Merge pull request #206937 from maud-lv/ml-sc-CA-screen

Update Container Apps quickstart

Author: tamarakhader

articles/service-connector/media/container-apps-quickstart/basics.png

@@ -5,91 +5,101 @@ author: maud-lv
 ms.author: malev
 ms.service: service-connector
 ms.topic: quickstart
-ms.date: 05/24/2022
+ms.date: 08/09/2022
 ms.devlang: azurecli
 ---
 
 # Quickstart: Create a service connection in Container Apps with the Azure CLI
 
-This quickstart shows you how to create a service connection in Container Apps with the Azure CLI. The [Azure CLI](/cli/azure) is a set of commands used to create and manage Azure resources. The Azure CLI is available across Azure services and is designed to get you working quickly with Azure, with an emphasis on automation.
+This quickstart shows you how to connect Azure Container Apps to other Cloud resources using the Azure CLI and Service Connector. Service Connector lets you quickly connect compute services to cloud services, while managing your connection's authentication and networking settings.
 
-[!INCLUDE [quickstarts-free-trial-note](../../includes/quickstarts-free-trial-note.md)]
+> [!IMPORTANT]
+> Service Connector in Container Apps is currently in preview.
+> See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
 
-[!INCLUDE [azure-cli-prepare-your-environment.md](../../includes/azure-cli-prepare-your-environment.md)]
+## Prerequisites
 
-- Version 2.37.0 or higher of the Azure CLI. If using Azure Cloud Shell, the latest version is already installed.
+- An Azure subscription. [!INCLUDE [quickstarts-free-trial-note](../../includes/quickstarts-free-trial-note.md)]
 
-- An Azure account with an active subscription. [Create an account for free](https://azure.microsoft.com/free).
+- At least one application deployed to Container Apps in a [region supported by Service Connector](./concept-region-support.md). If you don't have one, [create and deploy a container to Container Apps](../container-apps/quickstart-portal.md).
 
-- An application deployed to Container Apps in a [region supported by Service Connector](./concept-region-support.md). If you don't have one yet, [create and deploy a container to Container Apps](../container-apps/quickstart-portal.md).
+[!INCLUDE [azure-cli-prepare-your-environment-no-header.md](../../includes/azure-cli-prepare-your-environment-no-header.md)]
 
-> [!IMPORTANT]
-> Service Connector in Container Apps is currently in preview.
-> See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
+- Version 2.37.0 or higher of the Azure CLI must be installed. To upgrade to the latest version, run `az upgrade`. If using Azure Cloud Shell, the latest version is already installed.
 
-## View supported target services
+- The Container Apps extension must be installed in the Azure CLI or the Cloud Shell. To install it, run `az extension add --name containerapp`.
 
-Use the following Azure CLI command to create and manage service connections from Container Apps.
+## Prepare to create a connection
 
-```azurecli-interactive
-az provider register -n Microsoft.ServiceLinker
-az containerapp connection list-support-types --output table
-```
+1. Run the command [az provider register](/cli/azure/provider#az-provider-register) to start using Service Connector.
+
+    ```azurecli-interactive
+    az provider register -n Microsoft.ServiceLinker
+    ```
+
+1. Run the command `az containerapp connection` to get a list of supported target services for Container Apps.
+
+    ```azurecli-interactive
+    az containerapp connection list-support-types --output table
+    ```
 
 ## Create a service connection
 
-### [Using an access key](#tab/using-access-key)
+You can create a connection using an access key or a managed identity.
+
+### [Access key](#tab/using-access-key)
 
-1. Use the following Azure CLI command to create a service connection from Container Apps to a Blob Storage with an access key.
+1. Run the `az containerapp connection create` command to create a service connection between Container Apps and Azure Blob Storage with an access key.
 
     ```azurecli-interactive
     az containerapp connection create storage-blob --secret
     ```
 
 1. Provide the following information at the Azure CLI's request:
 
-   - **The resource group which contains the container app**: the name of the resource group with the container app.
-   - **Name of the container app**: the name of your container app.
-   - **The container where the connection information will be saved:** the name of the container, in your container app, that connects to the target service
-   - **The resource group which contains the storage account:** the name of the resource group name with the storage account. In this guide, we're using a Blob Storage.
-   - **Name of the storage account:** the name of the storage account that contains your blob.
+    | Setting                                                        | Description                                                                                        |
+    |----------------------------------------------------------------|----------------------------------------------------------------------------------------------------|
+    | `The resource group that contains the container app`           | The name of the resource group with the container app.                                             |
+    | `Name of the container app`                                    | The name of the container app.                                                                     |
+    | `The container where the connection information will be saved` | The name of the container app's container.                                                         |
+    | `The resource group which contains the storage account`        | The name of the resource group with the storage account.                                           |
+    | `Name of the storage account`                                  | The name of the storage account you want to connect to. In this guide, we're using a Blob Storage. |
 
-> [!NOTE]
-> If you don't have a Blob Storage, you can run `az containerapp connection create storage-blob --new --secret` to provision a new Blob Storage and directly get connected to your app service.
+> [!TIP]
+> If you don't have a Blob Storage, you can run `az containerapp connection create storage-blob --new --secret` to provision a new Blob Storage and directly connect it to your container app using a connection string.
 
-### [Using a managed identity](#tab/using-managed-identity)
+### [Managed identity](#tab/using-managed-identity)
 
 > [!IMPORTANT]
-> Using a managed identity requires you have the permission to [Azure AD role assignment](../active-directory/managed-identities-azure-resources/howto-assign-access-portal.md). Without this permission, your connection creation will fail. Ask your subscription owner to grant you this permission, or use an access key instead to create the connection.
+> To use a managed identity, you must have the permission to modify [Azure AD role assignment](../active-directory/managed-identities-azure-resources/howto-assign-access-portal.md). Without this permission, your connection creation will fail. Ask your subscription owner to grant you this permission, or use an access key instead to create the connection.
 
-1. Use the following Azure CLI command to create a service connection from Container Apps to a Blob Storage with a system-assigned managed identity.
+1. Run the `az containerapp connection create` command to create a service connection from Container Apps to a Blob Storage with a system-assigned managed identity.
 
     ```azurecli-interactive
     az containerapp connection create storage-blob --system-identity
     ```
 
 1. Provide the following information at the Azure CLI's request:
 
-   - **The resource group which contains the container app**: the name of the resource group with the container app.
-   - **Name of the container app**: the name of your container app.
-   - **The container where the connection information will be saved:** the name of the container, in your container app, that connects to the target service
-   - **The resource group which contains the storage account:** the name of the resource group name with the storage account. In this guide, we're using a Blob Storage.
-   - **Name of the storage account:** the name of the storage account that contains your blob.
+    | Setting                                                        | Description                                                                                        |
+    |----------------------------------------------------------------|----------------------------------------------------------------------------------------------------|
+    | `The resource group that contains the container app`           | The name of the resource group with the container app.                                             |
+    | `Name of the container app`                                    | The name of the container app.                                                                     |
+    | `The container where the connection information will be saved` | The name of the container app's container.                                                         |
+    | `The resource group which contains the storage account`        | The name of the resource group with the storage account.                                           |
+    | `Name of the storage account`                                  | The name of the storage account you want to connect to. In this guide, we're using a Blob Storage. |
 
 > [!NOTE]
-> If you don't have a Blob Storage, you can run `az containerapp connection create storage-blob --new --system-identity` to provision a new Blob Storage and directly get connected to your app service.
+> If you don't have a Blob Storage, you can run `az containerapp connection create storage-blob --new --system-identity` to provision a new Blob Storage and directly connect it to your container app using a managed identity.
 
 ---
 
 ## View connections
 
- Use the Azure CLI command `az containerapp connection list` to list all your container app's provisioned connections. Provide the following information:
-
-- **Source compute service resource group name:** the resource group name of the container app.
-- **Container app name:** the name of your container app.
+ Use the Azure CLI command `az containerapp connection list` to list all your container app's provisioned connections. Replace the placeholders `<container-app-resource-group>` and `<container-app-name>` from the command below with the resource group and name of your container app. You can also remove the `--output table` option to view more information about your connections.
 
 ```azurecli-interactive
-az containerapp connection list -g "<your-container-app-resource-group>" --name "<your-container-app-name>" --output table
+az containerapp connection list -g "<container-app-resource-group>" --name "<container-app-name>" --output table
 ```
 
 The output also displays the provisioning state of your connections: failed or succeeded.