Hybrid & multi-cloud: connect first
Non-Azure resources must be connected/onboarded to be covered. Azure resources show up directly in Defender for Cloud. On-prem/other-cloud servers: onboard (often via Azure Arc). AWS (Amazon Web Services) / GCP (Google Cloud Platform): connect environments. Key mindset: 'No connection equals no visibility.'