New-AzSecurityDefenderCspmAwsOfferingObject
DefenderCspmAwsOffering için bellek içi bir nesne oluşturun.
Syntax
New-AzSecurityDefenderCspmAwsOfferingObject
[-CiemDiscoveryCloudRoleArn <String>]
[-CiemOidcAzureActiveDirectoryAppName <String>]
[-CiemOidcCloudRoleArn <String>]
[-ConfigurationCloudRoleArn <String>]
[-ConfigurationExclusionTag <IDefenderCspmAwsOfferingVMScannersConfigurationExclusionTags>]
[-ConfigurationScanningMode <String>]
[-DataSensitivityDiscoveryCloudRoleArn <String>]
[-DataSensitivityDiscoveryEnabled <Boolean>]
[-DatabaseDspmCloudRoleArn <String>]
[-DatabaseDspmEnabled <Boolean>]
[-MdcContainerAgentlessDiscoveryK8SCloudRoleArn <String>]
[-MdcContainerAgentlessDiscoveryK8SEnabled <Boolean>]
[-MdcContainerImageAssessmentCloudRoleArn <String>]
[-MdcContainerImageAssessmentEnabled <Boolean>]
[-VMScannerEnabled <Boolean>]
[<CommonParameters>]
Description
DefenderCspmAwsOffering için bellek içi bir nesne oluşturun.
Örnekler
Örnek 1: Yeni DefenderCspmAwsOffering nesnesi oluşturma
$arnPrefix = "arn:aws:iam::123456789012:role"
New-AzSecurityDefenderCspmAwsOfferingObject `
-VMScannerEnabled $true -ConfigurationScanningMode Default -ConfigurationCloudRoleArn "$arnPrefix/DefenderForCloud-AgentlessScanner" -ConfigurationExclusionTag @{key="value"} `
-DataSensitivityDiscoveryEnabled $true -DataSensitivityDiscoveryCloudRoleArn "$arnPrefix/SensitiveDataDiscovery" `
-DatabaseDspmEnabled $true -DatabaseDspmCloudRoleArn "$arnPrefix/DefenderForCloud-DataSecurityPostureDB" `
-CiemDiscoveryCloudRoleArn "$arnPrefix/DefenderForCloud-Ciem" -CiemOidcAzureActiveDirectoryAppName "mciem-aws-oidc-connector" -CiemOidcCloudRoleArn "$arnPrefix/DefenderForCloud-OidcCiem" `
-MdcContainerImageAssessmentEnabled $true -MdcContainerImageAssessmentCloudRoleArn "$arnPrefix/MDCContainersImageAssessmentRole" `
-MdcContainerAgentlessDiscoveryK8SEnabled $true -MdcContainerAgentlessDiscoveryK8SCloudRoleArn "$arnPrefix/MDCContainersAgentlessDiscoveryK8sRole"
CiemDiscoveryCloudRoleArn : arn:aws:iam::123456789012:role/DefenderForCloud-Ciem
CiemOidcAzureActiveDirectoryAppName : mciem-aws-oidc-connector
CiemOidcCloudRoleArn : arn:aws:iam::123456789012:role/DefenderForCloud-OidcCiem
ConfigurationCloudRoleArn : arn:aws:iam::123456789012:role/DefenderForCloud-AgentlessScanner
ConfigurationExclusionTag : {
"key": "value"
}
ConfigurationScanningMode : Default
DataSensitivityDiscoveryCloudRoleArn : arn:aws:iam::123456789012:role/SensitiveDataDiscovery
DataSensitivityDiscoveryEnabled : True
DatabaseDspmCloudRoleArn : arn:aws:iam::123456789012:role/DefenderForCloud-DataSecurityPostureDB
DatabaseDspmEnabled : True
Description :
MdcContainerAgentlessDiscoveryK8SCloudRoleArn : arn:aws:iam::123456789012:role/MDCContainersAgentlessDiscoveryK8sRole
MdcContainerAgentlessDiscoveryK8SEnabled : True
MdcContainerImageAssessmentCloudRoleArn : arn:aws:iam::123456789012:role/MDCContainersImageAssessmentRole
MdcContainerImageAssessmentEnabled : True
OfferingType : DefenderCspmAws
VMScannerEnabled : True
Parametreler
-CiemDiscoveryCloudRoleArn
CIEM bulma için AWS'de bulut rolü ARN'si.
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-CiemOidcAzureActiveDirectoryAppName
AWS'de kimlik doğrulaması için kullanılan Azure Active Directory uygulama adı.
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-CiemOidcCloudRoleArn
CIEM oidc bağlantısı için AWS'de bulut rolü ARN'si.
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-ConfigurationCloudRoleArn
Bu özellik için AWS'deki bulut rolü ARN'i.
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-ConfigurationExclusionTag
VM'nin taranmaması gerektiğini gösteren VM etiketleri.
Type: | IDefenderCspmAwsOfferingVMScannersConfigurationExclusionTags |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-ConfigurationScanningMode
VM taraması için tarama modu.
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-DatabaseDspmCloudRoleArn
Bu özellik için AWS'deki bulut rolü ARN'i.
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-DatabaseDspmEnabled
Veritabanları DSPM koruması etkin mi?
Type: | Boolean |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-DataSensitivityDiscoveryCloudRoleArn
Bu özellik için AWS'deki bulut rolü ARN'i.
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-DataSensitivityDiscoveryEnabled
Microsoft Defender Veri Duyarlılığı bulma etkin mi?
Type: | Boolean |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-MdcContainerAgentlessDiscoveryK8SCloudRoleArn
Bu özellik için AWS'deki bulut rolü ARN'i.
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-MdcContainerAgentlessDiscoveryK8SEnabled
Microsoft Defender kapsayıcı aracısız bulma K8s etkin mi?
Type: | Boolean |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-MdcContainerImageAssessmentCloudRoleArn
Bu özellik için AWS'deki bulut rolü ARN'i.
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-MdcContainerImageAssessmentEnabled
Microsoft Defender kapsayıcı görüntüsü değerlendirmesi etkinleştirildi mi?
Type: | Boolean |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-VMScannerEnabled
Sunucu için Microsoft Defender VM taraması etkin mi?
Type: | Boolean |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |