domains / families / security / implementing-azure-defender-for-cloud

implementing-azure-defender-for-cloud

separate

'Enable Microsoft Defender for Cloud (CSPM + CWPP) across VMs, containers,

When to use

• When enabling comprehensive security monitoring across Azure subscriptions
• When implementing cloud workload protection for VMs, containers, SQL, storage, and Key Vault
• When compliance requirements demand continuous assessment against regulatory frameworks
• When building adaptive security controls that respond to detected threats
• When centralizing security findings from Azure-native and hybrid workloads

When not to use

• non-Azure workload protection exclusively
• application-level security testing
• identity-specific protection

Skill page

Source