'Create Policy Assignment' activity log alert should be configured
이 페이지는 아직 한국어로 제공되지 않으며 번역 작업 중입니다. 번역에 관한 질문이나 의견이 있으시면 언제든지 저희에게 연락해 주십시오.
Description
To improve detection of unsolicited changes and gain insight into modifications made in “Azure policy - assignments,” it is recommended to create an activity log alert specifically for the Create Policy Assignment event. This alert will help monitor and track any occurrences of policy assignment creation, reducing the time it takes to identify and respond to any unauthorized changes.
From the console
- Go to Monitor and select Alerts.
- Click New Alert Rule.
- Under Scope, click Select Resource.
- Under Filter by Subscription, select the appropriate subscription.
- Under Filter by Resource Type, select Policy Assignment.
- Select All for Filter by Location.
- Click the subscription resource from the entries populated under Resource. Verify that the selection preview shows All Policy assignment (policyAssignments) and the selected subscription name.
- Click Done.
- Under Condition, click Add Condition, then select the Create Policy Assignment signal.
- Click Done.
- Under Action Group, select Add Action Groups and complete the creation process or select the appropriate action group.
- Under Alert Rule Details, enter the Alert Rule Name and Description.
- Select the appropriate resource group to save the alert to.
- Select the Enable alert rule upon creation checkbox.
- Click Create Alert Rule.
