Azure resource Locks are a feature in Azure that allow you to apply a lock on a resource to prevent accidental deletion or modification of the resource. Resource Locks can be applied at the resource group level or at the individual resource level.
When a Resource Lock is applied to a resource or resource group, it prevents all users, including those with write or owner permissions, from deleting or modifying the resource. Resource Locks can be configured to have two levels of protection:
- CanNotDelete: This lock prevents the resource from being deleted, but allows it to be modified.
- ReadOnly: This lock prevents both deletion and modification of the resource.
Resource Locks are a useful tool for preventing accidental deletion or modification of critical resources in Azure. For example, you may want to apply a Resource Lock to a production resource group to prevent any accidental modifications or deletions during production operations.
It’s important to note that Resource Locks do not prevent users with permissions to bypass them, such as administrators. Therefore, Resource Locks should not be considered as a security feature, but rather as a safeguard against accidental deletions or modifications.
