Skip to content

Commit 08729c4

Browse files
YunhoYunho
authored andcommitted
add instructions to omit the key version
1 parent 08ace54 commit 08729c4

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

articles/azure-fluid-relay/concepts/customer-managed-keys.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,10 @@ Before configuring CMK on your Azure Fluid Relay resource, the following prerequ
3434
- If you provide the key URL with a specific key version, **only that version** will be used for CMK purposes.
3535
If you later add a new key version, you must **manually** update the key URL in the CMK settings of the Fluid Relay resource to make the new version effective.
3636
The Fluid Relay service will fail if the specified key version is deleted or disabled without updating the resource to use a valid version.
37+
- To allow the Fluid Relay service to automatically use the latest key version of the key from your key vault, you can **omit the key version** in the encryption key URL. This enables automatic key version updates on the Fluid Relay side.
38+
However, you are still responsible for managing and rotating key versions in your Key Vault.
39+
> Due to resource limitations, switching to this auto-update setting may fail. If that happens, please specify a key version explicitly and perform a manual update on your Fluid Relay resource.
40+
3741

3842
## Create a Fluid Relay resource with CMK
3943

0 commit comments

Comments
 (0)