Azure Policy

Azure Policy is a set of resource creation and management rules that apply across multiple subscriptions. It provides the following functions and capabilities:

• Defines what actions are allowed within a subscription
• Assesses resources to ensure that compliance standards are met
• Enforces organization mandates
• Automates the remediation process addressing drift or non-compliance

One typical example use case of Azure Policy is to limit what regions can be accessed for resources to be created so that data sovereignty can be complied with. You can even limit Virtual Machine (VM) types or storage types so that expensive or operationally inefficient resources are not created.

Table 8.1 lists the key differences to comprehend between Azure Policy and Azure Role-Based Access Control (RBAC):

Azure Policy	Azure RBAC
Controls what can be done (regardless...