AMA: Microsoft Defender for Cloud

How does defender for Cloud protect Sensitive data when the data may reside on a non-Microsoft system. Example Mac laptop, Linux server/desktop, non-Microsoft SaaS application, Storage Appliance etc...

Is there a solution on the road map for Defender for Containers Vulnerability Assessment not cleaning up S3 buckets or resources after an EKS is deleted?

We want to configure cloud capabilities based on risk of the user and endpoint (block downloads to an unregistered device for example). This requires a robust integration between the CASB and solution. What are MS’ plans to grow their solution integration capabilities?

Are there plans to fix AWS account names not showing up consistently for AWS accounts or the ability to rename the accounts?

Are there plans to have a more granular way to permit users to Defender for Cloud Environments and recommendations? For example, If I want an application team to just have access to a subset of AWS, GCP, or Azure accounts/projects/subscriptions?

Does DFC scan or integrate with Purview to detect and scan data and sensitive information?

We're halfway through today's Defender for Cloud AMA. Keep your questions coming. Thanks!

Are there any plans to add the ability to add tags within the Defender for Cloud AWS Connector wizard to add tags to the StackSet script that's generated?

How does licensing work for Defender for Servers through MDFC? e.g., I have an enterprise MDFE P2 licence and now want to migrate my workloads to Azure, how is the license affected / what's the process for returning the MDFE licence to the pool to use the native MDFC Plan 1 or 2 to deploy the MDFE agent seamlessly? Will they get charged twice?