Microsoft.Security/defenderForStorageSettings[2025-09-01-preview]

specification/security/resource-manager/Microsoft.Security/preview/2025-09-01-preview/examples/DefenderForStorage/CancelMalwareScan_example.json

@@ -0,0 +1,19 @@
+{
+  "parameters": {
+    "api-version": "2025-09-01-preview",
+    "resourceId": "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/SampleRG/providers/Microsoft.Storage/storageAccounts/samplestorageaccount",
+    "settingName": "current",
+    "scanId": "latest"
+  },
+  "responses": {
+    "200": {
+      "body": {
+        "properties": {
+          "scanId": "3fd3c1be-dbff-4d6e-985f-43f9ec1b1146",
+          "scanStatus": "Canceling",
+          "scanStatusMessage": "The scan request is being canceled upon user request"
+        }
+      }
+    }
+  }
+}

specification/security/resource-manager/Microsoft.Security/preview/2025-09-01-preview/examples/DefenderForStorage/GetDefenderForStorageSettings_example.json

@@ -0,0 +1,44 @@
+{
+  "parameters": {
+    "api-version": "2025-09-01-preview",
+    "resourceId": "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/SampleRG/providers/Microsoft.Storage/storageAccounts/samplestorageaccount",
+    "settingName": "current"
+  },
+  "responses": {
+    "200": {
+      "body": {
+        "id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/SampleRG/providers/Microsoft.Storage/storageAccounts/samplestorageaccount/providers/Microsoft.Security/defenderForStorageSettings/current",
+        "name": "current",
+        "type": "Microsoft.Security/defenderForStorageSettings",
+        "properties": {
+          "isEnabled": true,
+          "malwareScanning": {
+            "onUpload": {
+              "isEnabled": true,
+              "capGBPerMonth": 10000,
+              "filters": {
+                "excludeBlobsWithPrefix": [
+                  "sample-container/logs",
+                  "single-excluded-container/",
+                  "excluded-containers"
+                ],
+                "excludeBlobsWithSuffix": [
+                  ".log",
+                  ".jpg"
+                ],
+                "excludeBlobsLargerThan": 1024
+              }
+            },
+            "scanResultsEventGridTopicResourceId": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/SampleRG/providers/Microsoft.EventGrid/topics/sampletopic",
+            "blobScanResultsOptions": "BlobIndexTags",
+            "automatedResponse": "BlobSoftDelete"
+          },
+          "sensitiveDataDiscovery": {
+            "isEnabled": true
+          },
+          "overrideSubscriptionLevelSettings": true
+        }
+      }
+    }
+  }
+}

specification/security/resource-manager/Microsoft.Security/preview/2025-09-01-preview/examples/DefenderForStorage/GetMalwareScan_example.json

@@ -0,0 +1,37 @@
+{
+  "parameters": {
+    "api-version": "2025-09-01-preview",
+    "resourceId": "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/SampleRG/providers/Microsoft.Storage/storageAccounts/samplestorageaccount",
+    "settingName": "current",
+    "scanId": "latest"
+  },
+  "responses": {
+    "200": {
+      "body": {
+        "properties": {
+          "scanId": "0ce362c5-87a5-4030-ba6a-109566cd7b3d",
+          "scanStatus": "Completed",
+          "scanStartTime": "2025-09-01T12:20:14.6364816Z",
+          "scanEndTime": "2025-09-01T12:21:17.5648386Z",
+          "scanSummary": {
+            "blobs": {
+              "totalBlobsScanned": 40,
+              "maliciousBlobsCount": 10,
+              "skippedBlobsCount": 0,
+              "failedBlobsCount": 0,
+              "scannedBlobsInGB": 0.019550956785678864
+            },
+            "files": {
+              "totalFilesScanned": 150,
+              "maliciousFilesCount": 2,
+              "skippedFilesCount": 0,
+              "failedFilesCount": 0,
+              "scannedFilesInGB": 10.5
+            },
+            "estimatedScanCostUSD": 0.0029326435178518295
+          }
+        }
+      }
+    }
+  }
+}

specification/security/resource-manager/Microsoft.Security/preview/2025-09-01-preview/examples/DefenderForStorage/PutDefenderForStorageSettings_example.json

@@ -0,0 +1,109 @@
+{
+  "parameters": {
+    "api-version": "2025-09-01-preview",
+    "resourceId": "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/SampleRG/providers/Microsoft.Storage/storageAccounts/samplestorageaccount",
+    "settingName": "current",
+    "defenderForStorageSetting": {
+      "properties": {
+        "isEnabled": true,
+        "malwareScanning": {
+          "onUpload": {
+            "isEnabled": true,
+            "capGBPerMonth": 10000,
+            "filters": {
+              "excludeBlobsWithPrefix": [
+                "unscanned-container",
+                "sample-container/logs"
+              ],
+              "excludeBlobsWithSuffix": [
+                ".log",
+                ".jpg"
+              ],
+              "excludeBlobsLargerThan": 1024
+            }
+          },
+          "scanResultsEventGridTopicResourceId": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/SampleRG/providers/Microsoft.EventGrid/topics/sampletopic",
+          "blobScanResultsOptions": "BlobIndexTags",
+          "automatedResponse": "BlobSoftDelete"
+        },
+        "sensitiveDataDiscovery": {
+          "isEnabled": true
+        },
+        "overrideSubscriptionLevelSettings": true
+      }
+    }
+  },
+  "responses": {
+    "200": {
+      "body": {
+        "id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/SampleRG/providers/Microsoft.Storage/storageAccounts/samplestorageaccount/providers/Microsoft.Security/defenderForStorageSettings/current",
+        "type": "Microsoft.Security/defenderForStorageSettings",
+        "name": "current",
+        "properties": {
+          "isEnabled": true,
+          "malwareScanning": {
+            "onUpload": {
+              "isEnabled": true,
+              "capGBPerMonth": 10000,
+              "filters": {
+                "excludeBlobsWithPrefix": [
+                  "sample-container/logs",
+                  "single-excluded-container/",
+                  "excluded-containers"
+                ],
+                "excludeBlobsWithSuffix": [
+                  ".log",
+                  ".jpg"
+                ],
+                "excludeBlobsLargerThan": 1024
+              }
+            },
+            "scanResultsEventGridTopicResourceId": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/SampleRG/providers/Microsoft.EventGrid/topics/sampletopic",
+            "blobScanResultsOptions": "BlobIndexTags",
+            "automatedResponse": "BlobSoftDelete",
+            "operationStatus": {
+              "code": "Succeeded"
+            }
+          },
+          "sensitiveDataDiscovery": {
+            "isEnabled": true,
+            "operationStatus": {
+              "code": "Succeeded"
+            }
+          },
+          "overrideSubscriptionLevelSettings": true
+        }
+      }
+    },
+    "201": {
+      "body": {
+        "id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/SampleRG/providers/Microsoft.Storage/storageAccounts/samplestorageaccount/providers/Microsoft.Security/defenderForStorageSettings/current",
+        "type": "Microsoft.Security/defenderForStorageSettings",
+        "name": "current",
+        "properties": {
+          "isEnabled": true,
+          "malwareScanning": {
+            "onUpload": {
+              "isEnabled": false,
+              "capGBPerMonth": -1
+            },
+            "blobScanResultsOptions": "BlobIndexTags",
+            "automatedResponse": "None",
+            "operationStatus": {
+              "code": "PartialSuccess",
+              "message": "Failed to setup data scanner."
+            }
+          },
+          "sensitiveDataDiscovery": {
+            "isEnabled": false,
+            "operationStatus": {
+              "code": "PartialSuccess",
+              "message": "Failed to setup data scanner."
+            }
+          },
+          "overrideSubscriptionLevelSettings": true
+        }
+      }
+    }
+  }
+}

specification/security/resource-manager/Microsoft.Security/preview/2025-09-01-preview/examples/DefenderForStorage/StartMalwareScan_example.json

@@ -0,0 +1,18 @@
+{
+  "parameters": {
+    "api-version": "2025-09-01-preview",
+    "resourceId": "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/SampleRG/providers/Microsoft.Storage/storageAccounts/samplestorageaccount",
+    "settingName": "current"
+  },
+  "responses": {
+    "200": {
+      "body": {
+        "properties": {
+          "scanId": "fc831479-412f-4bc2-8333-a8edda751a80",
+          "scanStatus": "Queued",
+          "scanStatusMessage": "The scan request has been queued for scanning"
+        }
+      }
+    }
+  }
+}

specification/security/resource-manager/Microsoft.Security/preview/2025-09-01-preview/examples/Operations/ListOperations_example.json

@@ -0,0 +1,43 @@
+{
+  "parameters": {
+    "api-version": "2025-09-01-preview"
+  },
+  "responses": {
+    "200": {
+      "body": {
+        "value": [
+          {
+            "name": "Microsoft.Security/defenderforstoragesettings/read",
+            "display": {
+              "provider": "Microsoft Security",
+              "resource": "DefenderForStorageSettings",
+              "operation": "Get defenderForStorageSettings",
+              "description": "Gets the defenderforstoragesettings for the scope"
+            },
+            "origin": "user"
+          },
+          {
+            "name": "Microsoft.Security/defenderforstoragesettings/write",
+            "display": {
+              "provider": "Microsoft Security",
+              "resource": "DefenderForStorageSettings",
+              "operation": "Update defenderForStorageSettings",
+              "description": "Creates or updates the defenderforstoragesettings for the scope"
+            },
+            "origin": "user"
+          },
+          {
+            "name": "Microsoft.Security/defenderforstoragesettings/delete",
+            "display": {
+              "provider": "Microsoft Security",
+              "resource": "DefenderForStorageSettings",
+              "operation": "Delete defenderForStorageSettings",
+              "description": "Deletes the defenderforstoragesettings for the scope"
+            },
+            "origin": "user"
+          }
+        ]
+      }
+    }
+  }
+}

specification/security/resource-manager/Microsoft.Security/preview/2025-09-01-preview/operations.json

@@ -0,0 +1,74 @@
+{
+  "swagger": "2.0",
+  "info": {
+    "title": "Microsoft Defender for Cloud",
+    "description": "API spec for Microsoft.Security (Microsoft Defender for Cloud) resource provider",
+    "version": "2025-09-01-preview"
+  },
+  "host": "management.azure.com",
+  "schemes": [
+    "https"
+  ],
+  "consumes": [
+    "application/json"
+  ],
+  "produces": [
+    "application/json"
+  ],
+  "security": [
+    {
+      "azure_auth": [
+        "user_impersonation"
+      ]
+    }
+  ],
+  "securityDefinitions": {
+    "azure_auth": {
+      "type": "oauth2",
+      "authorizationUrl": "https://login.microsoftonline.com/common/oauth2/authorize",
+      "flow": "implicit",
+      "description": "Azure Active Directory OAuth2 Flow",
+      "scopes": {
+        "user_impersonation": "impersonate your user account"
+      }
+    }
+  },
+  "paths": {
+    "/providers/Microsoft.Security/operations": {
+      "get": {
+        "x-ms-examples": {
+          "List the operations for the Microsoft.Security (Microsoft Defender for Cloud) resource provider": {
+            "$ref": "./examples/Operations/ListOperations_example.json"
+          }
+        },
+        "tags": [
+          "Operations"
+        ],
+        "description": "Exposes all available operations for discovery purposes.",
+        "operationId": "Operations_List",
+        "parameters": [
+          {
+            "$ref": "../../../../../common-types/resource-management/v6/types.json#/parameters/ApiVersionParameter"
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "OK",
+            "schema": {
+              "$ref": "../../../../../common-types/resource-management/v6/types.json#/definitions/OperationListResult"
+            }
+          },
+          "default": {
+            "description": "Error response describing why the operation failed.",
+            "schema": {
+              "$ref": "../../../../../common-types/resource-management/v6/types.json#/definitions/ErrorResponse"
+            }
+          }
+        },
+        "x-ms-pageable": {
+          "nextLinkName": "nextLink"
+        }
+      }
+    }
+  }
+}

specification/security/resource-manager/readme.md

@@ -141,6 +141,8 @@ These settings apply only when `--tag=package-preview-2025-09-01-preview` is spe
 
 ```yaml $(tag) == 'package-preview-2025-09-01-preview'
 input-file:
+  - Microsoft.Security/preview/2025-09-01-preview/defenderForStorageSettings.json
+  - Microsoft.Security/preview/2025-09-01-preview/operations.json
   - Microsoft.Security/preview/2025-09-01-preview/privateLinks.json
 ```
 
@@ -664,6 +666,7 @@ input-file:
 - Microsoft.Security/preview/2024-08-01-preview/securityConnectors.json
 - Microsoft.Security/preview/2025-05-04-preview/assessmentMetadata.json
 - Microsoft.Security/preview/2025-05-04-preview/assessments.json
+- Microsoft.Security/preview/2025-09-01-preview/defenderForStorageSettings.json
 - Microsoft.Security/preview/2025-11-01-preview/securityConnectorsDevOps.json
 - Microsoft.Security/preview/2025-10-01-preview/operations.json
 - Microsoft.Security/preview/2025-10-01-preview/operationResults.json
@@ -690,7 +693,6 @@ input-file:
 - Microsoft.Security/stable/2024-08-01/securityStandards.json
 - Microsoft.Security/stable/2024-08-01/standardAssignments.json
 - Microsoft.Security/stable/2024-08-01/customRecommedations.json
-- Microsoft.Security/stable/2025-06-01/defenderForStorageSettings.json
 - Microsoft.Security/stable/2026-01-01/privateLinks.json
 
 # Autorest suppressions