You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/cosmos-db/cosmos-db-advanced-threat-protection.md
+14-7Lines changed: 14 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -31,9 +31,13 @@ Advanced Threat Protection for Azure Cosmos DB detects anomalous activities indi
31
31
32
32
-**Unusual data extraction**: This alert is triggered when a client is extracting an unusual amount of data from an Azure Cosmos DB account. This can be the symptom of some data exfiltration performed to transfer all the data stored in the account to an external data store.
33
33
34
-
## Set up Advanced Threat Protection
35
34
36
-
### Set up ATP using the portal
35
+
36
+
## Configure Advanced Threat Protection
37
+
38
+
You can configure advanced threat protection in any of several ways, described in the following sections.
39
+
40
+
### [Portal](#tab/azure-portal)
37
41
38
42
1. Launch the Azure portal at [https://portal.azure.com](https://portal.azure.com/).
39
43
@@ -46,28 +50,28 @@ Advanced Threat Protection for Azure Cosmos DB detects anomalous activities indi
46
50
* Click the **Advanced Threat Protection** option to set it to **ON**.
47
51
* Click **Save** to save the new or updated Advanced Threat Protection policy.
48
52
49
-
### Set up ATP using REST API
53
+
### [REST API](#tab/rest-api)
50
54
51
55
Use Rest API commands to create, update, or get the Advanced Threat Protection setting for a specific Azure Cosmos DB account.
Use an Azure Resource Manager template to set up Cosmos DB with Advanced Threat Protection enabled.
70
+
Use an Azure Resource Manager (ARM) template to set up Cosmos DB with Advanced Threat Protection enabled.
67
71
For more information, see
68
72
[Create a CosmosDB Account with Advanced Threat Protection](https://azure.microsoft.com/resources/templates/201-cosmosdb-advanced-threat-protection-create-account/).
69
73
70
-
### Using Azure Policy
74
+
### [Azure Policy](#tab/azure-policy)
71
75
72
76
Use an Azure Policy to enable Advanced Threat Protection for Cosmos DB.
73
77
@@ -87,6 +91,9 @@ Use an Azure Policy to enable Advanced Threat Protection for Cosmos DB.
87
91
88
92
1. Enter the other parameters, and click **Assign**.
89
93
94
+
95
+
96
+
90
97
## Manage ATP security alerts
91
98
92
99
When Azure Cosmos DB activity anomalies occur, a security alert is triggered with information about the suspicious security event.
0 commit comments