You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-app-configuration/quickstart-deployment-overview.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -31,7 +31,7 @@ To learn more about Azure RBAC and Microsoft Entra ID, see [Authorize access to
31
31
32
32
## Manage Azure App Configuration data in deployment
33
33
34
-
Azure App Configuration data, such as key-values and snapshots, can be managed in deployment. When managing App Configuration data using this method, it is recommended to set configuration store's ARM authentication mode to **Pass-through**. This ensures that data access requires a combination of data plane and ARM management roles as well as ensuring that data access can be properly attributed to the deployment caller for audit purpose.
34
+
Azure App Configuration data, such as key-values and snapshots, can be managed in deployment. When managing App Configuration data using this method, it is recommended to set your configuration store's ARM authentication mode to **Pass-through**. This ensures that data access requires a combination of data plane and ARM management roles as well as ensuring that data access can be properly attributed to the deployment caller for audit purpose.
35
35
36
36
### ARM authentication mode
37
37
@@ -55,7 +55,7 @@ To configure the ARM authentication mode of an Azure App Configuration resource
55
55
56
56
### Azure App Configuration Authorization
57
57
58
-
When your App Configuration resource has its ARM authentication mode set to **Pass-through**, you must have Azure App Configuration data plane permissions to read and manage Azure App Configuration data in deployment. This is in addition to baseline management permission requirements of the resource. Azure App Configuration data plane permissions include Microsoft.AppConfiguration/configurationStores/keyValues/read and Microsoft.AppConfiguration/configurationStores/snapshots/read. Built-in roles with this action include:
58
+
When your App Configuration resource has its ARM authentication mode set to **Pass-through**, you must have Azure App Configuration data plane permissions to read and manage Azure App Configuration data in deployment. This is in addition to baseline management permission requirements of the resource. Azure App Configuration data plane permissions include Microsoft.AppConfiguration/configurationStores/\*/read and Microsoft.AppConfiguration/configurationStores/\*/write. Built-in roles with this action include:
59
59
60
60
- App Configuration Data Owner
61
61
- App Configuration Data Reader
@@ -67,8 +67,8 @@ To learn more about Azure RBAC and Microsoft Entra ID, see [Authorize access to
67
67
When an App Configuration resource is restricted to private network access, deployments accessing App Configuration data through public networks will be blocked. To enable successful deployments when access to an App Configuration resource is restricted to private networks the following actions must be taken:
68
68
69
69
-[Azure Resource Management Private Link](../azure-resource-manager/management/create-private-link-access-portal.md) must be set up
70
-
- The App Configuration resource must have its ARM authentication mode set to **Pass-through**
71
-
- The App Configuration resource must have its ARM private access enabled
70
+
- The App Configuration resource must have ARM authentication mode set to **Pass-through**
71
+
- The App Configuration resource must have ARM private network access enabled
72
72
- Deployments accessing App Configuration data must run through the configured ARM private link
73
73
74
74
If all of these criteria are met, then deployments accessing App Configuration data will be successful.
@@ -91,7 +91,7 @@ To enable the ARM private access of an Azure App Configuration resource in the A
91
91
92
92
## Next steps
93
93
94
-
To learn about deployment using ARM template and Bicep, check below documentations.
94
+
To learn about deployment using ARM template and Bicep, check the documentations linked below.
95
95
96
96
-[Quickstart: Create an Azure App Configuration store by using an ARM template](./quickstart-resource-manager.md)
97
97
-[Quickstart: Create an Azure App Configuration store using Bicep](./quickstart-bicep.md)
0 commit comments