Note
We’ve renamed Microsoft Cloud App Security. It’s now called Microsoft Defender for Cloud Apps. In the coming weeks, we’ll update the screenshots and instructions here and in related pages. For more information about the change, see this announcement. To learn more about the recent renaming of Microsoft security services, see the Microsoft Ignite Security blog.
Microsoft Defender for Cloud Apps provides you with a security configuration assessment of your Azure environment. The assessment, powered by Microsoft Defender for Cloud, provides recommendations for missing configuration and security controls.
Prerequisites
Your organization must have Microsoft Defender for Cloud licenses for all subscriptions that you want to provide Azure security configuration assessments.
How to enable Azure security recommendations
To enable security configuration recommendations in Defender for Cloud Apps, activate your Microsoft Defender for Cloud subscription by navigating to the portal.
How to view Azure security recommendations
- In Defender for Cloud Apps, browse to Investigate > Security configuration, and then select the Azure tab.
Note
It might take up to 15 minutes before your changes take effect.
- You can filter the recommendations by type, by resource, and by subscription. Additionally, you can click on the security configuration icon to open the recommendation in Microsoft Defender for Cloud for more information and to deep dive into the recommendation.
Note
To make investigation even simpler, you can create custom queries and save them for later use. After you’ve finished building your query, click the Save as button in the top right corner of the filters. In the Save query pop-up, name your query.
For information about how to implement security recommendations, see Managing security recommendations in Microsoft Defender for Cloud.