Hi @Chad Woodhead ,
Yes, it is possible to use Azure Policy as the method to apply locks at the resource level. Please read this documentation: Lock Resources to Prevent Unexpected Changes on how to do this in the Azure portal.
You can also use Azure PowerShell to accomplish this as well. To lock a resource, provide the name of the resource, its resource type, and its resource group name.
New-AzResourceLock -LockLevel CanNotDelete -LockName LockSite -ResourceName examplesite -ResourceType Microsoft.Web/sites -ResourceGroupName exampleresourcegroup
Hope that helps. Please let us know if you have further questions
Thanks,
Grace
--If the reply is helpful, please Upvote and Accept as answer--