Azure Policy

Azure Policy enforces organisational standards and assesses compliance at scale, auditing or preventing non-compliant resource configurations and remediating drift automatically. It's the preventive control plane for an Azure estate and the engine behind Defender for Cloud regulatory compliance.

When to use

Implementing preventive and detective governance / security guardrails across subscriptions and management groups. Use this skill to pick effects, design initiatives, and roll out safely.

Do not use this skill for RBAC role choice (azure-role-selector), Defender posture (defender-for-cloud-hardening), or Bicep / IaC templating.

Pick the policy effect by goal