The SecurityStandards API from Microsoft Defender — 2 operation(s) for securitystandards.
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/microsoft-defender:microsoft-defender-securitystandards-api"curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.2.0
info:
title: Microsoft Defender for Cloud REST API (Microsoft.Security)…
version: stable-composite
description: Composite of the latest stable Microsoft.Security resource-manager swagger files published by Microsoft in Azure/azure-rest-api-specs. Each path keeps its own api-version via x-source.
x-source-repo: https://github.com/Azure/azure-rest-api-specs/tree/main/specification/security/resource-manager/Microsoft.Security/Security
servers:
- url: https://management.azure.com
security:
- azure_auth:
- user_impersonation
tags:
- name: SecurityStandards
paths:
/{scope}/providers/Microsoft.Security/securityStandards:
get:
operationId: SecurityStandards_List
tags:
- SecurityStandards
description: Get a list of all relevant security standards over a scope
parameters:
- $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
- name: scope
in: path
description: The fully qualified Azure Resource manager identifier of the resource.
required: true
x-ms-skip-url-encoding: true
schema:
type: string
responses:
'200':
description: Azure operation completed successfully.
content:
application/json:
schema:
$ref: '#/components/schemas/SecurityStandardList'
default:
description: An unexpected error response.
content:
application/json:
schema:
$ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/definitions/ErrorResponse
x-ms-examples:
List security standards by management group scope:
$ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/examples/SecurityStandards/ListByManagementGroupSecurityStandards_example.json
List security standards by security connector scope:
$ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/examples/SecurityStandards/ListBySecurityConnectorSecurityStandards_example.json
List security standards by subscription scope:
$ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/examples/SecurityStandards/ListBySubscriptionSecurityStandards_example.json
x-ms-pageable:
nextLinkName: nextLink
x-source: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/security-SecurityStandards.json
summary: Security standards list
x-summary-source: derived
/{scope}/providers/Microsoft.Security/securityStandards/{standardId}:
get:
operationId: SecurityStandards_Get
tags:
- SecurityStandards
description: Get a specific security standard for the requested scope by standardId
parameters:
- $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
- name: scope
in: path
description: The fully qualified Azure Resource manager identifier of the resource.
required: true
x-ms-skip-url-encoding: true
schema:
type: string
- name: standardId
in: path
description: The Security Standard key - unique key for the standard type
required: true
schema:
type: string
pattern: '[{]?[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}[}]?$'
responses:
'200':
description: Azure operation completed successfully.
content:
application/json:
schema:
$ref: '#/components/schemas/SecurityStandard'
default:
description: An unexpected error response.
content:
application/json:
schema:
$ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/definitions/ErrorResponse
x-ms-examples:
Get a security standard over management group scope:
$ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/examples/SecurityStandards/GetByManagementGroupSecurityStandard_example.json
Get a security standard over security connector scope:
$ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/examples/SecurityStandards/GetBySecurityConnectorSecurityStandard_example.json
Get a security standard over subscription scope:
$ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/examples/SecurityStandards/GetBySubscriptionSecurityStandard_example.json
x-source: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/security-SecurityStandards.json
summary: Security standards get
x-summary-source: derived
put:
operationId: SecurityStandards_CreateOrUpdate
tags:
- SecurityStandards
description: Creates or updates a security standard over a given scope
parameters:
- $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
- name: scope
in: path
description: The fully qualified Azure Resource manager identifier of the resource.
required: true
x-ms-skip-url-encoding: true
schema:
type: string
- name: standardId
in: path
description: The Security Standard key - unique key for the standard type
required: true
schema:
type: string
pattern: '[{]?[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}[}]?$'
responses:
'200':
description: Resource 'SecurityStandard' update operation succeeded
content:
application/json:
schema:
$ref: '#/components/schemas/SecurityStandard'
'201':
description: Resource 'SecurityStandard' create operation succeeded
content:
application/json:
schema:
$ref: '#/components/schemas/SecurityStandard'
default:
description: An unexpected error response.
content:
application/json:
schema:
$ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/definitions/ErrorResponse
x-ms-examples:
Create or update security standard over management group scope:
$ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/examples/SecurityStandards/PutByManagementGroupSecurityStandard_example.json
Create or update security standard over security connector scope:
$ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/examples/SecurityStandards/PutBySecurityConnectorSecurityStandard_example.json
Create or update security standard over subscription scope:
$ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/examples/SecurityStandards/PutBySubscriptionSecurityStandard_example.json
x-source: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/security-SecurityStandards.json
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/SecurityStandard'
description: Custom security standard over a pre-defined scope
required: true
summary: Security standards create or update
x-summary-source: derived
delete:
operationId: SecurityStandards_Delete
tags:
- SecurityStandards
description: Delete a security standard over a given scope
parameters:
- $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
- name: scope
in: path
description: The fully qualified Azure Resource manager identifier of the resource.
required: true
x-ms-skip-url-encoding: true
schema:
type: string
- name: standardId
in: path
description: The Security Standard key - unique key for the standard type
required: true
schema:
type: string
pattern: '[{]?[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}[}]?$'
responses:
'200':
description: Resource deleted successfully.
'204':
description: Resource does not exist.
default:
description: An unexpected error response.
content:
application/json:
schema:
$ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/definitions/ErrorResponse
x-ms-examples:
Delete a security standard over management group scope:
$ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/examples/SecurityStandards/DeleteByManagementGroupSecurityStandard_example.json
Delete a security standard over security connector scope:
$ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/examples/SecurityStandards/DeleteBySecurityConnectorSecurityStandard_example.json
Delete a security standard over subscription scope:
$ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/examples/SecurityStandards/DeleteBySubscriptionSecurityStandard_example.json
x-source: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/security-SecurityStandards.json
summary: Security standards delete
x-summary-source: derived
components:
schemas:
StandardType:
type: string
description: Standard type (Custom or Default or Compliance only currently)
enum:
- Custom
- Default
- Compliance
x-ms-enum:
name: StandardType
modelAsString: true
values:
- name: Custom
value: Custom
description: Custom
- name: Default
value: Default
description: Default
- name: Compliance
value: Compliance
description: Compliance
SecurityStandard:
type: object
description: Security Standard on a resource
properties:
properties:
$ref: '#/components/schemas/SecurityStandardProperties'
description: Properties of a security standard
x-ms-client-flatten: true
allOf:
- $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/definitions/ProxyResource
StandardSupportedCloud:
type: string
description: The cloud that the standard is supported on.
enum:
- Azure
- AWS
- GCP
x-ms-enum:
name: StandardSupportedCloud
modelAsString: true
values:
- name: Azure
value: Azure
description: Azure
- name: AWS
value: AWS
description: AWS
- name: GCP
value: GCP
description: GCP
SecurityStandardProperties:
type: object
description: Describes properties of a standard.
properties:
displayName:
type: string
description: Display name of the standard, equivalent to the standardId
standardType:
$ref: '#/components/schemas/StandardType'
description: Standard type (Custom or Default or Compliance only currently)
readOnly: true
description:
type: string
description: Description of the standard
assessments:
type: array
description: List of assessment keys to apply to standard scope.
items:
$ref: '#/components/schemas/PartialAssessmentProperties'
x-ms-identifiers: []
cloudProviders:
type: array
description: List of all standard supported clouds.
items:
$ref: '#/components/schemas/StandardSupportedCloud'
policySetDefinitionId:
type: string
description: The policy set definition id associated with the standard.
metadata:
$ref: '#/components/schemas/StandardMetadata'
description: The security standard metadata.
PartialAssessmentProperties:
type: object
description: Describes properties of an assessment as related to the standard
properties:
assessmentKey:
type: string
description: The assessment key
StandardMetadata:
type: object
description: The standard metadata
properties:
createdBy:
type: string
description: Standard Created by object id (GUID)
readOnly: true
createdOn:
type: string
format: date-time
description: Standard creation date
readOnly: true
lastUpdatedBy:
type: string
description: Standard last updated by object id (GUID)
readOnly: true
lastUpdatedOn:
type: string
format: date-time
description: Standard last update date
readOnly: true
SecurityStandardList:
type: object
description: Page of a Standard list
properties:
value:
type: array
description: Collection of standards in this page
items:
$ref: '#/components/schemas/SecurityStandard'
readOnly: true
nextLink:
type: string
description: The URI to fetch the next page
readOnly: true
required:
- value
securitySchemes:
azure_auth:
type: oauth2
flows:
implicit:
scopes:
user_impersonation: impersonate your user account
authorizationUrl: https://login.microsoftonline.com/common/oauth2/authorize
description: Azure Active Directory OAuth2 Flow.