Create an Azure Cosmos account with IP firewall using Azure CLI
Use Azure Cloud Shell
Azure hosts Azure Cloud Shell, an interactive shell environment that you can use through your browser. You can use either Bash or PowerShell with Cloud Shell to work with Azure services. You can use the Cloud Shell preinstalled commands to run the code in this article without having to install anything on your local environment.
To start Azure Cloud Shell:
|Select Try It in the upper-right corner of a code block. Selecting Try It doesn't automatically copy the code to Cloud Shell.|
|Go to https://shell.azure.com, or select the Launch Cloud Shell button to open Cloud Shell in your browser.|
|Select the Cloud Shell button on the menu bar at the upper right in the Azure portal.|
To run the code in this article in Azure Cloud Shell:
Start Cloud Shell.
Select the Copy button on a code block to copy the code.
Paste the code into the Cloud Shell session by selecting Ctrl+Shift+V on Windows and Linux or by selecting Cmd+Shift+V on macOS.
Select Enter to run the code.
If you choose to install and use the CLI locally, this topic requires that you are running the Azure CLI version 2.9.1 or later. Run
az --version to find the version. If you need to install or upgrade, see Install Azure CLI.
This sample demonstrates using a SQL (Core) API account. To use this sample for other APIs, apply the
ip-range-filter parameter in the script below to
az cosmosdb account create command for your API specific script.
#!/bin/bash # Create an Azure Cosmos Account with IP Firewall # Generate a unique 10 character alphanumeric string to ensure unique resource names uniqueId=$(env LC_CTYPE=C tr -dc 'a-z0-9' < /dev/urandom | fold -w 10 | head -n 1) # Resource group and Cosmos account variables resourceGroupName="Group-$uniqueId" location='westus2' accountName="cosmos-$uniqueId" #needs to be lower case # Create a resource group az group create -n $resourceGroupName -l $location # Create a Cosmos DB account with default values and IP Firewall enabled # Use appropriate values for --kind or --capabilities for other APIs az cosmosdb create \ -n $accountName \ -g $resourceGroupName \ --ip-range-filter '192.168.221.17'
Clean up deployment
After the script sample has been run, the following command can be used to remove the resource group and all resources associated with it.
az group delete --name $resourceGroupName
This script uses the following commands. Each command in the table links to command specific documentation.
|az group create||Creates a resource group in which all resources are stored.|
|az cosmosdb create||Creates an Azure Cosmos DB account.|
|az group delete||Deletes a resource group including all nested resources.|
For more information on the Azure Cosmos DB CLI, see Azure Cosmos DB CLI documentation.
All Azure Cosmos DB CLI script samples can be found in the Azure Cosmos DB CLI GitHub Repository.