diff --git a/specification/app/resource-manager/Microsoft.App/preview/2022-11-01-preview/CommonDefinitions.json b/specification/app/resource-manager/Microsoft.App/preview/2022-11-01-preview/CommonDefinitions.json
index b9c0c9cb47cf..ae5206975f3a 100644
--- a/specification/app/resource-manager/Microsoft.App/preview/2022-11-01-preview/CommonDefinitions.json
+++ b/specification/app/resource-manager/Microsoft.App/preview/2022-11-01-preview/CommonDefinitions.json
@@ -555,6 +555,14 @@
             "update"
           ],
           "x-ms-secret": true
+        },
+        "identity": {
+          "description": "Resource ID of a managed identity to authenticate with Azure Key Vault, or System to use a system-assigned identity.",
+          "type": "string"
+        },
+        "keyVaultUrl": {
+          "description": "Azure Key Vault URL pointing to the secret referenced by the container app.",
+          "type": "string"
         }
       }
     },
diff --git a/specification/app/resource-manager/Microsoft.App/preview/2022-11-01-preview/ContainerApps.json b/specification/app/resource-manager/Microsoft.App/preview/2022-11-01-preview/ContainerApps.json
index 089fb59476e5..3e68e46e96ab 100644
--- a/specification/app/resource-manager/Microsoft.App/preview/2022-11-01-preview/ContainerApps.json
+++ b/specification/app/resource-manager/Microsoft.App/preview/2022-11-01-preview/ContainerApps.json
@@ -818,6 +818,16 @@
           "type": "string",
           "x-ms-secret": true,
           "readOnly": true
+        },
+        "identity": {
+          "description": "Resource ID of a managed identity to authenticate with Azure Key Vault, or System to use a system-assigned identity.",
+          "type": "string",
+          "readOnly": true
+        },
+        "keyVaultUrl": {
+          "description": "Azure Key Vault URL pointing to the secret referenced by the container app.",
+          "type": "string",
+          "readOnly": true
         }
       }
     },