Showing category results for Security

You just created a Cosmos DB account. The portal handed you two keys and a connection string, it worked, and you moved on. That's what most developers do, and it causes problems later. This post is a guide for developers launching a new Cosmos DB app who want a secure default setup without enterprise-grade complexity. It focuses on the decisions...

 Today, we're thrilled to announce the public preview of Azure Cosmos DB Shell – a powerful, open-source command-line interface that revolutionizes how developers interact with their Azure Cosmos DB databases. With integrated Model Context Protocol (MCP) server support, native agentic capabilities, and bash-like syntax, Azure Cosmos DB Shell transf...

Protecting sensitive data is a foundational requirement for modern applications. As organizations scale their use of Azure Cosmos DB across teams, environments, and workloads, controlling who can see sensitive information becomes increasingly important. Today, we are excited to announce the general availability of Dynamic Data Masking (DDM) for ...

Strengthen Identity Security and Eliminate Account Keys Identity is becoming the new security perimeter. As organizations modernize their cloud applications, long‑lived secrets and shared keys introduce unnecessary risk. Azure Cosmos DB now fully supports Microsoft Entra ID for both control plane and data plane access, giving customers a secure, p...

Today marks a big step forward with the public preview of Dynamic Data Masking (DDM) for Azure Cosmos DB. This feature helps organizations protect sensitive data without requiring changes to application logic or database interactions. What is Dynamic Data Masking? Dynamic Data Masking (DDM) is a server-side, policy-driven security feature that au...

Account Key Usage Metadata is a new security and observability feature that helps Azure Cosmos DB customers avoid service disruptions during key rotations. It provides visibility when each account key was last used, allowing teams to make informed decisions before rotating or migrating to Entra ID.  This feature addresses a common challenge of r...

Built-in security for every configuration Azure Cosmos DB for MongoDB vCore is designed with security as a foundational principle. Regardless of how your cluster is configured—whether it's a single-node deployment or a multi-shard architecture—your data is always encrypted at rest using the AES-256 cipher, one of the most trusted and widely adopte...

Security is no longer a nice-to-have—it’s a foundational requirement for any cloud-native architecture. As organizations adopt managed database services to support mission-critical applications, they must prioritize robust, scalable, and centralized security. Azure Cosmos DB for MongoDB (vCore) delivers high performance and flexibility, but it prov...

Security and reliability are at the core of modern cloud applications. To strengthen data protection and align with industry best practices, we encourage all Azure Cosmos DB customers to transition to TLS 1.2. This post explains why this change is important, how to make the transition, and the benefits it brings to your applications. Why Move to T...

We’re excited to announce a major security enhancement for the vCore-based Azure Cosmos DB for MongoDB: Role-Based Access Control (RBAC) Integration for Secondary Users with Read/Read Write Privileges. Now available in public preview, this feature enables organizations to control data access with greater precision while preserving the flexibility a...