Microsoft Defender for Cloud protection is bought per kind of resource, for example servers, storage, containers, key vaults or Resource Manager, and each of these plans is switched on subscription by subscription.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Defender plans in context, with comparison tables and the common traps.
Terms in this definition
- Microsoft Defender for Cloud
Combines security posture management with workload protection: a free foundational CSPM tier, paid Defender plans, Secure Score and recommendations. Its regulatory compliance dashboard shows status only and blocks nothing.
- General-purpose v1
The older storage account kind (
Storage), which lacks access tiers, Archive and premium file shares and retires on 13 October 2026. Converting to ZRS requires first upgrading to GPv2, a one-way change. - Index field attributes
Settings applied to each field in an Azure AI Search index:
searchablefor full text,retrievableto return it,filterablefor exact-match$filter,sortable,facetablefor counts, andkeyfor the unique document ID. - subscription
Entitlement bought for a product under VCF 9.0 licensing, carrying a set capacity. Where active ones share the same site, unit and product, their capacity is combined into licences, which are then allocated to vCenters.
Related terms
- CWPP
Short for Cloud Workload Protection Platform: guarding live workloads, including servers, containers, storage and databases, against attack. Defender for Cloud delivers this with its individual Defender plans, Defender for Servers and Defender for Containers being two examples.