Query: security_center_defender_for_servers_enabled

select
  p.id as resource,
  case
    when p.name = 'VirtualMachines' and p.pricing_tier = 'Standard' then 'ok'
    else 'alarm'
  end as status,
  case
    when p.name = 'VirtualMachines' and p.pricing_tier = 'Standard' 
      then 'Microsoft Defender for Servers is enabled with ' || p.pricing_tier || ' tier.'
    when p.name = 'VirtualMachines' 
      then 'Microsoft Defender for Servers is disabled, current tier: ' || p.pricing_tier || '.'
    else 'Microsoft Defender for Servers pricing not found.'
  end as reason,
  p.subscription_id,
  p.cloud_environment
from
  azure_security_center_subscription_pricing p
where
  p.name = 'VirtualMachines';