通过

你当前正在访问 Microsoft Azure Global Edition 技术文档网站。 如果需要访问由世纪互联运营的 Microsoft Azure 中国技术文档网站，请访问 https://docs.azure.cn。

New-AzSecurityDefenderForContainersAwsOfferingObject

  • 参考
模块:
Az.Security

为 DefenderForContainersAwsOffering 创建内存中对象。

语法

New-AzSecurityDefenderForContainersAwsOfferingObject
   [-AutoProvisioning <Boolean>]
   [-CloudWatchToKinesiCloudRoleArn <String>]
   [-ContainerVulnerabilityAssessmentCloudRoleArn <String>]
   [-ContainerVulnerabilityAssessmentTaskCloudRoleArn <String>]
   [-EnableContainerVulnerabilityAssessment <Boolean>]
   [-KinesiToS3CloudRoleArn <String>]
   [-KubeAuditRetentionTime <Int64>]
   [-KuberneteScubaReaderCloudRoleArn <String>]
   [-KuberneteServiceCloudRoleArn <String>]
   [-MdcContainerAgentlessDiscoveryK8SCloudRoleArn <String>]
   [-MdcContainerAgentlessDiscoveryK8SEnabled <Boolean>]
   [-MdcContainerImageAssessmentCloudRoleArn <String>]
   [-MdcContainerImageAssessmentEnabled <Boolean>]
   [-ScubaExternalId <String>]
   [<CommonParameters>]

说明

为 DefenderForContainersAwsOffering 创建内存中对象。

示例

示例 1：创建新的 DefenderForContainersAwsOffering 对象

$arnPrefix = "arn:aws:iam::123456789012:role"
New-AzSecurityDefenderForContainersAwsOfferingObject `
    -AutoProvisioning $true -KuberneteServiceCloudRoleArn "$arnPrefix/DefenderForCloud-Containers-K8s" -KuberneteScubaReaderCloudRoleArn "$arnPrefix/DefenderForCloud-DataCollection" `
    -KinesiToS3CloudRoleArn "$arnPrefix/DefenderForCloud-Containers-K8s-kinesis-to-s3" -CloudWatchToKinesiCloudRoleArn "$arnPrefix/DefenderForCloud-Containers-K8s-cloudwatch-to-kinesis" `
    -KubeAuditRetentionTime 30 -ScubaExternalId "a47ae0a2-7bf7-482a-897a-7a139d30736c" `
    -MdcContainerAgentlessDiscoveryK8SEnabled $true -MdcContainerAgentlessDiscoveryK8SCloudRoleArn "$arnPrefix/MDCContainersAgentlessDiscoveryK8sRole" `
    -MdcContainerImageAssessmentEnabled $true -MdcContainerImageAssessmentCloudRoleArn "$arnPrefix/MDCContainersImageAssessmentRole" `
    -EnableContainerVulnerabilityAssessment $false

AutoProvisioning                                 : True
CloudWatchToKinesiCloudRoleArn                   : arn:aws:iam::123456789012:role/DefenderForCloud-Containers-K8s-cloudwatch-to-kinesis
ContainerVulnerabilityAssessmentCloudRoleArn     : 
ContainerVulnerabilityAssessmentTaskCloudRoleArn : 
Description                                      : 
EnableContainerVulnerabilityAssessment           : False
KinesiToS3CloudRoleArn                           : arn:aws:iam::123456789012:role/DefenderForCloud-Containers-K8s-kinesis-to-s3
KubeAuditRetentionTime                           : 30
KuberneteScubaReaderCloudRoleArn                 : arn:aws:iam::123456789012:role/DefenderForCloud-DataCollection
KuberneteServiceCloudRoleArn                     : arn:aws:iam::123456789012:role/DefenderForCloud-Containers-K8s
MdcContainerAgentlessDiscoveryK8SCloudRoleArn    : arn:aws:iam::123456789012:role/MDCContainersAgentlessDiscoveryK8sRole
MdcContainerAgentlessDiscoveryK8SEnabled         : True
MdcContainerImageAssessmentCloudRoleArn          : arn:aws:iam::123456789012:role/MDCContainersImageAssessmentRole
MdcContainerImageAssessmentEnabled               : True
OfferingType                                     : DefenderForContainersAws
ScubaExternalId                                  : a47ae0a2-7bf7-482a-897a-7a139d30736c

参数

-AutoProvisioning

是否启用了审核日志管道自动预配。

Type:Boolean
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-CloudWatchToKinesiCloudRoleArn

CloudWatch 用于将数据传输到 Kinesis 的 AWS 中的云角色 ARN。

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ContainerVulnerabilityAssessmentCloudRoleArn

AWS 中用于此功能的云角色 ARN。

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ContainerVulnerabilityAssessmentTaskCloudRoleArn

AWS 中用于此功能的云角色 ARN。

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-EnableContainerVulnerabilityAssessment

启用容器漏洞评估功能。

Type:Boolean
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-KinesiToS3CloudRoleArn

Kinesis 用于将数据传输到 S3 的 AWS 中的云角色 ARN。

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-KubeAuditRetentionTime

在 CloudWatch 日志组上设置的 kube 审核日志的保留时间（以天为单位）。

Type:Int64
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-KuberneteScubaReaderCloudRoleArn

AWS 中用于读取数据的此功能的云角色 ARN。

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-KuberneteServiceCloudRoleArn

AWS 中用于预配资源的此功能的云角色 ARN。

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-MdcContainerAgentlessDiscoveryK8SCloudRoleArn

AWS 中用于此功能的云角色 ARN。

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-MdcContainerAgentlessDiscoveryK8SEnabled

已启用 Microsoft Defender 容器无代理发现 K8s。

Type:Boolean
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-MdcContainerImageAssessmentCloudRoleArn

AWS 中用于此功能的云角色 ARN。

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-MdcContainerImageAssessmentEnabled

已启用 Microsoft Defender 容器映像评估。

Type:Boolean
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ScubaExternalId

数据读取器用于防止混淆的副攻击的 externalId。

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

输出

DefenderForContainersAwsOffering