Managing Workload Using Microsoft Defender for Cloud

Defender for Cloud is enabled for free on all of our Azure subscriptions when we open it for the first time in the Azure portal or enable it using the API. By default, Defender for Cloud delivers fundamental cloud security and posture management (CSPM) functionalities. To assist us in protecting our Azure resources, the foundational CSPM provides a secure score, security policy, basic suggestions, and a network security evaluation.

Defender for Cloud features

Defender for Cloud provides free multi-cloud CSPM features. These features are enabled by default on any subscription or account added to Defender for Cloud. The foundational CSPM provides asset discovery, ongoing assessment, security recommendations for posture hardening, compliance with the Microsoft Cloud Security Benchmark (MCSB), and a secure score that measures our organization’s posture. It provides a unified view of security across our on-premises and cloud operations with hybrid security. To maintain compliance with security standards, it implements security rules, and continually assesses the security of our hybrid cloud workloads. Gather, explore, and analyze security data from various sources, such as firewalls and partner solutions.