azure active directory implementation

Require disk encryption
Audit virtual machines without disaster recovery configured
Audit virtual machines that contain expiring certificates within the specified number of days
Audit virtual machines that do not match Azure security baseline settings
Audit virtual machines that have not restarted with the specified number of days
Audit Linux VMs that have accounts without passwords
Audit virtual machines that don't have the specified application installed
Require automatic OS image patching on virtual machine scale sets
Allow locations (Azure regions)
Allow/not allow resource types
Allow disk SKUs or virtual machines SKUs
Audit usage of custom role based access control rules
Enable Azure Monitor
Enforce resource tagging (tag name and/or value)
Enforce naming pattern consistency