| title | environment resource type |
|---|---|
| description | Represents a cloud-native environment that can be selected within a specific zone for security management. |
| author | Yarinle4 |
| ms.date | 11/26/2025 |
| ms.localizationpriority | medium |
| ms.subservice | security |
| doc_type | resourcePageType |
Namespace: microsoft.graph.security
[!INCLUDE beta-disclaimer]
Represents a cloud-native environment that can be selected within a specific zone for security management. Environments include Azure subscriptions, AWS accounts, GCP projects, and other resources native to the cloud.
Inherits from entity
| Method | Return type | Description |
|---|---|---|
| List | microsoft.graph.security.environment collection | Get all environment objects associated with a zone object. |
| Create | microsoft.graph.security.environment | Create an environment object to attach it to a zone. |
| Get | microsoft.graph.security.environment | Get a specific environment associated with a zone. The environment ID must be URL-encoded. |
| Delete | None | Delete an environment object by providing the environment ID to detach it from a zone. |
| Property | Type | Description |
|---|---|---|
| id | String | Environment identifier. Inherited from entity. Supports $orderby and $filter (eq, contains). For example, $filter=contains(id, '123'). For Azure subscriptions, use the /subscriptions/{subscription-id} format for the id property. For example, /subscriptions/02687862-a843-4846-81f0-efe9ef244daa. For other environment types, use the native identifier - for example, AWS account number (181994123251) or GCP project number (69483221284). |
| kind | microsoft.graph.security.environmentKind | Environment type. The possible values are: azureSubscription, awsOrganization, awsAccount, gcpOrganization, gcpProject, dockersHubOrganization, devOpsConnection, azureDevOpsOrganization, gitHubOrganization, gitLabGroup, jFrogArtifactory, unknownFutureValue. Supports orderby and $filter (eq, in). For example, $filter=kind eq 'azureSubscription' or $filter=kind in ('azureSubscription', 'awsAccount'). |
None.
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.security.environment",
"id": "String (identifier)",
"kind": "String"
}