Automate Microsoft Defender for Cloud connector deployment

This article is part of a series that provides guidance as you design a solution for cloud security posture management (CSPM) and cloud workload protection platform (CWPP) for multicloud resources with Microsoft Defender for Cloud. You can create Amazon Web Services (AWS) and Google Cloud Platform (GCP) connectors programmatically so you can standardize deployment workflows.

Connector deployment automation goals

Connect AWS accounts or GCP projects programmatically.

Set up automated connector deployment

You can connect AWS accounts and GCP projects to Microsoft Defender for Cloud programmatically by using the Defender for Cloud REST API. Review the Security Connectors REST API.

Screenshot that shows a table of security connector operations.

  • When you use the REST API to create a connector, you also need the CloudFormation template or Azure Cloud Shell script, depending on the environment you want to onboard.
  • The easiest way to get the template or script is to download it from the Defender for Cloud portal.
  • The template or script changes depending on which Defender for Cloud protection plans you want to enable.

Next step

Review additional multicloud security resources

  • Last updated on