Azure Cosmos DB
An Azure NoSQL database service for app development.
1,786 questions
How can I attach a public IP and enable public access to a Cosmos DB instance initially set to Private Access?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(297.6, 48%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EML%3C/text%3E%3C/svg%3E)
mv-ltch
0
Reputation points
As said in title, I've got a client looking to temporarily enable public access to their Cosmos DB clusters that were initially configured with private access only.
The documentation I've found suggests creating a rule under Networking to allow public access, which I've done, but it doesn't seem like anything has changed. The connection strings listed show the hostname of [db-name].mongocluster.cosmos.azure.com, but that address doesn't resolve publicly and I don't see anywhere with a public IP address listed.
Some other resources suggest there's a toggle I can access to flip it between Public and Private, but there's no such toggle anywhere I can access and I've got full permissions on everything as far as I can tell.
What's my next move here? They've got VPN access that's letting them hit the private endpoint currently but that connection has been dying in the middle of performing the imports they're trying to do and interrupting the process.
{count} votes
-
Jose Chavarria Vindas 480 Reputation points Microsoft Employee2025-03-04T18:29:27.4266667+00:00 Hello, do you get the same error even if you connect to the endpoint using another tool such as Studio 3T or Mongo CLI ? What I found while reproducing this, is that a "c." is appended to the endpoint that gets propagated, hence it will look like this c.[db-name].mongocluster.cosmos.azure.com, if you try the nslookup againts that, it will work. However, againts [db-name].mongocluster.cosmos.azure.com it will say the endpoint doesn't exist.
When testing using Studio 3T, and the connection string from the portal, it connects just fine, then I ran a network capture and found that indeed the endpoint I am connecting to is the one below, even if I am hitting the account's public IP.
c.test-cosmos-db.privatelink.mongocluster.cosmos.azure.com
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 4%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPC%3C/text%3E%3C/svg%3E)
Prasad Chaganti 80 Reputation points Microsoft External Staff2025-03-05T18:19:46.9033333+00:00 Hi mv-ltch,We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet.
In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
-
Prasad Chaganti 80 Reputation points Microsoft External Staff
2025-03-06T19:20:09.63+00:00 Hi mv-ltch,
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet.
In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Sign in to comment
Sign in to answer