Discover generative AI workloads

The Defender Cloud Security Posture Management (CSPM) plan in Microsoft Defender for Cloud provides a comprehensive view of your organization's AI Bill of Materials (AI BOM). The instructions in this article explain how to use the cloud security explorer to identify the AI workloads and models that are running in your environment. With the results, you can assess the security posture of the scanned AI workloads.

Prerequisites

• Read about AI security posture management.

• Learn more about investigating risks with the cloud security explorer and attack paths.

• You need a Microsoft Azure subscription. If you don't have an Azure subscription, you can sign up for a free subscription.

• Enable Defender for Cloud on your Azure subscription.

• Enable Defender Cloud Security Posture Management (CSPM) on your Azure subscription.

• Have at least one environment with AI supported workloads (Azure OpenAI, AWS account).

Discover AI workloads and models in use

The cloud security explorer can be used to identify generative AI workloads and models running in your environment.

1. Sign in to the Azure portal.

2. Search for and select Microsoft Defender for Cloud > Cloud Security Explorer.

3. Select the AI workloads and models in use query template.

   

4. Select Search.

5. Select a result to review its details.

   

6. Select a node to review the findings.

   

   The findings show the deployed models that are running on your resources and specific model metadata regarding those deployments.

Next step

Explore risks to pre-deployment generative AI artifacts