Links

Microsoft DocumentDB

Best practices and references below are based on published guidance from the cloud service provider and may reference native capabilities the cloud service provider offers. If you are not using the native security capabilities, the same security requirement can be met using other security capabilities your organization utilizes

Asset Inventory

Design Guidance:

Microsoft.DocumentDB/databaseAccounts


Design for High Availability

Microsoft.DocumentDB/databaseAccounts

Backup Policy-Type
Terraform
Enable Automatic Failover
Terraform
Locations
Terraform
Locations-Is Zone Redundant
Terraform
Autoscale Settings-Max Throughput
Terraform
Locations-Failover Priority
Terraform

Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces

Autoscale Settings-Max Throughput

Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables

Autoscale Settings-Max Throughput

Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs

Autoscale Settings-Max Throughput

Microsoft.DocumentDB/databaseAccounts/sqlDatabases

Autoscale Settings-Max Throughput

Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers

Autoscale Settings-Max Throughput
Options-Throughput

Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/storedProcedures

Autoscale Settings-Max Throughput
Options-Throughput

CORS Headers

Microsoft.DocumentDB/databaseAccounts

Cors
Terraform
Cors-Allowed Headers
Terraform
Cors-Allowed Origins
Terraform
Cors-Exposed Headers
Terraform
Cors-Max Age In Seconds
Terraform

Secure Response Headers

Design Guidance:

Microsoft.DocumentDB/databaseAccounts

Cors-Allowed Methods
Terraform

Subnet Isolation

Design Guidance:

Microsoft.DocumentDB/databaseAccounts

Ip Rules-Ip Address Or Range
Terraform

Firewalls

Design Guidance:

Microsoft.DocumentDB/databaseAccounts

Is Virtual Network Filter Enabled
Terraform
Virtual Network Rules
Terraform
Virtual Network Rules-Id
Terraform
Virtual Network Rules-Ignore Missing Vnet Service Endpoint
Terraform

Protect Cryptographic Keys

Design Guidance:

Microsoft.DocumentDB/databaseAccounts

Key Vault Key Uri
Terraform

Network Access Points Enforcing Network Access

Microsoft.DocumentDB/databaseAccounts

Public Network Access
Terraform

Backups

Microsoft.DocumentDB/databaseAccounts

Periodic Mode Properties-Backup Interval In Minutes
Terraform
Periodic Mode Properties-Backup Retention Interval In Hours
Terraform