Merge pull request #2641 from MicrosoftDocs/main

Auto Publish – main to live - 2026-03-23 11:00 UTC

Author: learn-build-service-prod[bot]

.openpublishing.redirection.defender-for-cloud.json

@@ -574,6 +574,11 @@
       "source_path_from_root": "/articles/defender-for-cloud/monitor-connected-aws-resources.md",
       "redirect_url": "/azure/defender-for-cloud/quickstart-onboard-aws#validate-connector-health",
       "redirect_document_id": false
+    },
+    {
+      "source_path_from_root": "/articles/defender-for-cloud/deploy-vulnerability-assessment-vm.md",
+      "redirect_url": "/azure/defender-for-cloud/deploy-vulnerability-assessment-defender-vulnerability-management",
+      "redirect_document_id": false
     }
   ]
 }

articles/defender-for-cloud/defender-sensor-change-log.md

@@ -17,11 +17,25 @@ To see the version of the sensor run:
 
 `kubectl get -n kube-system daemonsets/microsoft-defender-collector-ds -o jsonpath='{.metadata.labels.app\.kubernetes\.io/version}'`
 
+
+## Defender for Containers – Sensor Support Policy
+
+The support policy here applies to all Helm-based and multicloud installations. For scenarios where the sensor is deployed as part of AKS, please refer to: [Supported Kubernetes versions in Azure Kubernetes Service (AKS) - Azure Kubernetes Service | Microsoft Learn](/azure/aks/supported-kubernetes-versions?tabs=azure-cli)
+
+|Version|Preview Date|GA Date|End of support|
+| -------- | -------- | -------- | -------- |
+|0.8| |Feb 2025|Feb 2027|
+|0.9|July 2025|Apr 2026|Apr 2027|
+|0.10|Feb 2026|Apr 2026|Apr 2027|
+|0.11|Apr 2026|Jul  2026|Jul 2027|
+
+Each stable (GA) version is supported for 12 months from its GA release date. After the 12-month window ends, the version is no longer supported. Customers should upgrade to the latest stable or Public release to maintain support and access new capabilities.
+
 ## Sensor versions available per release
 
 ### Sensor v0.10 (deployed by Helm or Arc for K8s in Preview mode)
 
-**Sensor v0.10.28 — Preview**
+**Sensor v0.10.3 — Preview**
 
 - **Released:** March 2026
 
@@ -195,18 +209,7 @@ To see the version of the sensor run:
   - Better memory efficiency and reduced CPU consumption  
   - Bug fixes and security enhancements  
 
-## Defender for Containers – Sensor Support Policy
-
-The support policy here applies to all Helm-based and multicloud installations. For scenarios where the sensor is deployed as part of AKS, please refer to: [Supported Kubernetes versions in Azure Kubernetes Service (AKS) - Azure Kubernetes Service | Microsoft Learn](/azure/aks/supported-kubernetes-versions?tabs=azure-cli)
-
-|Version|Preview Date|GA Date|End of support|
-| -------- | -------- | -------- | -------- |
-|0.8| |Feb 2025|Feb 2027|
-|0.9|July 2025|Apr 2026|Apr 2027|
-|0.10|Feb 2026|Apr 2026|Apr 2027|
-|0.11|Apr 2026|Jul  2026|Jul 2027|
 
-Each stable (GA) version is supported for 12 months from its GA release date. After the 12-month window ends, the version is no longer supported. Customers should upgrade to the latest stable or Public release to maintain support and access new capabilities.
 
 
 

articles/defender-for-cloud/deploy-vulnerability-assessment-vm.md

@@ -41,6 +41,7 @@ The following table lists the features provided by Defender for Containers for t
 | Container registry VA | VA for images in container registries | ACR, ECR, GAR, GCR, Docker Hub, JFrog Artifactory | GA | GA | Requires **Registry access** <sup>[1](#footnote1azva)</sup> or  Connector creation for Docker Hub/JFrog| **Defender for Containers** or **Defender CSPM** | Commercial clouds<br/><br/>National clouds: Azure Government, Azure operated by 21Vianet |
 | Runtime container VA - Registry scan based | VA of containers running images from supported registries | ACR, ECR, GAR, GCR, Docker Hub, JFrog Artifactory | GA | GA | Requires **Registry access** <sup>[1](#footnote1azva)</sup> or  Connector creation for Docker Hub/JFrog and either **K8S API access** or **Defender sensor** <sup>[1](#footnote1azva)</sup> | **Defender for Containers** or **Defender CSPM** | Commercial clouds<br/><br/>National clouds: Azure Government, Azure operated by 21Vianet |
 | Runtime container VA | Registry agnostic VA of container running images | All | GA | - | Requires **Agentless scanning for machines** and either **K8S API access** or **Defender sensor** <sup>[1](#footnote1azva)</sup> | **Defender for Containers** or **Defender CSPM** | Commercial clouds<br/><br/>National clouds: Azure Government, Azure operated by 21Vianet |
+| Runtime Node VA | Kubernetes node vulnerability assessment | AKS nodes | GA | GA | Requires **Agentless scanning for machines** | **Defender for Containers** or **Defender for servers Plan 2** or **Defender CSPM** | Commercial clouds |
 
 <sup><a name="footnote1azva"></a>1</sup>National clouds are automatically enabled and can't be disabled.