Azure policy

SubnetWithNsg: How Azure Policy Deny Forced Me to Use azapi
- Jonathan Aerts
- Networking
- 05 Apr, 2026
The Problem Every production Azure Landing Zone deploys a Deny policy: "Subnets must have a Network Security Group." It is a security best practice — no subnet should exist without an NSG cont
read more