Skip to main content

💼 6.1.2.13 Ensure that Activity Log Alert Exists for Delete Role Assignment (Automated)

  • ID: /frameworks/cis-azure-v7.0.0/06/01/02/13

Stats​

not available

Description​

Create an activity log alert rule that notifies an action group whenever the activity log records the Delete role assignment operation in the Administrative category. The rule covers role assignments removed at the subscription scope and at every resource group and resource beneath it.

Similar​

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance

Policies (1)​

PolicyLogic CountFlagsCompliance
🛡️ Azure Subscription Activity Log Alert for Delete Role Assignment does not exist🟢1🟢 x6no data