Azure subscriptions should have an Activity Log Alert configured for Create Policy Assignment
Activity Log Alert control for the Create Policy Assignment event. The control description reads "Create an activity log alert for the Create Policy Assignment event." In short, the control targets an activity log alert for the Create Policy Assignment event.
What this control checks
Subscription monitoring setup related to policy assignment creation
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.monitor_log_alert_create_policy_assignment.
Framework-specific interpretation
CIS Azure Benchmark v4.0.0: Mapped to 7.1.2.1 (Ensure that Activity Log Alert exists for Create Policy Assignment).
CIS Azure Benchmark v5.0.0: Mapped to 6.1.2.1 (Ensure that Activity Log Alert exists for Create Policy Assignment).
CIS Azure Benchmark v1.3.0: Mapped to 5.2.1 (Ensure that Activity Log Alert exists for Create Policy Assignment).
CIS Azure Benchmark v1.4.0: Mapped to 5.2.1 (Ensure that Activity Log Alert exists for Create Policy Assignment).
CIS Azure Benchmark v1.5.0: Mapped to 5.2.1 (Ensure that Activity Log Alert exists for Create Policy Assignment).
CIS Azure Benchmark v2.0.0: Mapped to 5.2.1 (Ensure that Activity Log Alert exists for Create Policy Assignment).
CIS Azure Benchmark v2.1.0: Mapped to 5.2.1 (Ensure that Activity Log Alert exists for Create Policy Assignment).
CIS Azure Benchmark v3.0.0: Mapped to 6.2.1 (Ensure that Activity Log Alert exists for Create Policy Assignment).
Framework mappings
The clauses this control is mapped to in each framework.
- 7.1.2.1 Ensure that Activity Log Alert exists for Create Policy Assignment
- 6.1.2.1 Ensure that Activity Log Alert exists for Create Policy Assignment
- 5.2.1 Ensure that Activity Log Alert exists for Create Policy Assignment
- 5.2.1 Ensure that Activity Log Alert exists for Create Policy Assignment
- 5.2.1 Ensure that Activity Log Alert exists for Create Policy Assignment
- 5.2.1 Ensure that Activity Log Alert exists for Create Policy Assignment
- 5.2.1 Ensure that Activity Log Alert exists for Create Policy Assignment
- 6.2.1 Ensure that Activity Log Alert exists for Create Policy Assignment
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
monitor_log_alert_create_policy_assignment - Powerpipe Control:
azure_compliance.control.monitor_log_alert_create_policy_assignment
Last reviewed: 2026-10-13