# Resource was disallowed by policy. Policy: 'Require a tag on resources'

- **ID:** `policy/azure-policy-resource-tagging-enforcement`
- **Domain:** policy
- **Category:** config_error
- **Error Code:** `Conflict`
- **Verification:** ai_generated
- **Fix Rate:** 90%

## Root Cause

Azure Policy denies resource creation or update if required tags (e.g., 'Environment', 'CostCenter') are missing, but the deployment template or CLI command omitted the tags.

## Version Compatibility

| Version | Status | Introduced | Deprecated |
|---------|--------|------------|------------|
| Azure Policy v1.0 | active | — | — |
| Azure CLI 2.40+ | active | — | — |

## Workarounds

1. **Include the required tags in the ARM template or Bicep file under the 'tags' property.** (90% success)
   ```
   Include the required tags in the ARM template or Bicep file under the 'tags' property.
   ```
2. **Use Azure CLI with --tags parameter when creating resources.** (85% success)
   ```
   Use Azure CLI with --tags parameter when creating resources.
   ```

## Dead Ends

- **** — Azure Policy deny effect blocks the resource creation entirely; the resource never exists to be updated. (80% fail)
- **** — Requires Contributor permissions at the management group level, which most developers lack, and violates compliance requirements. (60% fail)