For AI agents: A markdown version of this page is available at https://docs.datadoghq.com/security/default_rules/def-000-7ni.md. A documentation index is available at /llms.txt.

Microsoft Defender CSPM should be enabled

azure.security

Description

Microsoft Defender Cloud Security Posture Management (CSPM) provides agentless visibility into resource misconfigurations and attack-path analysis across Azure subscriptions. The plan must be enabled at the Standard tier on every subscription so that posture findings, secrets scanning, and attack-path insights are produced.

Remediation

See Protect your resources with Defender CSPM for step-by-step instructions on enabling the plan.