Merge pull request #205778 from ElazarK/cloudknox

added entra integration

Author: Stacyrch140

articles/defender-for-cloud/media/other-threat-protections/permission-creep-index.png

@@ -2,7 +2,7 @@
 title: Additional threat protections from Microsoft Defender for Cloud
 description: Learn about the threat protections available from Microsoft Defender for Cloud
 ms.topic: overview
-ms.date: 11/09/2021
+ms.date: 07/24/2022
 ---
 # Additional threat protections in Microsoft Defender for Cloud
 
@@ -71,6 +71,13 @@ To defend against DDoS attacks, purchase a license for Azure DDoS Protection and
 
 If you have Azure DDoS Protection enabled, your DDoS alerts are streamed to Defender for Cloud with no additional configuration needed. For more information on the alerts generated by DDoS Protection, see [Reference table of alerts](alerts-reference.md#alerts-azureddos).
 
+## Entra Permission Management (formerly Cloudknox)
+
+[Microsoft Entra Permissions Management](../active-directory/cloud-infrastructure-entitlement-management/index.yml) is a cloud infrastructure entitlement management (CIEM) solution that provides comprehensive visibility and control over permissions for any identity and any resource in Azure, AWS, and GCP. 
+ 
+As part of the integration, each onboarded Azure subscription, AWS account, and GCP project give you a view of your [Permission Creep Index (PCI)](../active-directory/cloud-infrastructure-entitlement-management/ui-dashboard.md). The PCI is an aggregated metric that periodically evaluates the level of risk associated with the number of unused or excessive permissions across identities and resources. PCI measures how risky identities can potentially be, based on the permissions available to them.
+
+:::image type="content" source="media/other-threat-protections/permission-creep-index.png" alt-text="Screenshot of the three associated permission creed index recommendations for Azure, AWS and GCP." lightbox="media/other-threat-protections/permission-creep-index.png":::
 
 ## Next steps
 To learn more about the security alerts from these threat protection features, see the following articles: