MEDIUM
Source
CloudSploit
ID
virtual-machine-logging-enabled

Virtual Machine Logging Enabled

Ensures Activity Log alerts for the create/update and delete Virtual Machine events are enabled

Monitoring for create/update and delete Virtual Machine events gives insight into network access changes and may reduce the time it takes to detect suspicious activity.

Add a new log alert to the Alerts service that monitors for Virtual Machine create/update and delete events.