From 035df4976b2bb3b9cb717762bd41cf393ff6c1d0 Mon Sep 17 00:00:00 2001 From: LManning-Dev <54150471+LManning-Dev@users.noreply.github.com> Date: Mon, 18 Jul 2022 16:21:07 -0400 Subject: [PATCH] Update defender.bicep with current securitypricing resource types Deploy MLZ with deployDefender=$true Used Get-AzSecurityPricing to get the latest offerings Expected behavior All Defender Resources are set to Standard (Status should be On) Actual behavior New Resource Types are missed --- src/bicep/modules/defender.bicep | 40 ++++++++++++++++++-------------- 1 file changed, 23 insertions(+), 17 deletions(-) diff --git a/src/bicep/modules/defender.bicep b/src/bicep/modules/defender.bicep index 41a16dab8..6171dec06 100644 --- a/src/bicep/modules/defender.bicep +++ b/src/bicep/modules/defender.bicep @@ -6,24 +6,30 @@ Licensed under the MIT License. targetScope = 'subscription' param bundle array = (environment().name == 'AzureCloud') ? [ - 'KeyVaults' - 'SqlServers' - 'VirtualMachines' - 'StorageAccounts' - 'ContainerRegistry' - 'KubernetesService' - 'SqlServerVirtualMachines' - 'AppServices' - 'Dns' - 'Arm' + 'AppServices' + 'Arm' + 'ContainerRegistry' + 'Containers' + 'CosmosDbs' + 'Dns' + 'KeyVaults' + 'KubernetesService' + 'OpenSourceRelationalDatabases' + 'SqlServers' + 'SqlServerVirtualMachines' + 'StorageAccounts' + 'VirtualMachines' ] : (environment().name == 'AzureUSGovernment') ? [ - 'SqlServers' - 'VirtualMachines' - 'StorageAccounts' - 'ContainerRegistry' - 'KubernetesService' - 'Dns' - 'Arm' + 'Arm' + 'ContainerRegistry' + 'Containers' + 'Dns' + 'KubernetesService' + 'OpenSourceRelationalDatabases' + 'SqlServers' + 'SqlServerVirtualMachines' + 'StorageAccounts' + 'VirtualMachines' ] : [] @description('Turn automatic deployment by Defender of the MMA (OMS VM extension) on or off')