Your company has 1,000 AI developers who are responsible for provisioning environments in Azure.

You need to control the type, size, and location of the resources that the developers can provision.

What should you use?

A. Azure Key Vault

B. Azure service principals

C. Azure managed identities
D. Azure Security Center
E. Azure Policy

Explanation:
When an application needs access to deploy or configure resources through Azure Resource Manager in Azure Stack, you create a service principal, which is a credential for your application. You can then delegate only the necessary permissions to that service principal.

References:
https://docs.microsoft.com/en-us/azure/azure-stack/azure-stack-create-service-principals