Contoso Financial has 40 Azure subscriptions in a single Microsoft Entra tenant, and the platform team expects to add roughly one subscription per month as new business units onboard. An EU regulator requires that every Azure resource the company deploys be created only in EU regions.
You must design a governance solution that blocks non-compliant deployments, applies automatically to subscriptions created in the future, and requires the least ongoing administrative effort. What should you include in the design?