Scenario: regions + tagsEnforcing standards across teams is governance, even if it supports security. Goal: prevent non-standard deployments. Rule: approved regions only. Rule: required tags (e.g., cost center). Tool example: Azure Policy.