Microsoft implements this Configuration Management control
Name/Id: ACF1230 / Microsoft Managed Control 1230 Category: Configuration Management Title: Configuration Management Plan - Roles, Responsibilities, Processes, Procedures Ownership: Customer, Microsoft Description: The organization develops, documents, and implements a configuration management plan for the information system that: Addresses roles, responsibilities, and configuration management processes and procedures; Requirements: Azure has system-wide configuration management requirements and processes documented in its Azure Standard Operating Procedures (SOPs). These documents contain high-level roles and responsibilities, defines configuration management processes, and identifies configuration items as well as procedures for maintaining configuration items. All Azure service teams are required to comply with all SOPs, which are maintained appropriately.
* Security Baseline Governance SOP
* Secure Development Lifecycle SOP
* Hardware Change and Release Management SOP
* Software Change and Release Management SOP
Rule resource types
IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups