Support matrices for Defender for Cloud
This article indicates the Azure clouds, Azure services, and client operating systems that are supported by Microsoft Defender for Cloud.
Security benefits for Azure services
Defender for Cloud provides recommendations, security alerts, and vulnerability assessment for these Azure services:
|Service||Recommendations free with Foundational CSPM||Security alerts||Vulnerability assessment|
|Azure App Service||✔||✔||-|
|Azure Automation account||✔||-||-|
|Azure Batch account||✔||-||-|
|Azure Blob Storage||✔||✔||-|
|Azure Cache for Redis||✔||-||-|
|Azure Cloud Services||✔||-||-|
|Azure Cognitive Search||✔||-||-|
|Azure Container Registry||✔||✔||Defender for Containers|
|Azure Cosmos DB*||✔||✔||-|
|Azure Data Lake Analytics||✔||-||-|
|Azure Data Lake Storage||✔||✔||-|
|Azure Database for MySQL*||-||✔||-|
|Azure Database for PostgreSQL*||-||✔||-|
|Azure Event Hubs namespace||✔||-||-|
|Azure Functions app||✔||-||-|
|Azure Key Vault||✔||✔||-|
|Azure Kubernetes Service||✔||✔||-|
|Azure Load Balancer||✔||-||-|
|Azure Logic Apps||✔||-||-|
|Azure SQL Database||✔||✔||Defender for Azure SQL|
|Azure SQL Managed Instance||✔||✔||Defender for Azure SQL|
|Azure Service Bus namespace||✔||-||-|
|Azure Service Fabric account||✔||-||-|
|Azure Storage accounts||✔||✔||-|
|Azure Stream Analytics||✔||-||-|
|Azure Subscription||✔ **||✔||-|
|Azure Virtual Network (incl. subnets, NICs, and network security groups)||✔||-||-|
* These features are currently supported in preview.
** Azure Active Directory (Azure AD) recommendations are available only for subscriptions with enhanced security features enabled.
Features supported in different Azure cloud environments
Microsoft Defender for Cloud is available in the following Azure cloud environments:
1 Partially GA: Support for Azure Arc-enabled clusters is in public preview and not available on Azure Government.
2 Requires Microsoft Defender for Kubernetes or Microsoft Defender for Containers.
3 Partially GA: Some of the threat protection alerts from Microsoft Defender for Storage are in public preview.
4 These features all require Microsoft Defender for Servers.
5 There may be differences in the standards offered per cloud type.
6 Partially GA: Subset of alerts and vulnerability assessment for SQL servers. Behavioral threat protections aren't available.
7 Partially GA: Support for Arc-enabled Kubernetes clusters (and therefore AWS EKS too) is in public preview and not available on Azure Government. Run-time visibility of vulnerabilities in container images is also a preview feature.
Supported operating systems
Defender for Cloud depends on the Azure Monitor Agent or the Log Analytics agent. Make sure that your machines are running one of the supported operating systems as described on the following pages:
- Azure Monitor Agent
- Log Analytics agent
Also ensure your Log Analytics agent is properly configured to send data to Defender for Cloud.
To learn more about the specific Defender for Cloud features available on Windows and Linux, see:
- Defender for Servers support for Windows and Linux machines
- Defender for Containers support for Windows and Linux containers
Even though Microsoft Defender for Servers is designed to protect servers, most of its features are supported for Windows 10 machines. One feature that isn't currently supported is Defender for Cloud's integrated EDR solution: Microsoft Defender for Endpoint.
This article explained how Microsoft Defender for Cloud is supported in the Azure, Azure Government, and Azure China 21Vianet clouds. Now that you're familiar with the Defender for Cloud capabilities supported in your cloud, learn how to:
Submit and view feedback for