Microsoft Defender for Cloud website screenshot

Microsoft Defender for Cloud

Microsoft Defender for Cloud is Microsoft's unified cloud-native application protection platform (CNAPP) that delivers cloud security posture management (CSPM) and cloud workload protection (CWPP) across Azure, AWS, GCP, and hybrid/on-premises workloads. It provides security recommendations, secure score, regulatory compliance assessments, vulnerability management, and advanced threat protection for servers, containers, databases, storage, and more. The Defender for Cloud REST APIs are part of the Azure Resource Manager surface and authenticate via Azure Active Directory OAuth 2.0 tokens.

1 APIs 0 Features
Cloud SecurityCSPMCWPPCNAPPThreat ProtectionComplianceVulnerability ManagementAzure

APIs

Microsoft Defender for Cloud REST API

Azure Resource Manager REST API for managing Defender for Cloud assessments, alerts, recommendations, secure score, regulatory compliance, pricing/plans, security contacts, and ...

Collections

Microsoft Defender for Cloud REST API

OPEN

Resources

🔗
VulnerabilityDisclosure
VulnerabilityDisclosure
🔗
DomainSecurity
DomainSecurity
🔑
Authentication
Authentication
🔑
OAuthScopes
OAuthScopes
🔗
Website
Website
🔗
Documentation
Documentation
🔗
REST API Documentation
REST API Documentation
💰
Pricing
Pricing
📝
Signup
Signup
👥
GitHub OpenAPI Specs
GitHub OpenAPI Specs
🔗
LlmsText
LlmsText
📰
Blog
Blog

Sources

Raw ↑ 
opencollection: 1.0.0
info:
  name: Microsoft Defender for Cloud REST API
  version: '2022-01-01'
request:
  auth:
    type: oauth2
    flow: implicit
    authorizationUrl: https://login.microsoftonline.com/common/oauth2/authorize
    credentials:
      clientId: '{{clientId}}'
items:
- info:
    name: Alerts
    type: folder
  items:
  - info:
      name: List all alerts for the subscription
      type: http
    http:
      method: GET
      url: https://management.azure.com/subscriptions/:subscriptionId/providers/Microsoft.Security/alerts
      params:
      - name: subscriptionId
        value: ''
        type: path
      - name: api-version
        value: ''
        type: query
    docs: List all alerts for the subscription
  - info:
      name: List alerts for a resource group
      type: http
    http:
      method: GET
      url: https://management.azure.com/subscriptions/:subscriptionId/resourceGroups/:resourceGroupName/providers/Microsoft.Security/alerts
      params:
      - name: subscriptionId
        value: ''
        type: path
      - name: resourceGroupName
        value: ''
        type: path
      - name: api-version
        value: ''
        type: query
    docs: List alerts for a resource group
  - info:
      name: List subscription-level alerts in a specific region
      type: http
    http:
      method: GET
      url: https://management.azure.com/subscriptions/:subscriptionId/locations/:ascLocation/alerts
      params:
      - name: subscriptionId
        value: ''
        type: path
      - name: ascLocation
        value: ''
        type: path
        description: Defender for Cloud location/region
      - name: api-version
        value: ''
        type: query
    docs: List subscription-level alerts in a specific region
  - info:
      name: Get a subscription-level alert
      type: http
    http:
      method: GET
      url: https://management.azure.com/subscriptions/:subscriptionId/locations/:ascLocation/alerts/:alertName
      params:
      - name: subscriptionId
        value: ''
        type: path
      - name: ascLocation
        value: ''
        type: path
        description: Defender for Cloud location/region
      - name: alertName
        value: ''
        type: path
      - name: api-version
        value: ''
        type: query
    docs: Get a subscription-level alert
  - info:
      name: Dismiss a subscription-level alert
      type: http
    http:
      method: POST
      url: https://management.azure.com/subscriptions/:subscriptionId/locations/:ascLocation/alerts/:alertName/dismiss
      params:
      - name: subscriptionId
        value: ''
        type: path
      - name: ascLocation
        value: ''
        type: path
        description: Defender for Cloud location/region
      - name: alertName
        value: ''
        type: path
      - name: api-version
        value: ''
        type: query
    docs: Dismiss a subscription-level alert
  - info:
      name: Resolve a subscription-level alert
      type: http
    http:
      method: POST
      url: https://management.azure.com/subscriptions/:subscriptionId/locations/:ascLocation/alerts/:alertName/resolve
      params:
      - name: subscriptionId
        value: ''
        type: path
      - name: ascLocation
        value: ''
        type: path
        description: Defender for Cloud location/region
      - name: alertName
        value: ''
        type: path
      - name: api-version
        value: ''
        type: query
    docs: Resolve a subscription-level alert
  - info:
      name: Activate a subscription-level alert
      type: http
    http:
      method: POST
      url: https://management.azure.com/subscriptions/:subscriptionId/locations/:ascLocation/alerts/:alertName/activate
      params:
      - name: subscriptionId
        value: ''
        type: path
      - name: ascLocation
        value: ''
        type: path
        description: Defender for Cloud location/region
      - name: alertName
        value: ''
        type: path
      - name: api-version
        value: ''
        type: query
    docs: Activate a subscription-level alert
  - info:
      name: Simulate security alerts
      type: http
    http:
      method: POST
      url: https://management.azure.com/subscriptions/:subscriptionId/locations/:ascLocation/alerts/default/simulate
      params:
      - name: subscriptionId
        value: ''
        type: path
      - name: ascLocation
        value: ''
        type: path
        description: Defender for Cloud location/region
      - name: api-version
        value: ''
        type: query
      body:
        type: json
        data: '{}'
    docs: Simulate security alerts
- info:
    name: Assessments
    type: folder
  items:
  - info:
      name: List security assessments for a resource scope
      type: http
    http:
      method: GET
      url: https://management.azure.com/:resourceId/providers/Microsoft.Security/assessments
      params:
      - name: resourceId
        value: ''
        type: path
        description: Full resource scope (e.g. subscriptions/{id})
      - name: api-version
        value: ''
        type: query
    docs: List security assessments for a resource scope
  - info:
      name: Get a security assessment
      type: http
    http:
      method: GET
      url: https://management.azure.com/:resourceId/providers/Microsoft.Security/assessments/:assessmentName
      params:
      - name: resourceId
        value: ''
        type: path
      - name: assessmentName
        value: ''
        type: path
      - name: api-version
        value: ''
        type: query
    docs: Get a security assessment
- info:
    name: SecureScores
    type: folder
  items:
  - info:
      name: List secure scores for a subscription
      type: http
    http:
      method: GET
      url: https://management.azure.com/subscriptions/:subscriptionId/providers/Microsoft.Security/secureScores
      params:
      - name: subscriptionId
        value: ''
        type: path
      - name: api-version
        value: ''
        type: query
    docs: List secure scores for a subscription
  - info:
      name: Get a secure score
      type: http
    http:
      method: GET
      url: https://management.azure.com/subscriptions/:subscriptionId/providers/Microsoft.Security/secureScores/:secureScoreName
      params:
      - name: subscriptionId
        value: ''
        type: path
      - name: secureScoreName
        value: ''
        type: path
      - name: api-version
        value: ''
        type: query
    docs: Get a secure score
- info:
    name: Pricings
    type: folder
  items:
  - info:
      name: List Defender plans (pricings) for a subscription
      type: http
    http:
      method: GET
      url: https://management.azure.com/subscriptions/:subscriptionId/providers/Microsoft.Security/pricings
      params:
      - name: subscriptionId
        value: ''
        type: path
      - name: api-version
        value: ''
        type: query
    docs: List Defender plans (pricings) for a subscription
  - info:
      name: Get a Defender plan
      type: http
    http:
      method: GET
      url: https://management.azure.com/subscriptions/:subscriptionId/providers/Microsoft.Security/pricings/:pricingName
      params:
      - name: subscriptionId
        value: ''
        type: path
      - name: pricingName
        value: ''
        type: path
      - name: api-version
        value: ''
        type: query
    docs: Get a Defender plan
  - info:
      name: Update a Defender plan
      type: http
    http:
      method: PUT
      url: https://management.azure.com/subscriptions/:subscriptionId/providers/Microsoft.Security/pricings/:pricingName
      params:
      - name: subscriptionId
        value: ''
        type: path
      - name: pricingName
        value: ''
        type: path
      - name: api-version
        value: ''
        type: query
      body:
        type: json
        data: '{}'
    docs: Update a Defender plan
bundled: true