What is resource locking in Azure Blueprints?
Answer
Resource locks allow you to lock resources and prevent the users from changing them.
Resource locks deployed by Azure Blueprints are only applied to resources deployed by the blueprint assignment. Existing resources, such as those in resource groups that already exist, don't have locks added to them.
Resources created by artifacts in a blueprint assignment have four states:
- Not Locked,
- Read Only,
- Cannot Edit / Delete
- Cannot Delete.
Each artifact type can be in the Not Locked state. The following table can be used to determine the state of a resource:
Don't Lock
Not Locked - Resources aren't protected by Azure Blueprints. This state is also used for resources added to a Read Only or Do Not Delete resource group artifact from outside a blueprint assignment.
Read Only (Resource group)
Cannot Edit / Delete - The resource group is read only and tags on the resource group can't be modified. Not Locked resources can be added, moved, changed, or deleted from this resource group.
Read Only (Non-resource group)
Read Only - The resource can't be altered in any way. No changes and it can't be deleted.
Do Not Delete
Cannot Delete - The resources can be altered, but can't be deleted. Not Locked resources can be added, moved, changed, or deleted from this resource group.
Related Azure Cloud job interview questions
According to Microsoft Cloud Adoption Framework (CAF), what are the three specific terms related to Management phaze that can help improve conversations among business stakeholders?
Microsoft Cloud Adoption Framework (CAF) JuniorWhat are 6 key steps for establishing a management baseline according to Microsoft Cloud Adoption Framework (CAF)?
Microsoft Cloud Adoption Framework (CAF) JuniorWhat is management baseline according to Microsoft Cloud Adoption Framework (CAF)?
Microsoft Cloud Adoption Framework (CAF) JuniorWhat are the 5 disciplines of cloud governance according to Microsoft Cloud Adoption Framework (CAF)?
Microsoft Cloud Adoption Framework (CAF) JuniorIs Cloud Security Posture Management (CSPM) available for all Azure Subscriptions?
Microsoft Defender Junior