What you need to know
What should a workbook reviewer inspect before exposing a link that executes an ARM request?
Potentially affected
Azure Monitor workbooks with ARM action links.
DSE recommendation
Expose the intended target and operation clearly, and inspect the resolved request before enabling an operational workbook action.
Source facts
Workbook link actions include both navigation and ARM operations. The ARM action configuration specifies an API path, method, parameters, headers and JSON body; its method choices include POST, PUT, PATCH and DELETE. Parameters and grid-column values can supply request content. Microsoft Learn.
Selecting the link opens a configured run view. The action executes when the user selects its run button. View Request Details exposes the request method and endpoint, while an Azure portal notification reports progress and outcome. Microsoft Learn.
Applicability
This review concerns Azure Monitor workbooks with ARM action links. Keep it separate from ordinary resource navigation and workbook formatting. Do not describe an action as a harmless detail view merely because both begin with a click.
DSE recommendation
DSE recommends wording the link and run button around the actual operation. Include the intended resource in the description and identify which row or parameter supplies it. Review every dynamic input against the operator’s intended selection. For a destructive request, require the existing change-approval process and an explicit target check; publishing a workbook is not approval to execute its actions.
Verification
Use a disposable resource and inspect the resolved request before execution. Compare the displayed target with the endpoint and body, then record the notification and resulting resource state. Repeat with a different row to detect a fixed or incorrectly bound target. Keep the reviewed workbook version with these observations.
Official references
Review the official source
Azure Workbooks link actions - Azure Monitor | Microsoft Learn · Verified September 9, 2026
Need help applying this guidance safely?
DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.
Talk with DSE