Skip to content

Commit 30f93e4

Browse files
Address comments
1 parent 32f110a commit 30f93e4

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

articles/azure-app-configuration/quickstart-deployment-overview.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ To learn more about Azure RBAC and Microsoft Entra ID, see [Authorize access to
3131

3232
## Manage Azure App Configuration data in deployment
3333

34-
Azure App Configuration data, such as key-values and snapshots, can be managed in deployment. When managing App Configuration data using this method, it is recommended to set configuration store's ARM authentication mode to **Pass-through**. This ensures that data access requires a combination of data plane and ARM management roles as well as ensuring that data access can be properly attributed to the deployment caller for audit purpose.
34+
Azure App Configuration data, such as key-values and snapshots, can be managed in deployment. When managing App Configuration data using this method, it is recommended to set your configuration store's ARM authentication mode to **Pass-through**. This ensures that data access requires a combination of data plane and ARM management roles as well as ensuring that data access can be properly attributed to the deployment caller for audit purpose.
3535

3636
### ARM authentication mode
3737

@@ -55,7 +55,7 @@ To configure the ARM authentication mode of an Azure App Configuration resource
5555
5656
### Azure App Configuration Authorization
5757

58-
When your App Configuration resource has its ARM authentication mode set to **Pass-through**, you must have Azure App Configuration data plane permissions to read and manage Azure App Configuration data in deployment. This is in addition to baseline management permission requirements of the resource. Azure App Configuration data plane permissions include Microsoft.AppConfiguration/configurationStores/keyValues/read and Microsoft.AppConfiguration/configurationStores/snapshots/read. Built-in roles with this action include:
58+
When your App Configuration resource has its ARM authentication mode set to **Pass-through**, you must have Azure App Configuration data plane permissions to read and manage Azure App Configuration data in deployment. This is in addition to baseline management permission requirements of the resource. Azure App Configuration data plane permissions include Microsoft.AppConfiguration/configurationStores/\*/read and Microsoft.AppConfiguration/configurationStores/\*/write. Built-in roles with this action include:
5959

6060
- App Configuration Data Owner
6161
- App Configuration Data Reader
@@ -67,8 +67,8 @@ To learn more about Azure RBAC and Microsoft Entra ID, see [Authorize access to
6767
When an App Configuration resource is restricted to private network access, deployments accessing App Configuration data through public networks will be blocked. To enable successful deployments when access to an App Configuration resource is restricted to private networks the following actions must be taken:
6868

6969
- [Azure Resource Management Private Link](../azure-resource-manager/management/create-private-link-access-portal.md) must be set up
70-
- The App Configuration resource must have its ARM authentication mode set to **Pass-through**
71-
- The App Configuration resource must have its ARM private access enabled
70+
- The App Configuration resource must have ARM authentication mode set to **Pass-through**
71+
- The App Configuration resource must have ARM private network access enabled
7272
- Deployments accessing App Configuration data must run through the configured ARM private link
7373

7474
If all of these criteria are met, then deployments accessing App Configuration data will be successful.
@@ -91,7 +91,7 @@ To enable the ARM private access of an Azure App Configuration resource in the A
9191
9292
## Next steps
9393

94-
To learn about deployment using ARM template and Bicep, check below documentations.
94+
To learn about deployment using ARM template and Bicep, check the documentations linked below.
9595

9696
- [Quickstart: Create an Azure App Configuration store by using an ARM template](./quickstart-resource-manager.md)
9797
- [Quickstart: Create an Azure App Configuration store using Bicep](./quickstart-bicep.md)

0 commit comments

Comments
 (0)