Merge pull request #8351 from MicrosoftDocs/users/jukullam/secret-rotation

Add new secret refresh option

Author: Stacyrch140

docs/pipelines/release/azure-rm-endpoint.md

@@ -55,7 +55,7 @@ The following issues might occur when you create service connections:
 - [Failed to assign Contributor role](#failed-to-assign-contributor-role)
 - [Subscription isn't listed when creating a service connection](#subscription-isnt-listed-when-creating-a-service-connection)
 - [Some subscriptions are missing from the list of subscriptions](#some-subscriptions-are-missing-from-the-list-of-subscriptions)
-- [Service principal's token expired](#service-principals-token-expired)
+- [Service principal's token expired](#service-principal-or-secret-expired)
 - [Failed to obtain the JSON web token (JWT) by using the service principal client ID](#failed-to-obtain-the-jwt-by-using-the-service-principal-client-id)
 - [Azure subscription isn't passed from the previous task output](#azure-subscription-isnt-passed-from-the-previous-task-output)
 - [What authentication mechanisms are supported? How do managed identities work?](#what-authentication-mechanisms-are-supported-how-do-managed-identities-work)
@@ -185,7 +185,7 @@ To resolve this issue, ask the subscription administrator to [assign you the app
   1. Clear your browser cache and cookies to ensure that any old tokens are removed.
   1. From the Azure DevOps portal, go to the service connections, and reauthorize the connection to Azure. This step prompts Azure DevOps to use a new token.
 
-### Service principal's token expired
+### Service principal or secret expired
 
 An issue that often arises with service principals or secrets that are automatically created is that the token expires and needs to be renewed. If you have an issue with refreshing the token, see [Failed to obtain an access token or a valid refresh token wasn't found](#failed-to-obtain-an-access-token-or-a-valid-refresh-token-wasnt-found).
 
@@ -197,11 +197,11 @@ If your token expired, you could see one of the error messages:
 
 To renew the access token for an automatically created service principal or secret:
 
-1. Go to **Project settings** > **Service connections**, and then select the service connection you want to modify.
+1. Go to **Project settings** > **Service connections**, and then select the service connection you want to refresh.
 
-1. Select **Edit** in the upper-right corner. 
+1. Select **Rotate secret**.
 
-1. Select **Save**.
+     :::image type="content" source="media/azure-rm-endpoint/rotate-secret.png" alt-text="Screenshot of option to rotate an ARM secret. ":::
 
 The token for your service principal or secret is now renewed for three more months.