Question

A retail company has 12 subscriptions organized under a management group hierarchy. The finance team needs to allocate costs by business unit (BU) and cost center. Currently, resource owners inconsistently apply tags, and many existing resources have no tags at all. The architect must design a governance solution that (1) ensures new resources automatically inherit the 'CostCenter' and 'BusinessUnit' tags from their parent resource group when not specified, and (2) brings the large number of existing untagged resources into compliance without manually editing each one. Which combination of Azure Policy capabilities should the architect recommend?

Accepted Answer

Assign 'Inherit a tag from the resource group' policies with the 'modify' effect at the management group scope, then run remediation tasks to apply tags to existing non-compliant resources.

Answer

Assign 'Require a tag on resources' policies with the 'deny' effect, and instruct resource owners to recreate all existing untagged resources.

Answer

Assign 'Append a tag and its value to resources' policies with the 'append' effect, which will automatically update all existing resources on the next evaluation cycle.

Answer

Use Azure Cost Management tag inheritance settings alone to propagate tags to child resources and backfill existing resources.