Skip to content

Commit 5fafda3

Browse files
authored
Merge pull request #203986 from ElazarK/api-change
api change defender profile
2 parents 30e8819 + 2162fcf commit 5fafda3

File tree

2 files changed

+30
-22
lines changed

2 files changed

+30
-22
lines changed

articles/defender-for-cloud/includes/defender-for-containers-enable-plan-aks.md

Lines changed: 15 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ author: ElazarK
33
ms.author: elkrieger
44
ms.service: defender-for-cloud
55
ms.topic: include
6-
ms.date: 07/05/2022
6+
ms.date: 07/07/2022
77
---
88

99
## Enable the plan
@@ -95,7 +95,7 @@ Request query parameters:
9595
| SubscriptionId | Cluster's subscription ID | Yes |
9696
| ResourceGroup | Cluster's resource group | Yes |
9797
| ClusterName | Cluster's name | Yes |
98-
| ApiVersion | API version, must be >= 2021-07-01 and <= 2022-04-01 | Yes |
98+
| ApiVersion | API version, must be >= 2022-06-01 | Yes |
9999

100100
Request Body:
101101

@@ -104,9 +104,11 @@ Request Body:
104104
"location": "{{Location}}",
105105
"properties": {
106106
"securityProfile": {
107-
"azureDefender": {
107+
"defender": {
108108
"logAnalyticsWorkspaceResourceId": "{{LAWorkspaceResourceId}}",
109-
"enabled": true
109+
"securityMonitoring": {
110+
"enabled": true,
111+
}
110112
}
111113
}
112114
}
@@ -118,8 +120,8 @@ Request body parameters:
118120
| Name | Description | Mandatory |
119121
|--|--|--|
120122
| location | Cluster's location | Yes |
121-
| properties.securityProfile.azureDefender.enabled | Determines whether to enable or disable Microsoft Defender for Containers on the cluster | Yes |
122-
| properties.securityProfile.azureDefender.logAnalyticsWorkspaceResourceId | Log Analytics workspace Azure resource ID | Yes |
123+
| properties.securityProfile.defender.securityMonitoring.enabled | Determines whether to enable or disable Microsoft Defender for Containers on the cluster | Yes |
124+
| properties.securityProfile.defender.logAnalyticsWorkspaceResourceId | Log Analytics workspace Azure resource ID | Yes |
123125

124126
### [**Azure CLI**](#tab/k8s-deploy-cli)
125127

@@ -191,17 +193,19 @@ To install the 'SecurityProfile' on an existing cluster with Resource Manager:
191193
```
192194
{
193195
"type": "Microsoft.ContainerService/managedClusters",
194-
"apiVersion": "2021-07-01",
196+
"apiVersion": "2022-06-01",
195197
"name": "string",
196198
"location": "string",
197199
"properties": {
198200
199201
"securityProfile": {
200-
"azureDefender": {
201-
"enabled": true,
202-
"logAnalyticsWorkspaceResourceId": “logAnalyticsWorkspaceResourceId "
202+
"defender": {
203+
"logAnalyticsWorkspaceResourceId": “logAnalyticsWorkspaceResourceId",
204+
"securityMonitoring": {
205+
"enabled": true
206+
}
203207
}
204-
},
208+
}
205209
}
206210
}
207211
```

articles/defender-for-cloud/includes/defender-for-containers-remove-profile.md

Lines changed: 15 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ https://management.azure.com/subscriptions/{{SubscriptionId}}/resourcegroups/{{R
3131
| SubscriptionId | Cluster's subscription ID | Yes |
3232
| ResourceGroup | Cluster's resource group | Yes |
3333
| ClusterName | Cluster's name | Yes |
34-
| ApiVersion | API version, must be >= 2021-07-01 and <= 2022-04-01 | Yes |
34+
| ApiVersion | API version, must be >= 2022-06-01 | Yes |
3535

3636
Request body:
3737

@@ -40,8 +40,10 @@ Request body:
4040
"location": "{{Location}}",
4141
"properties": {
4242
"securityProfile": {
43-
"azureDefender": {
44-
"enabled": false
43+
"defender": {
44+
"securityMonitoring": {
45+
"enabled": false
46+
}
4547
}
4648
}
4749
}
@@ -50,10 +52,10 @@ Request body:
5052

5153
Request body parameters:
5254

53-
| Name | Description | Mandatory |
54-
|--------------------------------------------------------------------------|------------------------------------------------------------------------------------------|-----------|
55-
| location | Cluster's location | Yes |
56-
| properties.securityProfile.azureDefender.enabled | Determines whether to enable or disable Microsoft Defender for Containers on the cluster | Yes |
55+
| Name | Description | Mandatory |
56+
|--|--|--|
57+
| location | Cluster's location | Yes |
58+
| properties.securityProfile.defender.securityMonitoring.enabled | Determines whether to enable or disable Microsoft Defender for Containers on the cluster | Yes |
5759

5860
### [**Azure CLI**](#tab/k8s-remove-cli)
5961

@@ -91,16 +93,18 @@ The relevant template and parameters to remove the Defender profile from AKS are
9193
```json
9294
{
9395
"type": "Microsoft.ContainerService/managedClusters",
94-
"apiVersion": "2021-07-01",
96+
"apiVersion": "2022-06-01",
9597
"name": "string",
9698
"location": "string",
9799
"properties": {
98100
99101
"securityProfile": {
100-
"azureDefender": {
101-
"enabled": false
102+
"defender": {
103+
"securityMonitoring": {
104+
"enabled": false
105+
}
102106
}
103-
},
107+
}
104108
}
105109
}
106110
```

0 commit comments

Comments
 (0)