Microsoft.Security pricings
Bicep resource definition
The pricings resource type can be deployed with operations that target:
- Subscriptions - See subscription deployment commands
For a list of changed properties in each API version, see change log.
Resource format
To create a Microsoft.Security/pricings resource, add the following Bicep to your template.
resource symbolicname 'Microsoft.Security/pricings@2023-01-01' = {
name: 'string'
properties: {
extensions: [
{
additionalExtensionProperties: {
{customized property}: any()
}
isEnabled: 'string'
name: 'string'
}
]
pricingTier: 'string'
subPlan: 'string'
}
}
Property values
pricings
Name | Description | Value |
---|---|---|
name | The resource name | string (required) Character limit: 1-260 Valid characters: Alphanumerics, underscores, and hyphens. |
properties | Pricing data | PricingProperties |
PricingProperties
Name | Description | Value |
---|---|---|
extensions | Optional. List of extensions offered under a plan. | Extension[] |
pricingTier | The pricing tier value. Microsoft Defender for Cloud is provided in two pricing tiers: free and standard. The standard tier offers advanced security capabilities, while the free tier offers basic security features. | 'Free' 'Standard' (required) |
subPlan | The sub-plan selected for a Standard pricing configuration, when more than one sub-plan is available. Each sub-plan enables a set of security features. When not specified, full plan is applied. | string |
Extension
Name | Description | Value |
---|---|---|
additionalExtensionProperties | Property values associated with the extension. | ExtensionAdditionalExtensionProperties |
isEnabled | Indicates whether the extension is enabled. | 'False' 'True' (required) |
name | The extension name. Supported values are: AgentlessDiscoveryForKubernetes - API-based discovery of information about Kubernetes cluster architecture, workload objects, and setup. Required for Kubernetes inventory, identity and network exposure detection, attack path analysis and risk hunting as part of the cloud security explorer. Available for CloudPosture plan. OnUploadMalwareScanning - Limits the GB to be scanned per month for each storage account within the subscription. Once this limit reached on a given storage account, Blobs won't be scanned during current calendar month. Available for StorageAccounts plan. SensitiveDataDiscovery - Sensitive data discovery identifies Blob storage container with sensitive data such as credentials, credit cards, and more, to help prioritize and investigate security events. Available for StorageAccounts and CloudPosture plans. ContainerRegistriesVulnerabilityAssessments - Provides vulnerability management for images stored in your container registries. Available for CloudPosture and Containers plans. |
string (required) |
ExtensionAdditionalExtensionProperties
Name | Description | Value |
---|---|---|
{customized property} | For Bicep, you can use the any() function. |
ARM template resource definition
The pricings resource type can be deployed with operations that target:
- Subscriptions - See subscription deployment commands
For a list of changed properties in each API version, see change log.
Resource format
To create a Microsoft.Security/pricings resource, add the following JSON to your template.
{
"type": "Microsoft.Security/pricings",
"apiVersion": "2023-01-01",
"name": "string",
"properties": {
"extensions": [
{
"additionalExtensionProperties": {
"{customized property}": {}
},
"isEnabled": "string",
"name": "string"
}
],
"pricingTier": "string",
"subPlan": "string"
}
}
Property values
pricings
Name | Description | Value |
---|---|---|
type | The resource type | 'Microsoft.Security/pricings' |
apiVersion | The resource api version | '2023-01-01' |
name | The resource name | string (required) Character limit: 1-260 Valid characters: Alphanumerics, underscores, and hyphens. |
properties | Pricing data | PricingProperties |
PricingProperties
Name | Description | Value |
---|---|---|
extensions | Optional. List of extensions offered under a plan. | Extension[] |
pricingTier | The pricing tier value. Microsoft Defender for Cloud is provided in two pricing tiers: free and standard. The standard tier offers advanced security capabilities, while the free tier offers basic security features. | 'Free' 'Standard' (required) |
subPlan | The sub-plan selected for a Standard pricing configuration, when more than one sub-plan is available. Each sub-plan enables a set of security features. When not specified, full plan is applied. | string |
Extension
Name | Description | Value |
---|---|---|
additionalExtensionProperties | Property values associated with the extension. | ExtensionAdditionalExtensionProperties |
isEnabled | Indicates whether the extension is enabled. | 'False' 'True' (required) |
name | The extension name. Supported values are: AgentlessDiscoveryForKubernetes - API-based discovery of information about Kubernetes cluster architecture, workload objects, and setup. Required for Kubernetes inventory, identity and network exposure detection, attack path analysis and risk hunting as part of the cloud security explorer. Available for CloudPosture plan. OnUploadMalwareScanning - Limits the GB to be scanned per month for each storage account within the subscription. Once this limit reached on a given storage account, Blobs won't be scanned during current calendar month. Available for StorageAccounts plan. SensitiveDataDiscovery - Sensitive data discovery identifies Blob storage container with sensitive data such as credentials, credit cards, and more, to help prioritize and investigate security events. Available for StorageAccounts and CloudPosture plans. ContainerRegistriesVulnerabilityAssessments - Provides vulnerability management for images stored in your container registries. Available for CloudPosture and Containers plans. |
string (required) |
ExtensionAdditionalExtensionProperties
Name | Description | Value |
---|---|---|
{customized property} |
Terraform (AzAPI provider) resource definition
The pricings resource type can be deployed with operations that target:
- Subscriptions
For a list of changed properties in each API version, see change log.
Resource format
To create a Microsoft.Security/pricings resource, add the following Terraform to your template.
resource "azapi_resource" "symbolicname" {
type = "Microsoft.Security/pricings@2023-01-01"
name = "string"
parent_id = "string"
body = jsonencode({
properties = {
extensions = [
{
additionalExtensionProperties = {}
isEnabled = "string"
name = "string"
}
]
pricingTier = "string"
subPlan = "string"
}
})
}
Property values
pricings
Name | Description | Value |
---|---|---|
type | The resource type | "Microsoft.Security/pricings@2023-01-01" |
name | The resource name | string (required) Character limit: 1-260 Valid characters: Alphanumerics, underscores, and hyphens. |
parent_id | To deploy to a subscription, use the ID of that subscription. | string (required) |
properties | Pricing data | PricingProperties |
PricingProperties
Name | Description | Value |
---|---|---|
extensions | Optional. List of extensions offered under a plan. | Extension[] |
pricingTier | The pricing tier value. Microsoft Defender for Cloud is provided in two pricing tiers: free and standard. The standard tier offers advanced security capabilities, while the free tier offers basic security features. | "Free" "Standard" (required) |
subPlan | The sub-plan selected for a Standard pricing configuration, when more than one sub-plan is available. Each sub-plan enables a set of security features. When not specified, full plan is applied. | string |
Extension
Name | Description | Value |
---|---|---|
additionalExtensionProperties | Property values associated with the extension. | ExtensionAdditionalExtensionProperties |
isEnabled | Indicates whether the extension is enabled. | "False" "True" (required) |
name | The extension name. Supported values are: AgentlessDiscoveryForKubernetes - API-based discovery of information about Kubernetes cluster architecture, workload objects, and setup. Required for Kubernetes inventory, identity and network exposure detection, attack path analysis and risk hunting as part of the cloud security explorer. Available for CloudPosture plan. OnUploadMalwareScanning - Limits the GB to be scanned per month for each storage account within the subscription. Once this limit reached on a given storage account, Blobs won't be scanned during current calendar month. Available for StorageAccounts plan. SensitiveDataDiscovery - Sensitive data discovery identifies Blob storage container with sensitive data such as credentials, credit cards, and more, to help prioritize and investigate security events. Available for StorageAccounts and CloudPosture plans. ContainerRegistriesVulnerabilityAssessments - Provides vulnerability management for images stored in your container registries. Available for CloudPosture and Containers plans. |
string (required) |
ExtensionAdditionalExtensionProperties
Name | Description | Value |
---|---|---|
{customized property} |
Feedback
https://aka.ms/ContentUserFeedback.
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see:Submit and view feedback for