Skip to content

2024-05-28: Security improvements for Document Intelligence, Free Search Tier

Choose a tag to compare

@pamelafox pamelafox released this 28 May 17:48
· 313 commits to main since this release
f11423a

The most notable changes in this release relate to security:

  • Disablement of API key based access for Azure Document Intelligence. Our repository does not use keys to authenticate to the DI service, only managed identity, so keys should not be needed. If you use the same Document Intelligence instance for other projects and need key-based access for it, then you should set "disableLocalAuth: false" in the Bicep.
  • Removal of search keys for free tier of search service. I originally mistakenly thought that the free tier of search service did not support managed identity, but it's actually the case that it doesn't support outbound managed identity, relevant if you're using indexers or skills with it. It does support inbound managed identity, so we removed the key and key vault for that feature. This won't affect most developers, since the default deployment uses the standard tier.

What's Changed

Full Changelog: 2024-05-15B...2024-05-28