Onboarding an AWS account to Microsoft Defender for Cloud starts in Defender for Cloud > Environment settings > Add environment > Amazon Web Services
Short answer
A In Defender for Cloud, open Environment settings and add an Amazon Web Services environment to onboard the AWS account.
Question
Key Takeaways
Multi-cloud onboarding is a Defender for Cloud Environment settings action; you do not enable AWS Security Hub or register an enterprise app as the first step — the native connector is configured from Environment settings.
To connect an AWS account to Microsoft Defender for Cloud, you open Defender for Cloud in the Azure portal, go to Environment settings, and choose Add environment > Amazon Web Services. Environment settings is the single place to onboard multi-cloud (AWS/GCP) connectors and start monitoring.
Common mistake: Candidates pick 'enable a security hub' or 'add the AWS enterprise application', but the first step in Azure is Defender for Cloud > Environment settings, which creates the connector and required permissions.
Expert Analysis
Why the Answer Is Correct
Defender for Cloud centralizes multi-cloud onboarding under Environment settings. You sign in to the Azure portal, go to Defender for Cloud > Environment settings, select Add environment > Amazon Web Services, and complete the native connector. (Option A)
Why the Other Options Are Wrong
- Option B (Enable AWS Security Hub) is an AWS-side concern and not the Azure-first step for the Defender connector.
- Option C (Security solutions settings) is a legacy blade not used for AWS onboarding.
- Option D (Add the AWS enterprise application) is not how the native multi-cloud connector is established; Environment settings handles it.
Community Comment Notes
Comments confirmed A and cited the quickstart-onboard-aws article: 'Go to Defender for Cloud > Environment settings. Select Add environment > Amazon Web Services.'
Official Reference
https://learn.microsoft.com/en-us/azure/defender-for-cloud/quickstart-onboard-aws
This link opens the official vendor documentation in a new tab.
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 3 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 3
-
[Removed] 👍 3Explanation: • Environment Settings in Defender for Cloud: This is where you manage the integration of external cloud environments such as AWS and GCP with Microsoft Defender for Cloud. By configuring the environment settings, you can onboard your AWS account, set up the necessary connectors, and establish monitoring and security management.
-
obaemf 👍 2 Answered AConfigure the Environment settings.
-
ITFranz 👍 1 Answered ATo support the answer: https://learn.microsoft.com/en-us/azure/defender-for-cloud/quickstart-onboard-aws Connect your AWS account To connect your AWS to Defender for Cloud by using a native connector: Sign in to the Azure portal. Go to Defender for Cloud > Environment settings. Select Add environment > Amazon Web Services. Answer = A
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.