You own the account, wrote the application, and would be the one fixing it if something broke. So role-based access control (RBAC) can sound like an answer to a problem you do not have: managing other people. You do not need RBAC for your app to function; account keys still work while key-based authentication is enabled. But for a live Azure Cos...

In the last post we walked through why RBAC broke your app and how to fix it. Your app is now running on a managed identity, keys are off, and everything is green. Then your build pipeline runs, and it needs to seed test data. Suddenly you're staring at a secret in your CI settings and wondering if you just undid all that work. As we continue this ...

We covered the roles your Azure Cosmos DB app needs in our previous post. Now let’s look at what happens after you’ve assigned those roles, switched identities, disabled keys and suddenly staring at a . As we continue this security series, we’ll walk through the most common causes, how to diagnose them, and how to get back to green quickly. The si...

In the previous post in the series, we covered the security decisions you make on day one. In this part, we will talk about how to give your app access to Cosmos DB data, using roles and a managed identity instead of keys. The situation You’ve built your app. It works locally. Now you’re ready to connect it to Azure Cosmos DB, and you hit the que...

In our previous post, we introduced the private preview of Safe Key Rotation, a feature that helps Azure Cosmos DB customers avoid service disruptions during key rotations. By showing when each account key was last used, it helps teams make informed decisions before rotating keys or moving to Entra ID. This capability addresses a common chal...

You just created a Cosmos DB account. The portal handed you two keys and a connection string, it worked, and you moved on. That's what most developers do, and it causes problems later. This post is a guide for developers launching a new Cosmos DB app who want a secure default setup without enterprise-grade complexity. It focuses on the decisions...

In the first post of this series, we introduced how Azure Advisor helps Azure Cosmos DB users uncover opportunities to optimize efficiency and make smarter decisions. This follow-up dives deeper into one of the most important categories of guidance: performance. If you've ever dealt with skewed workloads, unexpected RU consumption, or queries th...

We’re excited to announce the Azure Cosmos DB SRE Agent built on Azure SRE Agent; a new capability designed to simplify troubleshooting and improve reliability for your applications running on Azure Cosmos DB. Some key features of Azure Cosmos DB SRE Agent are:  Benefits of using Azure Cosmos DB SRE Agent Managing distributed a...

Account Key Usage Metadata is a new security and observability feature that helps Azure Cosmos DB customers avoid service disruptions during key rotations. It provides visibility when each account key was last used, allowing teams to make informed decisions before rotating or migrating to Entra ID.  This feature addresses a common challenge of r...

Azure Cosmos DB is Microsoft’s globally distributed, multi-model database service, trusted for mission-critical workloads that demand high availability, scalability, and low latency. In this post we will discover how to maximize the full potential of Azure Cosmos DB using Azure Advisor recommendations to help you build smarter, faster, and more sec...