diff --git a/specification/cosmos-db/resource-manager/Microsoft.DocumentDB/stable/2015-04-08/cosmos-db.json b/specification/cosmos-db/resource-manager/Microsoft.DocumentDB/stable/2015-04-08/cosmos-db.json
index 4862ff3d075c..ef31745c691c 100644
--- a/specification/cosmos-db/resource-manager/Microsoft.DocumentDB/stable/2015-04-08/cosmos-db.json
+++ b/specification/cosmos-db/resource-manager/Microsoft.DocumentDB/stable/2015-04-08/cosmos-db.json
@@ -1446,6 +1446,10 @@
           "description": "Cosmos DB Firewall Support: This value specifies the set of IP addresses or IP address ranges in CIDR form to be included as the allowed list of client IPs for a given database account. IP addresses/ranges must be comma separated and must not contain any spaces.",
           "$ref": "#/definitions/IPRangeFilter"
         },
+        "isVirtualNetworkFilterEnabled": {
+          "description": "Flag to indicate whether to enable/disable Virtual Network ACL rules.",
+          "type": "boolean"
+        },
         "enableAutomaticFailover": {
           "description": "Enables automatic failover of the write region in the rare event that the region is unavailable due to an outage. Automatic failover will result in a new write region for the account and is chosen based on the failover priorities configured for the account.",
           "type": "boolean"
@@ -1484,6 +1488,13 @@
           "items": {
             "$ref": "#/definitions/FailoverPolicy"
           }
+        },
+        "virtualNetworkRules": {
+          "type": "array",
+          "description": "List of Virtual Network ACL rules configured for the Cosmos DB account.",
+          "items": {
+            "$ref": "#/definitions/VirtualNetworkRule"
+          }
         }
       }
     },
@@ -1522,6 +1533,10 @@
           "description": "Cosmos DB Firewall Support: This value specifies the set of IP addresses or IP address ranges in CIDR form to be included as the allowed list of client IPs for a given database account. IP addresses/ranges must be comma separated and must not contain any spaces.",
           "$ref": "#/definitions/IPRangeFilter"
         },
+        "isVirtualNetworkFilterEnabled": {
+          "description": "Flag to indicate whether to enable/disable Virtual Network ACL rules.",
+          "type": "boolean"
+        },
         "enableAutomaticFailover": {
           "description": "Enables automatic failover of the write region in the rare event that the region is unavailable due to an outage. Automatic failover will result in a new write region for the account and is chosen based on the failover priorities configured for the account.",
           "type": "boolean"
@@ -1532,6 +1547,13 @@
           "items": {
             "$ref": "#/definitions/Capability"
           }
+        },
+        "virtualNetworkRules": {
+          "type": "array",
+          "description": "List of Virtual Network ACL rules configured for the Cosmos DB account.",
+          "items": {
+            "$ref": "#/definitions/VirtualNetworkRule"
+          }
         }
       },
       "required": [
@@ -1705,6 +1727,16 @@
       "type": "string",
       "description": "Cosmos DB Firewall Support: This value specifies the set of IP addresses or IP address ranges in CIDR form to be included as the allowed list of client IPs for a given database account. IP addresses/ranges must be comma separated and must not contain any spaces."
     },
+    "VirtualNetworkRule": {
+      "type": "object",
+      "description": "Virtual Network ACL Rule object",
+      "properties": {
+        "id":{
+          "type": "string",
+          "description": "Resource ID of a subnet, for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{virtualNetworkName}/subnets/{subnetName}."
+        }
+      }
+    },
     "Operation": {
       "description": "REST API operation",
       "type": "object",
diff --git a/specification/cosmos-db/resource-manager/Microsoft.DocumentDB/stable/2015-04-08/examples/CosmosDBDatabaseAccountCreateMax.json b/specification/cosmos-db/resource-manager/Microsoft.DocumentDB/stable/2015-04-08/examples/CosmosDBDatabaseAccountCreateMax.json
index 468ff2acc8a9..320bb71bf35d 100644
--- a/specification/cosmos-db/resource-manager/Microsoft.DocumentDB/stable/2015-04-08/examples/CosmosDBDatabaseAccountCreateMax.json
+++ b/specification/cosmos-db/resource-manager/Microsoft.DocumentDB/stable/2015-04-08/examples/CosmosDBDatabaseAccountCreateMax.json
@@ -11,6 +11,12 @@
       "properties": {
         "databaseAccountOfferType": "Standard",
         "ipRangeFilter": "10.10.10.10",
+        "isVirtualNetworkFilterEnabled": true,
+        "virtualNetworkRules": [
+          {
+            "id": "/subscriptions/subId/resourceGroups/rg/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1"
+          }
+        ],
         "locations": [
           {
             "failoverPriority": 0,
@@ -41,6 +47,7 @@
         "properties": {
           "provisioningState": "Initializing",
           "ipRangeFilter": "10.10.10.10",
+          "isVirtualNetworkFilterEnabled": true,
           "databaseAccountOfferType": "Standard",
           "consistencyPolicy": {
             "defaultConsistencyLevel": "BoundedStaleness",
@@ -80,6 +87,11 @@
               "locationName": "East US",
               "failoverPriority": 1
             }
+          ],
+          "virtualNetworkRules": [
+            {
+              "id": "/subscriptions/subId/resourceGroups/rg/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1"
+            }
           ]
         }
       }
diff --git a/specification/cosmos-db/resource-manager/Microsoft.DocumentDB/stable/2015-04-08/examples/CosmosDBDatabaseAccountGet.json b/specification/cosmos-db/resource-manager/Microsoft.DocumentDB/stable/2015-04-08/examples/CosmosDBDatabaseAccountGet.json
index 9fa2ed4b3caa..8a5253f1bb3c 100644
--- a/specification/cosmos-db/resource-manager/Microsoft.DocumentDB/stable/2015-04-08/examples/CosmosDBDatabaseAccountGet.json
+++ b/specification/cosmos-db/resource-manager/Microsoft.DocumentDB/stable/2015-04-08/examples/CosmosDBDatabaseAccountGet.json
@@ -18,6 +18,8 @@
           "provisioningState": "Succeeded",
           "documentEndpoint": "https://ddb1.documents.azure.com:443/",
           "ipRangeFilter": "",
+          "isVirtualNetworkFilterEnabled": false,
+          "virtualNetworkRules": [],
           "databaseAccountOfferType": "Standard",
           "consistencyPolicy": {
             "defaultConsistencyLevel": "Session",