Merge pull request #230860 from tamram/tamram23-0310

note that CMK key rotation is not logged

Author: prmerger-automator[bot]

articles/storage/common/customer-managed-keys-overview.md

@@ -6,7 +6,7 @@ services: storage
 author: tamram
 
 ms.service: storage
-ms.date: 03/09/2023
+ms.date: 03/15/2023
 ms.topic: conceptual
 ms.author: tamram
 ms.reviewer: ozgun
@@ -110,6 +110,8 @@ When you enable or disable customer-managed keys, or when you modify the key or
 
 > [!NOTE]
 > To rotate a key, create a new version of the key in the key vault or managed HSM, according to your compliance policies. Azure Storage does not handle key rotation, so you will need to manage rotation of the key in the key vault. You can [rotate your keys manually](customer-managed-keys-configure-existing-account.md#configure-encryption-for-manual-updating-of-key-versions) or [configure them to rotate automatically](customer-managed-keys-configure-existing-account.md#configure-encryption-for-automatic-updating-of-key-versions).
+>
+> When you rotate the key used for customer-managed keys, that action is not currently logged to the Azure Monitor logs for Azure Storage.
 
 ## Revoke access to a storage account that uses customer-managed keys