After the AWS account is connected, operators expect Defender for Servers alerts on every EC2 instance immediately. What should the engineer explain?
Select an answer to reveal the explanation.
Short Explanation
Connecting AWS turns on the posture flashlight—CSPM recommendations. Defender for Servers–style workload protection is a separate light switch you still have to flip on that connected account.
Full Explanation
Connecting AWS or GCP to Microsoft Defender for Cloud enables multi-cloud CSPM recommendations for the connected environment. Workload protection plans (for example Servers or SQL) are additional enablement steps on that connected account and are not implied by the connector alone. Understanding CSPM versus CWPP enablement prevents false expectations after onboarding.