Microsoft implements this System and Communications Protection control
Name/Id: ACF1648 / Microsoft Managed Control 1648 Category: System and Communications Protection Title: Collaborative Computing Devices - Prohibit Remote Activation; Exceptions Ownership: Customer, Microsoft Description: The information system: Prohibits remote activation of collaborative computing devices; Requirements: Azure does not allow collaborative computing devices and there are no instances of collaborative computing devices within the Azure accreditation boundary managed by Azure. This includes Hyper-V clipboard functions, microphones, network white boards, and cameras.
Rule resource types
IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups