Skip to main content

AZ-104 - Governance and Compliance - Understanding Azure Policy

Control and organize Azure resources with Azure Resource Manager

Understanding Azure Policy

  • Define Azure Policy
  • Components of a Policy
  • Policy Examples

Enforce Compliance and enable auditing

Organization need to implement enterprise-level governance and compliance capabilities.

Prohibit resources
  • control costs
  • Restrict service access
Allowed Locations
  • Geographical compliance

image.png

Policy Definition

Defines the evaluation criteria for compliance, and defines the actions that take place. Either audit or deny should be something outside of compliance.

Policy Assignment

The scope at which we will assign our policy. The scope could be a management group, subscription, resource group, or resource.

Initiative Definition

 A collection of policies that are tailored to achieving a singular high-level goal together (e.g., ensuring that VMs meet standards).

image.png

Policy Definition

Evaluate if a VM is being created with our tag Project:az104. if the VM is missing the tag, then deny creation of the resource.
Policy assignment  Assign the policy at the scope of the resource where the VMs will be created

image.png

image.png


No Comments
Back to top