Microsoft Defender for Cloud Pricing
Microsoft Defender for Cloud Pricing defines the cost and billing details for enabling Defender for Cloud’s security protections across Azure resources. It outlines the pricing tiers, metering units, and charges associated with threat detection, vulnerability assessment, and security posture management. This resource helps users understand expected costs when enabling specific Defender plans for services such as virtual machines, containers, databases, and more.
Fields
| Title | ID | Type | Data Type | Description |
|---|
| _key | core | string | |
| deprecated | core | bool | Optional. True if the plan is deprecated. If there are replacing plans they will appear in `replacedBy` property |
| enablement_time | core | string | Optional. If `pricingTier` is `Standard` then this property holds the date of the last time the `pricingTier` was set to `Standard`, when available (e.g 2023-03-01T12:42:42.1921106Z). |
| enforce | core | string | If set to "False", it allows the descendants of this scope to override the pricing configuration set on this scope (allows setting inherited="False"). If set to "True", it prevents overrides and forces this pricing configuration on all the descendants of this scope. This field is only available for subscription-level pricing. |
| extensions | core | json | Optional. List of extensions offered under a plan. |
| free_trial_remaining_time | core | string | The duration left for the subscriptions free trial period - in ISO 8601 format (e.g. P3Y6M4DT12H30M5S). |
| id | core | string | Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}" |
| inherited | core | string | "inherited" = "True" indicates that the current scope inherits its pricing configuration from its parent. The ID of the parent scope that provides the inherited configuration is displayed in the "inheritedFrom" field. On the other hand, "inherited" = "False" indicates that the current scope has its own pricing configuration explicitly set, and does not inherit from its parent. This field is read only and available only for resource-level pricing. |
| inherited_from | core | string | The id of the scope inherited from. "Null" if not inherited. This field is only available for resource-level pricing. |
| location | core | string | |
| name | core | string | The name of the resource |
| pricing_tier | core | string | Indicates whether the Defender plan is enabled on the selected scope. Microsoft Defender for Cloud is provided in two pricing tiers: free and standard. The standard tier offers advanced security capabilities, while the free tier offers basic security features. |
| replaced_by | core | array<string> | Optional. List of plans that replace this plan. This property exists only if this plan is deprecated. |
| resource_group | core | string | |
| resources_coverage_status | core | string | This field is available for subscription-level only, and reflects the coverage status of the resources under the subscription. Please note: The "pricingTier" field reflects the plan status of the subscription. However, since the plan status can also be defined at the resource level, there might be misalignment between the subscription's plan status and the resource status. This field helps indicate the coverage status of the resources. |
| sub_plan | core | string | The sub-plan selected for a Standard pricing configuration, when more than one sub-plan is available. Each sub-plan enables a set of security features. When not specified, full plan is applied. For VirtualMachines plan, available sub plans are 'P1' & 'P2', where for resource level only 'P1' sub plan is supported. |
| subscription_id | core | string | |
| subscription_name | core | string | |
| system_data | core | json | Metadata pertaining to creation and last modification of the resource. |
| tags | core | hstore_csv | |
| type | core | string | The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts" |
