I m trying to enable azure defender for cloud plans using a custom initiative with multiple policies using yaml. Plan gets enabled but the option of subPlan does not get applied. For eg for ARM i would like to use "PerSubscription" but it sticks to the default "perAPI Call" plan. Using below as reference
.html
here is my yaml. can anyone suggest what is missing here in setting the subPlan?
name: "azlz-configure microsoft defender for cloud plans"
display_name: AZ LZ Microsoft Defender for Cloud plans
description: AZ LZ Configure Microsoft Defender for Cloud plans
policies:
deployDefenderArm:
type: "BuiltIn"
id: b7021b2b-08fd-4dc0-9de7-3c6ece09faf9
default:
parameters:
subPlan:
value: "PerSubscription"