編輯

共用方式為

New-AzSecurityDefenderForServersGcpOfferingObject

  • Reference
Module:
Az.Security

Create an in-memory object for DefenderForServersGcpOffering.

Syntax

New-AzSecurityDefenderForServersGcpOfferingObject
   [-ArcAutoProvisioningEnabled <Boolean>]
   [-ConfigurationExclusionTag <IDefenderForServersGcpOfferingVMScannersConfigurationExclusionTags>]
   [-ConfigurationPrivateLinkScope <String>]
   [-ConfigurationProxy <String>]
   [-ConfigurationScanningMode <String>]
   [-ConfigurationType <String>]
   [-DefenderForServerServiceAccountEmailAddress <String>]
   [-DefenderForServerWorkloadIdentityProviderId <String>]
   [-MdeAutoProvisioningConfiguration <IAny>]
   [-MdeAutoProvisioningEnabled <Boolean>]
   [-SubPlanType <String>]
   [-VMScannerEnabled <Boolean>]
   [-VaAutoProvisioningEnabled <Boolean>]
   [<CommonParameters>]

Description

Create an in-memory object for DefenderForServersGcpOffering.

Examples

Example 1: Create new DefenderForServersGcpOffering object

$emailSuffix = "myproject.iam.gserviceaccount.com"
New-AzSecurityDefenderForServersGcpOfferingObject `
    -DefenderForServerServiceAccountEmailAddress "microsoft-defender-for-servers@$emailSuffix" -DefenderForServerWorkloadIdentityProviderId "defender-for-servers" `
    -ArcAutoProvisioningEnabled $true -MdeAutoProvisioningEnabled $true -VaAutoProvisioningEnabled $true -ConfigurationType TVM `
    -VMScannerEnabled $true -ConfigurationScanningMode Default `
    -SubPlanType P2

ArcAutoProvisioningEnabled                  : True
ConfigurationExclusionTag                   : {
                                              }
ConfigurationPrivateLinkScope               : 
ConfigurationProxy                          : 
ConfigurationScanningMode                   : Default
ConfigurationType                           : TVM
DefenderForServerServiceAccountEmailAddress : microsoft-defender-for-servers@myproject.iam.gserviceaccount.com
DefenderForServerWorkloadIdentityProviderId : defender-for-servers
Description                                 : 
MdeAutoProvisioningConfiguration            : {
                                              }
MdeAutoProvisioningEnabled                  : True
OfferingType                                : DefenderForServersGcp
SubPlanType                                 : P2
VMScannerEnabled                            : True
VaAutoProvisioningEnabled                   : True

Parameters

-ArcAutoProvisioningEnabled

Is arc auto provisioning enabled.

Type:Boolean
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ConfigurationExclusionTag

VM tags that indicate that VM should not be scanned.

Type:IDefenderForServersGcpOfferingVMScannersConfigurationExclusionTags
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ConfigurationPrivateLinkScope

Optional Arc private link scope resource id to link the Arc agent.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ConfigurationProxy

Optional HTTP proxy endpoint to use for the Arc agent.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ConfigurationScanningMode

The scanning mode for the VM scan.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ConfigurationType

The Vulnerability Assessment solution to be provisioned. Can be either 'TVM' or 'Qualys'.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-DefenderForServerServiceAccountEmailAddress

The service account email address in GCP for this feature.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-DefenderForServerWorkloadIdentityProviderId

The workload identity provider id in GCP for this feature.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-MdeAutoProvisioningConfiguration

configuration for Microsoft Defender for Endpoint autoprovisioning.

Type:IAny
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-MdeAutoProvisioningEnabled

Is Microsoft Defender for Endpoint auto provisioning enabled.

Type:Boolean
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-SubPlanType

The available sub plans.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-VaAutoProvisioningEnabled

Is Vulnerability Assessment auto provisioning enabled.

Type:Boolean
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-VMScannerEnabled

Is Microsoft Defender for Server VM scanning enabled.

Type:Boolean
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

Outputs

DefenderForServersGcpOffering