Microsoft implements this System and Services Acquisition control
Name/Id: ACF1595 / Microsoft Managed Control 1595 Category: System and Services Acquisition Title: Developer Configuration Management - Document, Manage, And Control Integrity of Changes Ownership: Customer, Microsoft Description: The organization requires the developer of the information system, system component, or information system service to: Document, manage, and control the integrity of changes to configuration items; Requirements: Azure developers leverage Git or Azure DevOps to document, manage and control the integrity of changes in the development environment. These tools provide technical enforcement of documented change management processes and the SDL. Among other features, they prevent changes to configuration items that are not tied to an approved change request.
Rule resource types
IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups