Service that helps organizations implement governance and monitor standards :
Enforce standards → provide supported options that adhere to company standards.
Prevent non-compliance → deny operations that do not adhere to standards.
Report on compliance → audit and report on resources and their adherence to standards.
Configuration
Conditions help to define standards :
→ Look at resource property for a given value; Specified within a policy definition; Handle the resource location; etc.
Effects means that trigger an effect if the condition is met → block the opration (DENY); report if an item is missing (AUDITIFNOTEXIST), etc.