requests from synapse pipelines blocked by firewall policy of cosmDB.

ANKIT GHENGE 65

hello team, the requests are getting originated from synapse analytics pipelines to nosql coosmosDB. the requests are getting blocked by firewall settings of cosmosdb as the request IPs are different one for every run and requesting through public IP

points noted: - there is no any vnets configured over synapse analytics and cosmosdb.

need help to resolve it

ANKIT GHENGE 65 Reputation points

2024-12-04T16:34:07.02+00:00

is the networking logic of whitelisting 0.0.0.0 IP effective in cosmosDB firewall settings mentioned in below MS documentation? plz give a brief about the validations and setup required for the same
https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-configure-firewall
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Oury Ba-MSFT 19,991 Reputation points Microsoft Employee

2024-12-04T22:31:46.2066667+00:00

@ANKIT GHENGE Thank you for reaching out.

You can use private endpoints and configure virtual network for both Azure synapse and Azure Cosmos DB.

You can control network access to the data in the transactional and analytical stores independently. Network isolation is done using separate managed private endpoints for each store, within managed virtual networks in Azure Synapse workspaces.

To learn more, see What is Azure Cosmos DB analytical store? | Microsoft Learn

Configure private endpoints for analytical store article.

Regards,

Oury
ANKIT GHENGE 65 Reputation points

2024-12-05T13:51:04.2466667+00:00

hello oury, i got the other environments using below configurations for data sync between synapse analytics and cosmodb because every pipeline run sends request from different IP and some reports generation requests are sent on another linked cosmosdb thorugh public internet so setup of Vnet can might cause blocking for web requests for reports generation.
plz let me know how the below logic will be effective for this?
https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-configure-firewall
Oury Ba-MSFT 19,991 Reputation points Microsoft Employee

2024-12-30T18:08:28.67+00:00

ANKIT GHENGE

I wanted to check if the above answer was helpful.? Please share the status of the issue.

Regards,

Oury

1 answer

Oury Ba-MSFT 19,991 Reputation points Microsoft Employee

2024-12-13T23:21:13.6133333+00:00

ANKIT GHENGE

Sorry for the delay in my response.

you can use analytical store private endpoints for Azure CosmosDB. This allows you to restrict network access to your CosmosDB analytical store through a managed private endpoint associated with your Azure Synapse workspace.

https://learn.microsoft.com/en-us/azure/cosmos-db/analytical-store-private-endpoints
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

requests from synapse pipelines blocked by firewall policy of cosmDB.

1 answer

Your answer