Merge pull request #285777 from kgremban/aug28-csincludes

IoT auth method includes

Author: AnnaMHuff

articles/iot-hub/tutorial-message-enrichments.md

@@ -102,6 +102,9 @@ The values for these variables should be for the same resources you used in the
 
 Create a second endpoint and route for the enriched messages.
 
+[!INCLUDE [iot-authentication-service-connection-string.md](../../includes/iot-authentication-service-connection-string.md)]
+
+
 # [Azure portal](#tab/portal)
 
 1. In the [Azure portal](https://portal.azure.com), go to your IoT hub.

articles/iot-hub/tutorial-routing.md

@@ -54,6 +54,8 @@ There are no other prerequisites for the Azure portal.
 
 Register a new device in your IoT hub.
 
+[!INCLUDE [iot-authentication-device-connection-string.md](../../includes/iot-authentication-device-connection-string.md)]
+
 # [Azure portal](#tab/portal)
 
 1. Sign in to the [Azure portal](https://portal.azure.com) and navigate to your IoT hub.
@@ -255,6 +257,9 @@ Now set up the routing for the storage account. In this section you define a new
 
 [!INCLUDE [iot-hub-include-blob-storage-format](../../includes/iot-hub-include-blob-storage-format.md)]
 
+[!INCLUDE [iot-authentication-service-connection-string.md](../../includes/iot-authentication-service-connection-string.md)]
+
+
 # [Azure portal](#tab/portal)
 
 1. In the [Azure portal](https://portal.azure.com), go to your IoT hub.

articles/iot-hub/tutorial-use-metrics-and-diags.md

@@ -67,6 +67,8 @@ For this tutorial, we've provided a CLI script that performs the following steps
 
 4. Register a device identity for the simulated device that sends messages to your IoT hub. Save the device connection string to use to configure the simulated device.
 
+[!INCLUDE [iot-authentication-device-connection-string.md](../../includes/iot-authentication-device-connection-string.md)]
+
 ### Set up resources using Azure CLI
 
 Copy and paste the following commands into Cloud Shell or a local command line instance that has the Azure CLI installed. Some of the commands may take some time to execute. The new resources are created in the resource group *ContosoResources*.

includes/iot-authentication-device-connection-string.md

@@ -0,0 +1,10 @@
+---
+author: kgremban
+ms.author: kgremban
+ms.service: iot
+ms.topic: include
+ms.date: 08/28/2024
+---
+
+>[!IMPORTANT]
+>This article includes steps to connect a device using a shared access signature, also called symmetric key authentication. This authentication method is convenient for testing and evaluation, but authenticating a device using X.509 certificates is a more secure approach. To learn more, see [Security best practices > Connection security](../articles/iot/iot-overview-security.md#connection-security).

includes/iot-authentication-service-connection-string.md

@@ -0,0 +1,10 @@
+---
+author: kgremban
+ms.author: kgremban
+ms.service: iot
+ms.topic: include
+ms.date: 08/28/2024
+---
+
+>[!IMPORTANT]
+>This article includes steps to connect to a service using a shared access signature. This authentication method is convenient for testing and evaluation, but authenticating to a service with Microsoft Entra ID or managed identities is a more secure approach. To learn more, see [Security best practices > Cloud security](../articles/iot/iot-overview-security.md#cloud-security).