A new company policy requires all Azure virtual machines in the subscription to use managed disks. Prevent users from creating virtual machines that use unmanaged disks. Which service should you use?

Azure Policy is the correct choice because it allows you to define, assign, and manage standards for your Azure resources. You can create a policy definition that specifically audits or denies the creation of virtual machines using unmanaged disks. This directly enforces the company's requirement by preventing non-compliant resource deployments. Azure Monitor is used for collecting, analyzing, and acting on telemetry data from your Azure and on-premises environments, not for enforcing resource configuration. Azure Security Center provides unified security management and advanced threat protection, but it doesn't directly prevent the creation of non-compliant resources in the way Azure Policy does. Azure Service Health provides personalized guidance and support when issues in Azure services affect you, which is unrelated to enforcing resource configuration.