Which Azure service should a financial institution use to automatically apply a set of approved policies and role assignments when deploying resources to new subscriptions?

Azure Blueprints allows you to define a repeatable set of Azure resources, policies, and role assignments that can be consistently applied to new subscriptions. This ensures compliance with organizational standards and regulatory requirements for financial institutions from the outset. Azure Resource Manager (ARM) is the deployment and management service for Azure, but it doesn't inherently provide the templating and enforcement of policies and role assignments across subscriptions in the same comprehensive way as Blueprints. Azure Policy focuses on enforcing rules and effects on resources but doesn't package and deploy entire environments like Blueprints. Azure Monitor is used for collecting, analyzing, and acting on telemetry data from your Azure and on-premises environments, not for deploying resources or enforcing policies.