Microsoft.Security/policies GET endpoint returning 404 — deprecated? What is the replacement?

Hi,

We are using the Azure Security Center REST API (api-version=2015-06-01-preview) to retrieve security policies for a subscription. We are hitting a 404 Not Found error on the Get endpoint while the List

endpoint works fine. Looking for clarification on whether this resource type has been deprecated and what the modern replacement is.

---

Endpoints in use

List Security Policies (WORKING):

GET https://management.azure.com/subscriptions/{subscriptionId}/providers/microsoft.Security/policies?api-version=2015-06-01-preview

This returns a valid JSON response with an array of policies, each having an id, name, type, and a properties object containing policyLevel, recommendations, pricingConfiguration,

securityContactConfiguration, etc.

Get Security Policy by Name (BROKEN):

GET https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Security/policies/{policyName}?api-version=2015-06-01-preview

---

Error received

Not Found for url:

https://management.azure.com/subscriptions/<sub-id>/resourceGroups/AzureEventHubIT-resource-group/providers/Microsoft.Security/policies/AzureEventHubIT-resource-group?api-version=2015-06-01-preview

HTTP Status: 404 Not Found

---

What we've observed

- The List endpoint works and returns policies whose id values follow this exact structure:

/subscriptions/{sub-id}/resourceGroups/{rg-name}/providers/microsoft.Security/policies/{policy-name}

- The policy name in the List response matches the resource group name (1:1 mapping), so we are passing the correct value to the Get endpoint.

- Despite using the exact name and resource group from the List response, the Get endpoint returns 404.

- We also checked the https://learn.microsoft.com/en-us/rest/api/defenderforcloud/operation-groups?view=rest-defenderforcloud-2015-06-01-preview and noticed that Security Policies does not appear as a

documented operation group in any version — including 2015-06-01-preview. The only documented groups for that version are: Discovered Security Solutions, Locations, Operations, and Tasks.

---

Questions

1. Has the Microsoft.Security/policies resource type at the resource group scope been officially deprecated or removed? If so, is there a migration guide or announcement?

2. Why does the List endpoint still respond successfully while the individual Get endpoint returns 404? Is the List endpoint returning legacy/cached data?

3. What are the recommended replacement APIs for the functionality that was in the old policies resource? Specifically we need equivalents for:

- properties.pricingConfiguration → Is this now covered by https://learn.microsoft.com/en-us/rest/api/defenderforcloud/pricings/get?view=rest-defenderforcloud-2024-01-01?

- properties.recommendations (patch, antimalware, diskEncryption, etc.) → Is this now https://learn.microsoft.com/en-us/rest/api/defenderforcloud/assessments?view=rest-defenderforcloud-2020-01-01?

- properties.securityContactConfiguration → Is this now Microsoft.Security/securityContacts (2020-01-01-preview)?

4. Is there any announced retirement date for the List endpoint as well?

Any official documentation links or migration guides would be very helpful.

Thank you.