The Cosmos DB Module: Where the Module Call Meets Raw Resources
The catalog's data-tier entry draws an unusually good boundary - the module owns the account and its security posture, raw resources own the data model - and its commented-out option menu doubles as accidental documentation.