2024-05-28: Security improvements for Document Intelligence, Free Search Tier
The most notable changes in this release relate to security:
- Disablement of API key based access for Azure Document Intelligence. Our repository does not use keys to authenticate to the DI service, only managed identity, so keys should not be needed. If you use the same Document Intelligence instance for other projects and need key-based access for it, then you should set "disableLocalAuth: false" in the Bicep.
- Removal of search keys for free tier of search service. I originally mistakenly thought that the free tier of search service did not support managed identity, but it's actually the case that it doesn't support outbound managed identity, relevant if you're using indexers or skills with it. It does support inbound managed identity, so we removed the key and key vault for that feature. This won't affect most developers, since the default deployment uses the standard tier.
What's Changed
- Fix Add Default Key for Retrieval Mode to Persist the Change by @john0isaac in #1609
- Additional pointers to docs on private endpoints and load balancing by @pamelafox in #1618
- Removing unneeded key for free search service by @pamelafox in #1620
- Bump the python-requirements group across 1 directory with 65 updates by @dependabot in #1623
- Add load testing user class for gpt-4-vision use case by @pamelafox in #1633
- Fix samples browser by @diberry in #1631
- Fix samples browser - bookmarks by @diberry in #1637
- Improve token counting for messages with package by @pamelafox in #1577
- Fix output variable for global document access by @mattgotteiner in #1645
- Updates to login docs (login step, Entra branding) by @pamelafox in #1574
- Disable key auth for Azure Document Intelligence by @pamelafox in #1629
Full Changelog: 2024-05-15B...2024-05-28