A cloud team must prevent creation of resources in Azure regions outside an approved list. Which service is designed to enforce this resource configuration rule?

1. A cost allocation tag alone
2. Azure Policy
3. Azure Service Health
4. Azure Advisor