Your company must enforce a set of related compliance controls across all subscriptions, including allowed VM SKUs, required tags, and permitted regions. Auditors want to assess overall compliance against this single control set with one compliance score rather than tracking each rule separately. You need to deploy and assign these rules together and report on them as a unit. What should you create and assign?