Policy: Azure > Cosmos DB > Database Account > Public Network Access

Define the Public Network Access settings required for Azure > Cosmos DB > Database Account.

This policy determines whether public network access is permitted for Azure Cosmos DB Database Accounts. The policy can be set to Enabled, Disabled, or SecuredByPerimeter. When public network access is disabled, the database account can only be accessed through private endpoints, providing enhanced security by preventing public internet access to the service. When set to "Check: Disabled" or "Check: Enabled", the control will go to an alarm state if the database account's setting does not match the policy. When set to "Enforce: Disabled" or "Enforce: Enabled", the control will automatically configure the property to match the policy. Setting the policy to "Skip" will exclude the database account from this check.