Merge pull request #214029 from msmbaldwin/akv-misc

Adding links to key management page

Author: Court72

articles/key-vault/certificates/about-certificates.md

@@ -162,17 +162,17 @@ Certificate contacts contain contact information to send notifications triggered
 TLS certificates can help encrypt communications over the internet and establish the identity of websites, making the entry point and mode of communication secure.  Additionally, a chained certificate signed by a public CA can help verify that the entities holding the certificates are whom they claim to be. As an example, the following are some excellent use cases of using certificates to secure communication and enable authentication:
 * Intranet/Internet websites: protect access to your intranet site and ensure encrypted data transfer over the internet using TLS certificates.
 * IoT and Networking devices: protect and secure your devices by using certificates for authentication and communication.
-* Cloud/Multi-Cloud: secure cloud-based applications on-prem, cross-cloud, or in your cloud provider's tenant.
+* Cloud/Multi-Cloud: secure cloud-based applications on-premises, cross-cloud, or in your cloud provider's tenant.
 
 ### Code signing
 
 A certificate can help secure the code/script of software, thereby ensuring that the author can share the software over the internet without being changed by malicious entities. Furthermore, once the author signs the code using a certificate leveraging the code signing technology, the software is marked with a stamp of authentication displaying the author and their website. Therefore, the certificate used in code signing helps validate the software's authenticity, promoting end-to-end security.
 
 ## Next steps
-
 - [About Key Vault](../general/overview.md)
 - [About keys, secrets, and certificates](../general/about-keys-secrets-certificates.md)
 - [About keys](../keys/about-keys.md)
 - [About secrets](../secrets/about-secrets.md)
+- [Key management in Azure](../../security/fundamentals/key-management.md)
 - [Authentication, requests, and responses](../general/authentication-requests-and-responses.md)
 - [Key Vault Developer's Guide](../general/developers-guide.md)

articles/key-vault/certificates/toc.yml

@@ -64,6 +64,8 @@ items:
     href: faq.yml
   - name: Multitenancy and Azure Key Vault
     href: /azure/architecture/guide/multitenant/service/key-vault
+  - name: Key management in Azure
+    href: ../../security/fundamentals/key-management.md
   - name: Azure PowerShell
     href: /powershell/module/az.keyvault/#key_vault
   - name: Azure CLI

articles/key-vault/general/overview.md

@@ -16,7 +16,7 @@ ms.author: mbaldwin
 ---
 # About Azure Key Vault
 
-Azure Key Vault helps solve the following problems:
+Azure Key Vault is one of several [key management solutions in Azure](../../security/fundamentals/key-management.md), and helps solve the following problems:
 
 - **Secrets Management** - Azure Key Vault can be used to Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets
 - **Key Management** - Azure Key Vault can be used as a Key Management solution. Azure Key Vault makes it easy to create and control the encryption keys used to encrypt your data.
@@ -74,7 +74,7 @@ As a secure store in Azure, Key Vault has been used to simplify scenarios like:
 Key Vault itself can integrate with storage accounts, event hubs, and log analytics.
 
 ## Next steps
-
+- [Key management in Azure](../../security/fundamentals/key-management.md)
 - Learn more about [keys, secrets, and certificates](about-keys-secrets-certificates.md)
 - [Quickstart: Create an Azure Key Vault using the CLI](../secrets/quick-create-cli.md)
 - [Authentication, requests, and responses](../general/authentication-requests-and-responses.md)

articles/key-vault/general/toc.yml

@@ -163,6 +163,8 @@
     href: whats-new.md
   - name: Monitoring Key Vault data reference
     href: monitor-key-vault-reference.md
+  - name: Key management in Azure
+    href: ../../security/fundamentals/key-management.md
   - name: Multitenancy and Azure Key Vault
     href: /azure/architecture/guide/multitenant/service/key-vault
   - name: Client libraries

articles/key-vault/keys/about-keys.md

@@ -88,6 +88,7 @@ See [Key types, algorithms, and operations](about-keys-details.md) for details a
 | Keyless TLS | - Use key [Client Libraries](../general/client-libraries.md#client-libraries-per-language-and-object) |
 
 ## Next steps
+- [Key management in Azure](../../security/fundamentals/key-management.md)
 - [About Key Vault](../general/overview.md)
 - [About Managed HSM](../managed-hsm/overview.md)
 - [About secrets](../secrets/about-secrets.md)

articles/key-vault/keys/toc.yml

@@ -63,6 +63,8 @@ items:
   items:
   - name: Secure key release policy grammar
     href: policy-grammar.md
+  - name: Key management in Azure
+    href: ../../security/fundamentals/key-management.md
   - name: Multitenancy and Azure Key Vault
     href: /azure/architecture/guide/multitenant/service/key-vault
   - name: Azure PowerShell

articles/key-vault/managed-hsm/overview.md

@@ -16,7 +16,7 @@ author: msmbaldwin
 ---
 # What is Azure Key Vault Managed HSM?
 
-Azure Key Vault Managed HSM (Hardware Security Module) is a fully managed, highly available, single-tenant, standards-compliant cloud service that enables you to safeguard cryptographic keys for your cloud applications, using **FIPS 140-2 Level 3** validated HSMs.
+Azure Key Vault Managed HSM (Hardware Security Module) is a fully managed, highly available, single-tenant, standards-compliant cloud service that enables you to safeguard cryptographic keys for your cloud applications, using **FIPS 140-2 Level 3** validated HSMs. It is one of several [key management solutions in Azure](../../security/fundamentals/key-management.md).
 
 For pricing information, please see Managed HSM Pools section on [Azure Key Vault pricing page](https://azure.microsoft.com/pricing/details/key-vault/). For supported key types, see [About keys](../keys/about-keys.md).
 
@@ -55,6 +55,7 @@ For pricing information, please see Managed HSM Pools section on [Azure Key Vaul
 - Generate HSM-protected keys in your on-premises HSM and import them securely into Managed HSM.
 
 ## Next steps
+- [Key management in Azure](../../security/fundamentals/key-management.md)
 - See [Quickstart: Provision and activate a managed HSM using Azure CLI](quick-create-cli.md) to create and activate a managed HSM
 - See [Best Practices using Azure Key Vault Managed HSM](best-practices.md)
 - [Managed HSM Status](https://azure.status.microsoft)

articles/key-vault/managed-hsm/toc.yml

@@ -60,6 +60,8 @@ items:
   items:
   - name: Secure key release policy grammar 
     href: policy-grammar.md
+  - name: Key management in Azure
+    href: ../../security/fundamentals/key-management.md
   - name: Azure PowerShell
     href: /powershell/azure#key_vault
   - name: Azure CLI

articles/key-vault/secrets/about-secrets.md

@@ -89,6 +89,7 @@ You can specify additional application-specific metadata in the form of tags. Ke
 
 ## Next steps
 
+- [Key management in Azure](../../security/fundamentals/key-management.md)
 - [Best practices for secrets management in Key Vault](secrets-best-practices.md)
 - [About Key Vault](../general/overview.md)
 - [About keys, secrets, and certificates](../general/about-keys-secrets-certificates.md)

articles/key-vault/secrets/toc.yml

@@ -65,6 +65,8 @@ items:
     href: secrets-best-practices.md
 - name: Reference
   items:
+  - name: Key management in Azure
+    href: ../../security/fundamentals/key-management.md
   - name: Multitenancy and Azure Key Vault
     href: /azure/architecture/guide/multitenant/service/key-vault
   - name: Azure PowerShell