- Purpose: Logical container for Azure resources, billing, and usage.
- Key Capabilities:
- Payment and billing boundary.
- Resource access and usage quotas.
- Linked to Azure Active Directory tenant.
- Typical Use Cases:
- Organizing workloads by department or project.
- Enforcing budgetary constraints and spending thresholds.
- Purpose: Hierarchical grouping of subscriptions for organizational governance.
- Key Capabilities:
- Apply policies and access controls across multiple subscriptions.
- Organize subscriptions by departments, regions, or functions.
- Typical Use Cases:
- Enterprise-wide compliance policies
- Consistent resource governance
- Purpose: Enforce compliance and governance across resources.
- Key Capabilities:
- Policy assignments for resource configurations (e.g., allowed regions, tag requirements).
- Monitoring and remediation of non-compliant resources.
- Typical Use Cases:
- Regulatory compliance (e.g., ISO, PCI).
- Resource standardization and cost control.
- Purpose: Package and deploy sets of resource templates and policies at scale.
- Key Capabilities:
- Create repeatable environments with ARM templates, policies, and RBAC.
- Versioning for consistent environment deployments.
- Typical Use Cases:
- Enterprise environment setup
- Standardized development/test/production deployments
- Purpose: Logical grouping of Azure resources for management, deployment, and monitoring.
- Key Capabilities:
- All resources in a group share a common lifecycle.
- Role-based access control at the resource group level.
- Typical Use Cases:
- Grouping related resources for an application.
- Easier deployment and deletion of entire stacks.
- Purpose: Metadata labels to categorize resources (e.g., cost center, environment).
- Key Capabilities:
- Use tags for resource organization and cost allocation.
- Query resources by tags in Azure Portal and CLI.
- Typical Use Cases:
- Cost management and chargeback.
- Resource discovery and governance.
- Purpose: Extend Azure management and services to on-premises, multi-cloud, and edge environments.
- Key Capabilities:
- Manage servers, Kubernetes clusters, and data services anywhere.
- Consistent policy enforcement and governance outside Azure.
- Typical Use Cases:
- Hybrid cloud strategies
- Central management across diverse environments
- Purpose: Infrastructure-as-Code for deploying and managing Azure resources declaratively.
- Key Capabilities:
- JSON-based templates to define infrastructure configurations.
- Parameterization for dynamic deployments.
- Consistent, repeatable environment provisioning.
- Typical Use Cases:
- Automated deployments with CI/CD.
- Version-controlled infrastructure configurations.
- Purpose: Unified data governance service to manage and control data across on-premises, multi-cloud, and SaaS sources.
- Key Capabilities:
- Automated data discovery and classification.
- Data lineage for end-to-end tracking.
- Built-in data catalog for enterprise-wide data visibility.
- Typical Use Cases:
- Regulatory compliance (e.g., GDPR).
- Centralized data governance and discovery.
- Enterprise-wide data cataloging.
- Purpose: Personalized recommendations for best practices, cost optimization, performance, and security.
- Key Capabilities:
- Identifies idle resources, performance bottlenecks, and potential security risks.
- Recommends corrective actions.
- Typical Use Cases:
- Ongoing cost optimization.
- Performance tuning and reliability improvements.
- Security posture assessments.
