Azure Policy

• Helps you to govern the resources

• Policy definition: Built-in and custom policy definitions

• E.g., Allowed virtual machine size SKUs, Not allowed resource types
• Policy assignment: Assigning a definition to a scope (E.g., subscription, rg, management group, etc)

Locks

• Types
• CanNotDelete: can modify the resource, but not delete
• ReadOnly: read only
• Appliance level
• Subscription level
• Resource group level
• Resource level