Azure Cosmos Connector

Overview

Used for OneTrust Data Discovery, the Azure Cosmos connector helps integrate with the Azure Cosmos DB, which is a fully managed NoSQL database service provided by Microsoft. It integrates with Azure services seamlessly and provides multiple database APIs to query its data. It's a fully managed service providing a server-less experience which automatically scales with demand. Cosmos supports a multi-model database service, offering an API projection for all major NoSQL types including Column-family, Document, Graph, and Key-Value. In addition, it provides features specifically supporting Microservices Architecture by supporting a choice of pure JSON data types and JavaScript engine with a query API built into it.

For more information on this service, see Azure's product information and quickstart guide for managing SQL API data.

Note:

This connector is currently under Public Preview. Contact OneTrust Support to request early access.

Pod Residency: nosql-scanner

Supported Scan Actions


Scan Type	Description
Catalog	This scan type will collect the metadata for the objects.
Catalog & Scan	Metadata will be collected for the required services and then data extraction will be performed. It will return the personally identifiable information/data elements and terms as per the classification label identified.

Credentials and Permissions

OneTrust recommends to adhere to your organization's security and infrastructure policy and include system engineer resources or other qualified subject matter experts to set up credentials on data sources. For specific instructions for how to enable these credentials, refer to your data source's implementation documentation, knowledge base and/or support resources.

Required at minimum for connection:

Host
Master Key

Sample JSON

JSON

{
    "connectionUrl": "https://your_connection_url.azure.com:443",
    "primary_key": "your_primary_key"
}

{
    "connectionUrl": "https://your_connection_url.azure.com:443",
    "primary_key": "your_primary_key"
}

Scan Profile Support

Note:

For additional details on scan profile configuration and management, see Setting Up Scan Profiles.

Limits

Databases
Containers per database
Schema item sample size

Note:
This is currently set as an environment variable.

Collected Objects

For more details, see resources on Azure Cosmos DB resource model.


Object	Description
Databases	The location of a set of schema-agnostic containers.
Containers	The unit of scalability for both throughput and storage. It is a schema-agnostic container of items.
Items	Can represent either a document in a collection, a row in a table, or a node or edge in a graph. Items added to a container are automatically grouped into logical partitions, which are distributed across physical partitions, based on the partition key.

Collected Fields

Field

Description

Flattened JSON Key Value Pairs

Example: