Skip to content

Commit 8352720

Browse files
committed
Adjustments to remove final bad link
1 parent 4628a58 commit 8352720

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

articles/operator-nexus/howto-service-principal.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ ms.author: matthewernst
1313

1414
Service principals in Azure are identity entities that are used by applications, services, and automation tools to access specific Azure resources. They can be thought of as 'users' for applications, allowing these applications to interact with Azure services. Service principals provide and control permissions to Azure resources within your subscription, allowing you to specify exactly what actions an application can perform in your environment.
1515

16-
For more information on how to create a Service principal, reference this [tutorial](/cli/azure/azure-cli-sp-tutorial-1.md) or this [documentation](/entra/architecture/service-accounts-principal).
16+
For more information on how to create a Service principal, an existing Azure Learn [documentation](/entra/architecture/service-accounts-principal) goes into Service Principal fundamentals.
1717

1818
## Service principals in Operator Nexus
1919

@@ -29,12 +29,12 @@ For information on how to rotate a service principal, reference [how to rotate s
2929

3030
## Best practices
3131

32-
The below guidance is a high-level list of recommended security considerations to take into account when managing a new service principal.
32+
The list is a high-level list of recommended security considerations to take into account when managing a new service principal.
3333

3434
- **Least Privilege**: Assign the minimum permissions necessary for the service principal to perform its function. Avoid assigning broad permissions if they aren't needed.
35-
- **Lifecycle Management**: Regularly review and update service principals. Remove or disable them when they're no longer needed.
35+
- **Lifecycle Management**: Regularly review and update service principals. Remove or disable them when not required.
3636
- **Use Managed Identities**: Where possible, use Azure Managed Identities instead of creating and managing service principals manually.
37-
- **Secure Secrets**: If a service principal uses a password (client secret), ensure it's stored securely. Consider using Azure Key Vault.
37+
- **Secure Secrets**: If a service principal uses a password (client secret), ensure credentials are stored securely. Consider using Azure Key Vault.
3838
- **Monitor Activity**: Use Azure Monitor and Azure Log Analytics to track the activities of your service principals.
3939
- **Rotation of Secrets**: Regularly rotate and change the service principal's secrets. The maximum recommended duration is 180 days.
4040
- **Use Azure Policy**: Implement Azure policies to audit and enforce best practices for service principals.

0 commit comments

Comments
 (0)