You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: Describes how to find and apply recommended policies for Azure services such as Azure Virtual Machines.
4
-
ms.date: 04/03/2024
2
+
title: Recommended policies for Azure virtual machines
3
+
description: Describes recommended policies for Azure virtual machines.
4
+
ms.date: 04/15/2024
5
5
ms.topic: conceptual
6
-
ms.custom: generated
7
6
---
8
7
9
-
# Recommended policies for Azure services
8
+
# Azure virtual machine recommended policies
10
9
11
-
Customers who are new to Azure Policy often look to find common policy definitions to manage and govern their resources. Azure Policy's **Recommended policies** provides a focused list of common policy definitions to start with. The **Recommended policies** experience for supported resources is embedded within the portal experience for that resource.
12
-
13
-
For more Azure Policy built-ins, go to [Azure Policy built-in definitions](../samples/built-in-policies.md).
14
-
15
-
## Azure Virtual Machines
16
-
17
-
The **Recommended policies** for [Azure Virtual Machines](../../../virtual-machines/index.yml) are on the **Overview** page for virtual machines and under the **Capabilities** tab. Select the **Azure Policy** card to open a side pane with the recommended policies. Select the recommended policies to apply to this virtual machine and select **Assign policies** to create an assignment for each policy. **Assign policies** is unavailable, or greyed out, for any policy already assigned to a scope where the virtual machine is a member.
10
+
The recommended policies for [Azure virtual machines](../../../virtual-machines/index.yml) are on the portal's **Overview** page for virtual machines and under the **Capabilities** tab. Select **Azure Policy** to open a pane that shows the recommended policies. Select the recommended policies to apply to this virtual machine and select **Assign policies** to create an assignment for each policy. **Assign policies** is unavailable, or greyed out, for any policy already assigned to a scope where the virtual machine is a member.
18
11
19
12
As an organization reaches maturity with [organizing their resources and resource hierarchy](/azure/cloud-adoption-framework/ready/azure-best-practices/organize-subscriptions), the recommendation is to transition these policy assignments from one per resource to the subscription or [management group](../../management-groups/index.yml) level.
|[Audit virtual machines without disaster recovery configured](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2F0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56)|Audit virtual machines which do not have disaster recovery configured. To learn more about disaster recovery, visit [https://aka.ms/asr-doc](https://aka.ms/asr-doc). |auditIfNotExists |[1.0.0](https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Compute/RecoveryServices_DisasterRecovery_Audit.json)|
@@ -28,6 +19,6 @@ As an organization reaches maturity with [organizing their resources and resourc
28
19
29
20
## Next steps
30
21
31
-
-Review examples at [Azure Policy samples](../samples/index.md).
0 commit comments