Microsoft implements this Configuration Management control
Name/Id: ACF1193 / Microsoft Managed Control 1193 Category: Configuration Management Title: Configuration Change Control | Automated Document / Notification / Prohibition Of Changes - Propose Ownership: Customer, Microsoft Description: The organization employs automated mechanisms to: Highlight proposed changes to the information system that have not been approved or disapproved by 30 days; Requirements: The current queue of proposed changes is reviewed by the service team as part of regular review meetings at least monthly. Changes can be abandoned; this is a normal part of the change management lifecycle.
Rule resource types
IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups