Your company runs a mix of Windows servers in an on-premises datacenter and virtual machines in another public cloud provider. The operations team wants to manage, govern, and apply Azure Policy to all these servers from within the Azure portal, using a single management plane. Which Azure service should you recommend?