Sign in Start Free Trial

Terraform Modules for AWS

AWS Compliance Frameworks

AWS Compliance Controls

Azure Compliance Frameworks

Azure Compliance Controls

Application Insights components should have a Log Analytics workspace configured for Azure Monitor Logs Application Insights components should prohibit log ingestion and querying from public networks Azure Monitor diagnostic settings should have appropriate log categories configured Azure Monitor log profiles should have log collection enabled for 'write', 'delete', and 'action' categories Azure Monitor should have activity log collection enabled for all regions Azure subscriptions should have a 'Diagnostic Setting' configured for Subscription Activity Logs Azure subscriptions should have a log profile for Activity Log Azure subscriptions should have an Activity Log Alert configured for Create or Update Network Security Group Azure subscriptions should have an Activity Log Alert configured for Create or Update Network Security Group Rule Azure subscriptions should have an Activity Log Alert configured for Create or Update Public IP Address rule Azure subscriptions should have an Activity Log Alert configured for Create or Update Security Solution Azure subscriptions should have an Activity Log Alert configured for Create or Update SQL Server Firewall Rule Azure subscriptions should have an Activity Log Alert configured for Create Policy Assignment Azure subscriptions should have an Activity Log Alert configured for Create, Update, or Delete SQL Server Firewall Rule Azure subscriptions should have an Activity Log Alert configured for Delete Network Security Group Azure subscriptions should have an Activity Log Alert configured for Delete Network Security Group Rule Azure subscriptions should have an Activity Log Alert configured for Delete Policy Assignment Azure subscriptions should have an Activity Log Alert configured for Delete Public IP Address rule Azure subscriptions should have an Activity Log Alert configured for Delete Security Solution Azure subscriptions should have an Activity Log Alert configured for Delete SQL Server Firewall Rule Azure subscriptions should have an Activity Log Alert configured for specific Administrative operations Azure subscriptions should have an Activity Log alert for Service Health incidents Azure subscriptions should have at least one Application Insights resource configured Log Analytics workspaces should prohibit ingestion that is not based on Azure Active Directory Log Analytics workspaces should prohibit log ingestion and querying from public networks Monitor log profiles should have retention set to 365 days or greater

Google Cloud Compliance Frameworks

Google Cloud Compliance Controls

Azure Compliance ControlsAzure Monitor

Azure subscriptions should have an Activity Log Alert configured for Create Policy Assignment

Create an activity log alert for the Create Policy Assignment event.

What this control checks

Subscription monitoring setup related to policy assignment creation

Framework mappings

The clauses this control is mapped to in each framework.

CIS Azure Benchmark v4.0.0

7.1.2.1 Ensure that Activity Log Alert exists for Create Policy Assignment

CIS Azure Benchmark v5.0.0

6.1.2.1 Ensure that Activity Log Alert exists for Create Policy Assignment

CIS Azure Benchmark v1.3.0

5.2.1 Ensure that Activity Log Alert exists for Create Policy Assignment

CIS Azure Benchmark v1.4.0

5.2.1 Ensure that Activity Log Alert exists for Create Policy Assignment

CIS Azure Benchmark v1.5.0

5.2.1 Ensure that Activity Log Alert exists for Create Policy Assignment

CIS Azure Benchmark v2.0.0

5.2.1 Ensure that Activity Log Alert exists for Create Policy Assignment

CIS Azure Benchmark v2.1.0

5.2.1 Ensure that Activity Log Alert exists for Create Policy Assignment

CIS Azure Benchmark v3.0.0

6.2.1 Ensure that Activity Log Alert exists for Create Policy Assignment

Tool mappings

Use these identifiers to cross-reference this control across tools, reports, and evidence.

Compliance.tf Control: monitor_log_alert_create_policy_assignment
Powerpipe Control: azure_compliance.control.monitor_log_alert_create_policy_assignment

Last reviewed: 2026-10-13

View all Azure controls →

Azure subscriptions should have an Activity Log Alert configured for Create or Update SQL Server Firewall Rule

Previous Page

Azure subscriptions should have an Activity Log Alert configured for Create, Update, or Delete SQL Server Firewall Rule

Next Page

On this page

Implementation What this control checks Framework mappings Tool mappings

Ask AI about this

Ask Claude
Ask ChatGPT

Help improve this page

Suggest an edit
Share on LinkedIn

Copyright © 2024-2026 Betajob AS 🇺🇦Build: 20261018_075822_200685

Go to compliance.tf·Registry·Pricing·License Agreement··