Governance is about a set of rules that need to be followed.
In cloud, the way of doing things is different.
Governance in cloud consists of:
[[202404061356 Azure Policy|policy]] - What can you do?
[[202404061249 Azure RBAC|RBAC]] - Who?
[[202404061425 Azure Cost Management|budget]] - How much?

[[202312231415 Azure Master|“Azure”]] is shared compliance model.

How to use constructs for governance

flowchart LR
	ManagementGroup --> Subscription --> ResourceGroup --> Resource

The closer you get to the resource, the stricter the policies can be.
At root [[202404051803 Management groups|management group]] level for example, you want broad policies that need to apply. Least restrictive. And so on.

references:

https://www.youtube.com/watch?v=eLSjnF6Crlw&list=PLlVtbbG169nGlGPWs9xaLKT1KfwqREHbs&index=12 Azure Governance