Skip to main content

💼 6.1.2.12 Ensure that Activity Log Alert Exists for Create Role Assignment (Automated)

  • ID: /frameworks/cis-azure-v7.0.0/06/01/02/12

Stats​

not available

Description​

Create an activity log alert rule that notifies an action group whenever the activity log records the Create role assignment operation in the Administrative category. The rule covers role assignments made at the subscription scope and at every resource group and resource beneath it.

Similar​

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance

Policies (1)​

PolicyLogic CountFlagsCompliance
🛡️ Azure Subscription Activity Log Alert for Create Role Assignment does not exist🟢1🟢 x6no data