> ## Documentation Index
> Fetch the complete documentation index at: https://cloudanix.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Enable Microsoft Defender for Cloud for Storage Accounts

### More Info:

Enable Microsoft Defender for Cloud for Storage Accounts

### Risk Level

High

### Address

Operational Maturity, Security

### Compliance Standards

* CIS AZURE
* Cloudanix Best Practice
* HITRUST CSF
* NIST CSF
* PCI
* SOC2

### Triage and Remediation

<Tabs>
  <Tab title="Remediation">
    ### Remediation

    <AccordionGroup>
      <Accordion title="Using Console" defaultOpen="true">
        To enable Microsoft Defender for Cloud for Storage Accounts in AZURE, follow these steps:

        1. Log in to the AZURE portal ([https://portal.azure.com/](https://portal.azure.com/)).

        2. In the left-hand menu, select "Security Center".

        3. In the Security Center blade, select "Recommendations".

        4. In the Recommendations blade, locate the recommendation for "Enable Microsoft Defender for Storage Accounts".

        5. Click on the recommendation to open the details page.

        6. In the details page, click on the "Remediate" button.

        7. In the Remediate blade, review the recommended remediation steps.

        8. Click on the "Remediate" button to apply the recommended remediation steps.

        9. Wait for the remediation process to complete.

        10. Verify that the recommendation status has changed to "Compliant".

        Note: Enabling Microsoft Defender for Cloud for Storage Accounts may incur additional costs. Please review the pricing details before enabling this feature.

        #
      </Accordion>

      <Accordion title="Using CLI">
        To remediate the misconfiguration "Enable Microsoft Defender for Cloud for Storage Accounts" for AZURE using AZURE CLI, please follow the below steps:

        Step 1: Open the Azure CLI command prompt or terminal.

        Step 2: Login to your Azure account using the below command:

        ```
        az login
        ```

        Step 3: After login, set the subscription where the storage account is located using the below command:

        ```
        az account set --subscription <subscription_id>
        ```

        Step 4: To enable Microsoft Defender for Cloud for Storage Accounts, use the below command:

        ```
        az security atp storage enable --storage-account <storage_account_name> --resource-group <resource_group_name>
        ```

        Note: Replace `<storage_account_name>` and `<resource_group_name>` with the actual names of your storage account and resource group respectively.

        Step 5: Verify the configuration by using the below command:

        ```
        az security atp storage show --storage-account <storage_account_name> --resource-group <resource_group_name>
        ```

        Note: Replace `<storage_account_name>` and `<resource_group_name>` with the actual names of your storage account and resource group respectively.

        Step 6: Once the configuration is verified, you have successfully remediated the misconfiguration "Enable Microsoft Defender for Cloud for Storage Accounts" for AZURE using AZURE CLI.

        I hope this helps!
      </Accordion>

      <Accordion title="Using Python">
        To enable Microsoft Defender for Cloud for Storage Accounts in Azure using Python, you can follow these steps:

        1. Install the Azure SDK for Python using the following command:

        ```
        pip install azure-mgmt-storage
        ```

        2. Import the necessary modules:

        ```python theme={null}
        from azure.identity import DefaultAzureCredential
        from azure.mgmt.storage import StorageManagementClient
        ```

        3. Set up the credentials for authentication:

        ```python theme={null}
        credential = DefaultAzureCredential()
        subscription_id = '<your-subscription-id>'
        ```

        4. Create a StorageManagementClient object:

        ```python theme={null}
        storage_client = StorageManagementClient(credential, subscription_id)
        ```

        5. Get the resource group and storage account names:

        ```python theme={null}
        resource_group_name = '<your-resource-group-name>'
        storage_account_name = '<your-storage-account-name>'
        ```

        6. Enable Microsoft Defender for Cloud for the storage account:

        ```python theme={null}
        storage_client.operations.enable_microsoft_defender_for_storage_accounts(resource_group_name, storage_account_name)
        ```

        7. Verify that Microsoft Defender for Cloud has been enabled by checking the storage account properties:

        ```python theme={null}
        storage_account = storage_client.storage_accounts.get_properties(resource_group_name, storage_account_name)
        print(storage_account.identity.type)
        ```

        Note: This code assumes that you have already set up the necessary Azure credentials and have the required permissions to enable Microsoft Defender for Cloud for the storage account.
      </Accordion>

      <Accordion title="Using Terraform">
        ```hcl theme={null}
        resource "azurerm_security_center_subscription_pricing" "defender_storage_accounts" {
          # Set this to the subscription where you want Microsoft Defender for Storage enabled
          subscription_id = "/subscriptions/YOUR_SUBSCRIPTION_ID"

          resource_type = "StorageAccounts"
          tier          = "Standard" # Enables Microsoft Defender for Cloud for Storage Accounts
        }
        ```

        Changing `tier` from `Free` to `Standard` is an in-place update and does not force resource replacement.

        For verification, `terraform plan` should show one `azurerm_security_center_subscription_pricing.defender_storage_accounts` to be created or updated with:

        * `resource_type` = "StorageAccounts"
        * `tier` changing from `"Free"` (or null) to `"Standard"`.
      </Accordion>
    </AccordionGroup>
  </Tab>
</Tabs>