Defender Plans that Are Actually On

A subscription with no Defender plan still has a full Defender for Cloud page: a Secure Score, hundreds of recommendations, a compliance dashboard - and not one threat detection, because those come from the paid plans, each Off until somebody turns it on. Sets Standard per resource type, always creates the security contact, and defaults alert notifications on.

This is the operations reference: version drift, dependants and neighbours. For what the module provisions, its inputs and outputs, and how to buy it, see the catalogue entry.

terraformAzureSecurity & Identityv1.0.0static-validated

Provider drift

This artifact declares no Terraform provider requirements, so there is nothing to drift. Provider freshness applies to Terraform and OpenTofu modules.

What depends on this

No reference architecture names this module, so changing it affects only configurations that reference it directly.

Nearest alternatives

Same cloud, same category. These are what you would weigh against it without changing provider.

A Firewall that Blocks rather than Narrates A WAF Policy that Blocks rather than Narrates Azure Bastion + Hardened Jumpbox Entra ID Workload Identity Baseline Privileged Roles that Are Eligible, Time-Boxed and Approved Into User-Assigned Managed Identities

The same job on other clouds

Security Posture & Findings on other providers. Useful when the cloud is still open, or when you are pricing a second one. How far a comparison like that can be trusted is covered in comparing clouds.

A Cloud Guard Target whose Responders RespondOracle Cloud Findings that Reach a Topic, Mutes that Say WhyGoogle Cloud Security Hub with Chosen StandardsAWS

Installing it

module "azure_defender_for_cloud" {
  source  = "www.iac-bazaar.com/iac-bazaar/azure-defender-for-cloud/azure"
  version = "1.0.0"
}

A registry token is required for the download itself. Installing through the registry protocol has the two credential steps.