Securing cosmos db

Question

Hi All,

I am trying to secure the cosmos db account and block any external connections to make connection with it. I am trying to access cosmos db through Python SDK in a virtual machine which has a private IP. While adding to the list of trusted IP in cosmos db, it shows me an error that we cannot add private IP in it. Is there way I can add private IP?

Answer 1

Hi @Anubhav Aggarwal (TATA CONSULTANCY SERVICES LTD)Welcome to Microsoft Q&A thanks for posting your question

You cannot add a private IP address to the list of trusted IP addresses in Azure Cosmos DB. The list of trusted IP addresses is used to allow access to your Cosmos DB account from specific IP addresses or IP address ranges.

However, you can still secure your Cosmos DB account and block any external connections by using Azure Virtual Network (VNet) service endpoints.

You can follow this document here https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-configure-firewall

https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-configure-private-endpoints?source=recommendations&tabs=arm-bicep

Regards

Geetha