Compliance and Organisation Flashcards
What is a Resource lock?
A restriction that can be put on a resource to prevent deletion or modification.
What are the two main resource locks?
CanNotDelete
ReadOnly
What actions can be performed on a Resource with a CanNotDelete Lock out of the following:
Read
Update
Delete
Read - YES
Update - YES
Delete - NO
What actions can be performed on a Resource with a ReadOnly Lock out of the following:
Read
Update
Delete
Read - YES
Update - NO
Delete - NO
Why are Resource locks important?
Because when a resource is changed or deleted it cannot be undone.
TRUE OR FALSE: Resource locks can only be put on resources.
FALSE
Resource locks can be put on anything in Azure, like: resources, groups and subscriptions.
TRUE OR FALSE: Resources locks are hierarchical, e.g. a lock on a subscription will apply to all resources and groups within said subscription.
TRUE
A lock will be added to any resource/group/subscription if the resource/group/subscription has said lock on it.
What is a Tag?
A piece of metadata that can be added to a resource to help organise it.
How is a tag stored?
As a Key-Value pair
What is the maximum number of tags you can add to a single resource?
50
What are tags used for?
They can be used to group resources together by a given tag and help organise and analyse resources across a organization.
What is a Security Tag?
A Tag that can be used to set the security level of a resource.
What is Azure Policy?
A tool that helps enforce organisational standards and rules across a organisation. It is used to set restrictions and rules to regulate compliance, security, cost and management.
What are the main features of Azure policy?
- Can set policies and rules for resources, and prevents deployment of them if they do not comply
- Can set rules and restrictions for each user (Gives them different trusts) e.g. some users may be able to create higher tier VMs but other may not.
TRUE OR FALSE: Policies backtrack and shutdown already existing resources made before the policy that are no longer compliant.
FALSE
Resources are not affected by policies made after its creation.