azure-policy-security

Detect Azure policy drift by querying policy states and exemptions to identify non-compliance across resource groups. This allows you to review active exemptions and map identified risks directly to targeted remediation plans.

Querying Azure policy states and definitions requires RBAC access that includes Policy Insights data read and policy read permissions. A suitable RBAC role must be assigned to perform queries and retrieve definitions successfully.

Identify non-compliant exemptions by querying Azure policy assignments and exemptions across resource groups. Reviewing these exemptions helps detect policy drift and map residual risk to appropriate remediation plans.

Plan Azure policy drift remediation by querying policy states to locate non-compliant resources across subscriptions. Applying these findings maps identified governance gaps to actionable remediation plans based on benchmark baselines.