Why am I not receiving notifications?

As of 17 July 2025, you cannot create new instances in this version of this product. All of the functionality is now available in the updated experience of Security and Compliance Center Workload Protection. For more information, see the transition documentation.

You enabled event notifications for the Security and Compliance Center, but your alerts aren't being forwarded to the connected Event Notifications service instance in your account.

When you send a test event to Event Notifications, the action completes successfully with an HTTP 202 Accepted response. However, the notifications aren't reaching your defined Event Notifications destinations.

This error can occur when the service authorization between Security and Compliance Center and Event Notifications is removed after the connection between the services is initially enabled. You might also receive this error if your Event Notifications topics, destinations, and subscriptions need to be configured or verified.

Verify that you have an Event Notifications topic, destination, and subscription in your Event Notifications service instance. Your Event Notifications topic must be configured to filter for Security and Compliance Center event types, and a subscription must exist between your topic and a destination. If the issue persists, ensure that an IAM authorization exists between the services in the account:

1. Go to Manage > IAM > Authorizations in the console.
2. Click Create, if an authorization doesn't exists.
3. Enter Security and Compliance Center as the source service.
4. Enter Event Notifications as the target service.
5. Select Resources based on selected attributes.
6. Select the service instance attribute. From the list of instances, select your Event Notifications service instance.
7. Select the Event Source Manager role.
8. Click Authorize.