Using

Azure Policy

Last reviewed

Guardrails as code. Every landing zone starts with a policy baseline, not a wiki page.

Defaults

  • Deny for the non-negotiables, audit for everything else
  • Assignments deployed with Bicep, never clicked

History

  • 1 Sep 2026 Reviewed. No change.