The following changes will apply to K8S.Node_* Alerts for EKS and GKE clusters
Analysis / inference: Microsoft Defender for Cloud will change K8S.Node_* alerts for EKS and GKE clusters: the resourceIdentifiers field will now reference the MDC connector identifier instead of the Azure Arc resource ID, the Entities field will use the native AWS ARN or GCP cluster identifier, and the extendedProperties.resourceType will switch from "Kubernetes – Azure Arc" to "AWS EKS Cluster" or "GCP GKE Cluster".
- Published
- 21 Oct 2025, 05:30 AM IST
- Source
- Microsoft Defender for Cloud recommendations and alerts · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
Analysis / inference: Microsoft Defender for Cloud will change K8S.Node_* alerts for EKS and GKE clusters: the resourceIdentifiers field will now reference the MDC connector identifier instead of the Azure Arc resource ID, the Entities field will use the native AWS ARN or GCP cluster identifier, and the extendedProperties.resourceType will switch from "Kubernetes – Azure Arc" to "AWS EKS Cluster" or "GCP GKE Cluster".
AI summary / analysis; claims are not independently verified. Check the primary source before acting.