Azure Compliance ControlsAzure Monitor
Azure subscriptions should have an Activity Log Alert configured for Delete Network Security Group Rule
Checks that an activity log alert exists for the Delete Network Security Group Rule event. The powerpipe check is titled "Ensure that Activity Log Alert exists for Delete Network Security Group Rule".
What this control checks
The powerpipe check monitor_log_alert_delete_nsg_rule is titled "Ensure that Activity Log Alert exists for Delete Network Security Group Rule".
Framework mappings
The clauses this control is mapped to in each framework.
- 5.2.6 Ensure that Activity Log Alert exists for Create or Update Network Security Group Rule
- 5.2.6 Ensure that Activity Log Alert exists for Delete Network Security Group Rule
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
monitor_log_alert_delete_nsg_rule - Powerpipe Control:
azure_compliance.control.monitor_log_alert_delete_nsg_rule
Last reviewed: 2026-10-13