Skip to content

Commit 9d5df67

Browse files
prmerger-automator[bot]prmerger-automator[bot]
authored
Merge pull request #264559 from laragoldstein13/docs-editor/devops-support-1706564688
Update devops-support.md
2 parents 82f830f + 5d5e836 commit 9d5df67

File tree

1 file changed

+7
-8
lines changed

1 file changed

+7
-8
lines changed

‎articles/defender-for-cloud/devops-support.md

Lines changed: 7 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ DevOps security currently supports the following DevOps platforms:
3131

3232
DevOps security requires the following permissions:
3333

34-
| Feature | Permissions |
34+
| Feature | Permissions |
3535
|----------------------------------|----------------------------------|
3636
| Connect DevOps environments to Defender for Cloud | <ul><li>Azure: Subscription Contributor or Security Admin</li><li>Azure DevOps: Project Collection Administrator on target Organization</li><li>GitHub: Organization Owner</li><li>GitLab: Group Owner on target Group</li></ul> |
3737
| Review security insights and findings | Security Reader |
@@ -47,8 +47,7 @@ DevOps security requires the following permissions:
4747
The following tables summarize the availability and prerequisites for each feature within the supported DevOps platforms:
4848

4949
> [!NOTE]
50-
> Starting March 7, 2024, [Defender CSPM](concept-cloud-security-posture-management.md) must be enabled to have premium DevOps security capabilities which include code-to-cloud contextualization powering security explorer and attack paths and pull request annotations for Infrastructure-as-Code security findings. See details below to learn more.
51-
50+
> Starting March 7, 2024, [Defender CSPM](concept-cloud-security-posture-management.md) must be enabled on at least one subscription or multicloud connector in the tenant to benefit from premium DevOps security capabilities which include code-to-cloud contextualization powering security explorer and attack paths and pull request annotations for Infrastructure-as-Code security findings. See details below to learn more.
5251
### Azure DevOps
5352

5453
| Feature | Foundational CSPM | Defender CSPM | Prerequisites |
@@ -62,8 +61,8 @@ The following tables summarize the availability and prerequisites for each featu
6261
| [Pull request annotations](review-pull-request-annotations.md) | | ![Yes Icon](./media/icons/yes-icon.png) | See [here](enable-pull-request-annotations.md) |
6362
| [Code to cloud mapping for Containers](container-image-mapping.md) | | ![Yes Icon](./media/icons/yes-icon.png) | [Microsoft Security DevOps extension](azure-devops-extension.md#configure-the-microsoft-security-devops-azure-devops-extension-1) |
6463
| [Code to cloud mapping for Infrastructure as Code templates](iac-template-mapping.md) | | ![Yes Icon](./media/icons/yes-icon.png) | [Microsoft Security DevOps extension](azure-devops-extension.md) |
65-
| [Attack path analysis](how-to-manage-attack-path.md) | | ![Yes Icon](./media/icons/yes-icon.png) | Enable Defender CSPM on the Azure DevOps connector |
66-
| [Cloud security explorer](how-to-manage-cloud-security-explorer.md) | | ![Yes Icon](./media/icons/yes-icon.png) | Enable Defender CSPM on the Azure DevOps connector |
64+
| [Attack path analysis](how-to-manage-attack-path.md) | | ![Yes Icon](./media/icons/yes-icon.png) |Enable Defender CSPM on an Azure Subscription, AWS Connector, or GCP Connector in the same tenant as the DevOps Connector |
65+
| [Cloud security explorer](how-to-manage-cloud-security-explorer.md) | | ![Yes Icon](./media/icons/yes-icon.png) |Enable Defender CSPM on an Azure Subscription, AWS Connector, or GCP connector in the same tenant as the DevOps Connector|
6766

6867

6968
### GitHub
@@ -78,8 +77,8 @@ The following tables summarize the availability and prerequisites for each featu
7877
| [Security recommendations to fix DevOps environment misconfigurations](concept-devops-posture-management-overview.md) | ![Yes Icon](./media/icons/yes-icon.png) | ![Yes Icon](./media/icons/yes-icon.png) | N/A |
7978
| [Code to cloud mapping for Containers](container-image-mapping.md) | | ![Yes Icon](./media/icons/yes-icon.png) | [Microsoft Security DevOps action](github-action.md) |
8079
| [Code to cloud mapping for Infrastructure as Code templates](iac-template-mapping.md) | | ![Yes Icon](./media/icons/yes-icon.png) | [Microsoft Security DevOps action](github-action.md) |
81-
| [Attack path analysis](how-to-manage-attack-path.md) | | ![Yes Icon](./media/icons/yes-icon.png) | Enable Defender CSPM on the GitHub connector |
82-
| [Cloud security explorer](how-to-manage-cloud-security-explorer.md) | | ![Yes Icon](./media/icons/yes-icon.png) | Enable Defender CSPM on the GitHub connector |
80+
| [Attack path analysis](how-to-manage-attack-path.md) | | ![Yes Icon](./media/icons/yes-icon.png) | Enable Defender CSPM on an Azure Subscription, AWS Connector, or GCP connector in the same tenant as the DevOps Connector |
81+
| [Cloud security explorer](how-to-manage-cloud-security-explorer.md) | | ![Yes Icon](./media/icons/yes-icon.png) | Enable Defender CSPM on an Azure Subscription, AWS Connector, or GCP connector in the same tenant as the DevOps Connector |
8382

8483

8584
### GitLab
@@ -91,4 +90,4 @@ The following tables summarize the availability and prerequisites for each featu
9190
| [Security recommendations to discover exposed secrets](defender-for-devops-introduction.md#manage-your-devops-environments-in-defender-for-cloud) | ![Yes Icon](./media/icons/yes-icon.png) | ![Yes Icon](./media/icons/yes-icon.png) | [GitLab Ultimate](https://about.gitlab.com/pricing/ultimate/) |
9291
| [Security recommendations to fix open source vulnerabilities](defender-for-devops-introduction.md#manage-your-devops-environments-in-defender-for-cloud) | ![Yes Icon](./media/icons/yes-icon.png) | ![Yes Icon](./media/icons/yes-icon.png) | [GitLab Ultimate](https://about.gitlab.com/pricing/ultimate/) |
9392
| [Security recommendations to fix infrastructure as code misconfigurations](defender-for-devops-introduction.md#manage-your-devops-environments-in-defender-for-cloud) | ![Yes Icon](./media/icons/yes-icon.png) | ![Yes Icon](./media/icons/yes-icon.png) | [GitLab Ultimate](https://about.gitlab.com/pricing/ultimate/) |
94-
| [Cloud security explorer](how-to-manage-cloud-security-explorer.md) | | ![Yes Icon](./media/icons/yes-icon.png) | Enable Defender CSPM on the GitLab connector |
93+
| [Cloud security explorer](how-to-manage-cloud-security-explorer.md) | | ![Yes Icon](./media/icons/yes-icon.png) | Enable Defender CSPM on an Azure Subscription, AWS Connector, or GCP connector in the same tenant as the DevOps Connector |

0 commit comments

Comments
 (0)