Skip to content

docs(connectors): Microsoft Defender for Cloud connector reference#15197

Open
devGregA wants to merge 2 commits into
bugfixfrom
sc-13470_defender_cloud_docs
Open

docs(connectors): Microsoft Defender for Cloud connector reference#15197
devGregA wants to merge 2 commits into
bugfixfrom
sc-13470_defender_cloud_docs

Conversation

@devGregA

@devGregA devGregA commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

Adds the Microsoft Defender for Cloud connector to the connectors tool reference (docs/content/import_data/pro/connectors/connectors_tool_reference.md), documenting setup and usage:

  • Prerequisites — Azure subscription(s) with Defender for Cloud enabled and the relevant Defender plans (Servers Plan 2 for VM CVEs, Containers for image CVEs); note that SQL VA / posture findings are intentionally not imported.
  • Entra app registration — the three credential values (Directory/tenant ID, Application/client ID, client secret value).
  • RBAC — assigning the Security Reader role to the app's service principal per subscription (with the "assign to the app, search by name/object ID" caveat).
  • Connector Mappings — Location (https://management.azure.com), Tenant ID, Client ID, Client Secret, optional Minimum Severity.
  • Behavior — one Record per enabled subscription; findings via Azure Resource Graph; scan-timing expectations.

Distinguishes the connector from the device-based Microsoft Defender connector (different API surface and permission model). Pairs with the connector implementation (DefectDojo-Inc/connectors#667).

@github-actions github-actions Bot added the docs label Jul 9, 2026
Setup and usage for the Defender for Cloud connector: required Defender
plans (Servers Plan 2, Containers), Entra app registration + the three
credential values, the Security Reader RBAC assignment on the service
principal (per subscription), connector field mappings, and scan-timing
expectations. Distinguishes it from the device-based Microsoft Defender
connector.
@Maffooch Maffooch force-pushed the sc-13470_defender_cloud_docs branch from b456a35 to a1c2473 Compare July 9, 2026 05:00
@Maffooch Maffooch changed the base branch from dev to bugfix July 9, 2026 05:00
@Maffooch Maffooch added this to the 3.1.100 milestone Jul 9, 2026
@Maffooch Maffooch requested a review from paulOsinski July 9, 2026 05:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants