Sign in Start Free Trial

Terraform Modules for AWS

AWS Compliance Frameworks

AWS Compliance Controls

Azure Compliance Frameworks

Azure Compliance Controls

ASC Default policy settings should not have any setting set to 'Disabled'Azure subscriptions should have auto provisioning of the Log Analytics agent enabled Azure subscriptions should have Azure Defender for DNS enabled Azure subscriptions should have Azure Defender for Resource Manager enabled Azure subscriptions should have email notifications for high severity alerts enabled Azure subscriptions should have email notifications to subscription owners for high severity alerts enabled Azure subscriptions should have Microsoft Defender CSPM set to 'On'Azure subscriptions should have Microsoft Defender for APIs set to 'On'Azure subscriptions should have Microsoft Defender for App Service enabled Azure subscriptions should have Microsoft Defender for Azure Cosmos DB enabled Azure subscriptions should have Microsoft Defender for Azure SQL Database servers enabled Azure subscriptions should have Microsoft Defender for Cloud container image scanning enabled Azure subscriptions should have Microsoft Defender for Cloud pricing set to Standard Azure subscriptions should have Microsoft Defender for container registries enabled Azure subscriptions should have Microsoft Defender for Containers enabled Azure subscriptions should have Microsoft Defender for Databases enabled Azure subscriptions should have Microsoft Defender for IoT Hub enabled Azure subscriptions should have Microsoft Defender for Key Vault enabled Azure subscriptions should have Microsoft Defender for Kubernetes enabled Azure subscriptions should have Microsoft Defender for open-source relational databases enabled Azure subscriptions should have Microsoft Defender for Servers enabled Azure subscriptions should have Microsoft Defender for Storage enabled Microsoft Defender for Cloud settings should have 'Additional email addresses' configured with a security contact email Microsoft Defender for Cloud should have Microsoft Defender for Cloud Apps (MCAS) integration selected Running container images should have no unresolved vulnerabilities Security Center should have Windows Defender ATP (WDATP) integration selected Security contacts should have attack path email notifications enabled at the configured minimum risk level Subscriptions should have a contact email address for security issues Unprotected SQL Server virtual machines should have Azure Defender for SQL enabled Virtual machines should have endpoint protection installed

Google Cloud Compliance Frameworks

Google Cloud Compliance Controls

Azure Compliance ControlsMicrosoft Defender for Cloud

Azure subscriptions should have Microsoft Defender for APIs set to 'On'

Microsoft Defender for APIs offers full lifecycle protection, detection, and response coverage for APIs.

What this control checks

Microsoft Defender for APIs pricing tier must be Standard on the subscription

Framework mappings

The clauses this control is mapped to in each framework.

CIS Azure Benchmark v5.0.0

8.1.2.1 Ensure Microsoft Defender for APIs is set to 'On'

Related controls

Azure subscriptions should have Microsoft Defender for Containers enabled
Microsoft Defender for Cloud should have Microsoft Defender for Cloud Apps (MCAS) integration selected

Tool mappings

Use these identifiers to cross-reference this control across tools, reports, and evidence.

Compliance.tf Control: security_center_defender_for_api_enabled
Powerpipe Control: azure_compliance.control.security_center_defender_for_api_enabled
Azure Policy Definition: 7926a6d1-b268-4586-8197-e8ae90c877d7

Last reviewed: 2026-10-14

View all Azure controls →

Azure subscriptions should have Microsoft Defender CSPM set to 'On'

Previous Page

Azure subscriptions should have Microsoft Defender for App Service enabled

Next Page

On this page

Implementation What this control checks Framework mappings Related controls Tool mappings

Ask AI about this

Ask Claude
Ask ChatGPT

Help improve this page

Suggest an edit
Share on LinkedIn

Copyright © 2024-2026 Betajob AS 🇺🇦Build: 20261018_075822_200685

Go to compliance.tf·Registry·Pricing·License Agreement··