Skip to content

Commit 2cba6d8

Browse files
ShawnJacksonShawnJackson
authored
Merge pull request #313817 from paulth1/azure-extended-zones
[AQ] edit pass: Azure extended zones
2 parents fb0dc0b + 25a27a1 commit 2cba6d8

9 files changed

Lines changed: 322 additions & 327 deletions

‎articles/extended-zones/create-azure-policy.md‎

Lines changed: 73 additions & 74 deletions
Original file line numberDiff line numberDiff line change
@@ -1,119 +1,118 @@
11
---
22
title: Deploy a Custom Azure Policy in an Azure Extended Zone
3-
description: Learn how to deploy a custom Azure Policy in an Azure Extended Zone.
3+
description: Learn how to deploy a custom Azure policy in an Azure extended zone.
44
author: svaldesgzz
55
ms.author: svaldes
66
ms.service: azure-extended-zones
77
ms.topic: how-to
88
ms.date: 02/12/2026
99
---
1010

11-
# Create a custom Azure Policy in an Azure Extended Zone
11+
# Create a custom Azure policy in an Azure extended zone
12+
13+
In this article, you learn how to create and deploy a custom Azure policy in an Azure extended zone.
1214

13-
In this article, you learn how to create and deploy a custom Azure Policy in an Extended Zone.
1415
> [!NOTE]
15-
> Azure Policy is supported in Azure Extended Zones with custom policies. Built-in Azure Policy definitions aren't supported in Extended Zones yet. Thus, to enforce governance in Extended Zones you must create and deploy custom Azure Policy definitions that are tailored to the unique characteristics of these zones, namely ***extendedLocation***, ***extendedLocation.name***, and ***extendedLocation.type***. You may find it helpful to use built-in policy definitions as a reference when creating your custom policies.
16+
> Azure Policy is supported in Azure Extended Zones with custom policies. Built-in Azure Policy definitions aren't supported in extended zones yet. To enforce governance in extended zones, you must create and deploy custom Azure Policy definitions that are tailored to the unique characteristics of these zones. Examples are **extendedLocation**, **extendedLocation.name**, and **extendedLocation.type**. You might find it helpful to use built-in policy definitions as a reference when you create your custom policies.
1617
1718
## Prerequisites
1819

19-
- An Azure account with an active subscription. [Create an account for free](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn).
20-
21-
- Access to an Extended Zone. For more information, see [Request access to an Azure Extended Zone](request-access.md).
22-
23-
- Basic understanding of Azure Policy. For more information, see [What is Azure Policy?](/azure/governance/policy/overview)
20+
- An Azure account with an active subscription. If you don't have an account, you can [create an account for free](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn).
21+
- Access to an extended zone. For more information, see [Request access to an Azure extended zone](request-access.md).
22+
- Basic understanding of Azure Policy. For more information, see [What is Azure Policy?](/azure/governance/policy/overview).
2423

2524
## Sign in to Azure
2625

2726
Sign in to the [Azure portal](https://portal.azure.com) with your Azure account.
2827

29-
## Create a custom Azure Policy in an Azure Extended Zone
28+
## Create a custom Azure Policy in an Azure extended zone
3029

31-
In this section, you create a custom Azure Policy in an Extended Zone.
30+
In this section, you create a custom Azure policy in an extended zone.
3231

33-
For this example, we created an Allowed Locations policy that restricts the locations where resources can be deployed.
32+
For this example, you create an Allowed Locations policy that restricts the locations where resources can be deployed.
3433

35-
1. In the search box at the top of the portal, enter ***policy***. Select **Policy** from the search results.
34+
1. In the search box at the top of the portal, enter **policy**. Select **Policy** from the search results.
3635

37-
1. In **Policy**, navigate to **Authoring → Definitions**.
36+
1. On the **Policy** pane, go to **Authoring** > **Definitions**.
3837

3938
1. Select **+ Policy definition**.
4039

41-
1. In **Create a policy definition**, fill in the required fields. Use the following table for guidance.
42-
43-
**Required fields:**
44-
45-
| Field | Guidance |
46-
| ------ | --------- |
47-
| Definition location | Use a **management group** for enterprise-wide governance (recommended), or a **subscription** for more granular control. |
48-
| Name | Use a clear, intent-based name (for example, `Deny-NonApproved-Locations`). |
49-
| Description | Explain what the policy enforces and why. |
50-
| Category | Use an existing category or create one (for example, *Governance* or *Networking*). |
51-
52-
53-
5. Next, define the Policy Rule. In the **Policy rule** section, for this example, enter the following JSON code to create a policy that denies the creation of resources in locations other than an Azure Extended Zone:
54-
55-
```json
56-
{
57-
"mode": "Indexed",
58-
"parameters": {
59-
"listOfAllowedLocations": {
60-
"type": "Array",
61-
"metadata": {
62-
"description": "The list of locations that can be specified when deploying resources.",
63-
"strongType": "location",
64-
"displayName": "Allowed locations"
65-
}
66-
}
67-
},
68-
"policyRule": {
69-
"if": {
70-
"allOf": [
71-
{
72-
"field": "location",
73-
"notIn": "[parameters('listOfAllowedLocations')]"
74-
},
75-
{
76-
"field": "location",
77-
"notEquals": "global"
78-
},
79-
{
80-
"field": "extendedLocation.name",
81-
"notEquals": "losangeles"
82-
},
83-
{
84-
"field": "type",
85-
"notEquals": "Microsoft.AzureActiveDirectory/b2cDirectories"
40+
1. On the **Create a policy definition** pane, fill in the required fields. For guidance on the required fields, use the following table:
41+
42+
| Field | Guidance |
43+
| ------ | --------- |
44+
| Definition location | Use a management group for enterprise-wide governance (recommended) or a subscription for more granular control. |
45+
| Name | Use a clear, intent-based name (for example, `Deny-NonApproved-Locations`). |
46+
| Description | Explain what the policy enforces and why. |
47+
| Category | Use an existing category or create one (for example, Governance or Networking). |
48+
49+
1. Define the policy rule. In the **Policy rule** section, for this example, enter the following JSON code to create a policy that denies the creation of resources in locations other than an Azure extended zone.
50+
51+
```json
52+
{
53+
"mode": "Indexed",
54+
"parameters": {
55+
"listOfAllowedLocations": {
56+
"type": "Array",
57+
"metadata": {
58+
"description": "The list of locations that can be specified when deploying resources.",
59+
"strongType": "location",
60+
"displayName": "Allowed locations"
8661
}
87-
]
62+
}
8863
},
89-
"then": {
90-
"effect": "deny"
64+
"policyRule": {
65+
"if": {
66+
"allOf": [
67+
{
68+
"field": "location",
69+
"notIn": "[parameters('listOfAllowedLocations')]"
70+
},
71+
{
72+
"field": "location",
73+
"notEquals": "global"
74+
},
75+
{
76+
"field": "extendedLocation.name",
77+
"notEquals": "losangeles"
78+
},
79+
{
80+
"field": "type",
81+
"notEquals": "Microsoft.AzureActiveDirectory/b2cDirectories"
82+
}
83+
]
84+
},
85+
"then": {
86+
"effect": "deny"
87+
}
9188
}
9289
}
93-
}
94-
```
95-
In this example, replace `losangeles` with the name of the Extended Zone location you have access to. You can find the location name in the Azure portal when deploying resources in the Extended Zone, or by using Azure CLI or PowerShell.
96-
> [!NOTE]
97-
> The **extendedlocation.name** or similar Extended Zone-specific fields may be highlighted as errors in the json editor. You may disregard this, as you can still successfully save, deploy and enforce the policy with these fields included.
90+
```
91+
92+
In this example, replace `losangeles` with the name of the extended zone location to which you have access. You can find the location name in the Azure portal when you deploy resources in the extended zone, or by using the Azure CLI or Azure PowerShell.
9893

99-
6. Select **Save** to create the policy definition.
94+
> [!NOTE]
95+
> The **extendedlocation.name** property or similar extended zone-specific fields might be highlighted as errors in the JSON editor. You can disregard this notification because you can still successfully save, deploy, and enforce the policy with these fields included.
10096

97+
1. Select **Save** to create the policy definition.
10198

10299
## Policy management and monitoring
103100

104-
You can manage and monitor your Azure Policies in the Policy home dashboard in the Azure portal.
101+
You can manage and monitor your Azure policies on the **Policy** dashboard in the Azure portal.
105102

106103
## Clean up resources
107-
If you're done working with resources from this tutorial, use the following steps to delete any of the policy assignments or definitions created above:
108104

109-
1. Select **Definitions** (or **Assignments** if you're trying to delete an assignment) under **Authoring** in the left side of the Azure Policy page.
105+
If you're finished working with resources from this tutorial, you can delete any of the policy assignments or definitions that you created.
110106

111-
1. Search for the new initiative or policy definition (or assignment) you want to remove.
107+
1. On the service menu on the **Azure Policy** page, under **Authoring**, select **Definitions**. Or select **Assignments** if you're trying to delete an assignment.
112108

113-
1. Right-click the row or select the ellipses at the end of the definition (or assignment), and select **Delete definition** (or **Delete assignment**).
109+
1. Search for the new initiative or policy definition (or assignment) that you want to remove.
110+
111+
1. Right-click the row or select the ellipses at the end of the definition (or assignment). Select **Delete definition** (or **Delete assignment**).
114112

115113
## Related content
114+
116115
- [What is Azure Policy?](/azure/governance/policy/overview)
117116
- [What is Azure Extended Zones?](overview.md)
118-
- [Deploy a virtual machine in an Extended Zone](deploy-vm-portal.md)
117+
- [Deploy a virtual machine in an extended zone](deploy-vm-portal.md)
119118
- [Frequently asked questions](faq.md)

‎articles/extended-zones/create-storage-account.md‎

Lines changed: 23 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -1,76 +1,75 @@
11
---
2-
title: Deploy a storage account in an Azure Extended Zone
3-
description: Learn how to deploy a storage account in an Azure Extended Zone.
2+
title: Deploy a Storage Account in an Azure Extended Zone
3+
description: Learn how to deploy a storage account in an Azure extended zone.
44
author: svaldesgzz
55
ms.author: svaldes
66
ms.service: azure-extended-zones
77
ms.topic: how-to
88
ms.date: 02/25/2026
99
---
1010

11-
# Create a storage account in an Azure Extended Zone
11+
# Create a storage account in an Azure extended zone
1212

13-
In this article, you learn how to create an Azure storage account in an Extended Zone.
13+
In this article, you learn how to create an Azure storage account in an extended zone.
1414

1515
## Prerequisites
1616

17-
- An Azure account with an active subscription. [Create an account for free](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn).
18-
19-
- Access to an Extended Zone. For more information, see [Request access to an Azure Extended Zone](request-access.md).
17+
- An Azure account with an active subscription. If you don't have an Azure subscription, create a [free account](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn) before you begin.
18+
- Access to an extended zone. For more information, see [Request access to an Azure extended zone](request-access.md).
2019

2120
## Sign in to Azure
2221

2322
Sign in to the [Azure portal](https://portal.azure.com) with your Azure account.
2423

25-
## Create a storage account in an Extended Zone
24+
## Create a storage account in an extended zone
2625

27-
In this section, you create a storage account in an Extended Zone.
26+
In this section, you create a storage account in an extended zone.
2827

29-
1. In the search box at the top of the portal, enter ***storage***. Select **Storage accounts** from the search results.
28+
1. In the search box at the top of the portal, enter **storage**. Select **Storage accounts** from the search results.
3029

3130
:::image type="content" source="./media/create-storage-account/portal-search.png" alt-text="Screenshot that shows how to search for storage accounts in the Azure portal.":::
3231

33-
1. In the **Storage accounts** page, select **+ Create**.
32+
1. On the **Storage accounts** page, select **+ Create**.
3433

35-
1. On the **Basics** tab of **Create a storage account**, enter, or select the following information:
34+
1. On the **Basics** tab on the **Create a storage account** pane, enter or select the following information.
3635

3736
| Setting | Value |
3837
| --- | --- |
3938
| **Project details** | |
4039
| Subscription | Select your Azure subscription. |
41-
| Resource group | Select **Create new**. </br> Enter *myResourceGroup* in **Name**. </br> Select **OK**. |
40+
| Resource group | Select **Create new**.</br> In **Name**, enter **myResourceGroup**.</br> Select **OK**. |
4241
| **Instance details** | |
4342
| Storage account name | Enter a unique name. |
44-
| Region* | Select the target Extended Zone's **Parent Region (its *homeLocation*)** and then select **Deploy to an Azure Extended Zone**. </br> Under **Azure Extended Zones**, select the respective **Extended Zone**. </br> Select the **Select** button. |
45-
| Performance | **Premium** is the only available option for an Extended Zone. |
43+
| Region* | Select the target extended zone's parent region (its `homeLocation`), and then select **Deploy to an Azure Extended Zone**.</br> Under **Azure Extended Zones**, select the respective extended zone.</br> Choose **Select**. |
44+
| Performance | **Premium** is the only available option for an extended zone. |
4645
| Premium account type | Select **Page blobs**. Other available options are **Block blobs** and **File shares**. |
47-
| Redundancy | **Locally Redundant Storage (LRS)** is the only available option for an Extended Zone. |
46+
| Redundancy | **Locally-redundant storage (LRS)** is the only available option for an extended zone. |
4847

49-
*If there's no Extended Zone paired with the selected region, you won’t be able to select an Extended Zone location.
48+
*If no extended zone is paired with the selected region, you can't select an extended zone location.
5049

51-
:::image type="content" source="./media/create-storage-account/create-storage-account-basics.png" alt-text="Screenshot that shows the Basics tab of creating a storage account in an Azure Extended Zone." lightbox="./media/create-storage-account/create-storage-account-basics.png":::
50+
:::image type="content" source="./media/create-storage-account/create-storage-account-basics.png" alt-text="Screenshot that shows the Basics tab used to create a storage account in an Azure extended zone." lightbox="./media/create-storage-account/create-storage-account-basics.png":::
5251

5352
> [!NOTE]
54-
> Azure Extended Zones only supports premium storage accounts with locally-redundant storage (LRS) redundancy.
53+
> Azure Extended Zones supports only premium storage accounts with locally redundant storage redundancy.
5554
5655
1. Select **Review + create**.
5756

5857
1. Review the settings, and then select **Create**.
5958

6059
## Clean up resources
6160

62-
When no longer needed, delete the storage account and its resource group:
61+
When you no longer need the storage account, delete it and its resource group.
6362

64-
1. In the search box at the top of the portal, enter ***myResourceGroup***. Select **myResourceGroup** from the search results.
63+
1. In the search box at the top of the portal, enter **myResourceGroup**. Select **myResourceGroup** from the search results.
6564

6665
1. Select **Delete resource group**.
6766

68-
1. In **Delete a resource group**, enter ***myResourceGroup***, and then select **Delete**.
67+
1. On the **Delete a resource group** pane, enter **myResourceGroup**, and then select **Delete**.
6968

7069
1. Select **Delete** to confirm the deletion of the resource group and all its resources.
7170

7271
## Related content
7372

74-
- [Deploy a virtual machine in an Extended Zone](deploy-vm-portal.md)
75-
- [Deploy an AKS cluster in an Extended Zone](deploy-aks-cluster.md)
73+
- [Deploy a virtual machine in an extended zone](deploy-vm-portal.md)
74+
- [Deploy an Azure Kubernetes Service (AKS) cluster in an extended zone](deploy-aks-cluster.md)
7675
- [Frequently asked questions](faq.md)

0 commit comments

Comments
 (0)