Question

A financial services company uses a management group hierarchy with several subscriptions per business unit. Finance requires that every resource carry a 'CostCenter' tag so chargeback reports are accurate. Developers frequently create resources without tags, and existing untagged resources must also be corrected. You want the tag automatically populated from the parent resource group whenever a resource is created without it, and you want existing resources brought into compliance without manual effort. What should you recommend?

Accepted Answer

Assign a built-in Azure Policy with the 'Inherit a tag from the resource group if missing' effect (modify) at the management group scope and create remediation tasks for existing resources.

Answer

Assign a built-in Azure Policy with the 'Require a tag on resources' effect (deny) at the management group scope so untagged deployments are blocked.

Answer

Use Azure Blueprints to deploy an ARM template that sets the CostCenter tag on every new resource group.

Answer

Configure an Azure Automation runbook triggered by an Activity Log alert to add the CostCenter tag whenever a new resource is created.