Azure Policy

With Azure Policy, you can create policies that enforce rules over your Azure resources. This way, resources stay compliant with service-level agreements and corporate standards. With Azure Policy, you can evaluate all the different Azure resources for non-compliance. For example, you can create a policy to allow only a certain size of VM in your Azure environment. When the policy is created, Azure will check all the new and existing VMs to see whether they apply to this policy.

Azure Policy differs from RBAC because Azure Policy focuses on controlling how resource properties can be configured, while RBAC focuses on user actions at different scopes. For example, a user can be granted the owner role in a resource group, which will give the user full rights to that resource group, but a policy might still prevent them creating a specific type of resource or setting a particular property.

Azure offers built-in policies and custom policies. Some examples of these built...