We cannot stop from mistakes happening in the environment, but can be better prepared and safe guard the critical resources. In Azure there is an option to put Locks on any Resource, Resource Group or even Subscription to prevent from making changes to the resources.
Depending upon the region, your need of SLA and the architecture of your application you can choose either the Availability Set or the Availability Zone.
Conditional Access allows organization to enforce policies demanding their needs, including but not limited to allowing access to the resources from their own network only.
When starting to keep a tap on costing for your Azure Infrastructure, disks could be a good starting point.
Into the Cloudverse 