A municipal cloud architect says an ARM template will block any resource that lacks a required cost-center tag. Which statement correctly separates ARM templates from Azure Policy?
Select an answer to reveal the explanation.
Short Explanation
Templates build things; Policy watches the rulebook. An ARM template can create a tagged storage account, but Azure Policy is what keeps checking that every resource still follows the city's tagging rules.
Full Explanation
Azure Resource Manager templates define infrastructure to deploy in a declarative way. Azure Policy evaluates resources against rules such as required tags, allowed locations, or SKU restrictions and can audit or deny noncompliant configurations. Confusing the two leads teams to expect templates to enforce ongoing governance, which is Policy's role, or to expect Policy to stand up application stacks, which templates handle.