Adding a VNet firewall exclusion to an already existing cosmosdb

Hello!

I’ve been searching low and hi to see if there’s a way to add a Vnet to an already existing cosmos db.

I’m using the azurerm provider, but I only see a way to add a VNet while creating the resource…and when I try to use a data source to the cosmosdb it’s read only and I cannot add anything to it.

Any thoughts?