{"id":216,"date":"2026-04-03T22:47:19","date_gmt":"2026-04-04T01:47:19","guid":{"rendered":"https:\/\/proglab.com.br\/?page_id=216"},"modified":"2026-05-23T17:48:44","modified_gmt":"2026-05-23T20:48:44","slug":"recommend-a-solution-for-managing-compliance","status":"publish","type":"page","link":"https:\/\/proglab.com.br\/?page_id=216","title":{"rendered":"Recommend a solution for managing compliance"},"content":{"rendered":"\n

When reviewing for the section on managing compliance in Azure focus on how Azure policy is used to enforce standards across your environment. Start by understanding why it’s best to apply policies at the highest scope like at the Management Group level. And from there allowing them to cascade down.<\/p>\n\n\n\n

Design for Azure Policy<\/a><\/strong><\/p>\n\n\n\n

Knowing the timing of policy evaluations is very important also as part of your overall study. <\/strong><\/p>\n\n\n\n

You’ll also need to decide how to handle non compliant resources<\/strong>. What are non compliant resources? Should they be locked, flagged, or automatically remediated? And if so, how do you do each one of those things? Understand how remediation tasks can fix issues without manual intervention<\/strong>.<\/p>\n\n\n\n

So I would recommend that you go in and practice creating manual remediation tasks<\/strong>. Policy compliance dashboards is another thing. Keep in mind this is where you audit and track compliance across your environment.<\/p>\n\n\n\n

Finally study how Azure policy works alongside RBAC. RBAC controls who can do what <\/strong>while Policies control what can be done<\/strong>. Together these are going to be very important things so practice these in your lab so you’re prepared for any questions related to them.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

When to use Azure Policy<\/strong><\/p>\n\n\n\n

Helps to enforce organizational standards and to assess compliance at-scale

There’s a large number of built-in policies and you can create your custom ones<\/p>\n\n\n\n

Examples:
Allow only certain SKus of VMs to be created in a determined subscription
Ensure all resources are correctly tagged – if not, apply the tag
Recommend system updates on your servers
Enable MFA for all subscription accounts<\/p>\n\n\n\n

Considerations:<\/p>\n\n\n\n

Apply policies at the highest scope possible
Know when policies are evaluated<\/strong>
Decide what to do if a resource is non-compliant
Consider when to automatically remediate non-compliant resources
Use the Azure Policy Compliance Dashboard <\/strong>for auditgin and review
Effectivelly combine Azure Policy with RBAC<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Use Cases<\/strong>

Regulatory Compliance<\/strong>
Meeting industry regulation (HIPAA, PCI DSS) by enfonrcing policies related to data storage, encryption, and access

Security Posture<\/strong>
implementing security best practices like requiring encryption, enabling logging or restricting access to specific ports

Cost Management<\/strong>
Controlling spending by limiting resource types, enforcing tagging for cost allocation or preventing the creation of certain expensive resources

Operational Efficiency<\/strong>
Enforcing naming convention, resource group structures and deployment patterns.<\/p>\n\n\n\n

<\/p>\n\n\n\n

Design for role-based access control (RBAC)<\/a><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Use Cases<\/p>\n\n\n\n

Granular Access Control
Allow different users or groups to manage specific resources only

Compliance Auditing
Segregation of Duties
<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Layered Security
Comprehensive Governance<\/p>\n\n\n\n

Design for Azure landing zones<\/a><\/p>\n\n\n\n

A landing zone provides an infrastructure environment for hosting your workloads.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Implements key foundational principles of governance, security, networking, management, and identity

\u00b7 Pre-provisions the environment through code
\u00b7 Good for both migrations and green field situations
\u00b7 You can transition existing architectures
. Part of the Cloud Adoption Framework Ready phase<\/p>\n\n\n\n

https:\/\/learn.microsoft.com\/en-us\/azure\/governance\/policy\/samples\/built-in-policies<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

When reviewing for the section on managing compliance in Azure focus on how Azure policy is used to enforce standards across your environment. Start by understanding why it’s best to apply policies at the highest scope like at the Management Group level. And from there allowing them to cascade down. Design for Azure Policy Knowing … <\/p>\n

Continue reading “Recommend a solution for managing compliance”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":172,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-216","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/proglab.com.br\/index.php?rest_route=\/wp\/v2\/pages\/216","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/proglab.com.br\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/proglab.com.br\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/proglab.com.br\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/proglab.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=216"}],"version-history":[{"count":15,"href":"https:\/\/proglab.com.br\/index.php?rest_route=\/wp\/v2\/pages\/216\/revisions"}],"predecessor-version":[{"id":771,"href":"https:\/\/proglab.com.br\/index.php?rest_route=\/wp\/v2\/pages\/216\/revisions\/771"}],"up":[{"embeddable":true,"href":"https:\/\/proglab.com.br\/index.php?rest_route=\/wp\/v2\/pages\/172"}],"wp:attachment":[{"href":"https:\/\/proglab.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=216"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}