Merge pull request #3092 from Blackmist/secret-expiry

adding warning

Author: prmerger-automator[bot]

articles/machine-learning/how-to-change-storage-access-key.md

@@ -9,7 +9,7 @@ ms.topic: how-to
 ms.author: larryfr
 author: Blackmist
 ms.reviewer: deeikele
-ms.date: 02/05/2025
+ms.date: 02/21/2025
 monikerRange: 'azureml-api-2 || azureml-api-1'
 ---
 
@@ -28,6 +28,9 @@ Learn how to change the access keys for Azure Storage accounts used by Azure Mac
 
 For security purposes, you might need to change the access keys for an Azure Storage account. When you regenerate the access key, Azure Machine Learning must be updated to use the new key. Azure Machine Learning may be using the storage account for both model storage and as a datastore.
 
+> [!WARNING]
+> The default secret expiry date set by Azure Machine Learning is __2 years__.
+
 > [!IMPORTANT]
 > Credentials registered with datastores are saved in your Azure Key Vault associated with the workspace. If you have [soft-delete](/azure/key-vault/general/soft-delete-overview) enabled for your Key Vault, this article provides instructions for updating credentials. If you unregister the datastore and try to re-register it under the same name, this action will fail. See [Turn on Soft Delete for an existing key vault](/azure/key-vault/general/soft-delete-change#turn-on-soft-delete-for-an-existing-key-vault) for how to enable soft delete in this scenario.