Azure subscriptions should have an Activity Log Alert configured for Delete SQL Server Firewall Rule
Checks that Azure subscriptions have an activity log alert for the 'Delete SQL Server Firewall Rule.' The powerpipe check is titled 'Ensure that Activity Log Alert exists for Delete SQL Server Firewall Rule'.
What this control checks
Activity Log Alert exists for the Delete SQL Server Firewall Rule operation
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.monitor_log_alert_delete_sql_servers_firewall_rule.
Framework-specific interpretation
CIS Azure Benchmark v4.0.0: Mapped to 7.1.2.8 (Ensure that Activity Log Alert exists for Delete SQL Server Firewall Rule).
CIS Azure Benchmark v5.0.0: Mapped to 6.1.2.8 (Ensure that Activity Log Alert exists for Delete SQL Server Firewall Rule).
CIS Azure Benchmark v1.5.0: Mapped to 5.2.8 (Ensure that Activity Log Alert exists for Delete SQL Server Firewall Rule).
CIS Azure Benchmark v2.0.0: Mapped to 5.2.8 (Ensure that Activity Log Alert exists for Delete SQL Server Firewall Rule).
CIS Azure Benchmark v2.1.0: Mapped to 5.2.8 (Ensure that Activity Log Alert exists for Delete SQL Server Firewall Rule).
CIS Azure Benchmark v3.0.0: Mapped to 6.2.8 (Ensure that Activity Log Alert exists for Delete SQL Server Firewall Rule).
Framework mappings
The clauses this control is mapped to in each framework.
- 7.1.2.8 Ensure that Activity Log Alert exists for Delete SQL Server Firewall Rule
- 6.1.2.8 Ensure that Activity Log Alert exists for Delete SQL Server Firewall Rule
- 5.2.8 Ensure that Activity Log Alert exists for Delete SQL Server Firewall Rule
- 5.2.8 Ensure that Activity Log Alert exists for Delete SQL Server Firewall Rule
- 5.2.8 Ensure that Activity Log Alert exists for Delete SQL Server Firewall Rule
- 6.2.8 Ensure that Activity Log Alert exists for Delete SQL Server Firewall Rule
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
monitor_log_alert_delete_sql_servers_firewall_rule - Powerpipe Control:
azure_compliance.control.monitor_log_alert_delete_sql_servers_firewall_rule
Last reviewed: 2026-10-13