Microsoft Certified: Azure Administrator AssociateManage Azure identities and governanceMedium
A company has several Azure subscriptions organized under a Management Group. They want to ensure that a specific set of Azure Policies and RBAC assignments are consistently applied to all current and future subscriptions within this Management Group. Which Azure governance feature provides a way to package these artifacts and deploy them repeatedly?
- AAzure Advisor
- BAzure Blueprints
- CAzure Resource Groups
- DAzure Tags
Show answer & explanationAnswer & explanation
Correct answer: B. Azure Blueprints
Azure Blueprints allow you to define a repeatable set of Azure resources, policies, and RBAC assignments that can be consistently applied across subscriptions, making it ideal for standardizing environments and ensuring compliance.
Why the other options are wrong
- A. Azure Advisor provides recommendations for optimizing Azure deployments, not for enforcing governance through repeatable deployments.
- C. Azure Resource Groups are logical containers for resources, not for packaging and deploying governance artifacts across subscriptions.
- D. Azure Tags are used for organizing resources with metadata, not for packaging and deploying governance configurations.
Azure Blueprints
A service that enables you to define a repeatable set of Azure resources, policies, and RBAC assignments that can be consistently applied across subscriptions to ensure compliance and standardization.
- Packages policies, RBAC, ARM templates, and resource groups.
- Provides versioning for blueprints.
- Ensures consistent environment setups.
Memory trick: Blueprints are the master plans for building consistent Azure environments.