A company is using Azure to host a web application. The application is deployed using ARM templates. The operations team has noticed that some resources have been manually modified via the Azure portal, causing configuration drift. The team wants to detect these changes and optionally revert them to the template-defined state. Which Azure feature should they use?
Trap 1: Azure Policy
Azure Policy enforces compliance rules but is not designed to detect drift from ARM templates specifically.
Trap 2: Azure Blueprints
Azure Blueprints orchestrate deployments and assign policies, but they do not detect configuration drift.
Trap 3: Azure Resource Graph with drift detection
Azure Resource Graph is a query and search tool that helps explore resources but does not provide drift detection or remediation capabilities.
- A
Azure Policy
Why wrong: Azure Policy enforces compliance rules but is not designed to detect drift from ARM templates specifically.
- B
Azure Blueprints
Why wrong: Azure Blueprints orchestrate deployments and assign policies, but they do not detect configuration drift.
- C
Azure Resource Graph with drift detection
Why wrong: Azure Resource Graph is a query and search tool that helps explore resources but does not provide drift detection or remediation capabilities.
- D
Resource Manager template what-if operation
The what-if operation on Resource Manager templates compares the current resource configuration with the template-defined state, enabling drift detection and optional reversion to the desired state.