AZ-900 Episode 31 - Cheat Sheet

Navigation

• 🧭 Episode List
• 💬 Episode Summary
• 📚 Study cheat sheet
• 🧠 Practice Test

• Skills Learned
  • Describe the functionality and usage of Azure Policy
• Study Guide
  • Microsoft Learn: Azure Policy
  • Microsoft Documentation: Azure Policy

Azure Policy

• Designed to help with resource governance, security, compliance, cost management, etc.
• Policies focus on resource properties (RBAC focused on user actions)
• Policy definition – Defines what should happen
  • Define the condition (if/else) and the effect (deny, audit, append, modify, etc.)
  • Examples include allowed resource types, allowed locations, allowed SKUs, inherit resource tags
• Built-in and custom policies are supported
• Policy initiative – a group of policy definitions
• Policy assignment – assignment of a policy definition/initiative to a scope
  • Scopes can be assigned to
    • management groups,
    • subscriptions,
    • resource groups, and
    • resources
• Policies allow for exclusions of scopes
• Checked during resource creation or updates and existing ones with remediation tasks