MLZ does not deploy Defender to every Spoke (Identity and SharedServices get skipped) Line #954

[LManning-Dev]

Description

MLZ does not deploy Defender to every Spoke (Identity and SharedServices get skipped) Line #954

Steps to Reproduce

Deploy mlz.bicep using 4 Subscriptions.

Expected behavior

Defender is enabled for all 4 Subscriptions

Actual behavior

Defender is only enabled for the Hub and the Operations Subscriptions

Screenshots

Additional context

When the defender.bicep is called for all the spokes, the scope is hard coded to the operations subscription
scope: subscription(operationsSubscriptionId)

To fix, the scope should point to the spoke's subscription

scope: subscription(spoke.subscriptionId)

Cloud (public, Azure Government, etc.): Commercial and Azure Government