Control: Azure > Cognitive Services > Account > Firewall > Exceptions

Define the firewall exceptions for the Azure Cognitive Services account.

Some applications depend on trusted Microsoft services that cannot be uniquely isolated through virtual network or IP address rules. Firewall exceptions allow you to grant those trusted Azure services access to the account even when the firewall otherwise denies access (networkAcls.bypass).

For more information on firewall exceptions, please see Configure Virtual Networks for Azure AI services.

Resource Types

This control targets the following resource types:

Azure > Cognitive Services > Account

Policies

The following policies can be used to configure this control:

Azure > Cognitive Services > Account > Firewall > Exceptions

This control type relies on these other policies when running actions:

Azure > Cognitive Services > Account > Firewall > Exceptions > Items

Permissions

Cloud permissions used by this control and its actions:

microsoft.cognitiveservices/accounts/write

In Your Workspace

Developers

Control Type URI

tmod:@turbot/azure-cognitiveservices#/control/types/accountFirewallExceptions

Category URI

tmod:@turbot/turbot#/control/categories/security

GraphQL

query controlType(id: "tmod:@turbot/azure-cognitiveservices#/control/types/accountFirewallExceptions") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/azure-cognitiveservices#/control/types/accountFirewallExceptions'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/azure-cognitiveservices#/control/types/accountFirewallExceptions"