AzPolicyAdvertizer

last sync: 2025-Jun-19 17:23:14 UTC

Configure Azure Defender for servers to be enabled

Azure BuiltIn Policy definition

Source

Azure Portal

Display name

Configure Azure Defender for servers to be enabled

8e86a5b6-b9bd-49d1-8e21-4bb8a0862222

Version

1.0.1
Details on versioning

Versioning

Versions supported for Versioning: 1
1.0.1
Built-in Versioning [Preview]

Category

Security Center
Microsoft Learn

Description

Azure Defender for servers provides real-time threat protection for server workloads and generates hardening recommendations as well as alerts about suspicious activities.

Cloud environments

AzureCloud = true
AzureUSGovernment = true
AzureChinaCloud = unknown

Available in AzUSGov

The Policy is available in AzureUSGovernment cloud. Version: '1.0.0'
Repository: Azure-Policy 8e86a5b6-b9bd-49d1-8e21-4bb8a0862222

Mode

All

Type

BuiltIn

Preview

False

Deprecated

False

Effect

Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled

RBAC role(s)

Role Name	Role Id
Security Admin	fb1c8493-542b-48eb-b624-b4c8fea62acd

Rule aliases

THEN-ExistenceCondition (1)

Alias	Namespace	ResourceType	Path	PathIsDefault	DefaultPath	Modifiable
Microsoft.Security/pricings/pricingTier	Microsoft.Security	pricings	properties.pricingTier	True		False

Rule resource types

IF (1)

Microsoft.Resources/subscriptions

THEN-Deployment (1)

Microsoft.Security/pricings

Compliance

The following 1 compliance controls are associated with this Policy definition 'Configure Azure Defender for servers to be enabled' (8e86a5b6-b9bd-49d1-8e21-4bb8a0862222)

Rows: 1-1 / 1
Columns:
Select all:
Control Domain
Control
Name
MetadataId
Category
Title
Owner
Requirements
Description
Info
Policy#
Close
Columns▼Records:
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, **[empty]**, **[nonempty]**, **rgx:**
Learn more
TableFilter v0.7.3
https://www.tablefilter.com/
©2015-2025 Max Guglielmi
Close
?
Page of 1
Control Domain	Control	Name	MetadataId	Category	Title	Owner	Requirements	Description	Info	Policy#

	op.exp.6 Protection against harmful code	op.exp.6 Protection against harmful code	404 not found				n/a	n/a		61

Initiatives usage

Rows: 1-3 / 3
Records:
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, **[empty]**, **[nonempty]**, **rgx:**
Learn more
TableFilter v0.7.3
https://www.tablefilter.com/
©2015-2025 Max Guglielmi
Close
?
Page of 1
Initiative DisplayName	Initiative Id	Initiative Category	State	Type	polSet in AzUSGov

[Deprecated]: Deploy Microsoft Defender for Cloud configuration	Deploy-MDFC-Config	Security Center	Deprecated	ALZ
Deploy Microsoft Defender for Cloud configuration	Deploy-MDFC-Config_20240319	Security Center	GA	ALZ
Spain ENS	175daf90-21e1-4fec-b745-7b4c909aa94c	Regulatory Compliance	GA	BuiltIn	unknown

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2023-05-01 17:41:52	change	Patch (1.0.0 > 1.0.1)
2021-07-30 15:17:20	add	8e86a5b6-b9bd-49d1-8e21-4bb8a0862222

JSON compare

compare mode: version left: version right:

1.0.0 → 1.0.1 RENAMED Viewed

@@ -3,9 +3,9 @@
     "policyType": "BuiltIn",
     "mode": "All",
     "description": "Azure Defender for servers provides real-time threat protection for server workloads and generates hardening recommendations as well as alerts about suspicious activities.",
     "metadata": {
-        "version": "1.0.0",
         "category": "Security Center"
     },
     "parameters": {
         "effect": {
@@ -56,9 +56,9 @@
                             "variables": {},
                             "resources": [
                                 {
                                     "type": "Microsoft.Security/pricings",
-                                    "apiVersion": "2018-06-01",
                                     "name": "VirtualMachines",
                                     "properties": {
                                         "pricingTier": "Standard"
                                     }

     "policyType": "BuiltIn",
     "mode": "All",
     "description": "Azure Defender for servers provides real-time threat protection for server workloads and generates hardening recommendations as well as alerts about suspicious activities.",
     "metadata": {
+        "version": "1.0.1",
         "category": "Security Center"
     },
     "parameters": {
         "effect": {
                             "variables": {},
                             "resources": [
                                 {
                                     "type": "Microsoft.Security/pricings",
+                                    "apiVersion": "2023-01-01",
                                     "name": "VirtualMachines",
                                     "properties": {
                                         "pricingTier": "Standard"
                                     }

JSON

api-version=2021-06-01
EPAC

{7 itemsdisplayName: "Configure Azure Defender for servers to be enabled",
policyType: "BuiltIn",
mode: "All",
description: "Azure Defender for servers provides real-time threat protection for server workloads and generates hardening recommendations as well as alerts about suspicious activities.",
metadata: {2 itemsversion: "1.0.1",
category: "Security Center"
},
parameters: {1 itemeffect: {4 itemstype: "String",
metadata: {2 itemsdisplayName: "Effect",
description: "Enable or disable the execution of the policy"
},
allowedValues: [2 items"DeployIfNotExists",
"Disabled"
],
defaultValue: "DeployIfNotExists"
}
},
policyRule: {2 itemsif: {1 itemallOf: [1 item{2 itemsfield: "type",
equals: "Microsoft.Resources/subscriptions"
}
]
},
then: {2 itemseffect: "[parameters('effect')]",
details: {7 itemstype: "Microsoft.Security/pricings",
name: "VirtualMachines",
deploymentScope: "subscription",
existenceScope: "subscription",
roleDefinitionIds: [1 item"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd" Security Admin 
],
existenceCondition: {2 itemsfield: "Microsoft.Security/pricings/pricingTier",
equals: "Standard"
},
deployment: {2 itemslocation: "westeurope",
properties: {3 itemsmode: "incremental",
parameters: {},
template: {6 items$schema: "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
contentVersion: "1.0.0.0",
parameters: {},
variables: {},
resources: [1 item{4 itemstype: "Microsoft.Security/pricings",
apiVersion: "2023-01-01",
name: "VirtualMachines",
properties: {1 itempricingTier: "Standard"
}
}
],
outputs: {}
}
}
}
}
}
}
}

Configure Azure Defender for servers to be enabled

Azure BuiltIn Policy definition

TableFilter v0.7.3

TableFilter v0.7.3