Control: Azure > Cosmos DB > Database Account > Firewall > IP Ranges > Required

Configure firewall IP address range checking. This control defines whether to verify the firewall IP address ranges are required, as well as the subsequent action to take on required items.

If set to Enforce: Required > Items, the required IP address ranges will be added to the firewall.

Resource Types

This control targets the following resource types:

Azure > Cosmos DB > Database Account

Policies

The following policies can be used to configure this control:

Azure > Cosmos DB > Database Account > Firewall > IP Ranges > Required

This control type relies on these other policies when running actions:

Permissions

Cloud permissions used by this control and its actions:

microsoft.documentdb/databaseaccounts/write

In Your Workspace

Developers

Control Type URI

tmod:@turbot/azure-cosmosdb#/control/types/databaseAccountFirewallIpRangesRequired

Category URI

tmod:@turbot/turbot#/control/categories/resourceRequired

GraphQL

query controlType(id: "tmod:@turbot/azure-cosmosdb#/control/types/databaseAccountFirewallIpRangesRequired") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/azure-cosmosdb#/control/types/databaseAccountFirewallIpRangesRequired'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/azure-cosmosdb#/control/types/databaseAccountFirewallIpRangesRequired"