CODEWITHSUNDEEP
azureazure-defenderadvanced-threat-protection
delucaezequiel
delucaezequiel

Reputation: 649

Advanced Threat Protection REST API Not Working

We are trying to get the Advanced Threat Protection status of several resources in Azure, in order to achieve this we find out this API Advanced Threat Protection REST API - Get. However when we attempt to use is we get the following error message for all the resources except for Storage Accounts

"message": "Azure Defender for Data Services settings are not supported on resources of xxxxx"

Do you know if we should point to another API? Based on the following Azure Defender for Cloud we should have ATP available for the following resources:

But we were not able to query any of them

Upvotes: 0

Views: 240

Answers (1)

Matan Shabtay
Matan Shabtay

Reputation: 311

Advanced Threat Protection API is in only fact relevant for Azure Storage and CosmosDB resources, the API documentation needs an update.

For other resource types (.e.g. Virtual Machines), there is no central API for advanced threat protection. Instead, there's a bundle of features / APIs that is part of the advanced protection suite for that resource type.

In case of Virtual Machines, the bundle contains Just-in-time network access policies, Adaptive application controls, Adaptive network hardening, Network map. You see the full list here: https://learn.microsoft.com/en-us/azure/defender-for-cloud/supported-machines-endpoint-solutions-clouds?tabs=features-windows

Upvotes: 1

Related Questions