Showing tag results for security

In the previous post in the series, we covered the security decisions you make on day one. In this part, we will talk about how to give your app access to Cosmos DB data, using roles and a managed identity instead of keys. The situation You’ve built your app. It works locally. Now you’re ready to connect it to Azure Cosmos DB, and you hit the que...

You just created a Cosmos DB account. The portal handed you two keys and a connection string, it worked, and you moved on. That's what most developers do, and it causes problems later. This post is a guide for developers launching a new Cosmos DB app who want a secure default setup without enterprise-grade complexity. It focuses on the decisions...

Introduction Managing access to Azure resources often means dealing with two separate permission models: one for management operations and another for data access. For Azure Cosmos DB customers, this split can increase complexity, slow down onboarding, and create confusion around governance and security boundaries. Today, we’re excited to annou...

Protecting sensitive data is a foundational requirement for modern applications. As organizations scale their use of Azure Cosmos DB across teams, environments, and workloads, controlling who can see sensitive information becomes increasingly important. Today, we are excited to announce the general availability of Dynamic Data Masking (DDM) for ...

Strengthen Identity Security and Eliminate Account Keys Identity is becoming the new security perimeter. As organizations modernize their cloud applications, long‑lived secrets and shared keys introduce unnecessary risk. Azure Cosmos DB now fully supports Microsoft Entra ID for both control plane and data plane access, giving customers a secure, p...

Account Key Usage Metadata is a new security and observability feature that helps Azure Cosmos DB customers avoid service disruptions during key rotations. It provides visibility when each account key was last used, allowing teams to make informed decisions before rotating or migrating to Entra ID.  This feature addresses a common challenge of r...

We are thrilled to announce the general availability of Azure Private Link for Azure Cosmos DB, making Azure Cosmos DB the next Azure service compatible with Azure Private Link. What is Azure Private Link Azure Private Link provides private connectivity from a virtual network to Azure platform as a service (PaaS) services. It simplifies the netwo...