Azure-AzurePolicy-Resource-Location-Matches-Resource-Group

Severity : Medium

Description: This control ensures that a policy is configured to audit that deployed resource locations match their resource group locations. Azure Policy helps to enforce organizational standards and to assess compliance at-scale. Common use cases for Azure Policy include implementing governance for resource consistency, regulatory compliance etc.

Remediation Steps:

Perform following to configure retention period for recovery point :

1. Login to Azure Portal using https://portal.azure.com.

2. Navigate to All Services.

3. Filter for Policy services, and select the policy service.

4. On the Policy, Select Assignment.

5. On Policy Assignment, Select Assign Policy.

6. On Assign Policy, Under Basic tab , Select the policy definition.

   1. Search for Allowed locations for resource groups, Select the Built-in Policy.

   2. Enter Description.

   3. Select Enable, Under Policy Enforcement.

7. On Remediation tab,

   1. Select checkbox for Create a Managed Identity.

   2. Select the Managed Identity Location.

8. Select Review + Create.

Important:

Reference:

• https://docs.microsoft.com/en-us/azure/governance/policy/assign-policy-portal