Policy Governance and Cost Optimization across AMR, Redis, Cosmos DB and DocumentDB: Introduced audit-mode policies to identify HA-enabled instances in dev/test environments and implemented SKU restriction policies for Cosmos DB and Redis in lower environments. These changes provide visibility into unnecessary HA usage, reduce cost exposure from non-standard SKU provisioning, and strengthen governance by ensuring lower environments follow approved configuration standards. Additional AM18 compliance-related policies were also implemented for zone redundancy and private endpoints.

Then the remaining points become:

Azure Cosmos DB Pipeline and Key Vault Migration Enhancements: Enhanced Cosmos DB pipelines to dynamically select agent pools based on the requested region and added pipeline support for Key Vault migration activities. These changes improve pipeline stability, reduce dependency on hardcoded infrastructure, and enable controlled migration of keys from the infra-global subscription to application-owned subscriptions.

MongoDB vCore TPAC Access Enablement: Updated the TPAI pipeline to enable TPAC access for MongoDB vCore Red Zone, ensuring that only authorized TPAC users can execute the pipeline and provide access in a controlled, compliant, and auditable manner.

Posted By Nikhil04:53

0

Continue Reading

 Azure Cosmos DB: Application-owned Key Vault enablement for CMK

Application teams can now use their own Key Vault for data-at-rest encryption key management instead of relying on the shared CMK Key Vault flow. This improves ownership, governance, and alignment with a controlled application-owned encryption model.

Posted By Nikhil23:38

0

Continue Reading

 Azure Cosmos DB NoSQL: MIM group enablement for access continuity

Checks are being performed to ensure the required MIM group is available for Cosmos NoSQL APIs. This helps ensure user accounts remain functional and access management continues to work as expected.

Posted By Nikhil23:38

0

Continue Reading

 MongoDB vCore / Cosmos RU to vCore: Cross-tenant migration enablement

The required changes have been released to support cross-tenant migration from RU-based accounts to vCore without enabling public endpoints. This helps ensure the migration approach remains secure, controlled, and aligned with internal connectivity standards.

Posted By Nikhil23:37

0

Continue Reading

 

Title:
Cosmos DB | Update Add Account Pipeline to Configure 7-Day Continuous Backup in Lower Environments

Story:
As a developer,
I want to update the Cosmos DB add account pipeline to configure continuous backup with 7-day retention for lower environments,
so that new Cosmos DB accounts remain compliant with the backup policy before it is moved from Audit mode to Deny mode.

Description:
A backup-related policy has recently been implemented in Audit mode for Cosmos DB. Before this policy is moved to Deny mode, the add Cosmos account pipeline needs to be updated to ensure that Cosmos DB accounts created in lower environments are configured with continuous backup using 7-day retention.

This change will help avoid future policy non-compliance and prevent account creation failures once the policy enforcement is changed to Deny.

Scope:

• Review the current add Cosmos account pipeline.
• Identify where backup configuration is handled during account creation.
• Update the pipeline to configure continuous backup with 7-day retention for lower environments.
• Validate the change in applicable lower environments.
• Capture test evidence and update issue comments.

Acceptance Criteria:

• Add Cosmos account pipeline is updated with 7-day continuous backup configuration for lower environments.
• Backup policy compliance is validated after pipeline change.
• Testing evidence is added to the issue.
• Any dependency or blocker is documented.
• Change is ready before policy moves from Audit to Deny mode.

Impacted Product:
Azure Cosmos DB

Impacted Environments:
Dev, Test, UAT / lower environments

Dependency:
Pipeline / Control Plane / Policy implementation, as applicable.

Posted By Nikhil07:43

0

Continue Reading

 Thank you Murali, appreciate your support and guidance. I’m also trying to stay aligned across Oracle, PostgreSQL, Azure and Emerging DB topics, so happy to share any context that helps the team.

Posted By Nikhil07:59

0

Continue Reading

 

You can reply warmly but professionally like this:

Thanks Murali, appreciate your support.

Likewise, I am also learning and catching up as we move across Oracle, PostgreSQL on-prem, Azure, and now Emerging DB topics. Since our paths have crossed across these areas, I’m happy to share whatever context I have and keep things aligned wherever possible.

Thanks again.

Posted By Nikhil07:58

0

Continue Reading