A cloud-native solution that protects workloads across hybrid and multi-cloud environments with threat detection and security recommendations
There is a stand-alone server license for Defender for Endpoint. Users (devices) are licensed using E3/E5.
I think the AAD-P2 is largely unrelated. This gets you more AAD features and AAD Identity protection. Possibly MDI as well.
Defender for cloud also has a fee of $15 per VM. This actually includes the MDE server license. So you get both for $15. Unfortunately, this does not happen automatically. If you find that you are paying for both, work with your Microsoft reps or open a support case to resolve.