Challenge: build a tagging initiative with remediation, delete protection and a scoped exemption

تحدي: ابني Initiative للـ Tags فيها Remediation وحماية من المسح و Exemption محدود

Fabrikam's FinOps team wants every resource in rg-ch-pol (tag costCenter=CC-2040 ) to be owned and charged correctly, and the security team wants the billing storage protected from accidental deletion. The RG already holds stchlegacy01 (tag owner=ops ) and a vendor-managed account stchvendor01 (no tags). No step-by-step instructions — use the portal, CLI or PowerShell.

The 4 tasks you will do

• Requirement 1 — Tagging initiative assigned with an identityالمتطلب 1 — Initiative للـ Tags متعملها Assign بـ Identity
• Requirement 2 — Fix the existing resourcesالمتطلب 2 — صلّح الموارد الموجودة
• Requirement 3 — Protect tagged resources from deletionالمتطلب 3 — احمي الموارد المتعلّم عليها من المسح
• Requirement 4 — A narrow, time-boxed exemption for the vendor accountالمتطلب 4 — Exemption ضيق وليه مدة لحساب الـ Vendor

The lesson it belongs to

• Azure Policy in depth: effects, remediation, initiatives and exemptions