Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceMedium
A global consulting firm uses Azure to host various client projects. They need to ensure that all virtual machines deployed for client projects automatically have a specific set of tags (e.g., ClientName, ProjectID, CostCenter) applied at creation time to facilitate accurate cost allocation and reporting. Which Azure governance feature should they use to enforce this tagging policy?
- AAzure Resource Groups
- BAzure Blueprints
- CAzure Policy
- DAzure Management Groups
Show answer & explanationAnswer & explanation
Correct answer: C. Azure Policy
Azure Policy can be used to enforce specific tagging requirements. You can create a policy definition that mandates the presence of certain tags and, optionally, auto-applies them or remediates non-compliant resources, ensuring consistent tagging for cost allocation.
Why the other options are wrong
- A. Azure Resource Groups are for organizing resources, not for enforcing tagging policies across resources within them.
- B. Azure Blueprints can include policy assignments for tagging, but Azure Policy is the underlying mechanism that enforces the tagging rule.
- D. Azure Management Groups provide hierarchy for applying policies, but Azure Policy is the actual service that enforces the tagging rules.
Azure Policy for Tagging
Azure Policy can enforce tagging standards by requiring specific tags on resources, automatically applying default tags, or auditing for non-compliant tags.
- Enforces tagging standards.
- Can require specific tags.
- Can automatically apply tags.
- Crucial for cost allocation and reporting.
Memory trick: Policy ensures your tags are always on point, no exceptions.