You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
By using Azure Private Link, you can connect to an Azure Cosmos DB account via a private endpoint. The private endpoint is a set of private IP addresses in a subnet within your virtual network. You can then limit access to an Azure Cosmos DB account over private IP addresses. When Private Link is combined with restricted NSG policies, it helps reduce the risk of data exfiltration. To learn more about private endpoints, see [What is Azure Private Link?](../private-link/private-link-overview.md)
16
+
By using Azure Private Link, you can connect to an Azure Cosmos DB account through a private endpoint. The private endpoint is a set of private IP addresses in a subnet within your virtual network. You can then limit access to an Azure Cosmos DB account over private IP addresses. When Private Link is combined with restrictive NSG policies, it helps reduce the risk of data exfiltration. To learn more about private endpoints, see [What is Azure Private Link?](../private-link/private-link-overview.md)
17
17
18
18
> [!NOTE]
19
19
> Private Link doesn't prevent your Azure Cosmos DB endpoints from being resolved by public DNS. Filtering of incoming requests happens at application level, not transport or network level.
@@ -410,9 +410,9 @@ $deploymentOutput
410
410
411
411
In the PowerShell script, the `GroupId` variable can contain only one value. That value is the API type of the account. Allowed values are: `Sql`, `SqlDedicated`, `MongoDB`, `Cassandra`, `Gremlin`, and `Table`. Some Azure Cosmos DB account types are accessible through multiple APIs. For example:
412
412
413
-
*An API for NoSQL account has an added option for accounts configured to use the [Dedicated Gateway](./dedicated-gateway.md).
414
-
*An API for Gremlin account can be accessed from both Gremlin and API for NoSQL accounts.
415
-
*An API for Table account can be accessed from both Table and API for NoSQL accounts.
413
+
*The API for NoSQL accounts has an added option for accounts configured to use the [dedicated gateway](./dedicated-gateway.md).
414
+
*The API for Gremlin accounts can be accessed from both Gremlin and API for NoSQL accounts.
415
+
*The API for Table accounts can be accessed from both Table and API for NoSQL accounts.
416
416
417
417
For those accounts, you must create one private endpoint for each API type. If you're creating a private endpoint for `SqlDedicated`, you only need to add a second endpoint for `Sql` if you want to also connect to your account using the standard gateway. The corresponding API type is specified in the `GroupId` array.
0 commit comments