---
names:
  full: Azure Resource Lock is not enabled for mission-critical resources
  contextual: Resource Lock is not enabled for mission-critical resources
description: "Resource Manager Locks provide a way for administrators to lock down\
  \ Azure resources to prevent deletion of, or modifications to, a resource. These\
  \ locks sit outside of the Role Based Access Controls (RBAC) hierarchy and, when\
  \ applied, will place restrictions on the resource for all users."
impossible: true
type: BEST_PRACTICE
categories:
  - "SECURITY"
  - "RELIABILITY"
frameworkMappings:
  - "/frameworks/cis-azure-v5.0.0/06/02"
  - "/frameworks/cloudaware/resource-security/data-protection-and-recovery"
  - "/frameworks/cloudaware/resource-reliability/system-configuration"
similarPolicies:
  cloudConformity:
    - url: https://www.trendmicro.com/cloudoneconformity/knowledge-base/azure/Locks/enable-resource-locks.html
      name: Enable Azure Resource Locks