Azure Policy
Achieve real-time cloud compliance at scale with consistent resource governance.
Overview
Easily apply guardrails to all your resources
Reduce the time needed to audit your environments by having all your compliance data in a single place. Set guardrails throughout your resources to help ensure cloud compliance, avoid misconfigurations, and practice consistent resource governance. Reduce the number of external approval processes by implementing policies at the core of the Azure platform for increased developer productivity. Control and optimize your cloud spend to get more value from your investment.
- Achieve organization-wide resource governance by creating policies in Azure to govern every existing or future resource deployed. Manage your policies in a centralized location where you can track their compliance status and dig into the specific changes that made resources non-compliant. Enforce policies on your resources to set guardrails and make sure future configurations will be compliant with organizational or external standards and regulations.
- Take advantage of the native integration with GitHub and Azure DevOps to manage policies-as-code and surface policy compliance assessments in deployment workflows. Give developers more agility while reducing the number of approval processes when releasing a build, and explain the reasons for non-compliance.
- Bring your resources into compliance using bulk remediation instead of going through configuration errors one at a time. Ensure that drift is minimized by configuring automated remediation tasks through the Azure portal, PowerShell, or CLI. Write custom policy definitions to fit your specific needs.
- Control and assess compliance inside all AKS clusters at scale. Go deeper into your AKS clusters and apply policies for pods, namespaces, and ingress to ensure that they meet resource governance requirements. Choose either audit or enforcement policies to track compliance status or enforce configurations inside your AKS clusters.
Features
Policy governance and compliance at cloud scale
Enforcement
Real-time policy enforcement and evaluation
Governance
Cloud policy management and security at scale
Remediation
Automated remediation of existing resources at scale
Compliance
Comprehensive compliance view of all your resources
Security
Embedded security and compliance
34,000
Full-time equivalent engineers dedicated to security initiatives at Microsoft.
15,000
Partners with specialized security expertise.
>100
Compliance certifications, including over 50 specific to global regions and countries.
Pricing
Azure Policy pricing
Azure Policy is offered at no additional cost to Azure subscribers.
Frequently asked questions
- Azure Policy is generally available in all regions where Azure is available, including national clouds.
- Yes. Azure Policy comes with a set of built-in policies, but you may also create custom policies.
- Azure Policy supports all Azure resources.
- Yes, you may exclude a resource, resource group, subscription, or management group from your policy assignment.
Next steps
Choose the Azure account that’s right for you
Pay as you go or try Azure free for up to 30 days.
Azure Solutions
Azure cloud solutions
Solve your business problems with proven combinations of Azure cloud services, as well as sample architectures and documentation.
Business Solutions Hub
Find the right Microsoft Cloud solution
Browse the Microsoft Business Solutions Hub to find the products and solutions that can help your organization reach its goals.
Explore Azure Portal 
