Microsoft Defender for Cloud
Architecture and deploymentOnboard agentless containers for CSPM
In brief
The article now provides clearer onboarding direction for Azure, AWS, and GCP, including its coverage of running containers, registry vulnerabilities, and Kubernetes configuration analysis. It also clarifies AKS trusted access terminology.
What Defender admins need to know
Administrators can use the updated guidance to follow the enablement steps for their cloud environment more easily.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Onboard agentless containers for CSPM
Enable agentless container posture in Defender CSPM to gain visibility into Kubernetes clusters and container images without deploying agents.
Agentless container posture is available for Azure, AWS, and GCP environments. This article walks you through enabling agentless container posture in each supported cloud so you can discover running containers, assess vulnerabilities in container registries, and analyze Kubernetes cluster configurations.
Prerequisites
How to onboard agentless container posture in Defender CSPM
Use the following steps to onboard agentless container posture in Defender CSPM for your cloud environment.
Azure
- Sign in to the Azure portal.
- Select Update.
@@ -3,15 +3,16 @@ title: Onboard agentless containers for CSPM description: Learn how to onboard agentless containers in Defender CSPM. ms.service: defender-for-cloud ms.topic: how-to-ms.date: 05/28/2026+ms.date: 07/03/2026 ai-usage: ai-assisted+ms.custom: msecd-doc-authoring-1013 --- # Onboard agentless containers for CSPM Enable agentless container posture in Defender CSPM to gain visibility into Kubernetes clusters and container images without deploying agents. -Agentless container posture is available for Azure, AWS, and GCP environments.+Agentless container posture is available for Azure, AWS, and GCP environments. This article walks you through enabling agentless container posture in each supported cloud so you can discover running containers, assess vulnerabilities in container registries, and analyze Kubernetes cluster configurations. ## Prerequisites @@ -19,6 +20,8 @@ Agentless container posture is available for Azure, AWS, and GCP environments. ## How to onboard agentless container posture in Defender CSPM +Use the following steps to onboard agentless container posture in Defender CSPM for your cloud environment.+ # [Azure](#tab/azure) 1. Sign in to the [Azure portal](https://portal.azure.com).@@ -100,7 +103,7 @@ Agentless container posture is available for Azure, AWS, and GCP environments. 1. Select **Update**. > [!NOTE]-> Kubernetes API access uses AKS trusted access. For more information about AKS trusted access, see [Enable Azure resources to access Azure Kubernetes Service (AKS) clusters using Trusted Access](/azure/aks/trusted-access-feature).+> Kubernetes API access uses Azure Kubernetes Service (AKS) trusted access, a feature that lets Azure resources securely access AKS clusters. For more information, see [Enable Azure resources to access Azure Kubernetes Service (AKS) clusters using Trusted Access](/azure/aks/trusted-access-feature). ---