Azure Policy

Learn how to use Azure Policy, Azure Blueprints, and role-based access control (RBAC) to manage the Azure resources.

Azure Policy helps set up rules to configure security conditions. Azure policies allow us to control the type of resources we want to deploy and the kind of access we want to give. We can also restrict access using Azure Policy, to prevent unauthorized actions. Moreover, it also provides us a complianceRefers to the compliance of Azure resources with a set of defined policies. report which mentions resources that are not compliant. Companies can also use it for auditing purposes.

A company can choose Microsoft’s built-in definitions or define its own. Azure gives us the option of both. Let’s see some scenarios:

  • An organization can define its own allowed Azure locations or resource types.

  • They can standardize a specific version of SQL Server or approve custom VM images.

  • They can even enforce their custom naming convention.

Press + to interact
The Azure Policy dashboard
The Azure Policy dashboard

Azure Policy helps organizations in enforcing standards and follow compliance points. We can drill down to the resource level for access using Azure Policy.

As the businesses grow, companies launch new projects as well. In order to achieve that, an organization might require multiple Azure subscriptions as well. Therefore, different policies might be required on the basis of what type of access we have to give to the teams. Let’s say there’s a scenario where we define tag as mandatory during resource deployment.

This makes sure that we’re specifying a certain set of metadata values; otherwise, our resource won’t get deployed. These tags can help us in managing our infrastructure and also make sure we create a resource with a tag. The advantage of having ...