Table of Contents

1. Challenge

   Assign Azure Policies

   • Assign a policy to block the deployment of resource groups when a Cost Allocation tag is not provided.
     • Assign the policy to the resource group for the hands-on lab.
     • Optionally provide a non-compliance message for your first policy assignment.
   • Assign a policy to inherit the Cost Allocation tag from the parent resource group when the tag is not present on a resource.
     • Associate the existing user-assigned managed identity with your policy assignment.
2. Challenge

   Create and Update Resources

   • Create a Cost Allocation tag, set the value to IT, and attach it to the resource group.
   • Deploy a new Virtual Network named PolicyVnet2 in the same region as the existing resources.
     • Do not provide a cost allocation tag during provisioning; Azure Policy should inherit the tag from the resource group.
3. Challenge

   Observe the Results of Policy Assignment

   • View the tags of the existing resources.
   • View the tags of the newly created non-compliant resource after creation.
4. Challenge

   Remediate Existing Resources

   • Create a remediation task to bring the existing virtual network into compliance.