Microsoft announced GA release of Defender for Cloud support for Azure Container Apps, adding posture management for serverless container workloads.

Microsoft has announced the general availability of Defender for Cloud support for Azure Container Apps, extending its security posture management to serverless container workloads.

What is Azure Container Apps?

Azure Container Apps is a fully managed, serverless platform that lets developers run microservices and containerized applications without managing underlying infrastructure. It automatically scales based on demand and integrates with other Azure services.

Defender for Cloud Integration

The new integration enables continuous security assessment of container configurations, runtime behavior, and network exposure. Defender for Cloud now provides recommendations, alerts, and compliance reports tailored to the serverless container model.

Key Capabilities

  • Automated vulnerability scanning of container images stored in Azure Container Registry.
  • Real‑time detection of suspicious activity and anomalous network traffic.
  • Compliance dashboards aligned with industry standards such as CIS and PCI DSS.
  • Integration with Azure Policy to enforce security baselines across deployments.

These capabilities help organizations maintain a secure posture for workloads that dynamically scale and often operate without a fixed compute footprint.

Getting Started

To enable Defender for Cloud on Azure Container Apps, users navigate to the Defender for Cloud portal, select the "Serverless Containers" option, and follow the guided setup. Existing Container Apps are automatically enrolled, and security findings appear in the unified security center.

Microsoft recommends pairing this with Azure Monitor logs and Azure Policy for a comprehensive security strategy.

For more details, see the AzureCharts coverage of Defender for Cloud support for Azure Container Apps.