What is the difference between publishing/assigning regulatory compliance with Azure Blueprint / Policy vs Security Center?

Linda Renate Andersen 196 Reputation points
2020-09-22T08:57:23.063+00:00

It looks like Azure Blueprint and Azure Policy are part of the same process, but I get confused by the option of applying e.g. ISO 27001 in three different places, with Azure Security Center as a third option. What are the differences here? Where do you start when you are building a new solution from scratch? I want to say Azure policies, but that is probably because I'm used to it :)

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,250 questions
0 comments
Accepted answer
  1. James Hamil 22,981 Reputation points Microsoft Employee
    2020-09-22T19:00:12.147+00:00

    Hi! A blueprint is a package or container for composing focus-specific sets of standards, patterns, and requirements related to the implementation of Azure cloud services, security, and design that can be reused to maintain consistency and compliance.

    A policy is a default allow and explicit deny system focused on resource properties during deployment and for already existing resources. It supports cloud governance by validating that resources within a subscription adhere to requirements and standards.

    Including a policy in a blueprint enables the creation of the right pattern or design during assignment of the blueprint. The policy inclusion makes sure that only approved or expected changes can be made to the environment to protect ongoing compliance to the intent of the blueprint.

    A policy can be included as one of many artifacts in a blueprint definition. Blueprints also support using parameters with policies and initiatives.

    Azure Security Center provides a higher-level management view of your policies.

    This documentation does a really good job explaining the differences for your use case! Please let me know if I can clarify anything for you!

    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest