Chapter 3 of 6
Confirm these requirements:
- The approved subscription, target scope alias, deployment location, Sentinel resource group, and Sentinel workspace name are recorded in the private implementation parameters.
- The operator can run Bicep what-if at subscription scope and at the Sentinel workspace resource group.
- The Defender for Cloud owner has approved the
AIplan and the prompt-evidence and Purview sharing decisions. - The Sentinel owner confirms the Microsoft Copilot connector path and accepts the jailbreak rule and hunting query.
- The Defender for Cloud Apps owner can open Cloud Discovery, filter Category = Generative AI, and apply Sanctioned or Unsanctioned tags.
- The privacy owner accepts that suspicious prompt evidence can include redacted prompt and response snippets when that extension is enabled.
Keep tenant IDs, subscription IDs, resource IDs, user names, app exports, alert exports, prompts, responses, IP exports, tokens, and credentials out of this repository.
Implementation files#
| Type | File | Consumer |
|---|---|---|
| Deployment | artifacts/defender/defender-ai-plan.bicep | The subscription security deployment pipeline |
| Deployment | artifacts/defender/defender-ai-plan.bicepparam | The subscription security deployment pipeline |
| Record | artifacts/defender/defender-ai-plan-decisions.json | The Defender for Cloud owner, privacy owner, SOC owner, and preflight scripts |
| Runtime | artifacts/defender/defender-ai-alerts.kql | The SOC reporting owner |
| Deployment | artifacts/sentinel/copilot-threat-detections.bicep | The Sentinel-as-code deployment pipeline |
| Deployment | artifacts/sentinel/copilot-threat-detections.bicepparam | The Sentinel-as-code deployment pipeline |
| Runtime | artifacts/sentinel/copilot-jailbreak-analytics.kql | The Copilot jailbreak scheduled analytics rule |
| Runtime | artifacts/sentinel/copilot-external-ip-hunting.kql | The Sentinel hunting library |
| Record | artifacts/shadow-ai/shadow-ai-sanction-decisions.json | The Defender for Cloud Apps owner and security operations owner |
Resolve every __REQUIRED_*__ value in a private copy before deployment. Preflight rejects unresolved decisions before it calls Azure.