Activity log alert should exist for Delete NSG Rule

What does this mean?

This recommendation ensures that Activity Log alerts trigger when Network Security Group rules are deleted. Deleting NSG rules can open network paths that were previously restricted, potentially exposing resources to unauthorized access.

Benefits of implementation

• Immediate notification when network security rules are removed
• Enables rapid response to unauthorized network changes
• Supports security audit requirements

Drawbacks and considerations

• Generates alerts for both planned and unplanned changes
• Requires integration with incident response workflows
• May produce noise during infrastructure deployments

Implementation

Implementation guidance coming soon.

Related recommendations

Related recommendations will be linked here.