Which Azure service enforces organizational policies across subscriptions, such as requiring all resources to be in specific regions?

1. A Azure RBAC
2. ✓ B Azure Policy (correct answer)
3. C Azure Blueprints
4. D Microsoft Defender for Cloud

Shortcut: Azure Policy enforces governance rules (deny non-compliant resources, audit, modify/remediate). A policy denying resource creation outside allowed regions prevents deployment in disallowed locations regardless of RBAC.