Activity Log alert exists for SQL firewall rule deletion

# Activity Log Alert for SQL Server firewall rule deletions
resource "azurerm_monitor_activity_log_alert" "<example_resource_name>" {
  name                = "<example_resource_name>"
  resource_group_name = "<example_resource_name>"
  scopes              = ["/subscriptions/<example_subscription_id>"]

  criteria {
    category       = "Administrative" # Critical: filter Activity Log category
    operation_name = "Microsoft.Sql/servers/firewallRules/delete" # Critical: match deletion of SQL Server firewall rules
  }
}

// Activity Log Alert for SQL Server firewall rule deletions
resource activityLogAlert 'Microsoft.Insights/activityLogAlerts@2020-10-01' = {
  name: '<example_resource_name>'
  location: 'Global'
  properties: {
    scopes: [
      '/subscriptions/<example_subscription_id>'
    ]
    enabled: true
    condition: {
      allOf: [
        {
          field: 'category' // Critical: filter Activity Log category
          equals: 'Administrative' // Ensures Administrative events are matched
        }
        {
          field: 'operationName' // Critical: target deletion of SQL Server firewall rules
          equals: 'Microsoft.Sql/servers/firewallRules/delete' // This makes the check PASS
        }
      ]
    }
  }
}