Your company must comply with an internal security standard that consists of 15 separate governance rules covering allowed VM sizes, required tags, permitted regions, and encryption settings. You want to assign and track all 15 rules together as a single compliance unit across a subscription, rather than managing each rule individually. Which Azure Policy feature should you use?