The last thing that stopped being true
EPAC cleans up removed policy assignments and the native Azure Landing Zone path does not.
It was true of classic ALZ Bicep, which removed nothing. Both native paths remove dropped policy resources today, by unrelated mechanisms.
Read the research: Azure Policy at Scale, Part 3: One library, two engines
I'm Daniël Etten. I write long, sourced pieces about running Azure at enterprise scale — governance, policy, landing zones — and I leave my corrections visible instead of quietly rewriting history. Every post carries a revision log for exactly that reason.
Recent
- Azure Policy at Scale, Part 3: One library, two engines
- Teaching an agent your landing zone: two repositories, one platform contract
- Azure Policy at Scale, Part 2: What “supported” actually means
- Azure Policy at Scale, Part 1: EPAC or native ALZ? Asking a better question
- From idea to production: building an AI election assistant on Azure
- Goodbye Wordpress, hello Jekyll!
- Microsoft Surface Earbuds review
- Your Azure credentials have not been set up or have expired, please run Connect-AzAccount to set up your Azure credentials