Merge pull request #250288 from AlizaBernstein/WI-147438-add-enable-cspm-for-aws

WI-147438-add-enable-cspm-for-aws

Author: prmerger-automator[bot]

articles/defender-for-cloud/quickstart-onboard-aws.md

@@ -3,7 +3,7 @@ title: Connect your AWS account
 description: Defend your AWS resources by using Microsoft Defender for Cloud.
 ms.topic: install-set-up-deploy
 ms.custom: devx-track-linux
-ms.date: 06/28/2023
+ms.date: 09/05/2023
 ---
 
 # Connect your AWS account to Microsoft Defender for Cloud
@@ -97,6 +97,17 @@ Make sure the selected Log Analytics workspace has a security solution installed
 
 Defender for Servers assigns tags to your AWS resources to manage the auto-provisioning process. You must have these tags properly assigned to your resources so that Defender for Cloud can manage them: `AccountId`, `Cloud`, `InstanceId`, and `MDFCSecurityConnector`.
 
+### Defender CSPM
+
+If you choose the Microsoft Defender CSPM plan, you need:
+
+- a Microsoft Azure subscription. If you don't have an Azure subscription, you can [sign up for a free subscription](https://azure.microsoft.com/pricing/free-trial/).
+- You must [enable Microsoft Defender for Cloud](get-started.md#enable-defender-for-cloud-on-your-azure-subscription) on your Azure subscription.
+- Connect your [non-Azure machines](quickstart-onboard-machines.md), [AWS accounts](quickstart-onboard-aws.md). 
+- In order to gain access to all of the features available from the CSPM plan, the plan must be enabled by the **Subscription Owner**.
+
+Learn more about how to [enable Defender CSPM](tutorial-enable-cspm-plan.md).
+
 ## Connect your AWS account
 
 To connect your AWS to Defender for Cloud by using a native connector: