Skip to content

Commit 6e446f3

Browse files
authored
Fixed casing of "Logic App" --> "logic app"
------- cc: @bmansheim
1 parent 3e442c0 commit 6e446f3

File tree

1 file changed

+16
-16
lines changed

1 file changed

+16
-16
lines changed

articles/defender-for-cloud/workflow-automation.md

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ ms.date: 04/05/2023
1111

1212
Every security program includes multiple workflows for incident response. These processes might include notifying relevant stakeholders, launching a change management process, and applying specific remediation steps. Security experts recommend that you automate as many steps of those procedures as you can. Automation reduces overhead. It can also improve your security by ensuring the process steps are done quickly, consistently, and according to your predefined requirements.
1313

14-
This article describes the workflow automation feature of Microsoft Defender for Cloud. This feature can trigger consumption Logic Apps on security alerts, recommendations, and changes to regulatory compliance. For example, you might want Defender for Cloud to email a specific user when an alert occurs. You'll also learn how to create Logic Apps using [Azure Logic Apps](../logic-apps/logic-apps-overview.md).
14+
This article describes the workflow automation feature of Microsoft Defender for Cloud. This feature can trigger consumption logic apps on security alerts, recommendations, and changes to regulatory compliance. For example, you might want Defender for Cloud to email a specific user when an alert occurs. You'll also learn how to create logic apps using [Azure Logic Apps](../logic-apps/logic-apps-overview.md).
1515

1616

1717
## Availability
@@ -20,7 +20,7 @@ This article describes the workflow automation feature of Microsoft Defender for
2020
|----|:----|
2121
|Release state:|General availability (GA)|
2222
|Pricing:|Free|
23-
|Required roles and permissions:|**Security admin role** or **Owner** on the resource group<br>Must also have write permissions for the target resource<br><br>To work with Azure Logic Apps workflows, you must also have the following Logic Apps roles/permissions:<br> - [Logic App Operator](../role-based-access-control/built-in-roles.md#logic-app-operator) permissions are required or Logic App read/trigger access (this role can't create or edit logic apps; only *run* existing ones)<br> - [Logic App Contributor](../role-based-access-control/built-in-roles.md#logic-app-contributor) permissions are required for Logic App creation and modification<br>If you want to use Logic App connectors, you may need other credentials to sign in to their respective services (for example, your Outlook/Teams/Slack instances)|
23+
|Required roles and permissions:|**Security admin role** or **Owner** on the resource group<br>Must also have write permissions for the target resource<br><br>To work with Azure Logic Apps workflows, you must also have the following Logic Apps roles/permissions:<br> - [Logic App Operator](../role-based-access-control/built-in-roles.md#logic-app-operator) permissions are required or Logic App read/trigger access (this role can't create or edit logic apps; only *run* existing ones)<br> - [Logic App Contributor](../role-based-access-control/built-in-roles.md#logic-app-contributor) permissions are required for logic app creation and modification<br>If you want to use Logic Apps connectors, you may need other credentials to sign in to their respective services (for example, your Outlook/Teams/Slack instances)|
2424
|Clouds:|:::image type="icon" source="./media/icons/yes-icon.png"::: Commercial clouds<br>:::image type="icon" source="./media/icons/yes-icon.png"::: National (Azure Government, Azure China 21Vianet)|
2525

2626
## Create a logic app and define when it should automatically run
@@ -37,22 +37,22 @@ This article describes the workflow automation feature of Microsoft Defender for
3737

3838
Here you can enter:
3939
1. A name and description for the automation.
40-
1. The triggers that will initiate this automatic workflow. For example, you might want your Logic App to run when a security alert that contains "SQL" is generated.
40+
1. The triggers that will initiate this automatic workflow. For example, you might want your logic app to run when a security alert that contains "SQL" is generated.
4141

4242
> [!NOTE]
4343
> If your trigger is a recommendation that has "sub-recommendations", for example **Vulnerability assessment findings on your SQL databases should be remediated**, the logic app will not trigger for every new security finding; only when the status of the parent recommendation changes.
4444
45-
1. The consumption Logic App that will run when your trigger conditions are met.
45+
1. The consumption logic app that will run when your trigger conditions are met.
4646

47-
1. From the Actions section, select **visit the Logic Apps page** to begin the Logic App creation process.
47+
1. From the Actions section, select **visit the Logic Apps page** to begin the logic app creation process.
4848

49-
:::image type="content" source="media/workflow-automation/visit-logic.png" alt-text="Screenshot that shows where on the screen you need to select the visit the logic apps page in the actions section of the add workflow automation screen." border="true":::
49+
:::image type="content" source="media/workflow-automation/visit-logic.png" alt-text="Screenshot that shows the actions section of the add workflow automation screen and the link to visit Azure Logic Apps." border="true":::
5050

5151
You'll be taken to Azure Logic Apps.
5252

5353
1. Select **(+) Add**.
5454

55-
:::image type="content" source="media/workflow-automation/logic-apps-create-new.png" alt-text="Screenshot of the create a logic app screen." lightbox="media/workflow-automation/logic-apps-create-new.png":::
55+
:::image type="content" source="media/workflow-automation/logic-apps-create-new.png" alt-text="Screenshot of the screen to create a logic app." lightbox="media/workflow-automation/logic-apps-create-new.png":::
5656

5757
1. Fill out all required fields and select **Review + Create**.
5858

@@ -78,20 +78,20 @@ This article describes the workflow automation feature of Microsoft Defender for
7878
7979
[![Sample logic app.](media/workflow-automation/sample-logic-app.png)](media/workflow-automation/sample-logic-app.png#lightbox)
8080

81-
1. After you've defined your logic app, return to the workflow automation definition pane ("Add workflow automation"). Select **Refresh** to ensure your new Logic App is available for selection.
81+
1. After you've defined your logic app, return to the workflow automation definition pane ("Add workflow automation"). Select **Refresh** to ensure your new logic app is available for selection.
8282

8383
![Refresh.](media/workflow-automation/refresh-the-list-of-logic-apps.png)
8484

85-
1. Select your logic app and save the automation. The Logic App dropdown only shows Logic Apps with supporting Defender for Cloud connectors mentioned above.
85+
1. Select your logic app and save the automation. The logic app dropdown only shows those with supporting Defender for Cloud connectors mentioned above.
8686

8787

88-
## Manually trigger a Logic App
88+
## Manually trigger a logic app
8989

90-
You can also run Logic Apps manually when viewing any security alert or recommendation.
90+
You can also run logic apps manually when viewing any security alert or recommendation.
9191

92-
To manually run a Logic App, open an alert, or a recommendation and select **Trigger Logic App**:
92+
To manually run a logic app, open an alert, or a recommendation and select **Trigger logic app**:
9393

94-
[![Manually trigger a Logic App.](media/workflow-automation/manually-trigger-logic-app.png)](media/workflow-automation/manually-trigger-logic-app.png#lightbox)
94+
[![Manually trigger a logic app.](media/workflow-automation/manually-trigger-logic-app.png)](media/workflow-automation/manually-trigger-logic-app.png#lightbox)
9595

9696

9797
## Configure workflow automation at scale using the supplied policies
@@ -136,14 +136,14 @@ To implement these policies:
136136

137137
## Data types schemas
138138

139-
To view the raw event schemas of the security alerts or recommendations events passed to the Logic App instance, visit the [Workflow automation data types schemas](https://aka.ms/ASCAutomationSchemas). This can be useful in cases where you aren't using Defender for Cloud's built-in Logic App connectors mentioned above, but instead are using Logic App's generic HTTP connector - you could use the event JSON schema to manually parse it as you see fit.
139+
To view the raw event schemas of the security alerts or recommendations events passed to the logic app, visit the [Workflow automation data types schemas](https://aka.ms/ASCAutomationSchemas). This can be useful in cases where you aren't using Defender for Cloud's built-in Logic Apps connectors mentioned above, but instead are using the generic HTTP connector - you could use the event JSON schema to manually parse it as you see fit.
140140

141141

142142
## FAQ - Workflow automation
143143

144144
### Does workflow automation support any business continuity or disaster recovery (BCDR) scenarios?
145145

146-
When preparing your environment for BCDR scenarios, where the target resource is experiencing an outage or other disaster, it's the organization's responsibility to prevent data loss by establishing backups according to the guidelines from Azure Event Hubs, Log Analytics workspace, and Logic App.
146+
When preparing your environment for BCDR scenarios, where the target resource is experiencing an outage or other disaster, it's the organization's responsibility to prevent data loss by establishing backups according to the guidelines from Azure Event Hubs, Log Analytics workspace, and Logic Apps.
147147

148148
For every active automation, we recommend you create an identical (disabled) automation and store it in a different location. When there's an outage, you can enable these backup automations and maintain normal operations.
149149

@@ -175,7 +175,7 @@ Unfortunately, this change came with an unavoidable breaking change. The breakin
175175

176176
## Next steps
177177

178-
In this article, you learned about creating Logic Apps, automating their execution in Defender for Cloud, and running them manually. For more information, see the following documentation:
178+
In this article, you learned about creating logic apps, automating their execution in Defender for Cloud, and running them manually. For more information, see the following documentation:
179179

180180
- [Use workflow automation to automate a security response](/training/modules/resolve-threats-with-azure-security-center/)
181181
- [Security recommendations in Microsoft Defender for Cloud](review-security-recommendations.md)

0 commit comments

Comments
 (0)