New-AzSecurityDefenderCspmAwsOfferingObject
Buat objek dalam memori untuk DefenderCspmAwsOffering.
Sintaks
New-AzSecurityDefenderCspmAwsOfferingObject
[-CiemDiscoveryCloudRoleArn <String>]
[-CiemOidcAzureActiveDirectoryAppName <String>]
[-CiemOidcCloudRoleArn <String>]
[-ConfigurationCloudRoleArn <String>]
[-ConfigurationExclusionTag <IDefenderCspmAwsOfferingVMScannersConfigurationExclusionTags>]
[-ConfigurationScanningMode <String>]
[-DataSensitivityDiscoveryCloudRoleArn <String>]
[-DataSensitivityDiscoveryEnabled <Boolean>]
[-DatabaseDspmCloudRoleArn <String>]
[-DatabaseDspmEnabled <Boolean>]
[-MdcContainerAgentlessDiscoveryK8SCloudRoleArn <String>]
[-MdcContainerAgentlessDiscoveryK8SEnabled <Boolean>]
[-MdcContainerImageAssessmentCloudRoleArn <String>]
[-MdcContainerImageAssessmentEnabled <Boolean>]
[-VMScannerEnabled <Boolean>]
[<CommonParameters>]
Deskripsi
Buat objek dalam memori untuk DefenderCspmAwsOffering.
Contoh
Contoh 1: Buat objek DefenderCspmAwsOffering baru
$arnPrefix = "arn:aws:iam::123456789012:role"
New-AzSecurityDefenderCspmAwsOfferingObject `
-VMScannerEnabled $true -ConfigurationScanningMode Default -ConfigurationCloudRoleArn "$arnPrefix/DefenderForCloud-AgentlessScanner" -ConfigurationExclusionTag @{key="value"} `
-DataSensitivityDiscoveryEnabled $true -DataSensitivityDiscoveryCloudRoleArn "$arnPrefix/SensitiveDataDiscovery" `
-DatabaseDspmEnabled $true -DatabaseDspmCloudRoleArn "$arnPrefix/DefenderForCloud-DataSecurityPostureDB" `
-CiemDiscoveryCloudRoleArn "$arnPrefix/DefenderForCloud-Ciem" -CiemOidcAzureActiveDirectoryAppName "mciem-aws-oidc-connector" -CiemOidcCloudRoleArn "$arnPrefix/DefenderForCloud-OidcCiem" `
-MdcContainerImageAssessmentEnabled $true -MdcContainerImageAssessmentCloudRoleArn "$arnPrefix/MDCContainersImageAssessmentRole" `
-MdcContainerAgentlessDiscoveryK8SEnabled $true -MdcContainerAgentlessDiscoveryK8SCloudRoleArn "$arnPrefix/MDCContainersAgentlessDiscoveryK8sRole"
CiemDiscoveryCloudRoleArn : arn:aws:iam::123456789012:role/DefenderForCloud-Ciem
CiemOidcAzureActiveDirectoryAppName : mciem-aws-oidc-connector
CiemOidcCloudRoleArn : arn:aws:iam::123456789012:role/DefenderForCloud-OidcCiem
ConfigurationCloudRoleArn : arn:aws:iam::123456789012:role/DefenderForCloud-AgentlessScanner
ConfigurationExclusionTag : {
"key": "value"
}
ConfigurationScanningMode : Default
DataSensitivityDiscoveryCloudRoleArn : arn:aws:iam::123456789012:role/SensitiveDataDiscovery
DataSensitivityDiscoveryEnabled : True
DatabaseDspmCloudRoleArn : arn:aws:iam::123456789012:role/DefenderForCloud-DataSecurityPostureDB
DatabaseDspmEnabled : True
Description :
MdcContainerAgentlessDiscoveryK8SCloudRoleArn : arn:aws:iam::123456789012:role/MDCContainersAgentlessDiscoveryK8sRole
MdcContainerAgentlessDiscoveryK8SEnabled : True
MdcContainerImageAssessmentCloudRoleArn : arn:aws:iam::123456789012:role/MDCContainersImageAssessmentRole
MdcContainerImageAssessmentEnabled : True
OfferingType : DefenderCspmAws
VMScannerEnabled : True
Parameter
-CiemDiscoveryCloudRoleArn
Peran cloud ARN di AWS untuk penemuan CIEM.
Jenis: | String |
Position: | Named |
Nilai default: | None |
Diperlukan: | False |
Terima input alur: | False |
Terima karakter wildcard: | False |
-CiemOidcAzureActiveDirectoryAppName
nama aplikasi azure active directory yang digunakan untuk mengautentikasi terhadap AWS.
Jenis: | String |
Position: | Named |
Nilai default: | None |
Diperlukan: | False |
Terima input alur: | False |
Terima karakter wildcard: | False |
-CiemOidcCloudRoleArn
Peran cloud ARN di AWS untuk koneksi oidc CIEM.
Jenis: | String |
Position: | Named |
Nilai default: | None |
Diperlukan: | False |
Terima input alur: | False |
Terima karakter wildcard: | False |
-ConfigurationCloudRoleArn
Peran cloud ARN di AWS untuk fitur ini.
Jenis: | String |
Position: | Named |
Nilai default: | None |
Diperlukan: | False |
Terima input alur: | False |
Terima karakter wildcard: | False |
-ConfigurationExclusionTag
Tag VM yang menunjukkan bahwa VM tidak boleh dipindai.
Jenis: | IDefenderCspmAwsOfferingVMScannersConfigurationExclusionTags |
Position: | Named |
Nilai default: | None |
Diperlukan: | False |
Terima input alur: | False |
Terima karakter wildcard: | False |
-ConfigurationScanningMode
Mode pemindaian untuk pemindaian VM.
Jenis: | String |
Position: | Named |
Nilai default: | None |
Diperlukan: | False |
Terima input alur: | False |
Terima karakter wildcard: | False |
-DatabaseDspmCloudRoleArn
Peran cloud ARN di AWS untuk fitur ini.
Jenis: | String |
Position: | Named |
Nilai default: | None |
Diperlukan: | False |
Terima input alur: | False |
Terima karakter wildcard: | False |
-DatabaseDspmEnabled
Apakah perlindungan DSPM database diaktifkan.
Jenis: | Boolean |
Position: | Named |
Nilai default: | None |
Diperlukan: | False |
Terima input alur: | False |
Terima karakter wildcard: | False |
-DataSensitivityDiscoveryCloudRoleArn
Peran cloud ARN di AWS untuk fitur ini.
Jenis: | String |
Position: | Named |
Nilai default: | None |
Diperlukan: | False |
Terima input alur: | False |
Terima karakter wildcard: | False |
-DataSensitivityDiscoveryEnabled
Apakah penemuan Sensitivitas Data Pertahanan Microsoft diaktifkan.
Jenis: | Boolean |
Position: | Named |
Nilai default: | None |
Diperlukan: | False |
Terima input alur: | False |
Terima karakter wildcard: | False |
-MdcContainerAgentlessDiscoveryK8SCloudRoleArn
Peran cloud ARN di AWS untuk fitur ini.
Jenis: | String |
Position: | Named |
Nilai default: | None |
Diperlukan: | False |
Terima input alur: | False |
Terima karakter wildcard: | False |
-MdcContainerAgentlessDiscoveryK8SEnabled
Apakah K8s penemuan tanpa agen kontainer Pertahanan Microsoft diaktifkan.
Jenis: | Boolean |
Position: | Named |
Nilai default: | None |
Diperlukan: | False |
Terima input alur: | False |
Terima karakter wildcard: | False |
-MdcContainerImageAssessmentCloudRoleArn
Peran cloud ARN di AWS untuk fitur ini.
Jenis: | String |
Position: | Named |
Nilai default: | None |
Diperlukan: | False |
Terima input alur: | False |
Terima karakter wildcard: | False |
-MdcContainerImageAssessmentEnabled
Apakah penilaian gambar kontainer Pertahanan Microsoft diaktifkan.
Jenis: | Boolean |
Position: | Named |
Nilai default: | None |
Diperlukan: | False |
Terima input alur: | False |
Terima karakter wildcard: | False |
-VMScannerEnabled
Apakah pemindaian VM Pertahanan Microsoft untuk Server diaktifkan.
Jenis: | Boolean |
Position: | Named |
Nilai default: | None |
Diperlukan: | False |
Terima input alur: | False |
Terima karakter wildcard: | False |