Skip to content

Commit 7f80a5b

Browse files
authored
Merge pull request #50171 from lootle1/MR96
Technical Review 1044110: Intro to Azure Policy
2 parents f760d90 + 395124d commit 7f80a5b

10 files changed

+173
-173
lines changed
Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.intro-to-azure-policy.introduction
3-
title: Introduction
4-
metadata:
5-
unitType: introduction
6-
title: Introduction
7-
description: "Introduction to Azure Policy."
8-
ms.date: 07/19/2024
9-
author: ricmmartins
10-
ms.author: ricardomac
11-
ms.topic: unit
12-
durationInMinutes: 1
13-
content: |
14-
[!include[](includes/1-introduction.md)]
15-
1+
### YamlMime:ModuleUnit
2+
uid: learn.intro-to-azure-policy.introduction
3+
title: Introduction
4+
metadata:
5+
unitType: introduction
6+
title: Introduction
7+
description: "Introduction to Azure Policy."
8+
ms.date: 04/28/2025
9+
author: ricmmartins
10+
ms.author: ricardomac
11+
ms.topic: unit
12+
durationInMinutes: 1
13+
content: |
14+
[!include[](includes/1-introduction.md)]
15+
Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.intro-to-azure-policy.what-is-azure-policy
3-
title: What is Azure Policy?
4-
metadata:
5-
unitType: learning-content
6-
title: What is Azure Policy?
7-
description: "What is Azure Policy and what can it be used for?"
8-
ms.date: 07/19/2024
9-
author: ricmmartins
10-
ms.author: ricardomac
11-
ms.topic: unit
12-
durationInMinutes: 1
13-
content: |
14-
[!include[](includes/2-what-is-azure-policy.md)]
15-
1+
### YamlMime:ModuleUnit
2+
uid: learn.intro-to-azure-policy.what-is-azure-policy
3+
title: What is Azure Policy?
4+
metadata:
5+
unitType: learning-content
6+
title: What is Azure Policy?
7+
description: "What is Azure Policy and what can it be used for?"
8+
ms.date: 04/28/2025
9+
author: ricmmartins
10+
ms.author: ricardomac
11+
ms.topic: unit
12+
durationInMinutes: 1
13+
content: |
14+
[!include[](includes/2-what-is-azure-policy.md)]
15+
Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.intro-to-azure-policy.how-azure-policy-works
3-
title: How Azure Policy works
4-
metadata:
5-
unitType: learning-content
6-
title: How Azure Policy works
7-
description: "Learn how to use Azure Policy to apply compliance and control in your environment."
8-
ms.date: 07/19/2024
9-
author: ricmmartins
10-
ms.author: ricardomac
11-
ms.topic: unit
12-
durationInMinutes: 1
13-
content: |
14-
[!include[](includes/3-how-azure-policy-works.md)]
15-
1+
### YamlMime:ModuleUnit
2+
uid: learn.intro-to-azure-policy.how-azure-policy-works
3+
title: How Azure Policy works
4+
metadata:
5+
unitType: learning-content
6+
title: How Azure Policy works
7+
description: "Learn how to use Azure Policy to apply compliance and control in your environment."
8+
ms.date: 04/28/2025
9+
author: ricmmartins
10+
ms.author: ricardomac
11+
ms.topic: unit
12+
durationInMinutes: 1
13+
content: |
14+
[!include[](includes/3-how-azure-policy-works.md)]
15+
Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.intro-to-azure-policy.when-to-use-azure-policy
3-
title: When to use Azure Policy
4-
metadata:
5-
unitType: learning-content
6-
title: When to use Azure Policy
7-
description: "Learn ways that you can use Azure Policy to manage resources."
8-
ms.date: 07/19/2024
9-
author: ricmmartins
10-
ms.author: ricardomac
11-
ms.topic: unit
12-
durationInMinutes: 1
13-
content: |
14-
[!include[](includes/4-when-to-use-azure-policy.md)]
15-
1+
### YamlMime:ModuleUnit
2+
uid: learn.intro-to-azure-policy.when-to-use-azure-policy
3+
title: When to use Azure Policy
4+
metadata:
5+
unitType: learning-content
6+
title: When to use Azure Policy
7+
description: "Learn ways that you can use Azure Policy to manage resources."
8+
ms.date: 04/28/2025
9+
author: ricmmartins
10+
ms.author: ricardomac
11+
ms.topic: unit
12+
durationInMinutes: 1
13+
content: |
14+
[!include[](includes/4-when-to-use-azure-policy.md)]
15+
Lines changed: 49 additions & 49 deletions
Original file line numberDiff line numberDiff line change
@@ -1,49 +1,49 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.intro-to-azure-policy.knowledge-check
3-
title: Module assessment
4-
metadata:
5-
unitType: knowledge_check
6-
title: Module assessment
7-
description: "Check your knowledge about Azure Policy."
8-
ms.date: 07/19/2024
9-
author: ricmmartins
10-
ms.author: ricardomac
11-
ms.topic: unit
12-
durationInMinutes: 5
13-
content: |
14-
quiz:
15-
questions:
16-
- content: "Which of the following statements accurately describes Azure Policy?"
17-
choices:
18-
- content: "It's a service to create Group Policy objects on Azure."
19-
isCorrect: false
20-
explanation: "Incorrect. Azure Policy can't be used to create Group Policy objects."
21-
- content: "It's a service for creating, assigning, and managing policies."
22-
isCorrect: true
23-
explanation: "Correct. This statement best describes Azure Policy."
24-
- content: "It's a tool to enforce security controls."
25-
isCorrect: false
26-
explanation: "Incorrect. Azure Policy can help with policies to cover security controls, but isn't limited to that."
27-
- content: "Is the following statement accurate? When you're using Azure Policy, you're restricted to Azure resources only."
28-
choices:
29-
- content: "This statement is wrong. You can use Azure Policy outside Azure."
30-
isCorrect: true
31-
explanation: "Azure Policy can handle Azure Arc enabled resources. That means you can extend the coverage of your controls over physical servers and virtual machines hosted outside Azure."
32-
- content: "The statement is right. You're restricted to Azure resources when you work with Azure Policy."
33-
isCorrect: false
34-
explanation: "Incorrect. You can extend the coverage of Azure Policy to Azure Arc enabled resources outside Azure."
35-
- content: "The statement is wrong. If you install the Azure Policy agent, you can work with resources hosted outside Azure."
36-
isCorrect: false
37-
explanation: "Incorrect. There's no Azure Policy agent."
38-
- content: "Azure Policy is capable of:"
39-
choices:
40-
- content: "Monitoring the health of your virtual machines."
41-
isCorrect: false
42-
explanation: "Incorrect. Azure Policy isn't a monitoring tool."
43-
- content: "Providing recommendations for your Azure resources."
44-
isCorrect: false
45-
explanation: "Incorrect. Azure Policy doesn't provide recommendations for your Azure resources. You can use Azure Advisor to get recommendations."
46-
- content: "Adding required configuration at scale."
47-
isCorrect: true
48-
explanation: "Correct. As example, you can create a policy to enable Azure Backup for all virtual machines within an Azure subscription."
49-
1+
### YamlMime:ModuleUnit
2+
uid: learn.intro-to-azure-policy.knowledge-check
3+
title: Module assessment
4+
metadata:
5+
unitType: knowledge_check
6+
title: Module assessment
7+
description: "Check your knowledge about Azure Policy."
8+
ms.date: 04/28/2025
9+
author: ricmmartins
10+
ms.author: ricardomac
11+
ms.topic: unit
12+
durationInMinutes: 5
13+
content: |
14+
quiz:
15+
questions:
16+
- content: "Which of the following statements accurately describes Azure Policy?"
17+
choices:
18+
- content: "It's a service to create Group Policy objects on Azure."
19+
isCorrect: false
20+
explanation: "Incorrect. Azure Policy can't be used to create Group Policy objects."
21+
- content: "It's a service for creating, assigning, and managing policies."
22+
isCorrect: true
23+
explanation: "Correct. This statement best describes Azure Policy."
24+
- content: "It's a tool to enforce security controls."
25+
isCorrect: false
26+
explanation: "Incorrect. Azure Policy can help with policies to cover security controls but isn't limited to that."
27+
- content: "Is the following statement accurate? When you're using Azure Policy, you're restricted to Azure resources only."
28+
choices:
29+
- content: "This statement is wrong. You can use Azure Policy outside Azure."
30+
isCorrect: true
31+
explanation: "Azure Policy can handle Azure Arc enabled resources. That means you can extend the coverage of your controls over physical servers and virtual machines hosted outside Azure."
32+
- content: "The statement is right. You're restricted to Azure resources when you work with Azure Policy."
33+
isCorrect: false
34+
explanation: "Incorrect. You can extend the coverage of Azure Policy to Azure Arc enabled resources outside Azure."
35+
- content: "The statement is wrong. If you install the Azure Policy agent, you can work with resources hosted outside Azure."
36+
isCorrect: false
37+
explanation: "Incorrect. There's no Azure Policy agent."
38+
- content: "Azure Policy is capable of:"
39+
choices:
40+
- content: "Monitoring the health of your virtual machines."
41+
isCorrect: false
42+
explanation: "Incorrect. Azure Policy isn't a monitoring tool."
43+
- content: "Providing recommendations for your Azure resources."
44+
isCorrect: false
45+
explanation: "Incorrect. Azure Policy doesn't provide recommendations for your Azure resources. You can use Azure Advisor to get recommendations."
46+
- content: "Adding required configuration at scale."
47+
isCorrect: true
48+
explanation: "Correct. As an example, you can create a policy to enable Azure Backup for all virtual machines within an Azure subscription."
49+
Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.intro-to-azure-policy.summary
3-
title: Summary
4-
metadata:
5-
unitType: summary
6-
title: Summary
7-
description: "Summary of Azure Policy and other reading."
8-
ms.date: 07/19/2024
9-
author: ricmmartins
10-
ms.author: ricardomac
11-
ms.topic: unit
12-
durationInMinutes: 1
13-
content: |
14-
[!include[](includes/6-summary.md)]
15-
1+
### YamlMime:ModuleUnit
2+
uid: learn.intro-to-azure-policy.summary
3+
title: Summary
4+
metadata:
5+
unitType: summary
6+
title: Summary
7+
description: "Summary of Azure Policy and other reading."
8+
ms.date: 04/28/2025
9+
author: ricmmartins
10+
ms.author: ricardomac
11+
ms.topic: unit
12+
durationInMinutes: 1
13+
content: |
14+
[!include[](includes/6-summary.md)]
15+

learn-pr/azure/intro-to-azure-policy/includes/2-what-is-azure-policy.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ In summary, you use Azure Policy to:
66
- Use built-in policies or build custom policies for all resource types.
77
- Perform real-time policy evaluation and enforcement.
88
- Perform periodic and on-demand compliance evaluation.
9-
- Apply policies at scale
9+
- Apply policies at scale:
1010
- Apply policies to a Management Group with control across your entire organization.
1111
- Apply multiple policies and aggregate policy states with policy initiatives.
1212
- Handle exclusion scopes.

learn-pr/azure/intro-to-azure-policy/includes/3-how-azure-policy-works.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ Here, we cover some concepts you need to understand in advance to work with Azur
88

99
**Definitions:** The definitions are the list of built-in or custom initiatives and policies available to be assigned.
1010

11-
**Assignments:** The assignments are the associations of initiatives or policies with scopes. A scope for Azure Policy could be a Management Group, an Azure Subscription or a Resource Group. All child resources inherit the assignments of the parent resource.
11+
**Assignments:** The assignments are the associations of initiatives or policies with scopes. A scope for Azure Policy could be a Management Group, an Azure Subscription, or a Resource Group. All child resources inherit the assignments of the parent resource.
1212

1313
**Exemptions:**: The exemptions are used to exempt a resource hierarchically or an individual resource from the evaluation of initiatives or definitions.
1414

@@ -18,7 +18,7 @@ Here, we cover some concepts you need to understand in advance to work with Azur
1818

1919
## Resources covered
2020

21-
Azure policy covers all Azure resources, including Arc-enabled resources. For example, you can extend the coverage of your controls over Windows and Linux physical servers, and virtual machines hosted outside of Azure, on your corporate network, or other cloud providers. Using Azure Policy is free for Azure resources, but there's a fee associated for an Arc resource.
21+
Azure policy covers all Azure resources, including Arc-enabled resources. For example, you can extend the coverage of your controls over Windows and Linux physical servers, and virtual machines hosted outside of Azure, on your corporate network or other cloud providers. Using Azure Policy is free for Azure resources, but there's a fee associated for an Arc resource.
2222

2323
Azure Arc is a service that allows you to manage resource types hosted outside of Azure. The following resource types are supported:
2424

@@ -27,7 +27,7 @@ Azure Arc is a service that allows you to manage resource types hosted outside o
2727
- Azure data services such as Azure SQL Managed Instance.
2828
- SQL Server.
2929

30-
You can also provision, resize, delete and manage virtual machines based on VMware vSphere or Azure Stack HCI and enable VM self-service through role-based access.
30+
You can also provision, resize, delete, and manage virtual machines based on VMware vSphere or Azure Stack HCI. You can enable VM self-service through role-based access.
3131

3232
## Related services
3333

learn-pr/azure/intro-to-azure-policy/includes/6-summary.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,8 +8,8 @@ To learn more, review the following articles:
88

99
- [What is Azure Policy?](/azure/governance/policy/overview)
1010
- [Policy version (preview)](/azure/governance/policy/concepts/definition-structure-basics#version-preview)
11-
- [Assign a policy](/azure/governance/policy/assign-policy-portal)
11+
- [Create a policy assignment](/azure/governance/policy/assign-policy-portal)
1212
- [Azure Policy samples](/azure/governance/policy/samples)
1313
- [Azure Resource Graph sample queries for Azure Policy](/azure/governance/policy/samples/resource-graph-samples)
14-
- [Recommended policies for Azure virtual machines](/azure/governance/policy/concepts/recommended-policies)
14+
- [Azure virtual machine recommended policies](/azure/governance/policy/concepts/recommended-policies)
1515
- [Azure security baseline for Azure Policy](/security/benchmark/azure/baselines/policy-security-baseline)
Lines changed: 43 additions & 43 deletions
Original file line numberDiff line numberDiff line change
@@ -1,43 +1,43 @@
1-
### YamlMime:Module
2-
uid: learn.intro-to-azure-policy
3-
metadata:
4-
moduleType: introduction
5-
title: Introduction to Azure Policy
6-
description: "This module introduces you to Azure Policy and describes how to use it to meet compliance requirements in your environment."
7-
manager: jasongroce
8-
ms.date: 07/19/2024
9-
author: ricmmartins
10-
ms.author: ricardomac
11-
ms.topic: module-standard-task-based
12-
ms.service: azure-policy
13-
title: Intro to Azure Policy
14-
summary: "This module introduces you to Azure Policy and describes its characteristics, capabilities, and use cases."
15-
abstract: |
16-
By the end of this module, you're able to:
17-
- Describe how features of Azure Policy can help you apply compliance, apply control, and add required configuration at scale.
18-
prerequisites: |
19-
- Basic knowledge of the Azure portal
20-
- Basic knowledge of Azure resources
21-
iconUrl: /training/achievements/generic-badge.svg
22-
levels:
23-
- beginner
24-
roles:
25-
- developer
26-
- administrator
27-
- solution-architect
28-
- technology-manager
29-
products:
30-
- azure
31-
- azure-policy
32-
subjects:
33-
- cloud-security
34-
units:
35-
- learn.intro-to-azure-policy.introduction
36-
- learn.intro-to-azure-policy.what-is-azure-policy
37-
- learn.intro-to-azure-policy.how-azure-policy-works
38-
- learn.intro-to-azure-policy.when-to-use-azure-policy
39-
- learn.intro-to-azure-policy.knowledge-check
40-
- learn.intro-to-azure-policy.summary
41-
badge:
42-
uid: learn.intro-to-azure-policy.badge
43-
1+
### YamlMime:Module
2+
uid: learn.intro-to-azure-policy
3+
metadata:
4+
moduleType: introduction
5+
title: Introduction to Azure Policy
6+
description: "This module introduces you to Azure Policy and describes how to use it to meet compliance requirements in your environment."
7+
manager: jasongroce
8+
ms.date: 04/28/2025
9+
author: ricmmartins
10+
ms.author: ricardomac
11+
ms.topic: module-standard-task-based
12+
ms.service: azure-policy
13+
title: Intro to Azure Policy
14+
summary: "This module introduces you to Azure Policy and describes its characteristics, capabilities, and use cases."
15+
abstract: |
16+
By the end of this module, you're able to:
17+
- Describe how features of Azure Policy can help you apply compliance, apply control, and add required configuration at scale.
18+
prerequisites: |
19+
- Basic knowledge of the Azure portal
20+
- Basic knowledge of Azure resources
21+
iconUrl: /training/achievements/generic-badge.svg
22+
levels:
23+
- beginner
24+
roles:
25+
- developer
26+
- administrator
27+
- solution-architect
28+
- technology-manager
29+
products:
30+
- azure
31+
- azure-policy
32+
subjects:
33+
- cloud-security
34+
units:
35+
- learn.intro-to-azure-policy.introduction
36+
- learn.intro-to-azure-policy.what-is-azure-policy
37+
- learn.intro-to-azure-policy.how-azure-policy-works
38+
- learn.intro-to-azure-policy.when-to-use-azure-policy
39+
- learn.intro-to-azure-policy.knowledge-check
40+
- learn.intro-to-azure-policy.summary
41+
badge:
42+
uid: learn.intro-to-azure-policy.badge
43+

0 commit comments

Comments
 (0)