Blog post updated on April 11th, 2023.
You are about to enable Microsoft Defender for Storage across your tenant but need to have a price estimation to share with your team to ensure it fits the team’s budget and share the results with the CISO for approval. Although the Azure pricing calculator makes it easy to do it, you still need to figure out how many transactions you are doing in your Storage Accounts in order to have a more accurate estimation.
Microsoft Defender for Cloud offers a per-storage account plan for Defender for Storage. If you want to know which one fits best in your environment, check our workbook to analyze your environment.
Note: Resources protected before March 28, 2023, are protected by Defender for Storage (classic) plan. Customers who protected storage accounts prior to this (under the per-transaction or per-storage account plans) are encouraged to migrate to the new plan to enjoy enhanced capabilities. Please note that after March 28, 2023, all new subscriptions created through the Azure portal will enable the new Defender for Storage (per-storage account plan) by default. Learn about migrating to the new plan.
|
The pricing estimation dashboard makes it easy to estimate the cost of Defender for Storage and then share it with your team.
The pricing estimation dashboard is useful when you need a more accurate estimation without manually extracting the input and entering it into the Azure pricing calculator.
You deploy the dashboard directly to your environment from Microsoft-Defender-for-Cloud/Workbooks/Microsoft Defender for Storage Price Estimation.
While this workbook will help you to accomplish this task, there are some prerequisites that you must be aware of, as described in the next section.
To properly use this workbook you will need the following:
It is now easier to estimate the cost of Defender for Storage for each of your subscriptions. The cost of Defender for Storage is based on the number of storage accounts within a subscription. Storage accounts that have less than 73 million monthly transactions, are billed at $10 USD each. Storage accounts with higher transaction volume (above 73M monthly transactions) will experience an overage charge of $0.1492 per additional 1 million transactions.
This PowerShell script helps you enumerate all storage accounts in your environment and get the transaction metrics for the last week. |
To pull Blob and File Transactions from each Storage Account in larger subscriptions or across a tenant use this PowerShell script. The Price Estimation used in the script is calculated differently from the workbook described in this blog post.
Note: Resources protected before March 28, 2023, are protected by Defender for Storage (classic) plan. Customers who protected storage accounts prior to this (under the per-transaction or per-storage account plans) are encouraged to migrate to the new plan to enjoy enhanced capabilities. Please note that after March 28, 2023, all new subscriptions created through the Azure portal will enable the new Defender for Storage (per-storage account plan) by default Learn about migrating to the new plan.
|
By selecting a subscription, your Storage Accounts will be listed (with and without Microsoft Defender for Storage). Once this happens, all File Transactions and Blob Transactions from the last seven days will be retrieved. In the equation, discounts are not considered; it is the official price listed in the Microsoft Defender for Cloud pricing site ($0.02/10K transactions).
For a month, we use the 7-day behavior in both File and Blob Transactions to get an approximation of how a normal day looks like; then, this is multiplied by thirty days. Finally, with the official price listed in the Microsoft Defender for Cloud pricing site ($0.02/10K transactions), we estimate the monthly price using the 30-day estimated transactions.
Contributors: Rogério Barros, Hasan Abo-Shally, Fernanda Vela, Dick Lake, Shay Amar, Daniela Villareal, Eitan Shteinberg
Reviewer: Yuri Diogenes
References:
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.