Data security and compliance - Azure Cosmos DB
4 important questions on Data security and compliance - Azure Cosmos DB
What is Azure RBAC?
It is an identity access management built on azure resource manager., using REST api for requesting a token.
It is a kind of namespace that has built-in roles, but custom roles can be added. It also holds the permissions, on what you can do.
azure cosmos db integrates with Azure rbac. Within Cosmos DB it can be used for authentication of management tasks, but can also be used to authenticate access to the database.
Cosmos DB also has its own Role based access control., using Azure Active Directory for identification.
When would you use this method?
- You want to use Azure AD to authenticate requests
- Need a fine-grained permissions model to tightly restrict operations.
- Materialize access control to roles, to be assigned to multiple identities,
Cosmos DB has primary keys to provide access to resources. Each instance has two primary keys for read-only and two for read-write. This enables key-rotation or rolling. What 4 things can you say about them?
2. Cannot be used for granular acess to containers and documents
3. Are created during the creation of an account
4. Can be regenerated at any time
- Higher grades + faster learning
- Never study anything twice
- 100% sure, 100% understanding
What is a resource token?
- Are created when a user is granted permissions to a specific resource
- REST calls.
- Hash is constructed specifically for the user, resource and permission.
- Time bound. The validity time is customizable. Default is one hour, maximum is 5 hours.
- Enable clients to read, write, delete according to permissions.
The question on the page originate from the summary of the following study material:
- A unique study and practice tool
- Never study anything twice again
- Get the grades you hope for
- 100% sure, 100% understanding