MEDIUM
Source
CloudSploit
ID
policy-assignment-alerts-enabled

Policy Assignment Alerts Enabled

Ensures Activity Log alerts for create or update and delete Policy Assignment events are enabled

Monitoring for create or update and delete Policy Assignment events gives insight into policy changes and may reduce the time it takes to detect suspicious activity.

Add a new log alert to the Alerts service that monitors for Policy Assignment create or update and delete events.