Microsoft defender for Endpoint network best practices

Any best practices out there around network configuration of MDE for Windows Server workloads in AWS and Azure. Also, should networking settings differ based on server workload i.e. database server or SAP application vs domain controller.