# tag: CAF: Govern
- ▸ allowed-locations-policy.md · 21 jul 2026
Keep Azure in the right regions: the allowed-locations policy
Stop resources landing in the wrong region. Azure's built-in allowed-locations policy is a real compliance control you can assign in a few lines of Terraform.
read → - ▸ resource-locks-prevent-deletion.md · 20 jul 2026
Stop someone deleting prod: resource locks in one line
Someone runs az group delete on the wrong resource group and prod is gone. A resource lock is the cheapest insurance in Azure, and it's one command.
read → - ▸ enforce-azure-tags-as-code.md · 18 jul 2026
Untagged Azure resources: find them today, enforce tags as code tomorrow
Every Azure estate drifts into untagged chaos. Two moves any admin can run this week: find every untagged resource with one query, then stop it happening again with a policy defined as code.
read →