This chapter gave a deep overview of all Azure services that support your Azure governance. You will need to define rules and then set them up in Azure to fulfill these governance rules. Azure governance is the most important task you will need to start with before starting consuming service. Once services are in place, defining the governance is never good, as existing working methods need to be changed, which mostly results in conflicts. Azure governance is always where to start from.
To summarize all options that are available with Azure, the following table could help:
Azure component |
Used for |
Used in Azure Blueprint templates |
Subscriptions |
Billing root |
no |
Resource groups |
Organize resources |
yes |
Resource tags |
Add properties (cost center, and so on) |
Yes |
Naming conventions |
Naming definitions |
Yes |
Azure RBAC |
Set permission roles |
Yes |
Azure policy |
Define governance |
Yes |
Automation |
Task automation |
no |