Microsoft Azure Fundamentals (AZ-900)Describe Azure architecture and servicesMedium
A software development company is migrating its existing applications to Azure. They need to ensure that all virtual machines deployed within a specific subscription adhere to corporate standards, such as mandatory tagging for cost allocation and specific network security group configurations. Which Azure service can enforce these rules automatically?
- AAzure Advisor
- BAzure Monitor
- CAzure Policy
- DAzure Resource Groups
Show answer & explanationAnswer & explanation
Correct answer: C. Azure Policy
Azure Policy is used to create, assign, and manage policies that enforce rules and effects over your resources to ensure compliance with corporate standards and service level agreements.
Why the other options are wrong
- A. Azure Advisor provides recommendations for best practices, but it does not enforce rules automatically.
- B. Azure Monitor collects and analyzes telemetry data from Azure resources; it does not enforce compliance policies.
- D. Azure Resource Groups are logical containers for Azure resources; they don't enforce configuration rules.
Azure Policy
A service that helps enforce organizational standards and assess compliance at scale by creating, assigning, and managing policies.
- Enforces rules and effects on resources.
- Assesses compliance.
- Can enforce mandatory tags, resource types, locations, etc.
- Works at subscription, resource group, or management group scope.
Memory trick: Azure Policy is the rulebook and the enforcer for your cloud resources.