Exercise 4 – enabling resource tagging with Azure Policy

This section will look at enabling resource tagging with Azure Policy using the Azure portal.

The following subsections show how to complete this exercise, segregated into tasks for ease of understanding.

Task – accessing the Azure portal

1. Log into the Azure portal at https://portal.azure.com. Alternatively, you can use the Azure desktop app: https://portal.azure.com/App/Download.

Task – creating a policy assignment

2. In the search bar, type policy; click Policy from the results list.
3. From the Policy blade, click Assignments under Authoring via the left navigation menu.
4. Click Assign policy from the top toolbar.
5. From the Policy definition field, under Basics on the Basics tab, click the ellipsis button on the right-hand side of the text box.
6. From the Available Definitions page that appears, in the search box, enter require a tag.
7. From the policy definition search results, click Require a tag on resource groups.
8. Click Select.
9. From the Parameters tab, in the Tag Name field, enter Environment as the text value.
10. Click Next: Review + create.
11. On the Review + create tab, review your settings; you may go back to the previous tabs and make any edits if required. Once you have confirmed your settings, click Create.
12. You will receive a notification, stating that the policy assignment succeeded.

Task – testing the policy function

13. In the search bar, type resource groups; click Resource groups from the results list.
14. From the Resource groups blade, click the + Create button via the top toolbar.
15. From the Basics tab, set the Project and Resource details as required.
16. Click Next: Review + create.
17. On the Review + create tab, click Create.
18. You will receive a notification, stating that the resource group failed to be created; click View error details.
19. In the summary tab, you will see that the policy disallowed the resource; this is the required expected behavior.
20. From the Tags tab, enter the name that was defined in the policy; in our exercise, this text value was Environment.
21. For this exercise, enter Production as the text value.
22. Click Next: Review + create.
23. On the Review + create tab, click Create.
24. You will receive a notification, stating that the resource group was created successfully this time.
25. Search for Tags or navigate to the Tags blade in the portal. You will see that your tag has been created. Upon clicking your tag, the page for the tag will show all the resources that have been tagged with it.
26. The final task is to clean up and delete the assigned policy that was created in this exercise.
27. From the Assignments blade, locate the assignment to delete from the list. Then, right-click and select Delete assignment from the pop-up menu.

In this exercise, we successfully created a policy to deny creating a resource that does not have a tag. In the following exercise, we will look at limiting the resource creation location with Azure Policy.