search

MicrosoftDocs / azure-docs

Open source documentation of Microsoft Azure
https://docs.microsoft.com/azure
Creative Commons Attribution 4.0 International
10.2k stars 21.35k forks source link

Azure Monitor Agent migration document is out of date? #124288

Open justinmontgomeryCF opened 2 weeks ago

justinmontgomeryCF commented 2 weeks ago

https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-migration

This article has several notes on migration issues, including: "Microsoft Defender for cloud: is moving to an agent-less solution. Some features will not be ready by the deprecation date. Customers should stay on MMA for machines that use File Integrity Monitoring (FIM), Endpoint protection discovery recommendations, OS Misconfigurations (Azure Security Benchmark (ASB) recommendations) and Adaptive Application controls."

This claims that the Defender for Cloud's agentless ability will not be ready by the time of MMA deprecation (August 31 2024). Is that still true? Looking at these, FIM, Endpoint protection discovery, etc. their own documentation claims that they are being migrated in August 2024 as well to the agentless Defender.

https://learn.microsoft.com/en-us/azure/defender-for-cloud/prepare-deprecation-log-analytics-mma-agent https://learn.microsoft.com/en-us/azure/defender-for-cloud/file-integrity-monitoring-enable-ama

I think the Update Management note below it is also wrong. Pretty sure update management for AMA is currently functional.

Need clarification on whether or not we need to leave MMA installed alongside AMA for Defender for Cloud or if we can pull it out.

ManoharLakkoju-MSFT commented 2 weeks ago

@justinmontgomeryCF Thanks for your feedback! We will investigate and update as appropriate.

PesalaPavan commented 2 weeks ago

@justinmontgomeryCF Thanks for your feedback! I've assigned this issue to the author who will investigate and update as appropriate.