Remediation

From Azure Portal

1. Navigate to the specific Azure Resource or Resource Group.
2. For each mission critical resource, click on Locks.
3. Click Add.
4. Give the lock a name and a description, then select the type, Read-only or Delete as appropriate.
5. Click OK.

From Azure CLI

To lock a resource, provide the name of the resource, its resource type, and its resource group name:

az lock create --name <LockName> --lock-type <CanNotDelete/Read-only> --resource-group <resourceGroupName> --resource-name <resourceName> --resource-type <resourceType>

From Powershell

Get-AzResourceLock -ResourceName <Resource Name> -ResourceType <Resource Type> -ResourceGroupName <Resource Group Name> -Locktype <CanNotDelete/Read-only>