<aside> 💡 Use Azure tools to enforce the rules

</aside>

Azure Blueprints

<aside> 💡 Azure subscription templates with roles and policies already defined.

</aside>

Azure Policy

<aside> 💡 Create rules across all of your azure resources e.j all vms need to have a backup

</aside>

Examples of Built-in policies

• Require SQL Server 12.0
• Allowed locations
• Not allowed resource types

<aside> 💡 Can create custom policies using JSON definition

</aside>

Locks

<aside> 💡 Set a resource as read-only or can not be deleted from the subscription.

</aside>