Microsoft Azure Security Technologies: Alerting Debbie@contoso.com on Resource Lock Deletion

Alerting Debbie@contoso.com on Resource Lock Deletion

Question

SIMULATION -

A user named Debbie has the Azure app installed on her mobile device.

You need to ensure that debbie@contoso.com is alerted when a resource lock is deleted.

To complete this task, sign in to the Azure portal.

Explanations

See the explanation below.

You need to configure an alert rule in Azure Monitor.

1. Type Monitor into the search box and select Monitor from the search results.

2. Click on Alerts.

3. Click on +New Alert Rule.

4. In the Scope section, click on the Select resource link.

5. In the Filter by resource type box, type locks and select Management locks (locks) from the filtered results.

6. Select the subscription then click the Done button.

7. In the Condition section, click on the Select condition link.

8. Select the Delete management locks condition the click the Done button.

9. In the Action group section, click on the Select action group link.

10.Click the Create action group button to create a new action group.

11.Give the group a name such as Debbie Mobile App (it doesn't matter what name you enter for the exam) then click the Next: Notifications > button.

12.In the Notification type box, select the Email/SMS message/Push/Voice option.

13.In the Email/SMS message/Push/Voice window, tick the Azure app Push Notifications checkbox and enter debbie@contoso.com in the Azure account email field.

14.Click the OK button to close the window.

15.Enter a name such as Debbie Mobile App in the notification name box.

16.Click the Review & Create button then click the Create button to create the action group.

17.Back in the Create alert rule window, in the Alert rule details section, enter a name such as Management lock deletion in the Alert rule name field.

18.Click the Create alert rule button to create the alert rule.

To complete this task, you can follow the steps below:

  1. Sign in to the Azure portal using your credentials.
  2. Search for the resource group containing the resource lock you want to monitor and select it.
  3. Under the Monitoring section, select Alerts.
  4. On the Alerts blade, click the "+ New alert rule" button.
  5. On the New alert rule blade, configure the following settings:
    • Name: Enter a name for the alert rule (e.g. "Resource lock deletion alert").
    • Description: (optional) Enter a description for the alert rule.
    • Condition: Click on the "+ Add condition" button and select "Resource lock deleted" from the drop-down list of available conditions.
    • Action groups: Click on the "+ Add action group" button to create a new action group.
      • Name: Enter a name for the action group (e.g. "Debbie's alert group").
      • Short name: Enter a short name for the action group.
      • Subscription: Select the subscription to associate with the action group.
      • Resource group: Select the resource group to associate with the action group.
      • Email/SMS/Push/Voice: Enter the email address of the user (e.g. debbie@contoso.com) who should receive the alert.
  6. Click on the "Create alert rule" button to save the alert rule.

After completing these steps, whenever a resource lock is deleted, Debbie will receive an email alert notifying her of the deletion.