Ensure that Azure Resource Group has resource lock enabled
Description
Resource Manager Locks allow administrators to lock down Azure resources and prevent deletion or changing of resources. You can set the lock level to CanNotDelete or ReadOnly. In the portal, the locks are called Delete and Read-only respectively. It is recommended to have locks enabled to prevent accidental or malicious change or deletion.
Remediation
1. Sign in to the AWS Management Console.
2. Navigate to the ‘Resource groups.
3. For each resource group you want to lock, Select ‘Locks’ and click ‘Add’.
4. Select the security group that you want to examine.
5. Specify the lock name and level and save your changes