Skip to content

Commit b402caa

Browse files
committed
1 change left to make
1 parent 23bfd81 commit b402caa

File tree

4 files changed

+12
-6
lines changed

4 files changed

+12
-6
lines changed

articles/defender-for-cloud/defender-for-containers-enable.md

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: How to enable Microsoft Defender for Containers in Microsoft Defender for
33
description: Enable the container protections of Microsoft Defender for Containers
44
ms.topic: overview
55
zone_pivot_groups: k8s-host
6-
ms.date: 03/14/2022
6+
ms.date: 03/15/2022
77
---
88
# Enable Microsoft Defender for Containers
99

@@ -37,10 +37,6 @@ Learn about this plan in [Overview of Microsoft Defender for Containers](defende
3737
[!INCLUDE [Prerequisites](./includes/defender-for-container-prerequisites-arc-eks.md)]
3838
::: zone-end
3939

40-
Microsoft Defender for Containers is configured to defend all of your clouds automatically. When you install all of the required prerequisites and enable all of the auto provisioning capabilities.
41-
42-
If you choose to disable all of the auto provision configuration options, no agents, or components will be deployed to your clusters. Protection will be limited to the Agentless features only. Learn which features are Agentless in the [availability section](supported-machines-endpoint-solutions-clouds-containers.md) for Defender for Containers.
43-
4440
::: zone pivot="defender-for-container-aks"
4541
[!INCLUDE [Enable plan for AKS](./includes/defender-for-containers-enable-plan-aks.md)]
4642
::: zone-end

articles/defender-for-cloud/includes/defender-for-containers-enable-plan-aks.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,11 @@ ms.author: memildin
3333
- Azure Kubernetes Service profile - [Azure Kubernetes Service clusters should have Defender profile enabled](https://portal.azure.com/#blade/Microsoft_Azure_Security/RecommendationsBlade/assessmentKey/56a83a6e-c417-42ec-b567-1e6fcb3d09a9)
3434
- Azure Arc-enabled Kubernetes extension - [Azure Arc-enabled Kubernetes clusters should have the Defender extension installed](https://portal.azure.com/#blade/Microsoft_Azure_Security/RecommendationsBlade/assessmentKey/3ef9848c-c2c8-4ff3-8b9c-4c8eb8ddfce6)
3535

36+
> [!Note]
37+
>Microsoft Defender for Containers is configured to defend all of your clouds automatically. When you install all of the required prerequisites and enable all of the auto provisioning capabilities.
38+
>
39+
> If you choose to disable all of the auto provision configuration options, no agents, or components will be deployed to your clusters. Protection will be limited to the Agentless features only. Learn which features are Agentless in the [availability section](supported-machines-endpoint-solutions-clouds-containers.md) for Defender for Containers.
40+
3641
## Deploy the Defender profile
3742

3843
You can enable the Defender for Containers plan and deploy all of the relevant components from the Azure portal, the REST API, or with a Resource Manager template. For detailed steps, select the relevant tab.

articles/defender-for-cloud/includes/defender-for-containers-enable-plan-eks.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,10 @@ To protect your EKS clusters, enable the Containers plan on the relevant account
2121

2222
:::image type="content" source="../media/defender-for-kubernetes-intro/enable-containers-plan-on-aws-connector.png" alt-text="Screenshot of enabling Defender for Containers for an AWS connector.":::
2323

24-
1. Optionally, to change the retention period for your audit logs, select **Configure**, enter the required timeframe, and select **Save**.
24+
> [!Note]
25+
> If you disable this configuration, then the `Threat detection (control plane)` feature will be disabled. Learn more about [features availability](../supported-machines-endpoint-solutions-clouds-containers.md).
26+
27+
1. (Optional) To change the retention period for your audit logs, select **Configure**, enter the required timeframe, and select **Save**.
2528

2629
:::image type="content" source="../media/defender-for-kubernetes-intro/adjust-eks-logs-retention.png" alt-text="Screenshot of adjusting the retention period for EKS control pane logs." lightbox="../media/defender-for-kubernetes-intro/adjust-eks-logs-retention.png":::
2730

articles/defender-for-cloud/quickstart-onboard-gcp.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -186,6 +186,8 @@ Microsoft Defender for Containers brings threat detection, and advanced defences
186186
- Defender for Cloud recommendations, for per cluster installation, which will appear on the Microsoft Defender for Cloud's Recommendations page. Learn how to [deploy the solution to specific clusters](defender-for-containers-enable.md?tabs=defender-for-container-gke#deploy-the-solution-to-specific-clusters).
187187
- Manual installation for [Arc-enabled Kubernetes](../azure-arc/kubernetes/quickstart-connect-cluster.md), and [extensions](../azure-arc/kubernetes/extensions.md).
188188

189+
If you choose to disable all of available configuration options, no agents, or components will be deployed to your clusters. Learn more about the [features availability](supported-machines-endpoint-solutions-clouds-containers.md).
190+
189191
**To configure the Containers plan**:
190192

191193
1. Follow the steps to [Connect your GCP project](#connect-your-gcp-project).

0 commit comments

Comments
 (0)