What is Microsoft Defender for Cloud Apps? · Ultra Transcenders glossary

Cloud access security broker (CASB) from Microsoft, providing discovery of SaaS apps, session control and protection of data.

Also called Microsoft Cloud App Security, Microsoft Cloud App Security.

In the Ultra Transcenders books

Each book explains Microsoft Defender for Cloud Apps in context, with comparison tables and the common traps.

CASB
A cloud access security broker stands between people and their cloud apps, revealing which apps are in use, controlling who can reach them and safeguarding the data inside. Microsoft's own is Microsoft Defender for Cloud Apps.
SaaS
A cloud model in which you consume a finished application that the provider operates, Microsoft 365 for instance. Nearly everything is the provider's job; you look after your data, users and devices.
CONTROL
Granting this on a securable gives all other permissions on it too, making it the most powerful SQL permission. At database scope that includes UNMASK and ALTER ANY MASK. Warehouse access through the Admin, Member or Contributor workspace roles carries it.

Session policy
Using Conditional Access app control, browser sessions can be routed through Microsoft Defender for Cloud Apps, where this kind of policy watches and restricts user actions in real time, for example stopping sensitive files from being downloaded.
Shadow IT
Software-as-a-service apps that staff adopt without approval from the IT department. Cloud Discovery in Microsoft Defender for Cloud Apps uncovers them and gives each one a risk score.
SSPM
SaaS security posture management: Microsoft Defender for Cloud Apps checks connected cloud apps for weak settings, suggests how to correct them and feeds what it finds into Microsoft Secure Score.