Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
The Defender Cloud Security Posture Management (CSPM) plan in Microsoft Defender for Cloud helps you secure your generative AI apps. It scans AI artifacts, such as container images and code repositories, to find known vulnerabilities in AI libraries.
In this article, you use the cloud security explorer in Defender for Cloud to find containers running vulnerable generative AI images and to identify vulnerable code repositories that provision Azure OpenAI. After you complete these steps, you can review findings and remediate recommendations.
Prerequisites
Before you begin, make sure you meet the following prerequisites:
Read about AI security posture management.
Learn more about investigating risks with the cloud security explorer and attack paths.
You need a Microsoft Azure subscription. If you don't have an Azure subscription, you can sign up for a free subscription.
Enable Defender Cloud Security Posture Management (CSPM) on your Azure subscription.
Have at least one Azure OpenAI resource, with at least one model deployment connected to it via Azure AI Foundry portal.
Identify containers running on vulnerable generative AI container images
Use the cloud security explorer to find containers that run generative AI images with known vulnerabilities.
Sign in to the Azure portal.
Search for and select Microsoft Defender for Cloud > Cloud Security Explorer.
Select the Container running container images with known Generative AI vulnerabilities query template.
Select Search.
Select a result to review its details.
Select a node to review the findings.
In the insights section, select a CVE ID from the drop-down menu.
Select Open the vulnerability page.
Identify vulnerable generative AI code repositories
Use the cloud security explorer to find vulnerable generative AI code repositories that provision Azure OpenAI.
Sign in to the Azure portal.
Search for and select Microsoft Defender for Cloud > Cloud Security Explorer.
Select the Generative AI vulnerable code repositories that provision Azure OpenAI query template.
Select Search.
Select a result to review its details.
Select a node to review the findings.
In the insights section, select a CVE ID from the drop-down menu.
Select Open the vulnerability page.
