Azure Governance using Policies and Blueprints
summary
Shows Azure Policy enforcing metadata by denying Resource Group creation when a required tag is missing (deny effect) and auditing/remediating existing resources at scale; demonstrates parameterized rules (allowed VM SKUs via parameterized SKU list) and the deployIfNotExists pattern to auto-install Log Analytics. Blueprints package RBAC, policies and ARM templates into a versioned environment; demo publishes and assigns a blueprint that creates a Resource Group and created storage account—deployment succeeds though the portal briefly fails to refresh.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 0:43Why do we need governance
- 2:19Traditional approach
- 3:41Azure Governance
- 6:26Azure Governance Architecture
- 8:15Azure Policies
- 10:57Demo
- 18:59Request Validation
- 21:04Policy Language
- 25:22GitHub Repository
- 30:10In Action
- 30:56Blueprint Creation
- 36:54Publish Blueprint
- 37:14Assign Blueprint
- 38:04Parameterization
related talks
55mCloud Governance: Winning the battle between speed and control
01h 01mGetting Started with Azure Governance and Management
12mMy experiences using Azure Blueprints for a year
44mAzure Policy, Standardize the Azure Environment
01h 04mPermit to Cloud - Land with confidence in Azure
54mImplement DevSecOps in Azure
50mFrom Code to Compliance: Enforcing Azure Security with Terraform and...
47mARM FTW – Azure Resource Manager For The Win