Need to restrict the cosmos DB accessible from public internet.

Manivel Manickam 0 Reputation points
2024-06-14T15:51:59.84+00:00

I have created CosmosDB instant in Azure. Disabled the public access and associated with private endpoint but still cosmosDB url is accessible through internet.

How can I restrict the url accessible from internet?

tried with NSG also but no luck.

Can some one please help on this?

Thanks

Azure Cosmos DB
Azure Cosmos DB
An Azure NoSQL database service for app development.
1,534 questions
{count} votes

1 answer

Sort by: Most helpful
  1. ShaktiSingh-MSFT 14,376 Reputation points Microsoft Employee
    2024-06-17T04:22:29.6966667+00:00

    Hi Manivel Manickam,

    Welcome to Microsoft Q&A forum.

    As I understand, you want to restrict Azure Cosmos DB from public access.

    Private Link allows users to access an Azure Cosmos DB account from within the virtual network or from any peered virtual network. Resources mapped to Private Link are also accessible on-premises over private peering through VPN or Azure ExpressRoute.

    You can connect to an Azure Cosmos DB account configured with Private Link by using the automatic or manual approval method. To learn more, see the approval workflow section of the Private Link documentation.

    This article describes how to set up private endpoints for Azure Cosmos DB transactional store. It assumes that you're using the automatic approval method. If you're using the analytical store, see Configure private endpoints for the analytical store.

    Could you please provide more information on how you are trying to connect to the Azure Cosmos DB and also API, configuration, existing Network settings of your DB so that we can also check our end?

    Thanks

    0 comments No comments