Edit

Share via

Defender for Cloud support matrices for Azure commercial/other clouds

  • Article

This article indicates which Defender for Cloud features are supported in Azure commercial and government clouds.

Cloud support

In the support table, NA indicates that the feature isn't available.

Feature/Plan Azure Azure Government Microsoft Azure operated by 21Vianet
GENERAL FEATURES
Continuous data export GA GA GA
Response automation with Azure Logic Apps GA GA GA
Security alerts
Generated when one or more Defender for Cloud plans is enabled.		 GA GA GA
Alert email notifications GA GA GA
Alert suppression rules GA GA GA
Alert bi-directional synchronization with Microsoft Sentinel GA GA NA
Azure Workbooks integration for reporting GA GA GA
Automatic component/agent/extension provisioning GA GA GA
Copilot in Defender for Cloud Preview NA NA
FOUNDATIONAL CSPM FEATURES (FREE)
Asset inventory GA GA GA
Security recommendations based on the Microsoft Cloud Security Benchmark GA GA GA
Recommendation exemptions Preview NA NA
Secure score GA GA GA
DevOps security posture Preview NA NA
DEFENDER CSPM FEATURES
Data security dashboard GA NA NA
Attack path GA NA NA
AI security posture management GA NA NA
DEFENDER FOR CLOUD PLANS
Defender CSPM GA NA NA
Defender for APIs GA NA NA
Defender for App Service GA NA GA
Defender for Azure Cosmos DB GA NA NA
Defender for Azure SQL database servers GA GA GA

A subset of alerts/vulnerability assessments is available.
Behavioral threat protection isn't available.
Defender for Containers
Review detailed feature support		 GA GA GA
DevOps Security GA NA NA
Defender for DNS GA GA GA
Defender for Key Vault GA NA NA
Defender for Open-Source Relational Databases GA GA GA
Defender for Resource Manager GA GA GA
Defender for Servers
Review detailed feature support.		 GA GA GA
Defender for SQL Servers on Machines GA GA NA
Defender for Storage GA GA (activity monitoring) NA
DEFENDER FOR STORAGE FEATURES
Activity monitoring (security alerts) GA GA for classic plan only. GA for classic plan only.
Malware scanning GA1 NA NA
Sensitive data threat detection (Sensitive Data Discovery) GA1 NA NA

1: Azure DNS Zone isn't supported for malware scanning and sensitive data threat detection.

Important

As of August 1 2023, customers with an existing subscription to Defender for DNS can continue to use the service, but new subscribers will receive alerts about suspicious DNS activity as part of Defender for Servers P2.

Next steps

Start reading about Defender for Cloud features.