Az.Security

Enforces the given rules on the NSG(s) listed in the request

Add SQL vulnerability assessment baseline.

Validates the security automation model before create or update. Any validation errors are returned to the client

Dismiss Iot aggregated alert

Disables the advanced threat protection policy for a storage / cosmosDB account.

Enables the advanced threat protection policy for a storage / cosmosDB account.

Gets alerts suppression rules.

Used to display allowed traffic between resources for the subscription

Get device security group (IoT Hub security)

Gets security solutions that were discovered by Azure Security Center

Get external security solution

Get IoT security analytics

Get IoT security aggregated alert

Get IoT security aggregated recommendation

Get IoT security solution

Gets the JIT network access policies

Gets regulatory compliance assessments

Gets regulatory compliance controls

Gets regulatory compliance standards

Gets a list of application control VM/server groups for the subscription.

Gets an application control VM/server group.

Gets a list of Adaptive Network Hardenings resources in scope of an extended resource.

Gets the advanced threat protection policy for a storage / cosmosDB account.

Gets security alerts that were detected by Azure Security Center

Gets an Azure API Management API if it has been onboarded to Microsoft Defender for APIs. If an Azure API Management API is onboarded to Microsoft Defender for APIs, the system will monitor the operations within the Azure API Management API for intrusive behaviors and provide alerts for attacks that have been detected.

Gets security assessments and their results on a subscription

Gets security assessments types and metadta in a subscription.

Gets security automations

Gets the security automatic provisioning settings

Get the security compliance of a subscription over time

Retrieves details of a specific security connector

Returns a monitored Azure DevOps organization resource.

Returns a list of all Azure DevOps organizations accessible by the user token consumed by the connector.

Returns a monitored Azure DevOps project resource.

Returns a monitored Azure DevOps repository resource.

Gets a DevOps Configuration.

Returns a monitored GitHub owner.

Returns a list of all GitHub owners accessible by the user token consumed by the connector.

Returns a monitored GitHub repository.

Returns a monitored GitLab Group resource for a given fully-qualified name.

Returns a list of all GitLab groups accessible by the user token consumed by the connector.

Returns a monitored GitLab Project resource for a given fully-qualified group name and project name.

Gets nested subgroups of given GitLab Group which are onboarded to the connector.

Gets security contacts that were configured on this subscription

Gets the Defender for Storage settings for the specified storage account.

Gets the location where Azure Security Center will automatically save data for the specific subscription

Gets the Azure Defender plans for a subscription in Azure Security Center.

Gets security secure scores and their results on a subscription

Gets security secure score controls and their results on a subscription

Gets security secure score control definitions on a subscription

Get security settings in Azure Security Center

Get Security Solutions

Get Security Solutions Reference Data

Get SQL vulnerability assessment baseline.

Gets SQL vulnerability assessment scan summary.

Gets SQL vulnerability assessment scan results.

Gets sub assessments results in a subscription.

Gets the security tasks that Azure Security Center recommends you to do in order to strengthen your security posture.

Gets a list of Security Topologies on a subscription

Gets the configured security workspace settings on a subscription.

Retrieves the effective tenant SQL information protection policy.

Offboard an Azure API Management API from Microsoft Defender for APIs. The system will stop monitoring the operations within the Azure API Management API for intrusive behaviors.

Onboard an Azure API Management API to Microsoft Defender for APIs. The system will start monitoring the operations within the Azure Management API for intrusive behaviors and provide alerts for attacks that have been detected.

Helper cmdlet to create PSIScopeElement.

Create new allow list custom alert rule for device security group (IoT Security)

Create new deny list custom alert rule for device security group (IoT Security)

Create new threshold custom alert rule for device security group (IoT Security)

Create new time window rule for device security group (IoT Security)

Create new recommendation configuration for iot security solution

Create new user defined resources for iot security solution

Creates new security automation

Creates new security automation action object

Creates security automation rule object

Creates security automation rule set object

Creates security automation scope object

Creates security automation source object

Create an in-memory object for AwsEnvironment.

Create an in-memory object for AwsOrganizationalDataMaster.

Create an in-memory object for AwsOrganizationalDataMember.

Create an in-memory object for AzureDevOpsScopeEnvironment.

Create a security connector. If a security connector is already created and a subsequent request is issued for the same security connector id, then it will be updated.

Create an in-memory object for ActionableRemediation.

Create a DevOps Configuration.

Create an in-memory object for CspmMonitorAwsOffering.

Create an in-memory object for CspmMonitorAzureDevOpsOffering.

Create an in-memory object for CspmMonitorGcpOffering.

Create an in-memory object for CspmMonitorGithubOffering.

Create an in-memory object for CspmMonitorGitLabOffering.

Create an in-memory object for DefenderCspmAwsOffering.

Create an in-memory object for DefenderCspmGcpOffering.

Create an in-memory object for DefenderForContainersAwsOffering.

Create an in-memory object for DefenderForContainersGcpOffering.

Create an in-memory object for DefenderForDatabasesAwsOffering.

Create an in-memory object for DefenderForDatabasesGcpOffering.

Create an in-memory object for DefenderForServersAwsOffering.

Create an in-memory object for DefenderForServersGcpOffering.

Create an in-memory object for GcpOrganizationalDataMember.

Create an in-memory object for GcpOrganizationalDataOrganization.

Create an in-memory object for GcpProjectEnvironment.

Create an in-memory object for GitHubScopeEnvironment.

Create an in-memory object for GitLabScopeEnvironment.

Create an in-memory object for InformationProtectionAwsOffering.

Deletes an alerts suppression rule.

Delete device security group

Delete IoT security solution

Deletes a JIT network access policy.

Deletes a security assessment result from a subscription.

Deletes a security assessment metadata from a subscription.

Deletes security automation

Deletes a security connector.

Deletes a DevOps Connector.

Deletes a security contact.

Removes SQL vulnerability assessment baseline.

Deletes the security workspace setting for this subscription.

Create or update an alerts suppression rule.

Create or update device security group

Create or update IoT security solution

Updates JIT network access policy.

Updates a security alert state.

Create or update a security assessment result on a resource

Creates or updates a security assessment type.

Updates automatic provisioning setting

Updates a security contact for a subscription.

Enables or disables Microsoft Defender plans for a subscription in Microsoft Defender for Cloud.

Update a security setting in Azure Security Center

Sets new SQL vulnerability assessment baseline on a specific database discards old baseline if any exists.

Updates the workspace settings for the subscription.

Sets the effective tenant SQL information protection policy.

Invokes a temporary network access request.

Update one or more of the following properties in IoT security solution: tags, recommendation configuration, user defined resources

Update a security connector

Update monitored Azure DevOps organization details.

Update a monitored Azure DevOps project resource.

Update a monitored Azure DevOps repository resource.

Update a DevOps Configuration.

Update the Defender for Storage settings on a specified storage account.