You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/defender-for-cloud/defender-for-apis-entitlement-plans.md
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,22 +3,22 @@ title: Selecting entitlement plans for Defender for APIs
3
3
description: Learn about the available entitlement plans for Defender for APIs deployment in Microsoft Defender for Cloud.
4
4
ms.service: defender-for-cloud
5
5
ms.topic: conceptual
6
-
ms.date: 12/03/2023
6
+
ms.date: 02/25/2024
7
7
ms.custom: references_regions
8
8
---
9
9
# Selecting entitlement plans for Defender for API
10
10
11
-
Microsoft Defender for APIs is a new plan within Microsoft Defender that monitors and protects your APIs from API security risks, vulnerabilities, and exploits. The [Defender for Cloud pricing page](https://azure.microsoft.com/pricing/details/defender-for-cloud/) is planned for update with the pricing information and pricing calculators by early March 2024. In the meantime, use this document to select the correct Defender for APIs entitlement plans.
11
+
Microsoft Defender for APIs is a new plan within Microsoft Defender that monitors and protects your APIs from API security risks, vulnerabilities, and exploits. The [Defender for Cloud pricing page](https://azure.microsoft.com/pricing/details/defender-for-cloud/) is set for update with the pricing information and pricing calculators by early March 2024. In the meantime, use this document to select the correct Defender for APIs entitlement plans.
12
12
13
-
When selecting a plan, consider the following important points:
13
+
When selecting a plan, reflect on these important considerations:
14
14
15
15
- Defender for APIs protects only those APIs that are onboarded to Defender for APIs. This means you can activate the plan at the subscription level, and complete the second step of onboarding by fixing the onboarding recommendation. (For more information about onboarding, see the [onboarding guide](defender-for-apis-deploy.md#enable-the-defender-for-apis-plan)).
16
16
- Defender for APIs has five pricing plans, each with a different entitlement limit and monthly fee. The billing is done at the subscription level.
17
-
-The billing is applied to the entire subscription based on the total amount of API traffic monitored over the month for the subscription.
17
+
-Billing is applied to the entire subscription based on the total amount of API traffic monitored over the month for the subscription.
18
18
- The API traffic counted towards the billing is reset to 0 at the start of each month (every billing cycle).
19
19
- The overages are computed on API traffic exceeding the entitlement limit per plan selection during the month for your entire subscription.
20
20
21
-
To select the best plan for your subscription from Microsoft Defender for Cloud pricing page, follow these steps and choose the plan that matches your subscriptions’ API traffic requirements:
21
+
To select the best plan for your subscription from the Microsoft Defender for Cloud [pricing page](https://azure.microsoft.com/pricing/details/defender-for-cloud/), follow these steps and choose the plan that matches your subscriptions’ API traffic requirements:
22
22
23
23
> [!NOTE]
24
24
> You need to have the appropriate permissions on the subscription to pick a plan when you turn on Microsoft Defender for APIs. Refer to the [roles and permission requirements](defender-for-apis-prepare.md).
@@ -39,21 +39,21 @@ To select the best plan for your subscription from Microsoft Defender for Cloud
39
39
40
40
You must select a plan that grants entitlement appropriate for the API traffic volume in your subscription to receive the most optimal pricing. By default, subscriptions are opted into **Plan 1**, which can lead to unexpected overages if your subscription has API traffic higher than the [one million API calls entitlement](https://ms.portal.azure.com/#view/Microsoft_Azure_Security/SecurityMenuBlade/~/18).
41
41
42
-
To estimate the monthly API traffic in Azure API Management, do the following steps:
42
+
**To estimate the monthly API traffic in Azure API Management:**
43
43
44
44
1. Navigate to the Azure API Management portal and select **Metrics** under the Monitoring menu bar item.
45
45
46
46
:::image type="content" source="media/defender-for-apis-entitlement-plans/select-metrics.png" alt-text="Screenshot that shows where to select metrics." lightbox="media/defender-for-apis-entitlement-plans/select-metrics.png":::
47
47
48
48
1. Select the time range as **Last 30 days**.
49
-
1. Select the following parameters:
49
+
1. Select and set the following parameters:
50
50
51
51
1. Scope: **Azure API Management Service Name**
52
52
1. Metric Namespace: **API Management service standard metrics**
53
53
1. Metric = **Requests**
54
54
1. Aggregation = **Sum**
55
55
56
-
1. After setting the above parameters, the query will automatically run, and the total number of requests for the past 30 days appear at the bottom of the screen (in the screenshot example, the query results in 414 total number of requests).
56
+
1. After setting the above parameters, the query will automatically run, and the total number of requests for the past 30 days appears at the bottom of the screen. Iin the screenshot example, the query results in 414 total number of requests.
57
57
58
58
:::image type="content" source="media/defender-for-apis-entitlement-plans/metrics-results.png" alt-text="Screenshot that shows metrics results." lightbox="media/defender-for-apis-entitlement-plans/metrics-results.png":::
59
59
@@ -64,7 +64,7 @@ If you don't have access to run the metrics query, reach out to your internal Az
64
64
65
65
## Limitations
66
66
67
-
API management service resources don't enable multi-selection with metrics. You can let the API Management service team know this capability is important and upvote this request.
67
+
API Management service resources don't enable multi-selection with metrics. You can let the API Management service team know this capability is important and upvote this request.
0 commit comments