You are designing Azure governance so that every resource is easily identifiable by environment, owner, department, and cost center. You must ensure these operational attributes are available for inclusion in reporting. Which mechanism should you include in the design?

Azure Policy is the correct choice because it allows you to define and enforce organizational standards for resources, including tagging. By creating a policy that requires specific tags (e.g., environment, owner, department, cost center) on resources, you ensure consistent metadata for reporting and identification. An Azure data catalog is for data source discovery and management, not for enforcing resource metadata. An Azure management group hierarchy organizes subscriptions and resources for governance but doesn't directly enforce tagging rules. Azure AD administrative units are for delegating administrative permissions within Azure AD, not for resource tagging or governance across Azure resources.