1. Microsoft Learn. "Connect your AWS account to Microsoft Defender for Cloud." Microsoft Docs. This document outlines the capabilities of the native AWS connector. In the "Select the plans" section
it explicitly lists the supported plans for an Arc-less connection:
"The Servers plan brings threat detection and advanced defenses to your Windows and Linux EC2 instances." (Supports option C)
"The Containers plan brings threat detection and advanced defenses to your Amazon EKS clusters." (Supports option E)
The foundational Cloud Security Posture Management (CSPM) is enabled by default
which assesses resources and provides recommendations. The underlying mechanism for these recommendations in Azure is Azure Policy. (Supports option D)
2. Microsoft Learn. "Overview of Microsoft Defender for Servers." Microsoft Docs. Under the "Feature support in multicloud environments" section
the table shows that for AWS machines
features like integration with Microsoft Defender for Endpoint and vulnerability assessment are available "Without Azure Arc".
3. Microsoft Learn. "Overview of Microsoft Defender for Containers." Microsoft Docs. The "Multicloud support" section states
"Defender for Containers helps you secure your containers in... Amazon Web Services: Amazon EKS clusters (agentless discovery for Kubernetes
agentless vulnerability assessment
and runtime threat protection)." This confirms support for AWS without dependency on Azure Arc for these features.
