Skip to content

Commit 2b4e816

Browse files
authored
Merge pull request #2723 from ElazarK/serverless-protection
569103 Serverless protection preview added
2 parents a49c0a3 + 68f194b commit 2b4e816

3 files changed

Lines changed: 24 additions & 8 deletions

File tree

articles/defender-for-cloud/TOC.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -400,7 +400,7 @@
400400
href: enable-permissions-management.md
401401
- name: Agentless machine scanning
402402
href: concept-agentless-data-collection.md
403-
- name: Serverless protection
403+
- name: Serverless protection (Preview)
404404
displayName: serverless, functions, web apps, aws lambda, inventory, misconfigurations, vulnerabilities, dependencies
405405
href: serverless-protection.md
406406
- name: Assess your security posture

articles/defender-for-cloud/serverless-protection.md

Lines changed: 22 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,23 +1,38 @@
11
---
2-
title: What is Serverless protection
2+
title: What is Serverless protection (Preview)
33
description: Learn about Serverless protection in Microsoft Defender for Cloud and how it helps secure your serverless resources.
44
ms.topic: overview
5-
ms.date: 03/01/2026
5+
ms.date: 04/13/2026
66
#customer intent: As a reader, I want to understand what Serverless protection is in Microsoft Defender for Cloud.
77
---
88

9-
# Serverless protection
9+
# Serverless protection (Preview)
1010

11-
Microsoft Defender for Cloud, as a Cloud-Native Application Protection Platform (CNAPP), delivers comprehensive visibility, security, and posture management for serverless workloads across multicloud environments. It extends coverage to Azure Web Apps, Azure Functions, and Amazon Web Service (AWS) Lambda, ensuring these resources are fully protected.
11+
Microsoft Defender for Cloud, as a Cloud-Native Application Protection Platform (CNAPP), delivers comprehensive visibility, security, and posture management for serverless workloads across multicloud environments. It extends coverage to Azure Web Apps, Azure Functions, and Amazon Web Service (AWS) Lambda, ensuring these resources are fully protected.
1212

1313
Serverless protection automatically discovers and inventories all Web Apps, Azure Functions, and AWS Lambda functions in your environment. Once it discovers these resources, Defender for Cloud identifies misconfigurations, vulnerabilities, and insecure dependencies. Defender for Cloud then offers remediation guidance and continuous posture assessment, helping organizations maintain strong posture management and reduce risk in dynamic, serverless architectures.
1414

15-
## Serverless protection requirements
15+
Learn more about the [cloud availability](support-matrix-defender-for-cloud.md#cloud-support) for this feature.
16+
17+
## Serverless protection requirements and availability
1618

1719
Serverless protection is available as part of the [Defender Cloud Security Posture Management (CSPM) plan](concept-cloud-security-posture-management.md#cspm-plans).
1820

1921
To enable serverless protection, you must [Enable the Defender CSPM plan](tutorial-enable-cspm-plan.md) on your subscription, and [enable the Serverless protection component](tutorial-enable-cspm-plan.md#enable-the-components-of-the-defender-cspm-plan) of the Defender CSPM plan.
2022

23+
Currently, the available features vary by portal. The following table shows which features are available in each portal:
24+
25+
| Feature | Defender for Cloud portal | Defender portal |
26+
|--|--|--|
27+
| Onboarding through the Defender CSPM plan | :::image type="icon" source="./media/icons/yes-icon.png"::: | :::image type="icon" source="../defender-for-cloud/media/icons/no-icon.png"::: |
28+
| Review misconfiguration recommendations | :::image type="icon" source="./media/icons/yes-icon.png"::: | :::image type="icon" source="./media/icons/yes-icon.png"::: |
29+
| Build queries with the cloud security explorer | :::image type="icon" source="./media/icons/yes-icon.png"::: | :::image type="icon" source="../defender-for-cloud/media/icons/no-icon.png"::: |
30+
| Explore workloads in Cloud Inventory | :::image type="icon" source="./media/icons/yes-icon.png"::: | :::image type="icon" source="./media/icons/yes-icon.png"::: |
31+
| Investigate attack paths | :::image type="icon" source="./media/icons/yes-icon.png"::: | :::image type="icon" source="./media/icons/yes-icon.png"::: |
32+
| Vulnerability Assessment | - | :::image type="icon" source="./media/icons/yes-icon.png"::: |
33+
34+
To view the availability, see [cloud support](support-matrix-defender-for-cloud.md#cloud-support).
35+
2136
See [limitations](#limitations) for serverless resources.
2237

2338
## Benefits of serverless protection
@@ -59,11 +74,11 @@ Defender for Cloud provides a unified inventory of all discovered serverless res
5974

6075
After you filter your results, select any of the resources to view more details about its security posture, including any active security recommendations and their severity levels.
6176

62-
:::image type="content" source="media/serverless-protection/resource-health.png" alt-text="Screenshot that shows a selected resources health." lightbox="media/defender-for-apis-posture/resource-health.png":::
77+
:::image type="content" source="media/serverless-protection/resource-health.png" alt-text="Screenshot that shows a selected resources health." lightbox="media/serverless-protection/resource-health.png":::
6378

6479
You can also review the security recommendations associated with each resource to prioritize remediation efforts based on the severity of the findings and remediate them.
6580

66-
Learn how to [remediate security recommendations](implement-security-recommendations.md).
81+
Learn how to [remediate security recommendations](implement-security-recommendations.md).
6782

6883
### Cloud Security Explorer
6984

articles/defender-for-cloud/support-matrix-defender-for-cloud.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -133,6 +133,7 @@ In the support table, **NA** indicates that the feature isn't available.
133133
| [Defender for Azure Cosmos DB](concept-defender-for-cosmos.md) | GA | NA | NA |
134134
| **DEFENDER FOR SERVERS FEATURES** | | | |
135135
| [File Integrity Monitoring](file-integrity-monitoring-overview.md) | GA | GA<sup>[2](#footnote2)</sup> | NA |
136+
| [Serverless protection](serverless-protection.md) | Preview | NA | NA |
136137
| **AI SERVICES FEATURES** | | | |
137138
| [Suspicious prompt evidence](ai-onboarding.md#enable-suspicious-prompt-evidence) | GA | NA | NA |
138139
| [Data security for AI interactions](ai-onboarding.md#enable-data-security-for-microsoft-foundry-with-microsoft-purview) | Preview | NA | NA |

0 commit comments

Comments
 (0)