Implementing Azure cloud governance
The traditional approach to enforcing organizational standards is to prevent teams from creating their own services, and instead to have the IT team define and deploy services on their behalf. This approach is often the solution in on-premises situations, but it reduces the agility of teams and slows down their ability to innovate.
A good cloud governance model should seek to enforce the security and compliance standards of the organization while allowing different teams to create and own their resources in the cloud. The Azure cloud provides several options that we can use to implement this model but for our objectives, we will cover management groups, Azure Policy, Azure RBAC, and Azure Blueprints. Let's start by understanding what management groups are and how we can make use of them to implement governance in Azure.
Understanding management groups
To keep things simple, a management group is a logical construct that allows us to...
