Policy: Azure > Cosmos DB > Database Account > Firewall > IP Ranges > Required

Configure database accounts to allow access from specific public internet IP address ranges. This policy grants access to approved internet address ranges or individual IP addresses and blocks unapproved internet traffic.

If set to Enforce: Required > Items, this policy will grant access to the IP ranges in Required > Items.

Resource Types

This policy targets the following resource types:

Azure > Cosmos DB > Database Account

Primary Policy

This policy is used with the following primary policy:

Azure > Cosmos DB > Database Account > Firewall > IP Ranges

Controls

Policy Packs

This policy setting is used by the following policy packs:

Policy Specification

Schema Type	`string`
Default	`Skip`
Valid Values [YAML]	`Skip` `Check: Required > Items` `Enforce: Required > Items`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/resourceRequired

Policy Type URI

tmod:@turbot/azure-cosmosdb#/policy/types/databaseAccountFirewallIpRangesRequired

GraphQL

query policyType(id: "tmod:@turbot/azure-cosmosdb#/policy/types/databaseAccountFirewallIpRangesRequired") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/azure-cosmosdb#/policy/types/databaseAccountFirewallIpRangesRequired'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/azure-cosmosdb#/policy/types/databaseAccountFirewallIpRangesRequired'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/azure-cosmosdb#/policy/types/databaseAccountFirewallIpRangesRequired"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/azure-cosmosdb#/policy/types/databaseAccountFirewallIpRangesRequired"