Microsoft Defender for Cloud
Cloud and workloads

Introduction to Microsoft Defender for Containers

In brief

The Defender for Containers introduction now links to a support matrix comparing AWS and GCP coverage by plan. Page metadata was also updated.

What Defender admins need to know

Administrators can use the matrix to compare multicloud coverage across plans.

Summaries are generated from the documentation change itself.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

Introduction to Microsoft Defender for Containers

Microsoft Defender for Containers is a cloud-native solution that enhances, monitors, and maintains the security of your containerized assets. These assets include Kubernetes clusters, nodes, workloads, registries, images, and more. It protects applications across multicloud and on-premises environments.

For a comparison of AWS and GCP coverage by plan, see the multicloud workload protection support matrix.

Defender for Containers helps you with five core domains of container security:

  • Security posture management: Runs continuous monitoring of cloud APIs, Kubernetes APIs, and Kubernetes workloads. It discovers cloud resources, provides comprehensive inventory capabilities, detects misconfigurations with mitigation guidelines, provides contextual risk assessment, and empowers users to perform enhanced risk hunting capabilities through the Defender for Cloud security explorer.