Microsoft Security Tech Accelerator
Dec 06 2023, 07:00 AM - 12:00 PM (PST)
Microsoft Tech Community

Suppression Rules


Is there a way to automate suppression rules in Defender for Cloud? Or is this operation only done manually in the portal? 

4 Replies
Hi Stanislav, thanks so much for your input. I am working with a customer with so many subscriptions with defender for cloud enabled. They are wondering if there is an ARM template available where they can automatically suppress rules across subscriptions instead of having to manually do it on the portal.
I don't think we have anything like this ready to use. Please check out our github repo for all available artifacts:
Okay thank you. Is there a logic App playbook template available that closes out alerts in Defender for Cloud? I couldn't find anything in GitHub.