4.2.1. Microsoft Defender for Cloud
💡 First Principle: Microsoft Defender for Cloud is Microsoft's unified cloud security platform, combining posture management (finding and prioritizing misconfigurations) with active workload protection (detecting real threats against running resources) — and critically, it does this across Azure, AWS, and Google Cloud, not just Azure.
Its central dashboard surfaces a secure score, a single number summarizing how well an environment follows security best practices, alongside prioritized recommendations to improve it — giving security teams a concrete, ranked action list instead of a wall of raw findings.
⚠️ Exam Trap: Despite the "Azure" branding association, Defender for Cloud is explicitly multicloud — it protects AWS and Google Cloud workloads too, not just Azure resources.
Reflection Question: Why would a company running workloads across Azure and AWS still want a single security posture tool, rather than one tool per cloud provider?
