Question

Contoso runs hundreds of Azure resources across dozens of resource groups. The finance team requires that every resource carry a 'CostCenter' tag so monthly spend can be allocated accurately. Audits reveal that many newly deployed resources are missing the tag, and some inherit no value at all. You must recommend a governance solution that automatically applies the correct 'CostCenter' tag to new resources based on the value set on their parent resource group, without blocking deployments. What should you recommend?

Accepted Answer

Assign an Azure Policy with the 'Inherit a tag from the resource group' modify effect and run a remediation task for existing resources.

Answer

Assign an Azure Policy with the 'deny' effect that blocks creation of any resource missing the 'CostCenter' tag.

Answer

Use an Azure Resource Manager (ARM) template with a mandatory 'CostCenter' parameter for all deployments.

Answer

Configure a resource lock at the subscription level to prevent modification of untagged resources.