Skip Navigation

Azure Policy

Achieve real-time cloud compliance at scale with consistent resource governance

Easily apply guardrails to all your resources

Reduce the time needed to audit your environments by having all your compliance data in a single place. Set guardrails throughout your resources to help ensure cloud compliance, avoid misconfigurations, and practice consistent resource governance. Reduce the number of external approval processes by implementing policies at the core of the Azure platform for increased developer productivity. Control and optimize your cloud spend to get more value from your investment.

Real-time policy enforcement and evaluation

Cloud policy management and security at scale

Automated remediation of existing resources at scale

Comprehensive compliance view of all your resources

Enforce policies on your resources

Achieve organization-wide resource governance by creating policies in Azure to govern every existing or future resource deployed. Manage your policies in a centralized location where you can track their compliance status and dig into the specific changes that made resources non-compliant. Enforce policies on your resources to set guardrails and make sure future configurations will be compliant with organizational or external standards and regulations.

Apply policies in the CI/CD pipeline

Take advantage of the native integration with GitHub and Azure DevOps to manage policies-as-code and surface policy compliance assessments in deployment workflows. Give developers more agility while reducing the number of approval processes when releasing a build, and explain the reasons for non-compliance.

Automatically remediate non-compliant resources

Bring your resources into compliance using bulk remediation instead of going through configuration errors one at a time. Ensure that drift is minimized by configuring automated remediation tasks through the Azure portal, PowerShell, or CLI. Write custom policy definitions to fit your specific needs.

Secure and manage AKS clusters at scale

Control and assess compliance inside all AKS clusters at scale. Go deeper into your AKS clusters and apply policies for pods, namespaces, and ingress to ensure that they meet resource governance requirements. Choose either audit or enforcement policies to track compliance status or enforce configurations inside your AKS clusters.

Learn more about Azure Policy for AKS

Security through effective resource governance

  • Microsoft invests more than USD 1 billion annually on cybersecurity research and development.
  • We employ more than 3,500 security experts dedicated to data security and privacy.
  • Azure has more certifications than any other cloud provider. View the comprehensive list.

Azure Policy pricing

Azure Policy is offered at no additional cost to Azure subscribers.

Get started with Azure Policy

Assign a built-in policy to your resources.

Learn governance best practices through the Cloud Adoption Framework.

Documentation, training, and migration resources

Documentation, training, and migration resources

Visit the Azure migration center for resources to migrate apps, data, and infrastructure at your own pace. Use our free assessment, migration, and cost management tools to transition your on-premises workloads to Azure virtual machines.

And pay less with Azure: Amazon Web Services (AWS) is 5 times more expensive than Azure for Windows Server and SQL Server.

Developer documentation

Learn how to programmatically create Azure policies.

Frequently asked questions about Azure Policy

  • Azure Policy is generally available in all regions where Azure is available, including national clouds.
  • Yes. Azure Policy comes with a set of built-in policies, but you may also create custom policies.
  • Azure Policy supports all Azure resources.
  • Yes, you may exclude a resource, resource group, subscription, or management group from your policy assignment.

Create your first policy today using Azure Policy

Can we help you?