Handling security and compliance requirements
Security and compliance will always remain one of the core requirements for any cloud-based system. Azure provides a service called Azure Policy to enable and enforce compliance and security policies in any of the Azure services. In our case, it could be Azure Synapse, Azure Batch, VMs, VNets, and so on. Azure Policy helps enforce policies and remedial actions at scale.
Azure Policy contains pre-defined policy rules called built-ins. For example, one of the rules could be Allow only VMs of a particular type to be created in my subscription. When this policy is applied, if anyone tries to create a VM of a different SKU, the policy will fail the VM creation. It will show an error saying Not allowed by policy at the validation screen for the resource creation.
Azure Policy has a huge list of predetermined policies and remedial actions for different compliance use cases. You can choose the policies that are relevant to your application...