Synapse Link to CosmosDB

Question

I have a linked service to CosmosDB in Synapse, created using Azure Synapse Link in CosmosDB. Unfortunatelly this link is storing account key directly in Synapse. I need to move that key to Key Vault. I've tried to use normal primary and secondary keys from CosmosDB but they are not working due to firewall settings (access to CosmosDB is restricted and Synapse has disabled vnets). Apparently the key in linked services created directly by Azure Synapse Link is something different and is able to bypass firewall rules. Is there any place where I can find this key to move it to KV?

Answer 1

Hello @Paweł Witecki

Thanks for reaching out on this forum!

The account key in linked services created by Azure Synapse Link is something different and is able to bypass firewall rules. This integration is designed to abstract away the complexity of direct key management, focusing on ease of use and security!!!

Did you try adjusting the firewall rules to allow access from Synapse to CosmosDB?

FAQ

Answer 2

FIrewall rules isn't something that can be changed in this case. Is there any way to extract that key to vault instead keeping it directly in synapse?