Your security team needs to ensure that all new Azure resources across the organization are tagged with 'CostCenter' and 'Environment' tags. Resources without these tags must be blocked from deployment. Which Azure feature enforces this?

Question

Sunny · Accepted Answer

Assign an Azure Policy with the 'Require tag and its value' built-in definition in Deny effect at the management group level. Azure Policy with Deny effect blocks resource deployments that do not meet the policy condition. The built-in 'Require a tag and its value' policy (or 'Require tag') with Deny mode ensures no resource can be created without the required tags, applied at management group level for organization-wide enforcement.

Your security team needs to ensure that all new Azure resources across the organization are tagged with 'CostCenter' and 'Environment' tags. Resources without these tags must be blocked from deployment. Which Azure feature enforces this?

Your security team needs to ensure that all new Azure resources across the organization are tagged with 'CostCenter' and 'Environment' tags. Resources without these tags must be blocked from deployment. Which Azure feature enforces this?

📚 What This Question Tests

More Azure Governance Practice Questions