With Azure Policy, you can create policies that enforce rules over your Azure resources. This way, resources stay compliant with service-level agreements and corporate standards. With Azure Policy, you can evaluate all the different Azure resources for non-compliance. For example, you can create a policy to allow only a certain size of VM in your Azure environment. When the policy is created, Azure will check all the new and existing VMs to see whether they apply to this policy.
Azure Policy differs from RBAC because Azure Policy focuses on resource properties for existing resources and during deployment, while RBAC focuses on user actions at different scopes. For example, a user can be added to the owner role in a resource group, which will give the user full rights to that resource group.
Azure offers built-in policies and custom policies. Some examples of these built-in policies are as follows:
- Allowed VM SKUs: This policy specifies a set of VM sizes and types that can...