Securing Azure Cosmos DB
summary
Shows how to lock down Cosmos DB with concrete configs: use the IP firewall, VNet, private endpoint options to prevent public access; replace master keys with Azure AD role-based access control or short-lived resource tokens (demos create role definitions and assign principal IDs, ingest-only vs read-only clients); explains server-side encryption (always on) and how to configure customer-managed keys in Key Vault plus client-side encryption using the .NET SDK / Always Encrypted to protect specific properties like salary and SSN.
AI-written summary · about
chapters (7)
- 0:00Introduction to session
- 2:51Network level security
- 17:01Authentication options
- 23:26Azure AD role-based access
- 35:54Encryption in Cosmos DB
- 42:16Client-side encryption demo
- 50:02Summary and Q&A
related talks
19mEnhancing Security in Azure Cosmos DB: Best Practices
28mSecuring Azure Cosmos DB using Microsoft Defender
28mSecuring Azure Cosmos DB using Microsoft Defender
19mKeyless Connections to Azure Cosmos DB (RBAC auth for data)
19mKeyless Connections to Azure Cosmos DB
27mIntegrating Azure Cosmos DB with the Azure Ecosystem
54mSharing a story of cosmic journey with Cosmos DB
01h 00mEverything You Always Wanted to Know About Azure Security But Were Afraid to Ask