Azure > Cosmos DB >

Cosmos DB Public Access Disabled

HIGH

Source

CloudSploit

cosmos-db-public-access-disabled

management console

Cosmos DB Public Access Disabled

Ensure that Microsoft Azure Cosmos DB accounts are configured to deny public access.

Microsoft Azure Cosmos DB accounts should not be accessible from internet and only be accessed from within a VNET.

Recommended Actions

Modify firewall and the virtual network configuration for your Cosmos DB accounts to provide access to selected networks.

Links

https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-configure-firewall

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.