Skip to main content


2.2.3 Set Auto provisioning of 'Microsoft Defender for Containers components' to 'On' (Manual)


This rule has been changed to manual, see Permanently Manual Policies (that were deemed automated) for CIS Azure 1.5.0 for details.

Profile Applicability

• Level 2


Enable automatic provisioning of the Microsoft Defender for Containers components.


As with any compute resource, Container environments require hardening and run-time protection to ensure safe operations and detection of threats and vulnerabilities.


Microsoft Defender for Containers will require additional licensing.


From Azure Portal

  1. From Azure Home select the Portal Menu
  2. Select Microsoft Defender for Cloud
  3. Then Environment Settings
  4. Select a subscription
  5. Then Auto Provisioning in the left column.
  6. Ensure that Microsoft Defender for Containers components is set to On

Repeat the above for any additional subscriptions.


From Azure Portal

  1. From Azure Home select the Portal Menu.
  2. Select Microsoft Defender for Cloud.
  3. Then Environment Settings.
  4. Select a subscription.
  5. Set Containers to On.
  6. Click Save.