Change history for actions such as creating or deleting a VM in the Azure Portal can be checked via Monitor > Change Analysis.
For more information about this feature, refer to:
https://learn.microsoft.com/en-us/azure/azure-monitor/change/change-analysis
Change Analysis provides a simple record of changes made to resources in the Azure Portal, but by design, it does not retain records older than 14 days.
The account that performed the change cannot be identified via Change Analysis, but can be checked in the Activity Log.
If advanced analysis of the change history is required, you can export the Activity Log to a Log Analytics workspace and perform queries.
The default retention period for the Activity Log is 90 days, but it can be stored for a longer period when exported to a Log Analytics workspace.
After exporting, you can view the data through the AzureActivity table in the corresponding workspace.