Azure Compliance ControlsAzure Monitor
Azure subscriptions should have an Activity Log Alert configured for Create or Update Network Security Group Rule
Create an activity log alert for the Create or Update Network Security Group Rule event. The Powerpipe check is titled "Ensure that Activity Log Alert exists for Create or Update Network Security Group Rule".
What this control checks
Checks the subscription's alert configuration for network security group rule changes
Framework mappings
The clauses this control is mapped to in each framework.
- 5.2.5 Ensure that Activity Log Alert exists for Create or Update Network Security Group Rule
- 5.2.5 Ensure that Activity Log Alert exists for Create or Update Network Security Group Rule
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
monitor_log_alert_create_update_nsg_rule - Powerpipe Control:
azure_compliance.control.monitor_log_alert_create_update_nsg_rule
Last reviewed: 2026-10-13