Set-AzSecurityPricing

Module:

Az.Security Module

Enables or disables Microsoft Defender plans for a subscription in Microsoft Defender for Cloud.

Set-AzSecurityPricing
 -Name <String>
 -PricingTier <String>
 [-SubPlan <String>]
 [-Extension <String>]
 [-DefaultProfile <IAzureContextContainer>]
 [-WhatIf]
 [-Confirm]
 [<CommonParameters>]

Set-AzSecurityPricing
 -InputObject <PSSecurityPricing>
 [-DefaultProfile <IAzureContextContainer>]
 [-WhatIf]
 [-Confirm]
 [<CommonParameters>]

Enable or disable any of the Azure Defender plans for a subscription.

For details about Azure Defender and the available plans, see Introduction to Azure Defender.

Set-AzSecurityPricing -Name "AppServices" -PricingTier "Standard"

Set-AzSecurityPricing -Name "VirtualMachines" -PricingTier "Standard" -SubPlan P2

Set-AzSecurityPricing -Name "CloudPosture" -PricingTier "Standard" -Extension '[{"name":"SensitiveDataDiscovery","isEnabled":"True","additionalExtensionProperties":null},{"name":"ContainerRegistriesVulnerabilityAssessments","isEnabled":"True","additionalExtensionProperties":null},{"name":"AgentlessDiscoveryForKubernetes","isEnabled":"True","additionalExtensionProperties":null},{"name":"AgentlessVmScanning","isEnabled":"True","additionalExtensionProperties":{"ExclusionTags":"[{\"key\":\"Microsoft\",\"value\":\"Defender\"},{\"key\":\"For\",\"value\":\"Cloud\"}]"}}]'

Enables Azure Defender for servers for the subscription.

"Standard" refers to the "On" state for an Azure Defender plan as shown in Azure Security Center's pricing and settings area of the Azure portal.

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.