Azure Resource Manager and infrastructure as code with ARM templates and Bicep

Azure Resource Manager (ARM) is the deployment and management service for Azure. Every request to create, update or delete a resource, whether it comes from the portal, Azure CLI, Azure PowerShell, the REST APIs or a software development kit (SDK), goes through Resource Manager. It authenticates the caller with Microsoft Entra ID, checks authorization with role-based access control (RBAC), evaluates Azure Policy and locks, and then sends the request to the right Azure service, called a resource provider, such as Microsoft.Compute for VMs. Because all tools go through the same layer, you get consistent results and consistent features such as RBAC, tags, locks and policies no matter which tool you use.