Microsoft Defender for Cloud is a cloud security posture management and
cloud workload protection platform that you can use for all of your
Azure, on‑premise, and multi‑cloud resources.
When we think of cloud security posture management by
making use of Defender for Cloud,
you can really get visibility into your current security situation. Because
Defender for Cloud continuously assesses your resources, it allows you to
gain valuable insight into what's happening.
It'll also provide you with guidance that can help you
effectively and efficiently improve your security.
It also makes use of a secure score for your Azure subscription in
conjunction with guidance from an Azure security benchmark.
Now secure scores is something that we've seen quite often in various
types of Microsoft security solutions, and the aim of it is to help
you understand your security posture,
making it easy for you to understand if you are tracking good or bad
and the various types of recommendations that you need to act on in
order to increase your secure score.
Now within your cloud resources, you would have multiple types of workloads.
This is where cloud workload protection comes into play. By using
security insights and security alerts that are powered by Microsoft
threat intelligence, from a workload protection perspective, you can
really gain advanced intelligence in relation to what needs to be
protected on your workloads. For example,
think of Microsoft Defender for Storage. That will actually provide you
with valuable information about suspicious activities related to your
storage resources. And when you consider about your security pasture
management and your workload protection, because Defender for Cloud is
an Azure‑native service,
many of your Azure services are monitored and protected
without needing to deploy any additional tools.
But as you move away from Azure,
you can leverage Defender for Cloud for your on‑premise resources and
for your multi‑cloud environments. For example,
Microsoft Defender for Kubernetes will enable you to extend its container
threat detection capabilities to your Amazon EKS Linux clusters.
Microsoft Defender for Servers brings the threat detection components and
advanced defenses to your Windows and Linux EC2 instances.
And then, of course, because it's multi‑cloud,
you are not only limited to Amazon. This ultimately allows
you to really enforce your security posture and monitor your multi‑cloud solutions.