Query: CosmosDB accounts should use private link

Description

Azure Private Link lets you connect your virtual network to Azure services without a public IP address at the source or destination. The Private Link platform handles the connectivity between the consumer and services over the Azure backbone network. By mapping private endpoints to your CosmosDB account, data leakage risks are reduced.

Query

Tables used in this query:

• azure_cosmosdb_account
• azure_subscription

Controls using this query:

• 4.5.2 Ensure That Private Endpoints Are Used Where Possible
• 4.5.2 Ensure That Private Endpoints Are Used Where Possible
• 4.5.2 Ensure That Private Endpoints Are Used Where Possible
• 5.4.2 Ensure That Private Endpoints Are Used Where Possible
• CosmosDB accounts should use private link

SQL