Security configuration for Azure


Microsoft Defender for Cloud Apps (previously known as Microsoft Cloud App Security) is now part of Microsoft 365 Defender. The Microsoft 365 Defender portal allows security admins to perform their security tasks in one location. This will simplify workflows, and add the functionality of the other Microsoft 365 Defender services. Microsoft 365 Defender will be the home for monitoring and managing security across your Microsoft identities, data, devices, apps, and infrastructure. For more information about these changes, see Microsoft Defender for Cloud Apps in Microsoft 365 Defender.


Cloud Security Posture Management (CSPM) is now supported in Microsoft Defender for Cloud. Once Microsoft Defender for Cloud Apps fully converges with the Microsoft 365 Defender portal, CSPM will only be available in the new Microsoft Defender for Cloud page.

Microsoft Defender for Cloud Apps provides you with a security configuration assessment of your Azure environment. The assessment, powered by Microsoft Defender for Cloud, provides recommendations for missing configuration and security controls.


Your organization must have Microsoft Defender for Cloud licenses for all subscriptions that you want to provide Azure security configuration assessments.

How to enable Azure security recommendations

To enable security configuration recommendations in Defender for Cloud Apps, activate your Microsoft Defender for Cloud subscription by navigating to the portal.

How to view Azure security recommendations

  1. In Defender for Cloud Apps, browse to Investigate > Security configuration, and then select the Azure tab.


    It might take up to 15 minutes before your changes take effect.

    security configuration menu.

  2. You can filter the recommendations by type, by resource, and by subscription. Additionally, you can select the security configuration icon Defender for Cloud icon. to open the recommendation in Microsoft Defender for Cloud for more information and to deep dive into the recommendation.


    To make investigation even simpler, you can create custom queries and save them for later use. After you've finished building your query, select the Save as button in the top right corner of the filters. In the Save query pop-up, name your query.

    security configuration.

For information about how to implement security recommendations, see Managing security recommendations in Microsoft Defender for Cloud.

Next steps

If you run into any problems, we're here to help. To get assistance or support for your product issue, please open a support ticket.