Microsoft Defender for Cloud

Chapter 4

Policy Management

Policies, guardrails, and definitions. Many ambiguous terms are used synonymously when describing the same topic: a set of rules used to define the boundaries in which an environment can be configured. Since Microsoft Defender for Cloud’s beginnings, the Cloud Security Posture Management capability has been built upon Azure Policy, which is a Microsoft Azure service used to technically define a company’s governance concept.

In this chapter, you will learn about policies and assessments within the scope of Microsoft Defender for Cloud, and you’ll learn about regulatory compliance standards and how to customize the experience in hybrid and multi-cloud environments.

Introduction to Azure Policy

We remember the days ...