Question

Your company requires that every resource within the resource group 'RG-Finance' carry a 'CostCenter' tag with the value 'FIN-2024' for chargeback reporting. Developers frequently deploy new resources without specifying tags, and manually tagging each resource is not sustainable. You want resources to automatically receive the correct tag value at deployment time without blocking deployments. What should you do?

Accepted Answer

Assign an Azure Policy with the 'Modify' effect that adds the 'CostCenter' tag with value 'FIN-2024' to resources at the RG-Finance scope, and remediate existing resources.

Answer

Apply the 'CostCenter' tag to the RG-Finance resource group and rely on Azure tag inheritance so all resources inherit it automatically.

Answer

Assign an Azure Policy with the 'Deny' effect that blocks any resource created in RG-Finance without the 'CostCenter' tag.

Answer

Create a read-only resource lock on RG-Finance so the tag value cannot be changed after it is applied.