A cloud governance team at a multinational company manages 200+ subscriptions across several management groups. They need an ad-hoc, low-latency way to query the current configuration state of all resources tenant-wide—for example, listing every virtual machine that lacks a required 'CostCenter' tag or that uses an unmanaged disk. The query must run across all subscriptions in seconds without exporting data to an external store. Which Azure capability should you recommend?