- ▸ azure-policy-out-of-the-box.md · 6 aug 2026
Azure Policy out of the box: 5,000 guardrails you already own
Microsoft ships just over 5,000 ready-written policy rules and about 270 grouped rule-sets with every Azure subscription, mapped to ISO 27001, NIST, PCI DSS and the UK OFFICIAL controls. They cost nothing to run, and the assignment count in your own subscription is a two-minute check.
read → - ▸ allowed-locations-policy.md · 21 jul 2026
Keep Azure in the right regions: the allowed-locations policy
Stop resources landing in the wrong region. Azure's built-in allowed-locations policy is a real compliance control you can assign in a few lines of Terraform.
read → - ▸ resource-locks-prevent-deletion.md · 20 jul 2026
Stop someone deleting prod: resource locks in one line
Someone runs az group delete on the wrong resource group and prod is gone. A resource lock is the cheapest insurance in Azure, and it's one command.
read → - ▸ enforce-azure-tags-as-code.md · 18 jul 2026
Untagged Azure resources: find them today, enforce tags as code tomorrow
Every Azure estate drifts into untagged chaos. Two moves any admin can run this week: find every untagged resource with one query, then stop it happening again with a policy defined as code.
read →