Skip to content

Commit 294e85e

Browse files
authored
Apply suggestions from code review
Updating per suggestions
1 parent 8860435 commit 294e85e

File tree

1 file changed

+2
-4
lines changed

1 file changed

+2
-4
lines changed

articles/cosmos-db/managed-identity-based-authentication.md

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -14,9 +14,7 @@ ms.reviewer: sngun
1414

1515
In this article you will set up a **robust, key rotation agnostic,** solution to manage Azure Cosmos DB keys by leveraging [Managed Service Identities](../active-directory/managed-identities-azure-resources/services-support-managed-identities.md). The example in this article uses an Azure Function. However, you can achieve this solution by using any service that supports managed service identities.
1616

17-
You'll learn how to:
18-
19-
* Create an Azure Function that has robust access to data without copying any Azure Cosmos DB Key.
17+
You'll learn how to create an Azure Function that can access Azure Cosmos DB without copying a key.
2018

2119
You will build an Azure Function that handles summarizing the last hour of sales information. The function runs every hour, it reads a set of sale receipts from Azure Cosmos DB. Then the function will create an hourly summary of sales and store it back in the Azure Cosmos container. To simplify the scenario, the processed receipts are deleted by a configured [Time To Live](./time-to-live.md) setting.
2220

@@ -72,7 +70,7 @@ For your scenario, you will read the sale receipt documents, summarize them, and
7270

7371
Now we have a function app that has a system-assigned managed identity. That identity is given the **DocumentDB Account Contributor** role in the Azure Cosmos DB permissions. The following function app code will get the Azure Cosmos DB keys, create a CosmosClient object, and run the business logic to summarize the sales receipt.
7472

75-
We'll be using to get the Azure Cosmos DB Keys is the [List Keys API](https://docs.microsoft.com/rest/api/cosmos-db-resource-provider/DatabaseAccounts/ListKeys).
73+
This sample uses the [List Keys API](https://docs.microsoft.com/rest/api/cosmos-db-resource-provider/DatabaseAccounts/ListKeys) to access your Azure Cosmos account keys.
7674

7775
> [!IMPORTANT]
7876
> If you want to [assign the **Cosmos DB Account Reader**](#grant-the-system-assigned-managed-identity-access-to-your-azure-cosmos-db) role, you will need to use the read only [List Keys api](https://docs.microsoft.com/rest/api/cosmos-db-resource-provider/DatabaseAccounts/ListReadOnlyKeys). This will only populate the read only keys.

0 commit comments

Comments
 (0)