Skip to content

Commit 5c1fb92

Browse files
committed
Maya suggested fixes and more
1 parent 300d802 commit 5c1fb92

File tree

4 files changed

+25
-25
lines changed

4 files changed

+25
-25
lines changed

articles/defender-for-cloud/ai-onboarding.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -2,12 +2,12 @@
22
title: Onboard Defender for AI Workloads
33
description: Learn how to enable the Defender for AI Workloads plan on your Azure subscription for Microsoft Defender for Cloud.
44
ms.topic: install-set-up-deploy
5-
ms.date: 04/17/2024
5+
ms.date: 05/02/2024
66
---
77

88
# Onboard Defender for AI Workloads
99

10-
To get started you must [sign up](https://aka.ms/D4AI/PublicPreviewAccess) for the plan and be accepted. Once accepted, you can onboard the Defender for AI Workloads plan in Defender for Cloud to provide threat protection for AI workloads in your Azure environment.
10+
To get started, you must [sign up](https://aka.ms/D4AI/PublicPreviewAccess) for the plan and be accepted. Once accepted, you can onboard the Defender for AI Workloads plan in Defender for Cloud to provide threat protection for AI workloads in your Azure environment.
1111

1212
> [!IMPORTANT]
1313
> The Defender for AI Workloads plan is currently in preview.
@@ -21,7 +21,7 @@ To get started you must [sign up](https://aka.ms/D4AI/PublicPreviewAccess) for t
2121

2222
- You must [enable Defender for Cloud](get-started.md#enable-defender-for-cloud-on-your-azure-subscription) on your Azure subscription.
2323

24-
- Defender for AI Workloads relies on [Azure Open AI content filtering](../ai-services/openai/concepts/content-filter.md) for prompt-base triggered alert. If you opt out of prompt-based trigger alerts and removed that capability, it can affect Defender for Cloud's ability to monitor and detect such attacks.
24+
- Defender for AI Workloads relies on [Azure OpenAI content filtering](../ai-services/openai/concepts/content-filter.md) for prompt-base triggered alert. If you opt out of prompt-based trigger alerts and removed that capability, it can affect Defender for Cloud's ability to monitor and detect such attacks.
2525

2626
## Enroll in the limited public preview
2727

@@ -31,27 +31,27 @@ Before you can start to use the Defender for AI Workloads plan, you must enroll
3131

3232
1. Wait to receive an email that confirms your acceptance or rejection from the preview program.
3333

34-
If you are accepted into the preview program, you can enable the Defender for AI Workloads plan to your Azure subscription.
34+
If you're accepted into the preview program, you can enable the Defender for AI Workloads plan to your Azure subscription.
3535

3636
## Enable the Defender for AI Workloads plan
3737

38-
You can enable the Defender for AI Workloads plan on an Azure subscription and AWS accounts.
38+
You can enable the Defender for AI Workloads plan on an Azure subscription.
3939

4040
1. Sign in to the [Azure portal](https://portal.azure.com).
4141

4242
1. Search for and select **Microsoft Defender for Cloud**.
4343

4444
1. In the Defender for Cloud menu, select **Environment settings**.
4545

46-
1. Select the relevant Azure subscription or AWS account.
46+
1. Select the relevant Azure subscription.
4747

4848
1. On the Defender plans page, toggle the AI Workloads plan to **On**.
4949

5050
:::image type="content" source="media/ai-onboarding/enable-ai-workloads-plan.png" alt-text="Screenshot that shows you how to toggle the Defender for AI Workloads plan to on." lightbox="media/ai-onboarding/enable-ai-workloads-plan.png":::
5151

5252
### Remediate alerts
5353

54-
After you have onboarded the Defender for AI Workloads plan, you can [manage and remediate the security alerts](managing-and-responding-alerts.yml) that are generated for your AI workloads.
54+
After onboarding the Defender for AI Workloads plan, you can [manage and remediate the security alerts](managing-and-responding-alerts.yml) that are generated for your AI workloads.
5555

5656
## Next step
5757

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: AI security posture management
33
description: Learn about AI security posture management in Microsoft Defender for Cloud and how it protects resources from AI threats.
4-
ms.date: 05/01/2024
4+
ms.date: 05/02/2024
55
ms.topic: concept-article
66
ms.author: elkrieger
77
author: Elazark
@@ -10,27 +10,25 @@ author: Elazark
1010

1111
# AI security posture management
1212

13-
Microsoft Defender for Cloud provides AI security posture management capabilities that secure enterprise-built, multi or hybrid cloud (currently Azure and AWS) generative AI applications, throughout the entire application lifecycle. Defender for Cloud reduces risk to cross cloud AI workloads by:
13+
Microsoft Defender for Cloud provides AI security posture management capabilities that secure enterprise-built, multi, or hybrid cloud (currently Azure and AWS) generative AI applications, throughout the entire application lifecycle. Defender for Cloud reduces risk to cross cloud AI workloads by:
1414

15-
- Discovering generative AI bill of materials (AI BOM), which includes application components, data, and AI artifacts from code to cloud.
15+
- Discover generative AI Bill of Materials (AI BOM), which includes application components, data, and AI artifacts from code to cloud.
1616
- Strengthening generative AI application security posture with built-in recommendations and by exploring and remediating security risks.
1717
- Using the attack path analysis to identify and remediate risks.
1818

1919
:::image type="content" source="media/ai-security-posture/ai-lifecycle.png" alt-text="An image of the development lifecycle that is covered by Defender for Cloud's AI security posture management.":::
2020

21-
## Discovering generative AI apps within your environment
21+
## Discover generative AI apps within your environment
2222

2323
Defender for Cloud discovers AI workloads and identifies details of your organization's AI BOM. This visibility allows you to identify and address vulnerabilities and protect generative AI applications from potential threats.
2424

25-
Defenders for Cloud automatically and continuously discover deployed AI workloads across the following service:
25+
Defenders for Cloud automatically and continuously discover deployed AI workloads across the following services:
2626

2727
- Azure OpenAI Service
2828
- Azure Machine Learning
2929
- Amazon Bedrock.
3030

31-
In addition to discovering deployed AI workloads, Defender for Cloud can also discover vulnerabilities within generative AI library dependencies such as TensorFlow, PyTorch, and Langchain. By scanning source code for Infrastructure as Code (IaC) misconfigurations and container images for vulnerabilities.
32-
33-
Regularly updating or patching these can prevent exploits, protecting generative AI applications and maintaining their integrity.
31+
Defender for Cloud can also discover vulnerabilities within generative AI library dependencies such as TensorFlow, PyTorch, and Langchain, by scanning source code for Infrastructure as Code (IaC) misconfigurations and container images for vulnerabilities. Regularly updating or patching the libraries can prevent exploits, protecting generative AI applications and maintaining their integrity.
3432

3533
With these features, Defender for Cloud provides full visibility of AI workloads from code to cloud.
3634

@@ -44,9 +42,11 @@ Defender for Cloud assesses AI workloads and issues recommendations around ident
4442

4543
#### Detecting IaC misconfigurations
4644

47-
DevOps security, detects IaC misconfigurations, which can expose generative AI applications to security vulnerabilities, such as over-exposed access controls or inadvertent publicly exposed services. These misconfigurations could lead to data breaches or unauthorized access. Misconfigurations could lead to compliance issues, especially when handling strict data privacy regulations.
45+
DevOps security detects IaC misconfigurations, which can expose generative AI applications to security vulnerabilities, such as over-exposed access controls or inadvertent publicly exposed services. These misconfigurations could lead to data breaches, unauthorized access, and compliance issues, especially when handling strict data privacy regulations.
46+
47+
Defender for Cloud assesses your generative AI apps configuration and provides security recommendations to improve AI security posture.
4848

49-
Defender for Cloud assesses your generative AI apps configuration and provides security recommendations to improve AI security posture. Remediate misconfigurations early in the development cycle allows organizations to prevent more complex problems later on.
49+
Detected misconfigurations should be remediated early in the development cycle to prevent more complex problems later on.
5050

5151
Current IaC AI security checks include:
5252

@@ -57,13 +57,13 @@ Current IaC AI security checks include:
5757

5858
### Explore risks with attack path analysis
5959

60-
Attack paths analysis detects and mitigates risks to AI workloads, particularly during grounding (linking AI models to specific data) and fine-tuning (adjusting a pre-trained model on a specific dataset to improve its performance on a related task) stages, where data might be exposed.
60+
Attack paths analysis detects and mitigates risks to AI workloads, particularly during grounding (linking AI models to specific data) and fine-tuning (adjusting a pretrained model on a specific dataset to improve its performance on a related task) stages, where data might be exposed.
6161

62-
By continuously monitoring AI workloads, attack path analysis can identify weaknesses and potential vulnerabilities and follow up with recommendations. Additionally, it extends to cases where the data and compute resources are distributed across Azure, AWS and GCP.
62+
By monitoring AI workloads continuously, attack path analysis can identify weaknesses and potential vulnerabilities and follow up with recommendations. Additionally, it extends to cases where the data and compute resources are distributed across Azure, AWS, and GCP.
6363

6464
## Related content
6565

66-
- [Explore risks to pre-deployed generative AI artifacts](explore-ai-risk.md)
66+
- [Explore risks to predeployed generative AI artifacts](explore-ai-risk.md)
6767
- [Review security recommendations](review-security-recommendations.md)
6868
- [Identify and remediate attack paths](how-to-manage-attack-path.md)
6969
- [Discover generative AI workloads](identify-ai-workload-model.md)

articles/defender-for-cloud/identify-ai-workload-model.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
title: Discover generative AI workloads
33
description: Learn how to use the cloud security explorer to determine which AI workloads and models are running in your environment.
44
ms.topic: how-to
5-
ms.date: 05/01/2024
5+
ms.date: 05/02/2024
66
# customer intent: As a user, I want to learn how to identify AI workloads and models in my environment so that I can assess their security posture.
77
---
88

@@ -16,15 +16,15 @@ Defender for Cloud provides a comprehensive view of your organization's AI bill
1616

1717
- You need a Microsoft Azure subscription. If you don't have an Azure subscription, you can [sign up for a free subscription](https://azure.microsoft.com/pricing/free-trial/).
1818

19-
-Enable [Defender for Cloud on your Azure subscription](connect-azure-subscription.md).
19+
- Enable [Defender for Cloud on your Azure subscription](connect-azure-subscription.md).
2020

2121
- Enable [Defender Cloud Security Posture Management (CSPM)](tutorial-enable-cspm-plan.md) on your Azure subscription.
2222

23-
- Have at least one environment with  AI supported workloads (Azure Open AI, AWS account).
23+
- Have at least one environment with AI supported workloads (Azure Open AI, AWS account).
2424

2525
## Discover AI workloads and models in use
2626

27-
The cloud security explorer can be used to identify generative AI workloads and models running in your environment,
27+
The cloud security explorer can be used to identify generative AI workloads and models running in your environment.
2828

2929
1. Sign in to the [Azure portal](https://portal.azure.com/).
3030

articles/defender-for-cloud/release-notes.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ Learn more about [AI security posture management](ai-security-posture.md).
3939

4040
May 6, 2024
4141

42-
Defender for AI Workloads provides contextual insights into AI workload threat protection, integrating with [responsible AI](../ai-services/responsible-use-of-ai-overview.md) and Microsoft Threat Intelligence. Defender for AI security alerts are integrated into Defender XDR in the Defender portal.
42+
Defender for AI Workloads provides contextual insights into AI workload threat protection, integrating with [Responsible AI](../ai-services/responsible-use-of-ai-overview.md) and Microsoft Threat Intelligence. Defender for AI security alerts are integrated into Defender XDR in the Defender portal.
4343
This plan helps you monitor your Azure OpenAI powered applications in runtime for malicious activity, identify and remediate security risks.
4444

4545
Learn more about [Defender for AI Workloads](ai-threat-protection.md).

0 commit comments

Comments
 (0)