Microsoft Azure Fundamentals (AZ-900)Describe Azure architecture and servicesMedium
A global enterprise needs to ensure that their Azure resources are consistently configured across multiple subscriptions and resource groups, adhering to corporate standards for security, compliance, and naming conventions. They want to define a set of rules that can be automatically enforced and audited. Which Azure service is best suited for this requirement?
- AAzure Advisor
- BAzure Resource Manager (ARM) templates
- CAzure Monitor
- DAzure Policy
Show answer & explanationAnswer & explanation
Correct answer: D. Azure Policy
Azure Policy allows you to create, assign, and manage policies that enforce rules and effects over your resources. It ensures compliance with corporate standards by evaluating resources for non-compliance and can automatically remediate issues.
Why the other options are wrong
- A. Azure Advisor provides recommendations for cost optimization, performance, security, and reliability, but does not enforce rules.
- B. ARM templates are used for declarative deployment of resources, but they don't continuously enforce compliance or audit existing resources against defined rules.
- C. Azure Monitor collects and analyzes telemetry data from your Azure and on-premises environments, but it doesn't enforce configuration policies.
Azure Policy
A service in Azure that allows you to create, assign, and manage policies to enforce rules and effects over your resources. It ensures compliance with corporate standards.
- Enforces rules and standards
- Audits resource compliance
- Can remediate non-compliant resources
- Applies at subscription or resource group scope
Memory trick: Policy is the rulebook for your Azure kingdom.