources.
Azure Blueprints
A service that enables you to define a repeatable set of Azure resources that implement and adhere to an organization's standards, patterns, and requirements.
- Orchestrates the deployment of various resource templates and artifacts.
- Ensures consistent deployment and compliance across subscriptions.
- Includes role assignments, policy assignments, Azure Resource Manager templates, and resource groups.
Memory trick: Blueprint: Build-it-right, Policy-tight, Role-assigned, Resource-aligned.