Azure Policy

  • Designed to help with resource governance, security, compliance, cost management, etc.
  • Policies focus on resource properties (RBAC focused on user actions)
  • Policy definition – Defines what should happen
    • Define the condition (if/else) and the effect (deny, audit, append, modify, etc.)
    • Examples include allowed resource types, allowed locations, allowed SKUs, inherit resource tags
  • Built-in and custom policies are supported
  • Policy initiative – a group of policy definitions
  • Policy assignment – assignment of a policy definition/initiative to a scope
    • Scopes can be assigned to
      • management groups,
      • subscriptions,
      • resource groups, and
      • resources
  • Policies allow for exclusions of scopes
  • Checked during resource creation or updates and existing ones with remediation tasks
◀ Previous Episode Next Episode ▶

Adam Marczak

Programmer, architect, trainer, blogger, evangelist are just a few of my titles. What I really am, is a passionate technology enthusiast. I take great pleasure in learning new technologies and finding ways in which this can aid people every day. My latest passion is running an Azure 4 Everyone YouTube channel, where I show that Azure really is for everyone!

Did you enjoy the article?

Share it!

More tagged posts