azure-native-services-only

Type: decision

Decision

Only Azure Resource Manager (ARM) reachable services are eligible.

Why

If a service isn't manageable through ARM, the platform cannot guarantee service integrity.

Links

• self-service-policy-exemptions — Self-service exemptions are viable because every resource is within Azure Policy's reach — a non-ARM service sits outside Policy's scope entirely.
• deny-security-controls — Security defaults can not be configured for non-Azure services
• declarative-resource-lifecycle — 3rd party services would not be managed by the Azure Deployment Stack.
• landing-zone-diagnostic-settings — Non ARM services would require additional logic to collect diagnostic settings

← Back to all decisions