You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Create custom standards and recommendations (Azure)
11
11
12
-
Security recommendations in Microsoft Defender for Cloud help you to improve and harden your security posture. Recommendations are based on the security standards you define in subscriptions that have Defender for Cloud onboarded.
12
+
Security recommendations in Microsoft Defender for Cloud help you to improve and harden your security posture. Recommendations are based on the security standards you define in subscriptions that have Defender for Cloud onboarded.
13
13
14
14
[Security standards](security-policy-concept.md) can be based on regulatory compliance standards, and on customized standards. This article describes how to create custom standards and recommendations.
15
15
@@ -20,7 +20,6 @@ Security recommendations in Microsoft Defender for Cloud help you to improve and
20
20
21
21
::: zone pivot="azure-portal"
22
22
23
-
24
23
## Create a custom standard in the portal
25
24
26
25
1. Sign in to the [Azure portal](https://portal.azure.com).
@@ -29,12 +28,11 @@ Security recommendations in Microsoft Defender for Cloud help you to improve and
29
28
30
29
1. Select the relevant subscription or management group.
:::image type="content" source="media/custom-security-policies/create-custom-standard.png" alt-text="Screenshot that shows how to create a custom security standard." lightbox="media/custom-security-policies/create-custom-standard.png":::
36
34
37
-
1. Enter a name and description.
35
+
1. Enter a name and description.
38
36
39
37
> [!IMPORTANT]
40
38
> Make sure the name is unique. If you create a custom standard with the same name as an existing standard, it causes a conflict in the information displayed in the dashboard.
@@ -67,7 +65,6 @@ If you want to create a custom recommendation for Azure resources, you currently
67
65
68
66
::: zone pivot="rest-api"
69
67
70
-
71
68
## Create a custom recommendation/standard (legacy)
72
69
73
70
You can create custom recommendations and standards in Defender for cloud by creating policy definitions and initiatives in Azure Policy, and onboarding them in Defender for Cloud.
@@ -77,18 +74,17 @@ Here's how you do that:
77
74
1. Create one or more policy definitions in the [Azure Policy portal](../governance/policy/tutorials/create-custom-policy-definition.md), or [programatically](../governance/policy/how-to/programmatically-create.md).
78
75
1.[Create a policy initiative](../governance/policy/concepts/initiative-definition-structure.md) that contains the custom policy definitions.
79
76
80
-
81
77
## Onboard the initiative as a custom standard (legacy)
82
78
83
79
[Policy assignments](../governance/policy/concepts/assignment-structure.md) are used by Azure Policy to assign Azure resources to a policy or initiative.
84
80
85
81
To onboard an initiative to a custom security standard in Defender for you, you need to include `"ASC":"true"` in the request body as shown here. The `ASC` field onboards the initiative to Microsoft Defender for Cloud.
86
82
87
83
Here's an example of how to do that.
88
-
84
+
89
85
### Example to onboard a custom initiative
90
86
91
-
```
87
+
```json
92
88
PUT
93
89
PUT https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}?api-version=2021-06-01
94
90
@@ -145,17 +141,16 @@ Here's an example of how to do that.
145
141
146
142
This example shows you how to remove an assignment:
The built-in recommendations supplied with Microsoft Defender for Cloud include details such as severity levels and remediation instructions. If you want to add this type of information to custom recommendations for Azure, use the REST API.
153
+
The built-in recommendations supplied with Microsoft Defender for Cloud include details such as severity levels and remediation instructions. If you want to add this type of information to custom recommendations for Azure, use the REST API.
159
154
160
155
The two types of information you can add are:
161
156
@@ -166,9 +161,9 @@ The metadata should be added to the policy definition for a policy that is part
For another example for using the securityCenter property, see [this section of the REST API documentation](/rest/api/defenderforcloud/assessments-metadata/create-in-subscription#examples).
224
219
225
-
226
220
## Next steps
227
221
228
222
- [Learn about](create-custom-recommendations.md) Defender for Cloud security standards and recommendations.
229
-
- [Learn about](create-custom-recommendations.md) creating custom standards for AWS accounts and GCP projects.
223
+
- [Learn about](create-custom-recommendations.md) creating custom standards for AWS accounts and GCP projects.
0 commit comments