-
Notifications
You must be signed in to change notification settings - Fork 3.4k
Cosmos DB --network-acl-bypass-resource-ids need to be validated further #24156
Copy link
Copy link
Closed
Labels
Auto-AssignAuto assign by botAuto assign by botCXP AttentionThis issue is handled by CXP team.This issue is handled by CXP team.CosmosDBaz cosmosdbaz cosmosdbbugThis issue requires a change to an existing behavior in the product in order to be resolved.This issue requires a change to an existing behavior in the product in order to be resolved.needs-author-feedbackMore information is needed from author to address the issue.More information is needed from author to address the issue.
Metadata
Metadata
Assignees
Labels
Auto-AssignAuto assign by botAuto assign by botCXP AttentionThis issue is handled by CXP team.This issue is handled by CXP team.CosmosDBaz cosmosdbaz cosmosdbbugThis issue requires a change to an existing behavior in the product in order to be resolved.This issue requires a change to an existing behavior in the product in order to be resolved.needs-author-feedbackMore information is needed from author to address the issue.More information is needed from author to address the issue.
Type
Fields
Give feedbackNo fields configured for issues without a type.
Related command
az cosmosdb update --name MyCosmosDBDatabaseAccount--resource-group MyResourceGroup--network-acl-bypass AzureServices --network-acl-bypass-resource-ids "/subscriptions/subId/resourceGroups/rgName/providers/Microsoft.Synapse/workspaces/wsName"
Describe the bug
It's possible to input resource id without leading '/' in URI, and this cause Cosmos DB Analytical Store to be unable to identify the mentioned resources and by-pass on network acl checking.
Without the leading '/' in resource URI, CLI execution won't report any errors or indicate it's actually an invalid format.
Cosmos DB can still store the invalid URI at last, but no help to allow querying from Synapse.
To Reproduce
az cosmosdb update --name MyCosmosDBDatabaseAccount--resource-group MyResourceGroup--network-acl-bypass AzureServices --network-acl-bypass-resource-ids "subscriptions/subId/resourceGroups/rgName/providers/Microsoft.Synapse/workspaces/wsName"
Expected behavior
Please validate the input values of --network-acl-bypass-resource-ids, to ensure customer configuring their resource correctly.
Environment Summary
Additional Context