Microsoft Azure Administrator Associate AZ-104 Practice Question
You are an Azure Administrator for a company that must comply with data sovereignty regulations. You need to ensure that all resources are deployed only in the 'East US' or 'West US' Azure regions. You need to enforce this requirement across your Azure subscriptions, preventing users from deploying resources in other regions. Which of the following should you do to achieve this requirement?
Implement tagging to enforce resource deployment in allowed regions.
Set up resource locks on regions to prevent resource creation.
Create a custom policy definition to restrict locations and assign it to the subscription.
Use Azure RBAC to limit user permissions to specific regions.