Microsoft Defender for Cloud - CIEM Dashboard
This repository provides CIEM Dashboard of Microsoft Defender for Cloud.
Microsoft Defender for Cloud provides two security recommendations about CIEM (Cloud Infrastructure Entitlement Management).
| Recommendations | Severity | Detail |
|---|---|---|
| Azure overprovisioned identities should have only the necessary permissions | Medium | Overprovisioned identities in Azure are those that have been granted more permissions than they use, which can lead to potential misuse, either accidentally or maliciously. |
| Permissions of inactive identities in your Azure subscription should be revoked | Medium | Microsoft Defender for Cloud discovered an identity that has not performed any action on any resource within your Azure subscription in the past 45 days. It is recommended to revoke permissions of inactive identities, in order to reduce the attack surface of your cloud environment. |
Workbook visual images
How to install MDC CIEM dashboard on your environment
Two files are posted. You can install Wrokbooks of Microsoft Defender for Cloud via Gallary Template or ARM Template.
- Defender CSPM - CIEM Dasboard.workbook
- Defender CSPM - CIEM Dasboard.json