CMK on existing CosmosDB account using Terraform

Suresh Bettadapur 76

Hello All

How do we do encryption of existing CosmosDB account using Terraform? When I try, it is trying to recreate the instance. Can you kindly advice?

Regards

Suresh

ShaktiSingh-MSFT 14,906 Reputation points

2024-09-06T08:38:51.4366667+00:00

Hi Suresh Bettadapur •,

We haven't heard back from you. In case you already found a solution, would you please share it here with the community? Otherwise, let us know and we will continue to engage with you on the issue.

Thanks
Suresh Bettadapur 76 Reputation points

2024-09-06T11:47:53.1633333+00:00

Hello ShaktiSingh-MSFT

This is not working for us ...... it is recreating the CosmosDB service
ShaktiSingh-MSFT 14,906 Reputation points

2024-09-09T03:58:01.3833333+00:00

Hi Suresh Bettadapur •,

This is strange and not expected. I would recommend you to please file a support ticket for deeper investigation and in case if you don't have a support plan, do let us know here so that we can check on other options to unblock you.

Thanks
Suresh Bettadapur 76 Reputation points

2024-09-09T09:29:51.0633333+00:00

Thanks ShaktiSingh-MSFT. Am raising support ticket with MS. Will keep you updated

Thanks

1 answer

ShaktiSingh-MSFT 14,906 Reputation points

2024-09-04T12:31:54.7666667+00:00

Hi Suresh Bettadapur •,

Welcome to Microsoft Q&A forum.

As I understand, you want to do encryption on an existing Azure Cosmos DB account using Terraform.

Please refer to the document:

https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/cosmosdb_account

Here you have key_vault_key_id - (Optional) A versionless Key Vault Key ID for CMK encryption. Changing this forces a new resource to be created.

In order to use a Custom Key from Key Vault for encryption you must grant Azure Cosmos DB Service access to your key vault. For instructions on how to configure your Key Vault correctly please refer to the product documentation

Let us know if this helps or you have a different ask.

Thanks
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Your answer