AzureRecipes

Alert Rule for manual user activities in Resource Group (tampering)

Especially for productive environments it may be valuable to get notified of any manual changes (e.g. to make sure they are properly reflected in documentation or deployment scripts)

This Bicep module can directly integrated into the deployment like:

module alertRuleTamperingRes './modules.alertRulesTampering.bicep' = {
  name: 'alert-rules-tampering'
  scope: resourceGroup()
  params: {
    resourceNamePrefix: resourceNamePrefix
    resourceNameSuffix: resourceNameSuffix
    resourceGroupId: resourceGroup().id
    logAnalyticsWsResId: logAnalyticsWsResId
    actionGroupResId: actionGrpOrgOpsIndicationsResId
    enableAlertRules: enableAlertRules
  }
}

This is fully compatible with a general Alerting Strategy and can be appended to an alerting module that deploys all Alert Rules of an application

Deploy to Azure