Where can I see recommendations for running containers in Defender for Cloud

Question

question

IliyanDobrev-5538 asked Mar 7, '22 vipulsparsh-MSFT commented Mar 14, '22

Where can I see recommendations for running containers in Defender for Cloud

My organization has enabled the new Defender for Containers and it is supposedly scanning the container registry and can identify the running/active containers. I can see a the recommendation (and most importantly the vulnerabilities) for the images. However, our containers registry also stores images that are not active/running and have been replaced with newer version. This makes it impossible to know which are the present vulnerabilities that need to be resolved as Defender would show recommendations for old images which are not in use. I would like to be able to somehow filter the running containers and focus on resolving issues for them.

Thanks in advance to whoever helps me! :)

azure-security-center azure-container-instances azure-container-registry

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

vipulsparsh-MSFT · Mar 14 at 06:30 AM

@IliyanDobrev-5538 I wanted to follow up and know if the below responses helped in answering your query. If it did, please do not forget to accept the appropriate response as Answer.

0 ·

Answer 1 · 2022-03-10T06:35:22.377Z

vipulsparsh-MSFT answered Mar 10, '22

@IliyanDobrev-5538 Thanks for reaching out. If I understand your question correctly, you are looking to find a way where you get the recommendation on container registries only for those which are in use.

At present, by default the Defender for cloud shows you the recommendation for container registries on every push or import, and if the image has been pulled within the last 30 days.
You can try exempting the resource which you think is not being used so that you do not get recommendation for that resource. (In your case old registries which are not in use.)

Here is how you can do that from portal.

Let me know if it helps.

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

image.png (183.8 KiB)

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question