Azure Fundamentals (AZ-900) Study Guide

Chapter 14. Azure Governance and Compliance

In the previous chapter, we explored Azure cost management, learning how to monitor, control, and optimize cloud spending. However, managing costs is only one part of responsible cloud usage. To operate securely, reliably, and in line with organizational or regulatory standards, you also need governance.

Azure provides a set of tools and controls that help organizations with all aspects of governance: enforcing standards, maintaining compliance, and protecting critical resources. It ensures that resources are deployed correctly, securely, and consistently.

In this chapter, we’ll explore key governance and compliance tools in Azure, each of which serves a unique role in building a well-managed cloud environment:

• Microsoft Purview

• Azure Policy

• Resource locks

• Microsoft Service Trust Portal

By the end of this chapter, you’ll understand how Azure’s governance tools work together to help you create an environment that’s secure, compliant, and resilient.

Let’s get started.

Microsoft Purview: Unified Data Governance

As organizations generate more data across diverse systems (for example, on-premises, multi-cloud, and SaaS), it becomes increasingly difficult to answer critical questions like:

• Where is our sensitive data?

• Who can access our data?

• Are we meeting regulatory and privacy requirements for our data?

Microsoft Purview addresses these challenges by providing a unified solution for data governance, security, and regulatory ...