Skip to content

Commit c85d0a8

Browse files
author
David Curwin
committed
Custom recommendations
1 parent a308812 commit c85d0a8

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

articles/defender-for-cloud/security-policy-concept.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
title: Security policies in Microsoft Defender for Cloud
3-
description: Learn about security policies, standards, and recommendations in Microsoft Defender for Cloud.
3+
description: Learn about security policies, standards, and recommendations to improve your cloud security posture in Microsoft Defender for Cloud.
44
ms.topic: conceptual
55
ms.date: 11/27/2023
66
---
@@ -41,9 +41,9 @@ Recommendations derived from assessments against custom standards appear togethe
4141

4242
### Custom recommendations
4343

44-
All customers with Azure subscriptions can create custom recommendations based on Azure Policy. With Azure Policy, you create a policy definition, assign it to a policy initiative, and merge that initiative and policy into Defender for Cloud.
44+
Using custom recommendations based on Kusto Query Language (KQL) is the recommended approach and is supported for all clouds, but requires enabling the [Defender CSPM plan](concept-cloud-security-posture-management.md). With these recommendations, you specify a unique name, a description, remediation steps, severity, and relevant standards. You add recommendation logic with KQL. A query editor provides a built-in query template that you can tweak, or you can write your KQL query.
4545

46-
Custom recommendations based on Kusto Query Language (KQL) are available for all clouds, but require enabling the [Defender CSPM plan](concept-cloud-security-posture-management.md). With these recommendations, you specify a unique name, a description, steps for remediation, severity, and which standards the recommendation should be assigned to. You add recommendation logic with KQL. A query editor provides a built-in query template that you can tweak as needed, or you can write your KQL query from scratch.
46+
Alternatively, all Azure customers can onboard their Azure Policy custom initiatives as custom recommendations (legacy approach).
4747

4848
For more information, see [Create custom security standards and recommendations in Microsoft Defender for Cloud](create-custom-recommendations.md).
4949

0 commit comments

Comments
 (0)