An IT department manages cloud infrastructure using multiple interfaces, including the Azure portal, Azure CLI, Azure PowerShell scripts, and automated REST API calls. Which Azure service serves as the central, unified management layer that handles all control plane requests and applies access control, locks, and governance policies across these tools?

Azure Resource Manager: ### What Azure Resource Manager Is **Azure Resource Manager (ARM)** is the central deployment and management service for Microsoft Azure. It functions as the comprehensive control plane layer through which all resource operations—such as creating, configuring, updating, and deleting infrastructure—are processed. ### How It Meets the Requirements ARM acts as a **unified management layer** by providing a consistent interface regardless of the management tool used. When an administrator or script submits a request via the **Azure portal**, **Azure CLI**, **Azure PowerShell**, or directly through the **REST API**, the request is routed to the ARM endpoint (`https://management.azure.com`). ARM authenticates the caller, evaluates **Azure role-based access control (Azure RBAC)** permissions, enforces **Azure Policy** rules, and verifies **Management Locks** before delegating the operation to the appropriate service resource provider. ### Key Advantages and Capabilities - **Consistent Management Interface**: Ensures that commands executed in PowerShell, the CLI, the portal, or SDKs produce identical outcomes. - **Declarative Deployments**: Supports Infrastructure as Code (IaC) through **ARM templates** and **Bicep** files for repeatable, idempotent provisioning. - **Centralized Governance**: Automatically applies security policies, access boundaries, and tag metadata across all managed resources. - **Resource Group Organization**: Enables logical grouping and lifecycle management of related resources as a single administrative unit. ### Why This Is Optimal Azure Resource Manager is the only architectural component in Azure designed to serve as the unified gateway for all control plane actions, ensuring uniform security, audit logging, and policy compliance across every tool.