Secure an Azure Cosmos DB solution

  • Module
  • 9 Units
Intermediate
Developer
Azure Cosmos DB

Secure an Azure Cosmos DB account by configuring Microsoft Entra and key-based authentication, role-based access control across the control and data planes, network isolation, and dynamic data masking.

Learning objectives

After completing this module, you're able to:

  • Implement Microsoft Entra authentication and configure key-based authentication with key rotation.
  • Differentiate control-plane and data-plane access and implement role-based access control.
  • Configure private endpoints, service endpoints, firewall rules, and dynamic data masking.

Prerequisites

  • Experience creating Azure Cosmos DB for NoSQL accounts, databases, and containers
  • Experience using the Azure Cosmos DB SDK to read items and run queries in C# or Python
  • Basic knowledge of Azure identities, role assignments, and virtual networking
Start