Question

Difficulty: MediumAzure Policy

An organization wants to ensure that all resources deployed to a subscription automatically have a specific tag applied if it is missing from the deployment request. Is it true that Azure Policy can be used to automatically add the missing tag during resource deployment?

Answer: Answer

Answer

The statement is true because Azure Policy can automatically apply missing tags during resource deployment using the Modify or Append effects.
Azure Policy is capable of modifying resources during creation or update. The 'Modify' effect allows the policy to add, update, or remove properties (such as tags) on a resource during deployment.

Step-by-Step Solution

1
Analyze Azure Policy capabilities regarding resource modification.
Azure Policy can evaluate resource properties during deployment and modify them before final creation.
To determine if Azure Policy can perform write operations on resources during deployment.
2
Identify the specific policy effects designed for adding tags.
The 'Modify' effect can add, update, or remove properties (such as tags) on a resource during deployment.
To verify the mechanism through which tags can be automatically applied.
3
Evaluate the correctness of the statement.
Since Azure Policy can automatically add missing tags during deployment, the statement is true.
To establish the final correct answer.

Key Concept

Azure Policy effects and remediation capabilities
Rate this question