Activity Log alert exists for policy assignment creation

# Azure Monitor Activity Log Alert for Policy Assignment creation
resource "azurerm_monitor_activity_log_alert" "<example_resource_name>" {
  name                = "<example_resource_name>"
  resource_group_name = "<example_resource_name>"
  location            = "global"
  scopes              = ["/subscriptions/<subscription ID>"]

  criteria {
    category       = "Administrative" # Critical: Activity Log category
    operation_name = "Microsoft.Authorization/policyAssignments/write" # Critical: Policy Assignment creation
  }
}

// Azure Monitor Activity Log Alert for Policy Assignment creation
resource activityLogAlert 'Microsoft.Insights/activityLogAlerts@2020-10-01' = {
  name: '<example_resource_name>'
  location: 'global'
  properties: {
    enabled: true
    scopes: [ '/subscriptions/<subscription ID>' ]
    condition: {
      allOf: [
        {
          field: 'category'
          equals: 'Administrative' // Critical: filter Activity Log category to Administrative
        }
        {
          field: 'operationName'
          equals: 'Microsoft.Authorization/policyAssignments/write' // Critical: alert on Policy Assignment creation
        }
      ]
    }
  }
}