Policy scope: RG1 Exclusion: RG1/VM1 Policy definition: Require tag on resources Policy enforcement: Enabled Parameters, Tag name: Tag1 Note: With "Policy enforcement: Enabled" in Azure Policy, you're activating the enforcement of policies, meaning they will be actively applied to your Azure resources. This will prevent the creation or modification of non-compliant resources, ensuring they adhere to your defined rules and compliance requirements. Reference: https://learn.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage