Control: Azure > Cosmos DB > Database Account > Public Network Access

Define the Public Network Access settings required for Azure > Cosmos DB > Database Account.

This control checks whether public network access is enabled, disabled, or secured by perimeter for Azure Cosmos DB Database Accounts. If the setting does not match the policy requirements, the control will go to an alarm state. If the policy is set to "Enforce: Disabled", "Enforce: Enabled", or "Enforce: SecuredByPerimeter", the control will attempt to configure the public network access setting accordingly.

Resource Types

This control targets the following resource types:

Azure > Cosmos DB > Database Account

Policies

The following policies can be used to configure this control:

Azure > Cosmos DB > Database Account > Public Network Access

Permissions

Cloud permissions used by this control and its actions:

microsoft.documentdb/databaseaccounts/write

In Your Workspace

Developers

Control Type URI

tmod:@turbot/azure-cosmosdb#/control/types/databaseAccountPublicNetworkAccess

Category URI

tmod:@turbot/turbot#/control/categories/security

GraphQL

query controlType(id: "tmod:@turbot/azure-cosmosdb#/control/types/databaseAccountPublicNetworkAccess") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/azure-cosmosdb#/control/types/databaseAccountPublicNetworkAccess'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/azure-cosmosdb#/control/types/databaseAccountPublicNetworkAccess"