My end goal is to be able to automate this creation through terraform, however, first I need to be able to do this through the portal to understand what is happening.

I’ve created an Azure AI Search resource and I’m trying to connect to a Cosmos MongoDB database. Both resources have their own private endpoints which are under the same subscription, resource group, location, virtual network, and subnet. The CosmosDB is public access disabled, and private access goes through that endpoint. The Azure Search allows select IP addresses.

When in the portal for Azure AI Search, I go to “Datasources”, add a new datasource, and select the “Choose an existing connection” option, because my CosmosDB is already made. However, when choosing this connection, I get this error:

BadRequest: Response status code does not indicate success: Forbidden (403); Substatus: 0; ActivityId:...; 
Reason: (Request originated from IP ... through public internet. 
This is blocked by your Cosmos DB account firewall settings...

How am I able