Azure subscriptions should have an Activity Log Alert configured for Delete Network Security Group Rule
Checks that an activity log alert exists for the Delete Network Security Group Rule event. The powerpipe check is titled "Ensure that Activity Log Alert exists for Delete Network Security Group Rule".
What this control checks
An activity log alert exists for Delete Network Security Group Rule.
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.monitor_log_alert_delete_nsg_rule.
Framework-specific interpretation
CIS Azure Benchmark v1.3.0: Mapped to 5.2.6 (Ensure that Activity Log Alert exists for Create or Update Network Security Group Rule).
CIS Azure Benchmark v1.4.0: Mapped to 5.2.6 (Ensure that Activity Log Alert exists for Delete Network Security Group Rule).
Framework mappings
The clauses this control is mapped to in each framework.
- 5.2.6 Ensure that Activity Log Alert exists for Create or Update Network Security Group Rule
- 5.2.6 Ensure that Activity Log Alert exists for Delete Network Security Group Rule
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
monitor_log_alert_delete_nsg_rule - Powerpipe Control:
azure_compliance.control.monitor_log_alert_delete_nsg_rule
Last reviewed: 2026-10-13