Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community
Microsoft Defender for Storage – Price Estimation Dashboard
Published Jun 09 2021 05:15 AM 24.4K Views
Microsoft

Blog post updated on April 11th, 2023.

 

You are about to enable Microsoft Defender for Storage across your tenant but need to have a price estimation to share with your team to ensure it fits the team’s budget and share the results with the CISO for approval. Although the Azure pricing calculator makes it easy to do it, you still need to figure out how many transactions you are doing in your Storage Accounts in order to have a more accurate estimation.

 

Microsoft Defender for Cloud offers a per-storage account plan for Defender for Storage. If you want to know which one fits best in your environment, check our workbook to analyze your environment. 

 

 

Note: Resources protected before March 28, 2023, are protected by Defender for Storage (classic) plan. Customers who protected storage accounts prior to this (under the per-transaction or per-storage account plans) are encouraged to migrate to the new plan to enjoy enhanced capabilities. Please note that after March 28, 2023, all new subscriptions created through the Azure portal will enable the new Defender for Storage (per-storage account plan) by default. Learn about migrating to the new plan.

 

 

The pricing estimation dashboard makes it easy to estimate the cost of Defender for Storage and then share it with your team. 

 

The pricing estimation dashboard is useful when you need a more accurate estimation without manually extracting the input and entering it into the Azure pricing calculator

 

You deploy the dashboard directly to your environment from Microsoft-Defender-for-Cloud/Workbooks/Microsoft Defender for Storage Price Estimation

 

Fernanda_Vela_14-1681240128650.png

 

 

Fernanda_Vela_15-1681240128660.png

 

 

Fernanda_Vela_16-1681240128669.png

 

 

 

 

 

While this workbook will help you to accomplish this task, there are some prerequisites that you must be aware of, as described in the next section.

 

Prerequisites

To properly use this workbook you will need the following:

  • Storage Accounts with at least 7 days of transactions up to the day you will deploy the workbook
  • Use supported storage types, such as Blob Storage, Azure Files, Azure Data Lake Storage Gen2
  • Have your storage account in Azure Commercial clouds or US Gov (transaction-based only)
  • At least Workbook Contributor permissions on the targeted resource group to save the workbook

 

How it works

 

Defender for Storage

It is now easier to estimate the cost of Defender for Storage for each of your subscriptions. The cost of Defender for Storage is based on the number of storage accounts within a subscription. Storage accounts that have less than 73 million monthly transactions, are billed at $10 USD each. Storage accounts with higher transaction volume (above 73M monthly transactions) will experience an overage charge of $0.1492 per additional 1 million transactions.

 

Fernanda_Vela_17-1681240128673.png

 

 

 

This PowerShell script helps you enumerate all storage accounts in your environment and get the transaction metrics for the last week.

 

Calculating across several large subscriptions or a tenant

To pull Blob and File Transactions from each Storage Account in larger subscriptions or across a tenant use this PowerShell script. The Price Estimation used in the script is calculated differently from the workbook described in this blog post.

 

 

Defender for Storage (classic)

 

 

Note: Resources protected before March 28, 2023, are protected by Defender for Storage (classic) plan. Customers who protected storage accounts prior to this (under the per-transaction or per-storage account plans) are encouraged to migrate to the new plan to enjoy enhanced capabilities. Please note that after March 28, 2023, all new subscriptions created through the Azure portal will enable the new Defender for Storage (per-storage account plan) by default Learn about migrating to the new plan.

 

 

By selecting a subscription, your Storage Accounts will be listed (with and without Microsoft Defender for Storage). Once this happens, all File Transactions and Blob Transactions from the last seven days will be retrieved. In the equation, discounts are not considered; it is the official price listed in the Microsoft Defender for Cloud pricing site ($0.02/10K transactions).

 

Fernanda_Vela_18-1681240128674.png

 

 

 

For a month, we use the 7-day behavior in both File and Blob Transactions to get an approximation of how a normal day looks like; then, this is multiplied by thirty days. Finally, with the official price listed in the Microsoft Defender for Cloud pricing site ($0.02/10K transactions), we estimate the monthly price using the 30-day estimated transactions.

 

Fernanda_Vela_19-1681240128675.png

 

 

 

Known Issues

  • Azure Monitor Metrics data backends have limits and probably the number of requests to fetch data across Storage Accounts might time out. To solve this, you will need to narrow the scope (reduce the selected Storage Accounts).
  • Errors might reflect by showing 0 transactions in Files and Blobs. To verify this error, go to Edit Mode and the "Timed out" message will be displayed in the query.

Fernanda_Vela_20-1681240128676.jpeg

 

 

 

 

ContributorsRogério BarrosHasan Abo-ShallyFernanda Vela, Dick Lake, Shay Amar, Daniela Villareal, Eitan Shteinberg

Reviewer: Yuri Diogenes

 

 

References:

 

 

 

 

3 Comments
Co-Authors
Version history
Last update:
‎Mar 14 2024 06:59 AM
Updated by: