In an effort to have a "rollback script" after enabling VNet and IP rules to a Cosmos DB account, I attempted:
az cosmosdb update `
>> --subscription $subscription `
>> --resource-group $globalResourceGroup `
>> --name $cosmosDBName `
>> --public-network-access Enabled `
>> --ip-range-filter "," `
>> --enable-virtual-network false `
>> --virtual-network-rules "," `
>> --debug
cli.knack.cli: Command arguments: ['cosmosdb', 'update', '--subscription', '93c72f61-2c3b-4418-a842-dd4413c907c8', '--resource-group', 'CosmosRoleAssignments2', '--name', 'role-assignment-test', '--public-network-access', 'Enabled', '--ip-range-filter', ',', '--enable-virtual-network', 'false', '--virtual-network-rules', ',', '--debug']
cli.knack.cli: __init__ debug log:
Enable color in terminal.
cli.knack.cli: Event: Cli.PreExecute []
cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x0179F988>, <function OutputProducer.on_global_arguments at 0x01AC8A78>, <function CLIQuery.on_global_arguments at 0x01AE8848>]
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
cli.azure.cli.core: Modules found from index for 'cosmosdb': ['azure.cli.command_modules.cosmosdb']
cli.azure.cli.core: Loading command modules:
cli.azure.cli.core: Name Load Time Groups Commands
cli.azure.cli.core: cosmosdb 0.300 58 199
cli.azure.cli.core: Total (1) 0.300 58 199
cli.azure.cli.core: Loaded 58 groups, 199 commands.
cli.azure.cli.core: Found a match in the command table.
cli.azure.cli.core: Raw command : cosmosdb update
cli.azure.cli.core: Command table: cosmosdb update
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x03BD8078>]
cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to 'C:\Users\adamvenezia\.azure\commands\2024-06-24.09-41-34.cosmosdb_update.63148.log'.
az_command_data_logger: command args: cosmosdb update --subscription {} --resource-group {} --name {} --public-network-access {} --ip-range-filter {} --enable-virtual-network {} --virtual-network-rules {} --debug
cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument.<locals>.add_subscription_parameter at 0x03C01898>]
cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument.<locals>.add_ids_arguments at 0x03C08208>, <function register_cache_arguments.<locals>.add_cache_arguments at 0x03C353E8>]
cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
cli.knack.cli: Event: CommandInvoker.OnPreParseArgs [<function _documentdb_deprecate at 0x03C453E8>]
cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x01AC8AC8>, <function CLIQuery.handle_query_parameter at 0x01AE8898>, <function register_ids_argument.<locals>.parse_ids_arguments at 0x03C35398>]
cli.azure.cli.core.commands.client_factory: Getting management service client client_type=CosmosDBManagementClient
cli.azure.cli.core.auth.persistence: build_persistence: location='C:\\Users\\adamvenezia\\.azure\\msal_token_cache.bin', encrypt=True
cli.azure.cli.core.auth.binary_cache: load: C:\Users\adamvenezia\.azure\msal_http_cache.bin
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/6029aed3-a04b-4a0a-8fa4-b7640c138a97
msal.authority: openid_config("https://login.microsoftonline.com/6029aed3-a04b-4a0a-8fa4-b7640c138a97/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/6029aed3-a04b-4a0a-8fa4-b7640c138a97/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/6029aed3-a04b-4a0a-8fa4-b7640c138a97/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/6029aed3-a04b-4a0a-8fa4-b7640c138a97/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/6029aed3-a04b-4a0a-8fa4-b7640c138a97/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/6029aed3-a04b-4a0a-8fa4-b7640c138a97/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/6029aed3-a04b-4a0a-8fa4-b7640c138a97/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/6029aed3-a04b-4a0a-8fa4-b7640c138a97/kerberos', 'tenant_region_scope': 'NA', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
msal.application: Broker enabled? None
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token: scopes=('https://management.core.windows.net//.default',), kwargs={}
cli.azure.cli.core.auth.msal_authentication: UserCredential.get_token: scopes=('https://management.core.windows.net//.default',), claims=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: 4ac976f3-b8e0-456f-80bd-988c3b140c54
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/93c72f61-2c3b-4418-a842-dd4413c907c8/resourceGroups/CosmosRoleAssignments2/providers/Microsoft.DocumentDB/databaseAccounts/role-assignment-test?api-version=2023-11-15'
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '3c7abd4d-3240-11ef-8aea-80b6553b683d'
cli.azure.cli.core.sdk.policies: 'CommandName': 'cosmosdb update'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--subscription --resource-group --name --public-network-access --ip-range-filter --enable-virtual-network --virtual-network-rules --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.60.0 (MSI) azsdk-python-core/1.28.0 Python/3.11.8 (Windows-10-10.0.26100-SP0)'
cli.azure.cli.core.sdk.policies: 'Authorization': '*****'
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/93c72f61-2c3b-4418-a842-dd4413c907c8/resourceGroups/CosmosRoleAssignments2/providers/Microsoft.DocumentDB/databaseAccounts/role-assignment-test?api-version=2023-11-15 HTTP/1.1" 200 20176
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-store, no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '20176'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'x-ms-gatewayversion': 'version=2.14.0'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-reads': '249'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-reads': '3749'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '4f6b38eb-61dc-47c4-878f-f23499ef3af9'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '4f6b38eb-61dc-47c4-878f-f23499ef3af9'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTCENTRALUS:20240624T154136Z:4f6b38eb-61dc-47c4-878f-f23499ef3af9'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 96391F590A304265A8916E2E6992A701 Ref B: CYS013050704039 Ref C: 2024-06-24T15:41:36Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Mon, 24 Jun 2024 15:41:35 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"id":"/subscriptions/93c72f61-2c3b-4418-a842-dd4413c907c8/resourceGroups/CosmosRoleAssignments2/providers/Microsoft.DocumentDB/databaseAccounts/role-assignment-test","name":"role-assignment-test","location":"West US 3","type":"Microsoft.DocumentDB/databaseAccounts","kind":"GlobalDocumentDB","tags":{"defaultExperience":"Core (SQL)","hidden-cosmos-mmspecial":""},"systemData":{"createdAt":"2022-04-13T16:12:19.9484626+00:00"},"properties":{"provisioningState":"Updating","documentEndpoint":"https://role-assignment-test.documents.azure.com:443/","sqlEndpoint":"https://role-assignment-test.documents.azure.com:443/","publicNetworkAccess":"Enabled","enableAutomaticFailover":false,"enableMultipleWriteLocations":false,"enablePartitionKeyMonitor":false,"isVirtualNetworkFilterEnabled":true,"virtualNetworkRules":[{"id":"/subscriptions/93c72f61-2c3b-4418-a842-dd4413c907c8/resourceGroups/shellextensions/providers/Microsoft.Network/virtualNetworks/adam-2024-04-10/subnets/default","ignoreMissingVNetServiceEndpoint":false}],"EnabledApiTypes":"Sql","disableKeyBasedMetadataWriteAccess":false,"enableFreeTier":true,"enableAnalyticalStorage":false,"analyticalStorageConfiguration":{"schemaType":"WellDefined"},"instanceId":"115dfdbd-68d2-4f50-8450-0212f63822a3","databaseAccountOfferType":"Standard","defaultIdentity":"FirstPartyIdentity","networkAclBypass":"None","enableClientTelemetry":false,"disableLocalAuth":false,"enablePartitionMerge":false,"enableBurstCapacity":false,"minimalTlsVersion":"Tls12","consistencyPolicy":{"defaultConsistencyLevel":"Session","maxIntervalInSeconds":5,"maxStalenessPrefix":100},"configurationOverrides":{},"writeLocations":[{"id":"role-assignment-test-westus3","locationName":"West US 3","documentEndpoint":"https://role-assignment-test-westus3.documents.azure.com:443/","provisioningState":"Updating","failoverPriority":0,"isZoneRedundant":false}],"readLocations":[{"id":"role-assignment-test-westus3","locationName":"West US 3","documentEndpoint":"https://role-assignment-test-westus3.documents.azure.com:443/","provisioningState":"Updating","failoverPriority":0,"isZoneRedundant":false}],"locations":[{"id":"role-assignment-test-westus3","locationName":"West US 3","documentEndpoint":"https://role-assignment-test-westus3.documents.azure.com:443/","provisioningState":"Updating","failoverPriority":0,"isZoneRedundant":false}],"failoverPolicies":[{"id":"role-assignment-test-westus3","locationName":"West US 3","failoverPriority":0}],"cors":[],"capabilities":[],"ipRules":[{"ipAddressOrRange":"207.68.130.64/26"},{"ipAddressOrRange":"207.68.190.32/27"},{"ipAddressOrRange":"167.220.249.128/26"},{"ipAddressOrRange":"157.58.216.64/26"},{"ipAddressOrRange":"194.69.119.64/26"},{"ipAddressOrRange":"13.106.174.128/26"},{"ipAddressOrRange":"13.106.174.32/27"},{"ipAddressOrRange":"13.106.4.96/27"},{"ipAddressOrRange":"13.106.78.32/27"},{"ipAddressOrRange":"20.3.101.18"},{"ipAddressOrRange":"20.3.216.235"},{"ipAddressOrRange":"20.29.243.208"},{"ipAddressOrRange":"20.9.187.220"},{"ipAddressOrRange":"4.154.144.64/29"},{"ipAddressOrRange":"4.171.31.184/29"},{"ipAddressOrRange":"4.187.66.0/23"},{"ipAddressOrRange":"4.190.146.176/28"},{"ipAddressOrRange":"4.207.242.72/29"},{"ipAddressOrRange":"4.220.136.0/24"},{"ipAddressOrRange":"4.232.44.160/28"},{"ipAddressOrRange":"4.232.44.192/26"},{"ipAddressOrRange":"4.232.45.0/25"},{"ipAddressOrRange":"4.232.102.0/23"},{"ipAddressOrRange":"4.232.111.0/28"},{"ipAddressOrRange":"4.232.123.208/28"},{"ipAddressOrRange":"4.232.195.208/28"},{"ipAddressOrRange":"13.66.143.128/28"},{"ipAddressOrRange":"13.67.10.208/28"},{"ipAddressOrRange":"13.69.67.192/28"},{"ipAddressOrRange":"13.69.107.112/28"},{"ipAddressOrRange":"13.69.112.128/28"},{"ipAddressOrRange":"13.69.230.96/28"},{"ipAddressOrRange":"13.70.74.144/28"},{"ipAddressOrRange":"13.71.175.80/28"},{"ipAddressOrRange":"13.71.199.0/28"},{"ipAddressOrRange":"13.73.244.32/28"},{"ipAddressOrRange":"13.73.253.96/29"},{"ipAddressOrRange":"13.74.108.224/28"},{"ipAddressOrRange":"13.75.39.112/28"},{"ipAddressOrRange":"13.77.53.160/28"},{"ipAddressOrRange":"13.78.109.192/28"},{"ipAddressOrRange":"13.86.219.208/28"},{"ipAddressOrRange":"13.89.174.192/28"},{"ipAddressOrRange":"13.104.248.64/27"},{"ipAddressOrRange":"13.104.252.208/28"},{"ipAddressOrRange":"13.104.252.224/28"},{"ipAddressOrRange":"13.104.253.48/28"},{"ipAddressOrRange":"13.104.254.128/28"},{"ipAddressOrRange":"20.17.25.224/28"},{"ipAddressOrRange":"20.17.26.192/26"},{"ipAddressOrRange":"20.17.27.0/25"},{"ipAddressOrRange":"20.17.56.0/23"},{"ipAddressOrRange":"20.17.71.64/28"},{"ipAddressOrRange":"20.17.131.112/28"},{"ipAddressOrRange":"20.17.136.0/23"},{"ipAddressOrRange":"20.17.170.144/28"},{"ipAddressOrRange":"20.17.186.144/28"},{"ipAddressOrRange":"20.18.179.208/28"},{"ipAddressOrRange":"20.21.46.64/28"},{"ipAddressOrRange":"20.21.48.0/23"},{"ipAddressOrRange":"20.21.55.208/29"},{"ipAddressOrRange":"20.21.67.208/28"},{"ipAddressOrRange":"20.21.75.208/28"},{"ipAddressOrRange":"20.21.83.192/26"},{"ipAddressOrRange":"20.21.84.0/25"},{"ipAddressOrRange":"20.24.0.216/29"},{"ipAddressOrRange":"20.36.117.208/28"},{"ipAddressOrRange":"20.36.124.32/28"},{"ipAddressOrRange":"20.36.124.128/25"},{"ipAddressOrRange":"20.36.125.0/26"},{"ipAddressOrRange":"20.37.68.144/28"},{"ipAddressOrRange":"20.37.69.128/25"},{"ipAddressOrRange":"20.37.70.0/26"},{"ipAddressOrRange":"20.37.154.0/23"},{"ipAddressOrRange":"20.37.156.0/26"},{"ipAddressOrRange":"20.37.193.0/25"},{"ipAddressOrRange":"20.37.193.128/26"},{"ipAddressOrRange":"20.37.198.224/29"},{"ipAddressOrRange":"20.37.228.16/28"},{"ipAddressOrRange":"20.37.228.192/26"},{"ipAddressOrRange":"20.37.229.0/25"},{"ipAddressOrRange":"20.38.80.192/26"},{"ipAddressOrRange":"20.38.82.0/23"},{"ipAddressOrRange":"20.38.133.192/28"},{"ipAddressOrRange":"20.38.141.16/28"},{"ipAddressOrRange":"20.38.141.128/25"},{"ipAddressOrRange":"20.38.142.0/26"},{"ipAddressOrRange":"20.38.147.224/28"},{"ipAddressOrRange":"20.38.152.0/28"},{"ipAddressOrRange":"20.39.8.96/27"},{"ipAddressOrRange":"20.39.8.128/26"},{"ipAddressOrRange":"20.39.15.0/29"},{"ipAddressOrRange":"20.40.206.224/29"},{"ipAddressOrRange":"20.41.2.0/23"},{"ipAddressOrRange":"20.41.4.0/26"},{"ipAddressOrRange":"20.41.64.128/25"},{"ipAddressOrRange":"20.41.65.0/26"},{"ipAddressOrRange":"20.41.69.8/29"},{"ipAddressOrRange":"20.41.192.128/25"},{"ipAddressOrRange":"20.41.193.0/26"},{"ipAddressOrRange":"20.41.197.112/29"},{"ipAddressOrRange":"20.41.198.0/25"},{"ipAddressOrRange":"20.41.198.128/26"},{"ipAddressOrRange":"20.42.2.0/23"},{"ipAddressOrRange":"20.42.4.0/26"},{"ipAddressOrRange":"20.42.64.0/28"},{"ipAddressOrRange":"20.42.129.64/26"},{"ipAddressOrRange":"20.42.132.0/23"},{"ipAddressOrRange":"20.42.225.0/25"},{"ipAddressOrRange":"20.42.225.128/26"},{"ipAddressOrRange":"20.42.230.136/29"},{"ipAddressOrRange":"20.43.40.128/25"},{"ipAddressOrRange":"20.43.41.0/26"},{"ipAddressOrRange":"20.43.44.208/29"},{"ipAddressOrRange":"20.43.64.128/25"},{"ipAddressOrRange":"20.43.65.0/26"},{"ipAddressOrRange":"20.43.70.120/29"},{"ipAddressOrRange":"20.43.121.48/28"},{"ipAddressOrRange":"20.43.128.128/25"},{"ipAddressOrRange":"20.43.130.0/26"},{"ipAddressOrRange":"20.44.10.64/28"},{"ipAddressOrRange":"20.44.17.80/28"},{"ipAddressOrRange":"20.44.27.240/28"},{"ipAddressOrRange":"20.45.123.160/28"},{"ipAddressOrRange":"20.45.208.16/28"},{"ipAddressOrRange":"20.48.201.0/26"},{"ipAddressOrRange":"20.49.83.224/28"},{"ipAddressOrRange":"20.49.95.32/28"},{"ipAddressOrRange":"20.49.102.16/29"},{"ipAddressOrRange":"20.49.111.0/29"},{"ipAddressOrRange":"20.49.114.24/29"},{"ipAddressOrRange":"20.49.118.128/25"},{"ipAddressOrRange":"20.50.68.56/29"},{"ipAddressOrRange":"20.52.64.0/28"},{"ipAddressOrRange":"20.52.73.160/28"},{"ipAddressOrRange":"20.52.93.128/26"},{"ipAddressOrRange":"20.53.0.48/28"},{"ipAddressOrRange":"20.53.45.0/24"},{"ipAddressOrRange":"20.53.46.0/26"},{"ipAddressOrRange":"20.58.71.0/26"},{"ipAddressOrRange":"20.59.84.168/29"},{"ipAddressOrRange":"20.65.130.192/26"},{"ipAddressOrRange":"20.65.131.0/24"},{"ipAddressOrRange":"20.69.9.24/29"},{"ipAddressOrRange":"20.72.22.0/23"},{"ipAddressOrRange":"20.72.28.48/28"},{"ipAddressOrRange":"20.74.197.16/29"},{"ipAddressOrRange":"20.79.108.112/29"},{"ipAddressOrRange":"20.87.83.112/29"},{"ipAddressOrRange":"20.90.38.248/29"},{"ipAddressOrRange":"20.90.129.128/25"},{"ipAddressOrRange":"20.90.130.0/24"},{"ipAddressOrRange":"20.91.146.128/25"},{"ipAddressOrRange":"20.91.147.0/26"},{"ipAddressOrRange":"20.92.6.200/29"},{"ipAddressOrRange":"20.97.39.141/32"},{"ipAddressOrRange":"20.98.150.0/29"},{"ipAddressOrRange":"20.98.195.172/32"},{"ipAddressOrRange":"20.98.198.224/29"},{"ipAddressOrRange":"20.99.12.0/23"},{"ipAddressOrRange":"20.100.0.192/26"},{"ipAddressOrRange":"20.100.5.24/29"},{"ipAddressOrRange":"20.105.215.28/30"},{"ipAddressOrRange":"20.105.244.48/29"},{"ipAddressOrRange":"20.111.4.48/29"},{"ipAddressOrRange":"20.116.47.72/29"},{"ipAddressOrRange":"20.117.193.184/29"},{"ipAddressOrRange":"20.118.79.192/29"},{"ipAddressOrRange":"20.118.139.200/29"},{"ipAddressOrRange":"20.119.28.57/32"},{"ipAddressOrRange":"20.125.4.170/31"},{"ipAddressOrRange":"20.125.5.248/29"},{"ipAddressOrRange":"20.125.156.16/29"},{"ipAddressOrRange":"20.125.163.208/29"},{"ipAddressOrRange":"20.125.171.208/28"},{"ipAddressOrRange":"20.125.203.208/28"},{"ipAddressOrRange":"20.150.162.0/23"},{"ipAddressOrRange":"20.150.173.16/28"},{"ipAddressOrRange":"20.150.181.112/28"},{"ipAddressOrRange":"20.150.190.64/28"},{"ipAddressOrRange":"20.168.163.208/28"},{"ipAddressOrRange":"20.170.170.0/23"},{"ipAddressOrRange":"20.189.104.128/25"},{"ipAddressOrRange":"20.189.106.0/26"},{"ipAddressOrRange":"20.189.109.232/29"},{"ipAddressOrRange":"20.189.192.192/26"},{"ipAddressOrRange":"20.189.199.40/29"},{"ipAddressOrRange":"20.191.164.0/24"},{"ipAddressOrRange":"20.191.165.0/26"},{"ipAddressOrRange":"20.192.42.0/24"},{"ipAddressOrRange":"20.192.43.0/26"},{"ipAddressOrRange":"20.192.102.80/28"},{"ipAddressOrRange":"20.192.152.0/26"},{"ipAddressOrRange":"20.192.162.0/23"},{"ipAddressOrRange":"20.192.184.96/28"},{"ipAddressOrRange":"20.192.226.0/23"},{"ipAddressOrRange":"20.192.238.96/28"},{"ipAddressOrRange":"20.193.205.144/28"},{"ipAddressOrRange":"20.194.67.192/28"},{"ipAddressOrRange":"20.194.78.0/23"},{"ipAddressOrRange":"20.195.64.0/25"},{"ipAddressOrRange":"20.200.161.48/29"},{"ipAddressOrRange":"20.200.195.0/26"},{"ipAddressOrRange":"20.200.199.192/29"},{"ipAddressOrRange":"20.204.193.112/29"},{"ipAddressOrRange":"20.205.50.120/29"},{"ipAddressOrRange":"20.205.64.0/23"},{"ipAddressOrRange":"20.205.67.128/26"},{"ipAddressOrRange":"20.205.77.160/28"},{"ipAddressOrRange":"20.205.77.224/27"},{"ipAddressOrRange":"20.205.83.240/28"},{"ipAddressOrRange":"20.206.179.144/29"},{"ipAddressOrRange":"20.208.2.0/23"},{"ipAddressOrRange":"20.208.19.208/28"},{"ipAddressOrRange":"20.208.144.16/29"},{"ipAddressOrRange":"20.210.70.88/29"},{"ipAddressOrRange":"20.210.150.0/23"},{"ipAddressOrRange":"20.213.194.144/29"},{"ipAddressOrRange":"20.215.8.0/23"},{"ipAddressOrRange":"20.215.19.208/28"},{"ipAddressOrRange":"20.215.27.208/28"},{"ipAddressOrRange":"20.215.158.64/28"},{"ipAddressOrRange":"20.215.172.16/28"},{"ipAddressOrRange":"20.215.172.64/26"},{"ipAddressOrRange":"20.215.172.128/25"},{"ipAddressOrRange":"20.217.11.240/28"},{"ipAddressOrRange":"20.217.12.128/25"},{"ipAddressOrRange":"20.217.13.0/26"},{"ipAddressOrRange":"20.217.48.0/23"},{"ipAddressOrRange":"20.217.62.64/28"},{"ipAddressOrRange":"20.217.75.208/28"},{"ipAddressOrRange":"20.217.91.208/28"},{"ipAddressOrRange":"20.221.136.72/29"},{"ipAddressOrRange":"20.223.64.60/32"},{"ipAddressOrRange":"20.223.65.144/29"},{"ipAddressOrRange":"20.228.5.112/28"},{"ipAddressOrRange":"20.228.7.0/25"},{"ipAddressOrRange":"20.228.7.128/26"},{"ipAddressOrRange":"20.232.89.104/29"},{"ipAddressOrRange":"23.98.83.112/28"},{"ipAddressOrRange":"23.98.106.128/29"},{"ipAddressOrRange":"23.98.109.64/26"},{"ipAddressOrRange":"23.98.109.128/25"},{"ipAddressOrRange":"40.64.11.176/29"},{"ipAddressOrRange":"40.64.132.232/29"},{"ipAddressOrRange":"40.69.108.160/28"},{"ipAddressOrRange":"40.69.111.48/28"},{"ipAddressOrRange":"40.70.148.160/28"},{"ipAddressOrRange":"40.71.14.32/28"},{"ipAddressOrRange":"40.74.24.192/26"},{"ipAddressOrRange":"40.74.26.0/23"},{"ipAddressOrRange":"40.74.149.64/28"},{"ipAddressOrRange":"40.75.35.144/28"},{"ipAddressOrRange":"40.78.196.128/28"},{"ipAddressOrRange":"40.78.229.96/28"},{"ipAddressOrRange":"40.78.236.176/28"},{"ipAddressOrRange":"40.78.245.16/28"},{"ipAddressOrRange":"40.78.251.192/28"},{"ipAddressOrRange":"40.79.132.112/28"},{"ipAddressOrRange":"40.79.139.80/28"},{"ipAddressOrRange":"40.79.146.240/28"},{"ipAddressOrRange":"40.79.163.80/28"},{"ipAddressOrRange":"40.79.171.160/28"},{"ipAddressOrRange":"40.79.187.208/28"},{"ipAddressOrRange":"40.79.195.224/28"},{"ipAddressOrRange":"40.80.51.160/28"},{"ipAddressOrRange":"40.80.56.128/25"},{"ipAddressOrRange":"40.80.57.0/26"},{"ipAddressOrRange":"40.80.62.24/29"},{"ipAddressOrRange":"40.80.96.200/29"},{"ipAddressOrRange":"40.80.168.128/25"},{"ipAddressOrRange":"40.80.169.0/26"},{"ipAddressOrRange":"40.80.172.112/29"},{"ipAddressOrRange":"40.80.176.96/28"},{"ipAddressOrRange":"40.80.185.0/24"},{"ipAddressOrRange":"40.80.186.0/25"},{"ipAddressOrRange":"40.82.249.64/26"},{"ipAddressOrRange":"40.82.250.0/23"},{"ipAddressOrRange":"40.89.16.128/25"},{"ipAddressOrRange":"40.89.17.0/26"},{"ipAddressOrRange":"40.89.20.224/29"},{"ipAddressOrRange":"40.113.176.232/29"},{"ipAddressOrRange":"40.117.24.160/29"},{"ipAddressOrRange":"40.119.9.0/25"},{"ipAddressOrRange":"40.119.9.128/26"},{"ipAddressOrRange":"40.120.8.56/29"},{"ipAddressOrRange":"40.120.9.192/28"},{"ipAddressOrRange":"40.120.64.112/28"},{"ipAddressOrRange":"40.120.75.112/28"},{"ipAddressOrRange":"40.120.86.64/26"},{"ipAddressOrRange":"40.122.0.16/28"},{"ipAddressOrRange":"48.216.10.208/28"},{"ipAddressOrRange":"48.216.30.0/23"},{"ipAddressOrRange":"51.12.18.0/23"},{"ipAddressOrRange":"51.12.26.0/23"},{"ipAddressOrRange":"51.12.75.232/29"},{"ipAddressOrRange":"51.12.101.176/28"},{"ipAddressOrRange":"51.12.206.16/28"},{"ipAddressOrRange":"51.12.229.64/28"},{"ipAddressOrRange":"51.12.237.64/28"},{"ipAddressOrRange":"51.13.128.0/28"},{"ipAddressOrRange":"51.53.40.176/28"},{"ipAddressOrRange":"51.53.40.192/26"},{"ipAddressOrRange":"51.53.48.0/25"},{"ipAddressOrRange":"51.53.96.0/23"},{"ipAddressOrRange":"51.53.110.64/28"},{"ipAddressOrRange":"51.53.136.240/28"},{"ipAddressOrRange":"51.53.143.128/25"},{"ipAddressOrRange":"51.53.176.0/23"},{"ipAddressOrRange":"51.53.191.64/28"},{"ipAddressOrRange":"51.103.203.208/28"},{"ipAddressOrRange":"51.104.9.32/28"},{"ipAddressOrRange":"51.104.24.128/25"},{"ipAddressOrRange":"51.104.25.0/26"},{"ipAddressOrRange":"51.104.29.216/29"},{"ipAddressOrRange":"51.105.67.240/28"},{"ipAddressOrRange":"51.105.75.240/28"},{"ipAddressOrRange":"51.105.92.176/28"},{"ipAddressOrRange":"51.105.93.64/26"},{"ipAddressOrRange":"51.105.93.128/25"},{"ipAddressOrRange":"51.107.51.40/29"},{"ipAddressOrRange":"51.107.52.0/25"},{"ipAddressOrRange":"51.107.52.128/26"},{"ipAddressOrRange":"51.107.128.0/28"},{"ipAddressOrRange":"51.107.148.80/28"},{"ipAddressOrRange":"51.107.149.0/25"},{"ipAddressOrRange":"51.107.149.128/26"},{"ipAddressOrRange":"51.107.192.80/28"},{"ipAddressOrRange":"51.107.246.192/26"},{"ipAddressOrRange":"51.116.147.32/28"},{"ipAddressOrRange":"51.116.147.64/26"},{"ipAddressOrRange":"51.116.147.128/25"},{"ipAddressOrRange":"51.116.245.112/28"},{"ipAddressOrRange":"51.116.245.176/28"},{"ipAddressOrRange":"51.116.253.48/28"},{"ipAddressOrRange":"51.116.253.144/28"},{"ipAddressOrRange":"51.120.44.208/28"},{"ipAddressOrRange":"51.120.45.64/26"},{"ipAddressOrRange":"51.120.45.128/25"},{"ipAddressOrRange":"51.120.100.224/28"},{"ipAddressOrRange":"51.120.109.96/28"},{"ipAddressOrRange":"51.120.213.32/28"},{"ipAddressOrRange":"51.120.228.224/27"},{"ipAddressOrRange":"51.120.229.64/26"},{"ipAddressOrRange":"51.120.229.128/25"},{"ipAddressOrRange":"51.120.238.0/23"},{"ipAddressOrRange":"51.137.160.128/25"},{"ipAddressOrRange":"51.137.161.0/26"},{"ipAddressOrRange":"51.137.164.192/29"},{"ipAddressOrRange":"51.138.160.16/28"},{"ipAddressOrRange":"51.138.215.128/26"},{"ipAddressOrRange":"51.140.212.112/28"},{"ipAddressOrRange":"52.138.92.128/28"},{"ipAddressOrRange":"52.138.229.32/28"},{"ipAddressOrRange":"52.139.111.64/26"},{"ipAddressOrRange":"52.140.104.128/25"},{"ipAddressOrRange":"52.140.105.0/26"},{"ipAddressOrRange":"52.140.108.208/29"},{"ipAddressOrRange":"52.150.136.192/26"},{"ipAddressOrRange":"52.150.137.128/25"},{"ipAddressOrRange":"52.150.154.16/29"},{"ipAddressOrRange":"52.150.155.0/24"},{"ipAddressOrRange":"52.150.157.160/29"},{"ipAddressOrRange":"52.150.157.192/26"},{"ipAddressOrRange":"52.162.111.48/28"},{"ipAddressOrRange":"52.167.107.224/28"},{"ipAddressOrRange":"52.172.81.240/29"},{"ipAddressOrRange":"52.176.232.16/28"},{"ipAddressOrRange":"52.182.141.16/28"},{"ipAddressOrRange":"52.228.80.128/25"},{"ipAddressOrRange":"52.228.81.0/26"},{"ipAddressOrRange":"52.228.86.144/29"},{"ipAddressOrRange":"52.231.20.64/28"},{"ipAddressOrRange":"52.231.148.160/28"},{"ipAddressOrRange":"52.231.151.32/28"},{"ipAddressOrRange":"52.236.187.112/28"},{"ipAddressOrRange":"52.242.45.56/29"},{"ipAddressOrRange":"52.246.155.224/28"},{"ipAddressOrRange":"52.250.228.0/29"},{"ipAddressOrRange":"57.151.154.176/28"},{"ipAddressOrRange":"57.151.224.0/23"},{"ipAddressOrRange":"68.154.137.112/28"},{"ipAddressOrRange":"68.220.82.112/28"},{"ipAddressOrRange":"68.221.92.208/28"},{"ipAddressOrRange":"68.221.94.0/23"},{"ipAddressOrRange":"68.221.103.0/28"},{"ipAddressOrRange":"68.221.104.0/25"},{"ipAddressOrRange":"68.221.104.128/26"},{"ipAddressOrRange":"68.221.147.208/28"},{"ipAddressOrRange":"68.221.155.112/28"},{"ipAddressOrRange":"70.153.168.0/23"},{"ipAddressOrRange":"70.153.177.112/28"},{"ipAddressOrRange":"70.153.202.176/28"},{"ipAddressOrRange":"70.153.218.176/28"},{"ipAddressOrRange":"74.243.20.176/28"},{"ipAddressOrRange":"102.37.64.96/28"},{"ipAddressOrRange":"102.37.72.224/28"},{"ipAddressOrRange":"102.37.166.128/26"},{"ipAddressOrRange":"102.133.60.48/28"},{"ipAddressOrRange":"102.133.60.192/26"},{"ipAddressOrRange":"102.133.61.0/25"},{"ipAddressOrRange":"102.133.124.104/29"},{"ipAddressOrRange":"102.133.127.160/28"},{"ipAddressOrRange":"102.133.156.136/29"},{"ipAddressOrRange":"102.133.216.128/25"},{"ipAddressOrRange":"102.133.217.0/26"},{"ipAddressOrRange":"102.133.218.248/29"},{"ipAddressOrRange":"102.133.251.184/29"},{"ipAddressOrRange":"102.133.253.48/28"},{"ipAddressOrRange":"104.46.179.64/26"},{"ipAddressOrRange":"104.46.182.0/24"},{"ipAddressOrRange":"158.23.15.0/28"},{"ipAddressOrRange":"158.23.108.208/28"},{"ipAddressOrRange":"158.23.110.0/23"},{"ipAddressOrRange":"158.23.119.128/26"},{"ipAddressOrRange":"158.23.123.208/28"},{"ipAddressOrRange":"158.23.195.208/28"},{"ipAddressOrRange":"158.23.200.0/25"},{"ipAddressOrRange":"167.105.144.0/26"},{"ipAddressOrRange":"172.202.86.128/29"},{"ipAddressOrRange":"172.204.168.0/23"},{"ipAddressOrRange":"172.204.170.208/28"},{"ipAddressOrRange":"172.204.171.64/26"},{"ipAddressOrRange":"172.204.171.128/25"},{"ipAddressOrRange":"172.204.182.48/28"},{"ipAddressOrRange":"172.204.194.176/28"},{"ipAddressOrRange":"172.204.210.176/28"},{"ipAddressOrRange":"172.210.218.144/28"},{"ipAddressOrRange":"172.215.206.16/28"},{"ipAddressOrRange":"191.233.12.0/23"},{"ipAddressOrRange":"191.233.54.224/28"},{"ipAddressOrRange":"191.233.205.160/28"},{"ipAddressOrRange":"191.234.137.32/29"},{"ipAddressOrRange":"191.234.142.64/26"},{"ipAddressOrRange":"191.234.143.0/24"},{"ipAddressOrRange":"191.234.149.0/28"},{"ipAddressOrRange":"191.234.157.0/28"},{"ipAddressOrRange":"191.235.224.128/25"},{"ipAddressOrRange":"191.235.225.0/26"}],"backupPolicy":{"type":"Periodic","periodicModeProperties":{"backupIntervalInMinutes":240,"backupRetentionIntervalInHours":8,"backupStorageRedundancy":"Geo"}},"networkAclBypassResourceIds":[],"capacity":{"totalThroughputLimit":1000},"keysMetadata":{"primaryMasterKey":{},"secondaryMasterKey":{},"primaryReadonlyMasterKey":{},"secondaryReadonlyMasterKey":{}}},"identity":{"type":"None"}}
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/93c72f61-2c3b-4418-a842-dd4413c907c8/resourceGroups/CosmosRoleAssignments2/providers/Microsoft.DocumentDB/databaseAccounts/role-assignment-test?api-version=2023-11-15'
cli.azure.cli.core.sdk.policies: Request method: 'PATCH'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Content-Length': '164'
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '3c7abd4d-3240-11ef-8aea-80b6553b683d'
cli.azure.cli.core.sdk.policies: 'CommandName': 'cosmosdb update'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--subscription --resource-group --name --public-network-access --ip-range-filter --enable-virtual-network --virtual-network-rules --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.60.0 (MSI) azsdk-python-core/1.28.0 Python/3.11.8 (Windows-10-10.0.26100-SP0)'
cli.azure.cli.core.sdk.policies: 'Authorization': '*****'
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: {"properties": {"ipRules": [], "isVirtualNetworkFilterEnabled": false, "virtualNetworkRules": [{"id": ","}], "publicNetworkAccess": "ENABLED", "apiProperties": {}}}
urllib3.connectionpool: https://management.azure.com:443 "PATCH /subscriptions/93c72f61-2c3b-4418-a842-dd4413c907c8/resourceGroups/CosmosRoleAssignments2/providers/Microsoft.DocumentDB/databaseAccounts/role-assignment-test?api-version=2023-11-15 HTTP/1.1" 400 262
cli.azure.cli.core.sdk.policies: Response status: 400
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '262'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'x-ms-failure-cause': 'gateway'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': 'a78677c7-2f48-4e16-8f74-a9173aaed1cc'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': 'a78677c7-2f48-4e16-8f74-a9173aaed1cc'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTCENTRALUS:20240624T154136Z:a78677c7-2f48-4e16-8f74-a9173aaed1cc'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: E1DA23C9676E481D8625641A0C0BE8F4 Ref B: CYS013050704039 Ref C: 2024-06-24T15:41:36Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Mon, 24 Jun 2024 15:41:35 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"error":{"code":"LinkedInvalidPropertyId","message":"Property id ',' at path 'properties.virtualNetworkRules[0].id' is invalid. Expect fully qualified resource Id that start with '/subscriptions/{subscriptionId}' or '/providers/{resourceProviderNamespace}/'."}}
cli.azure.cli.core.azclierror: Traceback (most recent call last):
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\knack/cli.py", line 233, in invoke
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 664, in execute
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 731, in _run_jobs_serially
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 701, in _run_job
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 334, in __call__
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/command_operation.py", line 121, in handler
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/cosmosdb/custom.py", line 514, in cli_cosmosdb_update
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/tracing/decorator.py", line 76, in wrapper_use_tracer
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/mgmt/cosmosdb/operations/_database_accounts_operations.py", line 912, in begin_update
File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/mgmt/cosmosdb/operations/_database_accounts_operations.py", line 783, in _update_initial
azure.core.exceptions.HttpResponseError: (LinkedInvalidPropertyId) Property id ',' at path 'properties.virtualNetworkRules[0].id' is invalid. Expect fully qualified resource Id that start with '/subscriptions/{subscriptionId}' or '/providers/{resourceProviderNamespace}/'.
Code: LinkedInvalidPropertyId
Message: Property id ',' at path 'properties.virtualNetworkRules[0].id' is invalid. Expect fully qualified resource Id that start with '/subscriptions/{subscriptionId}' or '/providers/{resourceProviderNamespace}/'.
cli.azure.cli.core.azclierror: (LinkedInvalidPropertyId) Property id ',' at path 'properties.virtualNetworkRules[0].id' is invalid. Expect fully qualified resource Id that start with '/subscriptions/{subscriptionId}' or '/providers/{resourceProviderNamespace}/'.
Code: LinkedInvalidPropertyId
Message: Property id ',' at path 'properties.virtualNetworkRules[0].id' is invalid. Expect fully qualified resource Id that start with '/subscriptions/{subscriptionId}' or '/providers/{resourceProviderNamespace}/'.
az_command_data_logger: (LinkedInvalidPropertyId) Property id ',' at path 'properties.virtualNetworkRules[0].id' is invalid. Expect fully qualified resource Id that start with '/subscriptions/{subscriptionId}' or '/providers/{resourceProviderNamespace}/'.
Code: LinkedInvalidPropertyId
Message: Property id ',' at path 'properties.virtualNetworkRules[0].id' is invalid. Expect fully qualified resource Id that start with '/subscriptions/{subscriptionId}' or '/providers/{resourceProviderNamespace}/'.
cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x03BD81B8>]
az_command_data_logger: exit code: 1
cli.__main__: Command ran in 2.386 seconds (init: 0.720, invoke: 1.666)
telemetry.main: Begin splitting cli events and extra events, total events: 1
telemetry.client: Accumulated 0 events. Flush the clients.
telemetry.main: Finish splitting cli events and extra events, cli events: 1
telemetry.save: Save telemetry record of length 4267 in cache
telemetry.main: Begin creating telemetry upload process.
telemetry.process: Creating upload process: "C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\python.exe C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\Lib\site-packages\azure\cli\telemetry\__init__.pyc C:\Users\adamvenezia\.azure"
telemetry.process: Return from creating process
telemetry.main: Finish creating telemetry upload process.
Python (Windows) 3.11.8 (tags/v3.11.8:db85d51, Feb 6 2024, 21:52:07) [MSC v.1937 32 bit (Intel)]
Describe the bug
In an effort to have a "rollback script" after enabling VNet and IP rules to a Cosmos DB account, I attempted:
Thanks to #15291, the line
--ip-range-filter ","works, but--virtual-network-rules ","does not. Can this also be added?Related command
Errors
argument --ip-range-filter: expected at least one argumentIssue script & Debug output
Expected behavior
Remove all VNet filter rules
Environment Summary
azure-cli 2.60.0 *
core 2.60.0 *
telemetry 1.1.0
Dependencies:
msal 1.28.0
azure-mgmt-resource 23.1.0b2
Python location 'C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\python.exe'
Extensions directory 'C:\Users\adamvenezia.azure\cliextensions'
Python (Windows) 3.11.8 (tags/v3.11.8:db85d51, Feb 6 2024, 21:52:07) [MSC v.1937 32 bit (Intel)]
Legal docs and information: aka.ms/AzureCliLegal
Additional context
This is a work around script: