您现在访问的是微软AZURE全球版技术文档网站,若需要访问由世纪互联运营的MICROSOFT AZURE中国区技术文档网站,请访问 https://docs.azure.cn.

Azure 中的监管、安全性与合规性Governance, security, and compliance in Azure

当你建立企业策略并规划治理策略时,可以使用 Azure Policy、Azure 蓝图和 Azure 安全中心等工具和服务来强制实施并自动化组织的治理决策。As you establish corporate policy and plan your governance strategies, you can use tools and services like Azure Policy, Azure Blueprints, and Azure Security Center to enforce and automate your organization's governance decisions. 在开始治理规划之前,请使用治理基准工具来确定组织的云治理方法中可能存在的漏洞。Before you start your governance planning, use the governance benchmark tool to identify potential gaps in your organization's cloud governance approach. 有关开发管控过程的详细信息,请参阅管控方法For more information about developing governance processes, see the Govern methodology.

通过 Azure 蓝图,云架构师和中心信息技术组同样可以定义一组可重复的 Azure 资源,这些资源实现并遵守组织的标准、模式和要求。Azure Blueprints enables cloud architects and central information technology groups to define a repeatable set of Azure resources that implements and adheres to an organization's standards, patterns, and requirements. 通过 Azure 蓝图,开发团队可以快速生成和构建新环境,并确信这些生成的环境符合组织规定,还可以使用一组有助于加快开发和交付过程的内置组件(如网络)。Azure Blueprints makes it possible for development teams to rapidly build and stand up new environments and trust that they're building within organizational compliance using a set of built-in components like networking to speed up development and delivery.

蓝图是一种声明性方法,用于协调各个资源模板和其他项目的部署,例如:Blueprints are a declarative way to orchestrate the deployment of various resource templates and other artifacts like:

  • 角色分配。Role assignments.
  • 策略分配。Policy assignments.
  • Azure 资源管理器模板。Azure Resource Manager templates.
  • 资源组。Resource groups.

创建蓝图Create a blueprint

若要创建蓝图:To create a blueprint:

  1. 转到 “蓝图:入门”Go to Blueprints: Getting started.
  2. 在“创建蓝图”部分,选择“创建”。In the Create a Blueprint section, select Create.
  3. 筛选蓝图列表以选择相应的蓝图。Filter the list of blueprints to select the appropriate blueprint.
  4. 输入“蓝图名称”,然后选择相应的“定义位置” 。Enter the Blueprint name, then select the appropriate Definition location.
  5. 选择“下一步: 项目”,然后查看蓝图中包含的项目。Select Next : Artifacts, then review the artifacts included in the blueprint.
  6. 选择“保存草稿”。Select Save Draft.
  1. 在 Azure 门户中,转到蓝图:入门In the Azure portal, go to Blueprints: Get started.
  2. 在“创建蓝图”部分,选择“创建”。In the Create a Blueprint section, select Create.
  3. 筛选蓝图列表以选择相应的蓝图。Filter the list of blueprints to select the appropriate blueprint.
  4. 输入“蓝图名称”,然后选择相应的“定义位置” 。Enter the Blueprint name, then select the appropriate Definition location.
  5. 选择“下一步: 项目”,然后查看蓝图中包含的项目。Select Next : Artifacts, then review the artifacts included in the blueprint.
  6. 选择“保存草稿”。Select Save Draft.

发布蓝图Publish a blueprint

若要将蓝图项目发布到你的订阅,请执行以下操作:To publish a blueprint artifacts to your subscription:

  1. 转到 “蓝图:蓝图定义Go to Blueprints: Blueprint definitions.
  2. 选择在前面的步骤中创建的蓝图。Select the blueprint you created in the previous steps.
  3. 审阅蓝图定义,然后选择“发布蓝图”。Review the blueprint definition, then select Publish blueprint.
  4. 提供 版本(例如 1.01.0)和任何 更改注释,然后选择“发布”。Provide a Version (such as 1.0) and any Change notes, then select Publish.
  1. 在 Azure 门户中,转到蓝图:蓝图定义In the Azure portal, go to Blueprints: Blueprint definitions.
  2. 选择在前面的步骤中创建的蓝图定义。Select the blueprint definition you created in the previous steps.
  3. 审阅蓝图定义,然后选择“发布蓝图”。Review the blueprint definition, then select Publish blueprint.
  4. 提供 版本(例如 1.01.0)和任何 更改注释,然后选择“发布” 。Provide a Version (such as 1.0) and any Change notes, then select Publish.