Azure Policy and its use cases
In Chapter 9, Describing Security Management and Capabilities of Azure, we discussed Microsoft Defender for Cloud and how it is used to manage security posture. In the Describing the security baselines for Azure section, we provided an exercise that steps through the various tiles within Microsoft Defender for Cloud, including the regulatory compliance tile. The ability to manage the Azure Security baseline and the various regulatory compliance standards that are available within Microsoft Defender for Cloud is done through Azure Policy. Azure Policy is a tool that monitors compliance based on the definitions that have been assigned to the resources that are governed by that policy or initiative.
A policy is a single definition that is assigned to a subscription or resource group. The policy looks at all the resources within the assigned group, checks for compliance on existing resources, and verifies compliance when creating resources. A policy definition...
