Summary

In this chapter, we started talking about governance and compliance in Azure. We discovered Azure Policy – a service that’s meant to simplify the management of Azure resources by providing functionality to audit, modify, or deny deployments that do not follow defined rules. We also saw that, besides having a rich catalog of inbuilt policies, Azure offers a way to deploy a custom policy. We talked about the differences between initiatives and policies as well and looked at some examples of policies to better understand their syntax and capabilities.

Becoming fluent with Azure Policy is the key to becoming a better Azure administrator. In practically all cases, when you’re tasked with managing an Azure environment, you’ll need to use Azure Policy to help you keep cloud resources in line, ensure the compliance of deployed services, and enforce internal rules of your organization without lots of effort.

In the next chapter, we’ll talk about...