How should a healthcare organization enforce naming conventions and tags across all Azure resources?

Azure Policy is the correct choice because it allows you to define and enforce organizational standards and compliance at scale. You can create policies that mandate specific naming conventions (e.g., resource groups must start with "rg-") or require certain tags (e.g., "Department" tag is mandatory). If a resource is created or updated that violates a policy, Azure Policy can audit the violation, deny the creation, or even modify the resource to be compliant. Azure Monitor is for collecting, analyzing, and acting on telemetry data. Azure RBAC controls who has what permissions to Azure resources. Azure Blueprints helps deploy and manage entire environments, but Azure Policy is the specific service for enforcing ongoing compliance like naming and tagging.