Edit

Share via

New-AzSecurityDefenderForContainersAwsOfferingObject

Module:
Az.Security Module

Create an in-memory object for DefenderForContainersAwsOffering.

Syntax

Default (Default) 

New-AzSecurityDefenderForContainersAwsOfferingObject
    [-AutoProvisioning <Boolean>]
    [-CloudWatchToKinesiCloudRoleArn <String>]
    [-ContainerVulnerabilityAssessmentCloudRoleArn <String>]
    [-ContainerVulnerabilityAssessmentTaskCloudRoleArn <String>]
    [-EnableContainerVulnerabilityAssessment <Boolean>]
    [-KinesiToS3CloudRoleArn <String>]
    [-KubeAuditRetentionTime <Int64>]
    [-KuberneteScubaReaderCloudRoleArn <String>]
    [-KuberneteServiceCloudRoleArn <String>]
    [-MdcContainerAgentlessDiscoveryK8SCloudRoleArn <String>]
    [-MdcContainerAgentlessDiscoveryK8SEnabled <Boolean>]
    [-MdcContainerImageAssessmentCloudRoleArn <String>]
    [-MdcContainerImageAssessmentEnabled <Boolean>]
    [-ScubaExternalId <String>]
    [<CommonParameters>]

Description

Create an in-memory object for DefenderForContainersAwsOffering.

Examples

Example 1: Create new DefenderForContainersAwsOffering object

$arnPrefix = "arn:aws:iam::123456789012:role"
New-AzSecurityDefenderForContainersAwsOfferingObject `
    -AutoProvisioning $true -KuberneteServiceCloudRoleArn "$arnPrefix/DefenderForCloud-Containers-K8s" -KuberneteScubaReaderCloudRoleArn "$arnPrefix/DefenderForCloud-DataCollection" `
    -KinesiToS3CloudRoleArn "$arnPrefix/DefenderForCloud-Containers-K8s-kinesis-to-s3" -CloudWatchToKinesiCloudRoleArn "$arnPrefix/DefenderForCloud-Containers-K8s-cloudwatch-to-kinesis" `
    -KubeAuditRetentionTime 30 -ScubaExternalId "a47ae0a2-7bf7-482a-897a-7a139d30736c" `
    -MdcContainerAgentlessDiscoveryK8SEnabled $true -MdcContainerAgentlessDiscoveryK8SCloudRoleArn "$arnPrefix/MDCContainersAgentlessDiscoveryK8sRole" `
    -MdcContainerImageAssessmentEnabled $true -MdcContainerImageAssessmentCloudRoleArn "$arnPrefix/MDCContainersImageAssessmentRole" `
    -EnableContainerVulnerabilityAssessment $false

AutoProvisioning                                 : True
CloudWatchToKinesiCloudRoleArn                   : arn:aws:iam::123456789012:role/DefenderForCloud-Containers-K8s-cloudwatch-to-kinesis
ContainerVulnerabilityAssessmentCloudRoleArn     :
ContainerVulnerabilityAssessmentTaskCloudRoleArn :
Description                                      :
EnableContainerVulnerabilityAssessment           : False
KinesiToS3CloudRoleArn                           : arn:aws:iam::123456789012:role/DefenderForCloud-Containers-K8s-kinesis-to-s3
KubeAuditRetentionTime                           : 30
KuberneteScubaReaderCloudRoleArn                 : arn:aws:iam::123456789012:role/DefenderForCloud-DataCollection
KuberneteServiceCloudRoleArn                     : arn:aws:iam::123456789012:role/DefenderForCloud-Containers-K8s
MdcContainerAgentlessDiscoveryK8SCloudRoleArn    : arn:aws:iam::123456789012:role/MDCContainersAgentlessDiscoveryK8sRole
MdcContainerAgentlessDiscoveryK8SEnabled         : True
MdcContainerImageAssessmentCloudRoleArn          : arn:aws:iam::123456789012:role/MDCContainersImageAssessmentRole
MdcContainerImageAssessmentEnabled               : True
OfferingType                                     : DefenderForContainersAws
ScubaExternalId                                  : a47ae0a2-7bf7-482a-897a-7a139d30736c

Parameters

-AutoProvisioning

Is audit logs pipeline auto provisioning enabled.

Parameter properties

Type:Boolean
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-CloudWatchToKinesiCloudRoleArn

The cloud role ARN in AWS used by CloudWatch to transfer data into Kinesis.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-ContainerVulnerabilityAssessmentCloudRoleArn

The cloud role ARN in AWS for this feature.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-ContainerVulnerabilityAssessmentTaskCloudRoleArn

The cloud role ARN in AWS for this feature.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-EnableContainerVulnerabilityAssessment

Enable container vulnerability assessment feature.

Parameter properties

Type:Boolean
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-KinesiToS3CloudRoleArn

The cloud role ARN in AWS used by Kinesis to transfer data into S3.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-KubeAuditRetentionTime

The retention time in days of kube audit logs set on the CloudWatch log group.

Parameter properties

Type:Int64
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-KuberneteScubaReaderCloudRoleArn

The cloud role ARN in AWS for this feature used for reading data.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-KuberneteServiceCloudRoleArn

The cloud role ARN in AWS for this feature used for provisioning resources.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-MdcContainerAgentlessDiscoveryK8SCloudRoleArn

The cloud role ARN in AWS for this feature.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-MdcContainerAgentlessDiscoveryK8SEnabled

Is Microsoft Defender container agentless discovery K8s enabled.

Parameter properties

Type:Boolean
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-MdcContainerImageAssessmentCloudRoleArn

The cloud role ARN in AWS for this feature.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-MdcContainerImageAssessmentEnabled

Is Microsoft Defender container image assessment enabled.

Parameter properties

Type:Boolean
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-ScubaExternalId

The externalId used by the data reader to prevent the confused deputy attack.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

Outputs

DefenderForContainersAwsOffering