Azure Policy
5 articles tagged Azure Policy.
A practical Azure landing zone for small and mid-size companies
Set up Azure management groups, subscriptions, hub-and-spoke networking, Azure Policy, RBAC and budgets the right way from day one, scaled down from Microsoft's landing zone architecture.
Azure Blueprints Retirement: Move to Template Specs and Deployment Stacks
Azure Blueprints retires on January 31, 2027. Export your definitions, rebuild them in Bicep, publish template specs and recreate blueprint locks with deployment stack deny settings.
Azure Policy Tag Enforcement: Require, Inherit and Remediate Tags
Enforce CostCenter and Owner tags with built-in Azure Policy definitions: deny untagged resource groups, inherit tags onto resources, and remediate existing resources with managed identities.
Azure Update Manager: Schedule Patching for Azure VMs and Arc Servers
Replace Automation Update Management or WSUS-only patching with Azure Update Manager: periodic assessment, maintenance configurations, dynamic scopes and scheduled patching for Azure and Arc servers.
Onboard Servers to Azure Arc at Scale with a Service Principal
Connect hundreds of on-premises Windows and Linux servers to Azure Arc with a least-privilege service principal, a scripted azcmagent install and connect, and a repeatable verification step.