Skip to content

Commit 427d959

Browse files
Update enable-trusted-access.md
updating links
1 parent 403cbcb commit 427d959

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed

articles/sap/monitor/enable-trusted-access.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -13,19 +13,19 @@ ms.author: vaidehikher
1313
# Enabling private endpoints for AMS resources
1414

1515
One of the challenges for customers is that the key vault and storage account that are created as part of the Azure Monitor for SAP solutions Managed Resource Group have their public access enabled. Customers want to disable this public access to be security compliant, but blocking the public access on these resources can lead to functional issues within AMS.
16-
With this feature, you can use the system-assigned identity of the Azure Monitor for SAP solutions resource and our service will use trusted access mode to interact with the key vault and storage account. With this, you can then block public access and only allow traffic from AMS subnet on your key vault and storage account in AMS managed resource group.
16+
With this feature, you can use the system-assigned identity of the Azure Monitor for SAP solutions resource and our service will use trusted access mode to interact with the key vault and storage account. Using this feature, you can then block public access and only allow traffic from AMS subnet on your key vault and storage account in AMS managed resource group.
1717
This feature provides more security and control over your AMS resources, as you can limit the access to the key vault and storage account to the AMS service and subnet only and prevent any unauthorized or malicious access from outside.
1818

19-
# Prerequisites and steps to enable trusted access using MSI
19+
# Prerequisites and steps to enable trusted access using System Assigned Managed Identity
2020
To use the trusted access using MSI feature, you need to meet the following prerequisites and follow the steps below:
21-
* Migrate to Dedicated app service plan: [Follow steps here](https://github.com/Azure/Azure-Monitor-for-SAP-solutions-preview/wiki/9-.a.-Cost-optimization-using-Dedicated-hosting-plan)
21+
* Migrate to Dedicated app service plan: [Follow steps here](https://go.microsoft.com/fwlink/?linkid=2306196)
2222
> This is a mandatory step to avoid having function app scaling issues after storage account's public access is disabled.
2323
2424
`Important Note: Trusted access feature is supported only if the "ROUTE ALL" is enabled during the monitor creation.`
2525

2626
# Steps to follow while creating new AMS
27-
* Login to the Azure portal using the above link and create a new Azure Monitor for SAP solutions resource.
28-
* Fill in the required fields, such as the name, description etc.
27+
* Log in to the Azure portal and create a new Azure Monitor for SAP solutions resource.
28+
* Fill in the required fields, such as the name, description, etc.
2929
* (Mandatory) Under the Networking section, have the 'Route all' option enabled.
3030
* Under the Identity section, select Enable System Assigned Managed Identity.
3131
![screenshot of enabling trusted access during AMS resource creation.](../monitor/media/enable-trusted-access/enable-system-assigned-mi.png)
@@ -36,7 +36,7 @@ To use the trusted access using MSI feature, you need to meet the following prer
3636
# Steps to follow for existing AMS
3737
* Log in to the Azure portal and navigate to your Azure Monitor for SAP solutions resource.
3838

39-
* Migrate to Dedicated app service plan: [Follow steps here](https://github.com/Azure/Azure-Monitor-for-SAP-solutions-preview/wiki/9-.a.-Cost-optimization-using-Dedicated-hosting-plan)
39+
* Migrate to Dedicated app service plan: [Follow steps here](https://go.microsoft.com/fwlink/?linkid=2306196)
4040
> This is a mandatory step to avoid having function app scaling issues after storage account's public access is disabled.
4141
4242
* Go to the identity tab and enable the system assigned identity and wait for the operation to complete and monitor should be in succeeded state after the operation.

0 commit comments

Comments
 (0)