Microsoft implements this Configuration Management control
Name/Id: ACF1192 / Microsoft Managed Control 1192 Category: Configuration Management Title: Configuration Change Control | Automated Document / Notification / Prohibition Of Changes - Notify Ownership: Customer, Microsoft Description: The organization employs automated mechanisms to: Notify Authorized approvers, CAB of proposed changes to the information system and request change approval; Requirements: The IcM and DevOps automated tools used to track and document changes automatically notify the authorized approvers of proposed changes and request change approval. Records of changes are retained within tickets for all changes.
Rule resource types
IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups