Skip to content

Commit 643d215

Browse files
Merge pull request #224915 from tamram/patch-49
Update overview-storage-keys.md
2 parents b18ed10 + e2101ab commit 643d215

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

articles/key-vault/secrets/overview-storage-keys.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ ms.service: key-vault
77
ms.subservice: secrets
88
author: msmbaldwin
99
ms.author: mbaldwin
10-
ms.date: 01/11/2023
10+
ms.date: 01/24/2023
1111
ms.custom: devx-track-azurecli
1212
# Customer intent: As a developer, I want to use Azure Key Vault and Azure CLI for secure management of my storage credentials and shared access signature tokens.
1313
---
@@ -18,7 +18,7 @@ ms.custom: devx-track-azurecli
1818
> Key Vault Managed Storage Account Keys (legacy) is supported as-is with no more updates planned. Only Account SAS are supported with SAS definitions signed storage service version no later than 2018-03-28.
1919
2020
> [!IMPORTANT]
21-
> We recommend using Azure Storage integration with Azure Active Directory (Azure AD), Microsoft's cloud-based identity and access management service. Azure AD integration is available for [Azure blobs and queues](../../storage/blobs/authorize-access-azure-active-directory.md), and provides OAuth2 token-based access to Azure Storage (just like Azure Key Vault).
21+
> We recommend using Azure Storage integration with Azure Active Directory (Azure AD), Microsoft's cloud-based identity and access management service. Azure AD integration is available for [Azure blobs, queues, and tables](../../storage/blobs/authorize-access-azure-active-directory.md), and provides OAuth2 token-based access to Azure Storage (just like Azure Key Vault).
2222
> Azure AD allows you to authenticate your client application by using an application or user identity, instead of storage account credentials. You can use an [Azure AD managed identity](../../active-directory/managed-identities-azure-resources/index.yml) when you run on Azure. Managed identities remove the need for client authentication and storing credentials in or with your application. Use below solution only when Azure AD authentication is not possible.
2323
2424
An Azure storage account uses credentials comprising an account name and a key. The key is auto-generated and serves as a password, rather than an as a cryptographic key. Key Vault manages storage account keys by periodically regenerating them in storage account and provides shared access signature tokens for delegated access to resources in your storage account.
@@ -158,4 +158,4 @@ az keyvault storage sas-definition show --id https://<YourKeyVaultName>.vault.az
158158

159159
- Learn more about [keys, secrets, and certificates](/rest/api/keyvault/).
160160
- Review articles on the [Azure Key Vault team blog](/archive/blogs/kv/).
161-
- See the [az keyvault storage](/cli/azure/keyvault/storage) reference documentation.
161+
- See the [az keyvault storage](/cli/azure/keyvault/storage) reference documentation.

0 commit comments

Comments
 (0)