Implementing and Managing Microsoft Defender for Cloud Apps

Microsoft Defender for Cloud Apps (MDA) is the cloud access security broker (CASB) in Microsoft 365 Defender. Simply put, it sits between your users and their access to websites, cloud apps, software as a service (SaaS), and infrastructure as a service (IaaS). As apps, services, and infrastructure have moved to the cloud, the level of visibility and control we have over them has, in some cases, been reduced. This is where MDA steps in, enhancing that visibility and giving us the means to also control what previously couldn’t be in our SaaS and IaaS.

In Chapter 2, you learned about the many capabilities MDA has at a high level and, in this chapter, we’ll explore things in more detail. You’ll leave this chapter knowing how to do the following:

• Customize MDA settings for your environment
• Manage shadow IT discovery
• Connect apps for investigation and governance, then implement session policies...