Defender

Define spend / free-tier walls by provider × resource kind. A policy is in effect when attached to a tracked product (Surfing R2, mock-me import, …). Azure CSP budget remains the compute backend; R2 envelope is storage.

Policies

Loading…

Create / update policy

ID

Name

Provider azureawsgcpr2cloudflareocp-dc

Resource kind computestoragecdnnetworkserviceaihosting

Monthly max USD

Free-tier GB

Warn at %

Envelope ref

Attached product IDs (comma)

Notes

Fail closed

Save policy

Azure deny-list composer (ARM Policy) is still available under legacy guardrails for CSP sync.