Defender for Cloud Apps: which control
This sheet compares Access policy, Session policy, App-enforced restrictions, App governance, Cloud discovery.
| Criterion | Access policy | Session policy | App-enforced restrictions | App governance | Cloud discovery |
|---|---|---|---|---|---|
| Mechanism | Gates session start | Real-time in-browser proxy | App enforces natively | OAuth grant governance | Traffic-log analysis |
The verdict, the full comparison, 6 rules and 3 traps are part of SC-300 access. Unlock SC-300.