Patching Windows Server

Scenario:

• 2 x on-prem DCs (VMs), in the Default DCs OU in AD
• GPO applied to the OU to control updaging via WSUS
• Two Azure DCs are added - which also automatically go into the same OU when they are promoted to DCs
• Azure DCs have a patching policy applied through Azure
• Which patching method will take predecence on the Azure DCs - the Azure method, or WSUS?

Thanks