Azure Policy
Azure Policy is an Azure governance service that evaluates resources against organizational rules and audits or enforces compliance.
Azure Security
Azure Policy is an Azure governance service that evaluates resources against organizational rules and can enforce or audit compliance.
- How it is used
- Applies governance guardrails that assess, enforce, or remediate resource configurations against business and security rules.
- How deep it goes
- Explains definitions, initiatives, scopes, effects, CLI assignment, exemptions, and Defender for Cloud reporting without detailing custom-policy authoring.
- Examples
- Demonstrates allowed VM SKU assignments, VM monitoring-agent initiatives, tag remediation, and auditing Key Vault secrets without expiry dates.
- What you can do after
- Operate/configure it by selecting definitions, assigning scoped policies or initiatives, staging Audit before Deny, and reviewing compliance results.
Microsoft Azure in Action
Azure Policy is an Azure governance service that evaluates resources against organizational rules and enforces or reports compliance.
- How it is used
- Governs virtual machines and other Azure resources by checking organizational rules and supporting secure, consistent deployments.
- How deep it goes
- Explains policy examples, compliance investigation, built-in policies, and custom JSON, but stops short of detailed authoring syntax.
- Examples
- Uses approved VM images, managed-disk requirements, regional restrictions, and a noncompliant ActionVM policy assignment.
- What you can do after
- Diagnose noncompliant virtual machines and choose built-in or custom JSON policies for recurring governance requirements.
Related concepts
- compliancemeasures · Compliance is conformity with applicable legal, regulatory, contractual, policy, or other governing requirements.
- scopeuses · Scope is a defined boundary specifying which entities, activities, resources, or conditions are included or governed in a particular context.
- JSONuses · JSON is a standardized, language-independent text format for representing structured data using objects, arrays, strings, numbers, Boolean values, and null.
- best practiceconfigures · A best practice is a generally accepted method or approach regarded as effective for achieving a desired outcome in a particular context.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.