More object pre-checks when policies are enabled
For policies, there needs to be pre-checks before objects are created. For example, I created a policy restricting VM's. But the NIC was created and left orphaned because the NIC was created before the VM object, which failed due to the policy. I used managed disks, otherwise I'm sure a new storage account would also have been orphaned.