Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceMedium
A global enterprise has strict regulatory requirements to ensure that all data stored in Azure remains within specific geographic boundaries (e.g., European Union, United States). Which Azure governance feature helps them enforce these data residency requirements for new resource deployments?
- AAzure Blueprints
- BAzure Resource Groups
- CAzure Management Groups
- DAzure Policy
Show answer & explanationAnswer & explanation
Correct answer: D. Azure Policy
Azure Policy is used to enforce organizational standards and assess compliance at scale. It can be used to restrict where resources can be deployed by defining allowed locations, directly addressing the data residency requirement.
Why the other options are wrong
- A. Azure Blueprints define a repeatable set of Azure resources and policies, but Azure Policy is the underlying service that enforces the location restriction within a blueprint.
- B. Azure Resource Groups are logical containers for resources, but they don't enforce policies on where resources can be deployed geographically.
- C. Azure Management Groups help manage access, policies, and compliance across multiple subscriptions, but the enforcement mechanism for location restrictions is Azure Policy.
Azure Policy
A service in Azure that helps enforce organizational standards and assess compliance at scale by defining rules for resource configurations.
- Enforces standards and compliance.
- Evaluates resource configurations.
- Can restrict resource deployment locations.
Memory trick: Policy sets the rules for your Azure playground.