nerf-az-cosmosdb

name	nerf-az-cosmosdb
description	Azure Cosmos DB account inspection tools (network access, VNet rules, databases)
targets	["*"]

nerf-az-cosmosdb

These tools are available as scripts within this skill. Call them using the paths shown in each usage line.

Tools for inspecting Cosmos DB account configuration. az-cosmosdb-show reports publicNetworkAccess, isVirtualNetworkFilterEnabled, virtualNetworkRules, and the private endpoint connections list. Use during private-networking validation to confirm VNet filtering is active and the public surface is restricted. All tools accept --subscription to target a specific subscription.

nerf-az-cosmosdb-list

List Cosmos DB accounts (optionally filtered by resource group).

Usage: scripts/nerf-az-cosmosdb-list [--resource-group|-g <resource_group>] [--subscription <subscription>] Maps to: az cosmosdb list <resource_group> <subscription> --output json

Options:

• --resource-group|-g (optional): Filter to a specific resource group
• --subscription (optional): Subscription name or ID (defaults to active)

---

nerf-az-cosmosdb-show

Show Cosmos DB account details (network access, VNet rules, private endpoints).

Usage: scripts/nerf-az-cosmosdb-show --resource-group|-g <resource_group> [--subscription <subscription>] <name> Maps to: az cosmosdb show --resource-group <resource_group> --name <name> <subscription> --output json

Options:

• --resource-group|-g (required): Resource group containing the account
• --subscription (optional): Subscription name or ID (defaults to active)

Arguments:

• <name> (required): Cosmos DB account name

---

nerf-az-cosmosdb-database-list

List SQL databases in a Cosmos DB account.

Usage: scripts/nerf-az-cosmosdb-database-list --resource-group|-g <resource_group> [--subscription <subscription>] <account_name> Maps to: az cosmosdb sql database list --resource-group <resource_group> --account-name <account_name> <subscription> --output json

Options:

• --resource-group|-g (required): Resource group containing the account
• --subscription (optional): Subscription name or ID (defaults to active)

Arguments:

• <account_name> (required): Cosmos DB account name

---

nerf-az-cosmosdb-network-rule-list

List virtual network rules on a Cosmos DB account.

Usage: scripts/nerf-az-cosmosdb-network-rule-list --resource-group|-g <resource_group> [--subscription <subscription>] <account_name> Maps to: az cosmosdb network-rule list --resource-group <resource_group> --name <account_name> <subscription> --output json

Options:

• --resource-group|-g (required): Resource group containing the account
• --subscription (optional): Subscription name or ID (defaults to active)

Arguments:

• <account_name> (required): Cosmos DB account name

---

Hit a bug, complaint, bypass-worthy guardrail, or want a feature? Use the nerf-report skill.