Remediation

From Azure Portal

1. Go to Microsoft Defender for Cloud.
2. Under Management, select Environment Settings.
3. Click the name of a subscription.
4. Select the Defender plans blade.
5. Under Cloud Workload Protection (CWP), in the row for APIs, set the toggle switch for Status to On.
6. Select a plan.
7. Click Save to save the plan selection.
8. Click Save to enable Defender for APIs.

From Azure CLI

Run the following command to enable Defender for APIs:

az security pricing create --name Api --tier Standard --subplan <subplan>

Valid subplan values: P1, P2, P3, P4, and P5.

From PowerShell

Run the following command to enable Defender for APIs:

Set-AzSecurityPricing -Name Api -PricingTier Standard -SubPlan <subplan>

Valid SubPlan values: P1, P2, P3, P4, and P5.