compliance.tf

Azure subscriptions should have an Activity Log Alert configured for Create or Update SQL Server Firewall Rule

Create an activity log alert for the Create or Update SQL Server Firewall Rule event. The powerpipe check is titled "Ensure that Activity Log Alert exists for Create or Update SQL Server Firewall Rule".

What this control checks

Checks the subscription for a configured alert on SQL Server firewall rule changes

Framework mappings

The clauses this control is mapped to in each framework.

CIS Azure Benchmark v4.0.0

  • 7.1.2.7 Ensure that Activity Log Alert exists for Create or Update SQL Server Firewall Rule

CIS Azure Benchmark v5.0.0

  • 6.1.2.7 Ensure that Activity Log Alert exists for Create or Update SQL Server Firewall Rule

CIS Azure Benchmark v1.5.0

  • 5.2.7 Ensure that Activity Log Alert exists for Create or Update SQL Server Firewall Rule

CIS Azure Benchmark v2.0.0

  • 5.2.7 Ensure that Activity Log Alert exists for Create or Update SQL Server Firewall Rule

CIS Azure Benchmark v2.1.0

  • 5.2.7 Ensure that Activity Log Alert exists for Create or Update SQL Server Firewall Rule

CIS Azure Benchmark v3.0.0

  • 6.2.7 Ensure that Activity Log Alert exists for Create or Update SQL Server Firewall Rule

Tool mappings

Use these identifiers to cross-reference this control across tools, reports, and evidence.

  • Compliance.tf Control: monitor_log_alert_create_update_sql_servers_firewall_rule
  • Powerpipe Control: azure_compliance.control.monitor_log_alert_create_update_sql_servers_firewall_rule

Last reviewed: 2026-10-13

View all Azure controls →

On this page

Ask AI about this

Help improve this page