last sync: 2024-Nov-01 18:49:23 UTC

Configure Azure Defender for Resource Manager to be enabled

Azure BuiltIn Policy definition

Source Azure Portal
Display name Configure Azure Defender for Resource Manager to be enabled
Id b7021b2b-08fd-4dc0-9de7-3c6ece09faf9
Version 1.1.0
Details on versioning
Versioning Versions supported for Versioning: 2
1.0.2
1.1.0
Built-in Versioning [Preview]
Category Security Center
Microsoft Learn
Description Azure Defender for Resource Manager automatically monitors the resource management operations in your organization. Azure Defender detects threats and alerts you about suspicious activity. Learn more about the capabilities of Azure Defender for Resource Manager at https://aka.ms/defender-for-resource-manager . Enabling this Azure Defender plan results in charges. Learn about the pricing details per region on Security Center's pricing page: https://aka.ms/pricing-security-center .
Mode All
Type BuiltIn
Preview False
Deprecated False
Effect Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled
RBAC role(s)
Role Name Role Id
Security Admin fb1c8493-542b-48eb-b624-b4c8fea62acd
Rule aliases THEN-ExistenceCondition (2)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Security/pricings/pricingTier Microsoft.Security pricings properties.pricingTier True False
Microsoft.Security/pricings/subPlan Microsoft.Security pricings properties.subPlan True False
Rule resource types IF (1)
Microsoft.Resources/subscriptions
THEN-Deployment (1)
Microsoft.Security/pricings
Compliance
The following 1 compliance controls are associated with this Policy definition 'Configure Azure Defender for Resource Manager to be enabled' (b7021b2b-08fd-4dc0-9de7-3c6ece09faf9)
Control Domain Control Name MetadataId Category Title Owner Requirements Description Info Policy#
op.exp.6 Protection against harmful code op.exp.6 Protection against harmful code 404 not found n/a n/a 63
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type
[Deprecated]: Deploy Microsoft Defender for Cloud configuration Deploy-MDFC-Config Security Center Deprecated ALZ
Configure Microsoft Defender for Cloud plans f08c57cd-dbd6-49a4-a85e-9ae77ac959b0 Security Center GA BuiltIn
Deploy Microsoft Defender for Cloud configuration Deploy-MDFC-Config_20240319 Security Center GA ALZ
Spain ENS 175daf90-21e1-4fec-b745-7b4c909aa94c Regulatory Compliance GA BuiltIn
History
Date/Time (UTC ymd) (i) Change type Change detail
2024-01-31 19:57:15 change Minor (1.0.2 > 1.1.0)
2023-05-01 17:41:52 change Patch (1.0.1 > 1.0.2)
2021-12-06 22:17:57 change Patch (1.0.0 > 1.0.1)
2021-07-30 15:17:20 add b7021b2b-08fd-4dc0-9de7-3c6ece09faf9
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC