Securing Azure Cosmos DB using Microsoft Defender
summary
Shows how to enable Azure Defender for Cosmos DB (Environment settings → subscription → Defender plans → Database → toggle “Azure Cosmos DB (preview)”) and what it actually finds: missing firewall rules, absent key rotation, replication and backup gaps. Defender scans accounts, surfaces remediation steps, triggers SQL injection alert details (IP, anomalous queries) and can call Logic Apps for automated response. Notes: preview is free, currently only a few (2–3) recommendations and alert coverage is still maturing.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 0:36Motivation
- 1:58Agenda
- 2:50Cosmos DB Overview
- 3:29Cloud Security
- 6:42Microsoft Defender
- 8:45Security Alerts
- 9:14Network Security
- 10:43Global Replication
- 11:42Regional Failures
- 13:17Backup and Restore
- 13:41Backup Interval and Retention
- 14:48Key Rotation
- 16:42Resource Lock
- 17:06Importance of Resource Lock
- 26:05Limitations of Defender
related talks
51mSecuring Azure Cosmos DB
54mCloud & Hybrid Workload Protection using Azure Defender
19mEnhancing Security in Azure Cosmos DB: Best Practices
48mSecuring Cosmos DB: Ready for Production!
19mMicrosoft Defender for SQL: Advanced Threat Protection
43mDefending the Cloud: Securing Your Microsoft Data Workloads
56mEnter the Matrix: Securing Azure’s Assets
23mBuild a Defense in Depth Security Posture in Azure