Showing category results for Security

Protecting sensitive data is a foundational requirement for modern applications. As organizations scale their use of Azure Cosmos DB across teams, environments, and workloads, controlling who can see sensitive information becomes increasingly important. Today, we are excited to announce the general availability of Dynamic Data Masking (DDM) for ...

Strengthen Identity Security and Eliminate Account Keys Identity is becoming the new security perimeter. As organizations modernize their cloud applications, long‑lived secrets and shared keys introduce unnecessary risk. Azure Cosmos DB now fully supports Microsoft Entra ID for both control plane and data plane access, giving customers a secure, p...

Today marks a big step forward with the public preview of Dynamic Data Masking (DDM) for Azure Cosmos DB. This feature helps organizations protect sensitive data without requiring changes to application logic or database interactions. What is Dynamic Data Masking? Dynamic Data Masking (DDM) is a server-side, policy-driven security feature that au...

Account Key Usage Metadata is a new security and observability feature that helps Azure Cosmos DB customers avoid service disruptions during key rotations. It provides visibility when each account key was last used, allowing teams to make informed decisions before rotating or migrating to Entra ID.  This feature addresses a common challenge of r...

Built-in security for every configuration Azure Cosmos DB for MongoDB vCore is designed with security as a foundational principle. Regardless of how your cluster is configured—whether it's a single-node deployment or a multi-shard architecture—your data is always encrypted at rest using the AES-256 cipher, one of the most trusted and widely adopte...

Security is no longer a nice-to-have—it’s a foundational requirement for any cloud-native architecture. As organizations adopt managed database services to support mission-critical applications, they must prioritize robust, scalable, and centralized security. Azure Cosmos DB for MongoDB (vCore) delivers high performance and flexibility, but it prov...

Security and reliability are at the core of modern cloud applications. To strengthen data protection and align with industry best practices, we encourage all Azure Cosmos DB customers to transition to TLS 1.2. This post explains why this change is important, how to make the transition, and the benefits it brings to your applications. Why Move to T...

We’re excited to announce a major security enhancement for the vCore-based Azure Cosmos DB for MongoDB: Role-Based Access Control (RBAC) Integration for Secondary Users with Read/Read Write Privileges. Now available in public preview, this feature enables organizations to control data access with greater precision while preserving the flexibility a...

Encryption options for data at rest on Azure Cosmos DB that is available today. Azure Cosmos DB strives to provide the best-in-class security features. Encryption of data at rest is one such important security feature. Encryption of data at rest using Microsoft's service-managed keys is enabled by default. In addition to this default encrypti...

You can now use private endpoints for your Azure Cosmos DB for MongoDB vCore clusters to allow hosts on a virtual network (VNet) to securely access data over a Private Link. The cluster's private endpoint utilizes an IP address from the virtual network's address space, ensuring that traffic between hosts on the virtual network and the database n...