Managing Azure Policy through the portal becomes a hassle once your tenant reaches a certain size — and with new AI services landing almost every month, good governance is key. A level-400 walk-through of Enterprise Policy as Code: desired-state strategy, managing policies, policy sets and assignments, and policy documentation as code.

Managing Azure Policy through the portal can be a hassle, especially when your Azure tenant(s) become of a certain size. With the rise of new AI services almost every month, good governance is key to scale environments safely and consistently. There are several ways of doing this — and Enterprise Policy as Code (EPAC) from Microsoft is one of them.

EPAC comprises a number of PowerShell scripts which can be used in a CI/CD-based system or semi-automated to deploy Policies, Policy Sets, Assignments, Policy Exemptions, Remediation Jobs and Role Assignments.

In this session:

What is EPAC and how does it work?
Determine your desired-state strategy
Managing Policies, Policy Sets (Initiatives) and Assignments — a walk-through
Policy documentation (as code)

After this session you have a good understanding of how EPAC works and a good idea of where to start your own proof of concept and implementation.