Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceMedium
A software development company uses Azure DevOps for its CI/CD pipelines. They want to ensure that all resources deployed through these pipelines, such as virtual machines and storage accounts, are tagged consistently with department, project, and environment information. This tagging is crucial for cost allocation and resource management. Which Azure governance feature can help them achieve this consistent tagging enforcement?
- AAzure Advisor
- BAzure Resource Groups
- CAzure Management Groups
- DAzure Policy
Show answer & explanationAnswer & explanation
Correct answer: D. Azure Policy
Azure Policy can be used to enforce tagging standards. You can create a policy that audits or even denies resource creation if specific tags are missing or incorrectly formatted. This ensures consistent tagging for cost allocation and resource management.
Why the other options are wrong
- A. Azure Advisor provides recommendations, including for tagging, but does not enforce it.
- B. Azure Resource Groups are logical containers for resources but do not enforce tagging rules.
- C. Azure Management Groups organize subscriptions but do not directly enforce tagging on resources.
Azure Policy for Tagging
A specific application of Azure Policy to enforce consistent tagging conventions across Azure resources, critical for cost management, governance, and organization.
- Ensures resources have required tags.
- Can audit for missing/incorrect tags.
- Can optionally deny resource creation without specific tags.
Memory trick: Policy tags everything, or it doesn't get deployed!