diff --git a/schemas/2021-07-01/Microsoft.ContainerService.json b/schemas/2021-07-01/Microsoft.ContainerService.json
index 2c76e269a9..7d04e5c017 100644
--- a/schemas/2021-07-01/Microsoft.ContainerService.json
+++ b/schemas/2021-07-01/Microsoft.ContainerService.json
@@ -2400,7 +2400,7 @@
         },
         "logAnalyticsWorkspaceResourceId": {
           "type": "string",
-          "description": "Resource ID of the Log Analytics workspace to be associated with Azure Defender.  When Azure Defender is enabled, this field is required and must be a valid workspace resource ID. When Azure Defender is disabled, leave the field empty."
+          "description": "Resource ID of the Log Analytics workspace to be associated with Azure Defender.  When Azure Defender is enabled, this field is required and must be a valid workspace resource ID. When Azure Defender is disabled, this field should not be exists."
         }
       },
       "description": "Azure Defender settings for the security profile."
diff --git a/schemas/2021-08-01/Microsoft.ContainerService.json b/schemas/2021-08-01/Microsoft.ContainerService.json
index 674502bfb7..8495f53f6d 100644
--- a/schemas/2021-08-01/Microsoft.ContainerService.json
+++ b/schemas/2021-08-01/Microsoft.ContainerService.json
@@ -2566,7 +2566,7 @@
         },
         "logAnalyticsWorkspaceResourceId": {
           "type": "string",
-          "description": "Resource ID of the Log Analytics workspace to be associated with Azure Defender.  When Azure Defender is enabled, this field is required and must be a valid workspace resource ID. When Azure Defender is disabled, leave the field empty."
+          "description": "Resource ID of the Log Analytics workspace to be associated with Azure Defender.  When Azure Defender is enabled, this field is required and must be a valid workspace resource ID. When Azure Defender is disabled, this field should not be exists."
         }
       },
       "description": "Azure Defender settings for the security profile."
diff --git a/schemas/2021-09-01/Microsoft.ContainerService.json b/schemas/2021-09-01/Microsoft.ContainerService.json
index 54c3375032..dc4081747e 100644
--- a/schemas/2021-09-01/Microsoft.ContainerService.json
+++ b/schemas/2021-09-01/Microsoft.ContainerService.json
@@ -2588,7 +2588,7 @@
         },
         "logAnalyticsWorkspaceResourceId": {
           "type": "string",
-          "description": "Resource ID of the Log Analytics workspace to be associated with Azure Defender.  When Azure Defender is enabled, this field is required and must be a valid workspace resource ID. When Azure Defender is disabled, leave the field empty."
+          "description": "Resource ID of the Log Analytics workspace to be associated with Azure Defender.  When Azure Defender is enabled, this field is required and must be a valid workspace resource ID. When Azure Defender is disabled, this field should not be exists."
         }
       },
       "description": "Azure Defender settings for the security profile."
diff --git a/schemas/2021-10-01/Microsoft.ContainerService.json b/schemas/2021-10-01/Microsoft.ContainerService.json
index d788c7511a..6c4f4f81fc 100644
--- a/schemas/2021-10-01/Microsoft.ContainerService.json
+++ b/schemas/2021-10-01/Microsoft.ContainerService.json
@@ -2648,7 +2648,7 @@
         },
         "logAnalyticsWorkspaceResourceId": {
           "type": "string",
-          "description": "Resource ID of the Log Analytics workspace to be associated with Azure Defender.  When Azure Defender is enabled, this field is required and must be a valid workspace resource ID. When Azure Defender is disabled, leave the field empty."
+          "description": "Resource ID of the Log Analytics workspace to be associated with Azure Defender.  When Azure Defender is enabled, this field is required and must be a valid workspace resource ID. When Azure Defender is disabled, this field should not be exists."
         }
       },
       "description": "Azure Defender settings for the security profile."