Trace Id is missing
Skip to main content

Azure Policy

Achieve real-time cloud compliance at scale with consistent resource governance.

Easily apply guardrails to all your resources

Reduce the time needed to audit your environments by having all your compliance data in a single place. Set guardrails throughout your resources to help ensure cloud compliance, avoid misconfigurations, and practice consistent resource governance. Reduce the number of external approval processes by implementing policies at the core of the Azure platform for increased developer productivity. Control and optimize your cloud spend to get more value from your investment.

Do more with less. Reduce costs, increase efficiency, and accelerate growth with Azure. Learn more.

Real-time policy enforcement and evaluation

Cloud policy management and security at scale

Automated remediation of existing resources at scale

Comprehensive compliance view of all your resources

Enforce policies on your resources

Achieve organization-wide resource governance by creating policies in Azure to govern every existing or future resource deployed. Manage your policies in a centralized location where you can track their compliance status and dig into the specific changes that made resources non-compliant. Enforce policies on your resources to set guardrails and make sure future configurations will be compliant with organizational or external standards and regulations.

A pipeline summary for a failed test in Azure DevOps

Apply policies in the CI/CD pipeline

Take advantage of the native integration with GitHub and Azure DevOps to manage policies-as-code and surface policy compliance assessments in deployment workflows. Give developers more agility while reducing the number of approval processes when releasing a build, and explain the reasons for non-compliance.

Automatically remediate non-compliant resources

Bring your resources into compliance using bulk remediation instead of going through configuration errors one at a time. Ensure that drift is minimized by configuring automated remediation tasks through the Azure portal, PowerShell, or CLI. Write custom policy definitions to fit your specific needs.

A new remediation task being created in Azure

Secure and manage AKS clusters at scale

Control and assess compliance inside all AKS clusters at scale. Go deeper into your AKS clusters and apply policies for pods, namespaces, and ingress to ensure that they meet resource governance requirements. Choose either audit or enforcement policies to track compliance status or enforce configurations inside your AKS clusters.

Comprehensive security and compliance, built in

The security center compute and apps tab in Azure showing a list of recommendations

Get started with an Azure free account

1

Start free. Get $200 credit to use within 30 days. While you have your credit, get free amounts of many of our most popular services, plus free amounts of 55+ other services that are always free.

2

After your credit, move to pay as you go to keep building with the same free services. Pay only if you use more than your free monthly amounts.

3

After 12 months, you'll keep getting 55+ always-free services—and still pay only for what you use beyond your free monthly amounts.

Documentation, training, and migration resources

Documentation, training, and migration resources

Visit the Azure migration center for resources to migrate apps, data, and infrastructure at your own pace. Use our free assessment, migration, and cost management tools to transition your on-premises workloads to Azure virtual machines.

And pay less with Azure: Amazon Web Services (AWS) is 5 times more expensive than Azure for Windows Server and SQL Server.

Developer documentation

Learn how to programmatically create Azure policies.

Frequently asked questions about Azure Policy

  • Azure Policy is generally available in all regions where Azure is available, including national clouds.

  • Yes. Azure Policy comes with a set of built-in policies, but you may also create custom policies.

  • Azure Policy supports all Azure resources.

  • Yes, you may exclude a resource, resource group, subscription, or management group from your policy assignment.

Ready when you are—let's set up your Azure free account

Try Azure for free