Policy Setting: Azure > Cosmos DB > Database Account > Firewall

resource "turbot_policy_setting" "azure_cosmosdb_database_account_firewall" {
  resource = turbot_policy_pack.main.id
  type     = "tmod:@turbot/azure-cosmosdb#/policy/types/databaseAccountFirewall"
  note     = "Azure CIS v2.0.0 - Control: 4.5.1"
  value    = "Check: Allow only approved virtual networks and IP ranges"
  # value    = "Enforce: Allow only approved virtual networks and IP ranges"
}