Bojan Magusic

Cloud security posture and contextualization across cloud boundaries from a single dashboard

Introduction:   Have you ever found yourself in a situation where you wanted to prioritize the riskiest misconfigurations on cloud workloads across Azure, AWS, and GCP? Have you ever wondered how to implement a unified dashboard for cloud security posture across a multicloud environment?   This article covers how you can achieve these scenarios by using […]

Cloud security posture and contextualization across cloud boundaries from a single dashboard Continue Reading

How to better manage cost of API calls that Defender for Cloud makes to AWS

Introduction:   Have you ever found yourself in a situation where you enabled GuardDuty or CloudTrail on Amazon Web Service (AWS) and onboarded your AWS environment to Microsoft Defender for Cloud? Have you ever wondered how to minimize costs in AWS associated with having GuardDuty  or CloudTrail enabled, while Defender for Cloud makes API calls to

How to better manage cost of API calls that Defender for Cloud makes to AWS Continue Reading

Continuous Export as Trusted Service to Event Hub

Introduction: Have you ever found yourself in a situation where you needed to stream Microsoft Defender for Cloud data to another system? Microsoft Defender for Cloud provides the option of streaming data like recommendations and security alerts, to a Log Analytics workspace, event hub, or another SIEM solution. This capability is called continuous export. Imagine

Continuous Export as Trusted Service to Event Hub Continue Reading

Creating custom recommendations & standards for AWS/GCP workloads with Microsoft Defender for Cloud

Introduction: Have you ever found yourself in a situation where you wanted to determine which AWS resources are missing a tag? You can accomplish this use case using custom recommendations for AWS workloads in Defender for Cloud. The following steps solve the problem of creating a custom recommendation that identifies which Amazon RDS instances are

Creating custom recommendations & standards for AWS/GCP workloads with Microsoft Defender for Cloud Continue Reading

Onboarding your AWS/GCP environment to Microsoft Defender for Cloud with Terraform

Objective  The purpose of this article is to provide you with step-by-step guidance on how to use Terraform templates, to onboard your AWS/GCP environment to Microsoft Defender for Cloud. Terraform is an Infrastructure as Code (IaC) tool you can use to build, change, and version your public cloud infrastructure safely and efficiently. In addition to

Onboarding your AWS/GCP environment to Microsoft Defender for Cloud with Terraform Continue Reading