Microsoft implements this System and Communications Protection control
Name/Id: ACF1653 / Microsoft Managed Control 1653 Category: System and Communications Protection Title: Mobile Code - Authorize, Monitor, And Control Usage Ownership: Customer, Microsoft Description: The organization: Authorizes, monitors, and controls the use of mobile code within the information system. Requirements: Azure authorizes, monitors, and controls the use of mobile code developed by the service teams using the SDL, including peer review and the Security Code Review, to detect the presence of unauthorized mobile code. Code may not be released without following SDL processes.
Rule resource types
IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups