How To Create An Azure Blueprint

Azure Blueprints is a service in Microsoft Azure that enables cloud administrators to define a repeatable set of Azure resources that conform to organizational standards and best practices. 

It provides a way to package a set of pre-defined Azure resources, such as virtual networks, virtual machines, storage accounts, and security policies, as a blueprint, which can then be used to deploy consistent environments across multiple subscriptions, resource groups, and tenants.

https://learn.microsoft.com/en-us/azure/governance/blueprints/overview

Azure Blueprints also provides the ability to define role-based access controls (RBAC) for the resources in the blueprint, ensuring that only authorized users can make changes to the deployed environment. This is achieved by using Azure Policy to apply governance controls defined in the blueprint.

Azure Blueprints is useful for organizations that must comply with industry standards, security regulations, or corporate policies. It provides a way to ensure that all deployed resources are consistent, standardized, and secure, reducing the risk of configuration drift, security vulnerabilities, or compliance violations.

Administrators can use Azure Blueprints to create and manage blueprints in the Azure Portal or programmatically using PowerShell or Azure CLI. Once a blueprint is created, it can be assigned to Azure subscriptions or management groups, allowing users to deploy consistent resources across multiple environments easily.

To create a blueprint 

1. log in to the Azure portal

2. Search for the blueprint in the navigator

3. Click the "Create" button

Note: Here, you can go ahead and create your blueprint or, according to your organization, create a blueprint using the templates. Let's say you are in the IT industry and may need to go ahead with ISO 27001 standard.

4. Once you select the "Definition location" you have to select where the blueprint will be deployed. 

Note: Remember you can set the blueprint to be deployed from the management group layer or limit it within the selected subscription. To enable the management group level, you must already create a management group.

5. Once complete, you can select the "Artifacts" tab and set the policy assignments already showing according to the selected sample blueprint.

6. If you want to create your own artifact, select "Add artifact" and create your own artifact.

This will give you 4 options as below,

• Policy assignment 
• Role assignment
• Azure resource manager template (Subscription)
• Resource group

7. Choose one of the artifact types and select the requirement accordingly and add to complete the artifact to the blueprint.