azure.defender-pricing

Active Microsoft Defender pricing details for supported resources.

example:

Check if the Key Vaults resource is operating under the Standard pricing tier. This equates to Microsoft Defender being “On” in some security assessments.

policies:
  - name: azure-defender-keyvaults-enabled
    resource: azure.defender-pricing
    filters:
      - name: KeyVaults
      - properties.pricingTier: Standard

Filters

• event

• list-item

• reduce

• value

Actions

• logic-app

• notify

• webhook