Resource Type: Azure > Cosmos DB > Database Account

Resource Context

Database Account is a part of the Cosmos DB service.

Each Database Account lives under a Resource Group.

Controls

The primary controls for Azure > Cosmos DB > Database Account are:

• Active
• Allowed
• Approved
• CMDB
• Discovery
• Firewall
• Key Based Metadata Write Access
• Public Network Access
• ServiceNow
• Tags

It is also targeted by these controls:

• Azure > CIS v2.0 > 04 - Database Services > 4.05 - Cosmos DB > 4.05.01 - Ensure That 'Firewalls & Networks' Is Limited to Use Selected Networks Instead of All Networks
• Azure > CIS v2.0 > 04 - Database Services > 4.05 - Cosmos DB > 4.05.02 - Ensure That Private Endpoints Are Used Where Possible
• Azure > CIS v3.0 > 05 - Database Services > 05.04 - Azure Cosmos DB > 05.04.01 - Ensure That 'Firewalls & Networks' Is Limited to Use Selected Networks Instead of All Networks
• Azure > CIS v3.0 > 05 - Database Services > 05.04 - Azure Cosmos DB > 05.04.02 - Ensure That Private Endpoints Are Used Where Possible
• Azure > Cosmos DB > MongoDB Database > Discovery
• Azure > Cosmos DB > SQL Database > Discovery

Quick Actions

• Delete
• Router
• Set Key Based Metadata Write Access
• Set Public Network Access
• Set Tags
• Update Firewall Default Access Rule
• Update Firewall IP Ranges
• Update Firewall Virtual Networks

Category

• Database

In Your Workspace

• Controls by Resource Type report
• Policy Settings by Resource Type report
• Resources by Resource Type report

Developers

Resource Type URI

tmod:@turbot/azure-cosmosdb#/resource/types/databaseAccount

Category URI

tmod:@turbot/turbot#/resource/categories/database

GraphQL

query resource(id: "tmod:@turbot/azure-cosmosdb#/resource/types/databaseAccount") { … }

query resourceActivities(filter: "resourceId:'tmod:@turbot/azure-cosmosdb#/resource/types/databaseAccount'") { … }

mutation createResource(input: { … })

mutation updateResource(input: { … })

CLI

Get Resource

turbot graphql resource --id "tmod:@turbot/azure-cosmosdb#/resource/types/databaseAccount"

Steampipe Query

Get Resource

select * from guardrails_resource where resource_type_uri = 'tmod:@turbot/azure-cosmosdb#/resource/types/databaseAccount';

Get Policy Settings (By Resource ID)

select * from guardrails_policy_setting where filter = 'resourceTypeId:"tmod:@turbot/azure-cosmosdb#/resource/types/databaseAccount"';

Get Resource Notification

select * from guardrails_notification where resource_type_uri = 'tmod:@turbot/azure-cosmosdb#/resource/types/databaseAccount' and notification_type in ('resource_updated', 'resource_created');