Microsoft Certified: Azure Administrator AssociateManage Azure identities and governanceMedium
An organization has several Azure subscriptions and uses a management group hierarchy. They want to ensure that all new resource groups created within a specific management group automatically inherit a set of tags for cost allocation purposes. Which Azure governance feature should be used to achieve this?
- AAzure Policy
- BAzure Blueprints
- CAzure Advisor
- DAzure Resource Locks
Show answer & explanationAnswer & explanation
Correct answer: A. Azure Policy
Azure Policy can be used to enforce tagging rules, including automatically applying or requiring specific tags on resources or resource groups created within a particular scope (like a management group or subscription). This ensures consistent tagging for cost allocation.
Why the other options are wrong
- B. Azure Blueprints deploy and update entire environments, including policies and resource templates, but Policy is the direct tool for tag enforcement.
- C. Azure Advisor provides recommendations for best practices, not a mechanism for enforcing governance rules.
- D. Resource Locks prevent accidental deletion or modification of resources, not for tag enforcement.
Azure Policy for Tagging
An Azure Policy capability that allows organizations to enforce tagging standards on resources and resource groups, including automatically applying default tags or requiring specific tags upon creation.
- Enforces organizational standards and compliance
- Can automatically apply tags or audit for missing tags
- Applied at management group, subscription, or resource group scope
Memory trick: Azure Policy sets the rules for tags, like a strict librarian.