Skip to main content
Technical Preview

Overview

Client-mode REST API connector for the Azure Cosmos DB for NoSQL data plane: create and upsert and read and replace documents and SQL queries with Entra ID tokens. BASE_ADDRESS defaults to https://YOUR_ACCOUNT.documents.azure.com. Topics use data/azure-cosmos-db/<object>/<verb>.

Authentication

Microsoft Entra ID (Cosmos DB RBAC): Authorization: {value.json.authorization} = URL-encoded “type=aad&ver=1.0&sig=<Entra access token>” (scope https://YOUR_ACCOUNT.documents.azure.com/.default; role Cosmos DB Built-in Data Contributor). A resource token (type=resource) also works. Master-key auth needs a per-request HMAC over verb, resource and date, which the REST_API connector cannot compute, so it is not supported. x-ms-date (RFC 1123, UTC, within 15 minutes) is passed per payload.
Keep credentials in broker secrets and never retain topics that carry tokens or client secrets.

Notes

  • partition_key is a JSON array string, e.g. [“line-1”].
  • Entra RBAC covers data-plane operations only; databases and containers are created through ARM / portal.
  • DocumentQuery sends {value.json.body} = {“query”:“SELECT …”,“parameters”:[…]} as application/query+json.

Basic Syntax

Sources

Last modified on October 21, 2026