Security wants several house rules—HTTPS on storage, no anonymous b…

Question

Security wants several house rules—HTTPS on storage, no anonymous blobs, and Key Vault firewall—assigned once across the canal estate. Which Azure Policy construct should you use?

Accepted Answer

Create or assign an initiative (policy set) that bundles the related policy definitions into one assignment — An initiative is the binder: drop HTTPS-on-storage, no-anonymous-blobs, and Key Vault firewall into one set and assign it once. Twenty loose policies drift like twenty sticky notes.

Answer

Create twenty unrelated policy assignments that must be updated one by one forever

Answer

Use Microsoft Defender for Cloud Secure Score recommendations as the only assignment mechanism

Answer

Publish the rules only in a wiki and audit them during annual reviews

Security wants several house rules—HTTPS on storage, no anonymous blobs, and Key Vault firewall—assigned once across the canal estate. Which Azure Policy construct should you use?

Short Explanation

Full Explanation