Merge pull request #303145 from TimShererWithAquent/us448924-08

Freshness Edit: Service Connectors

Author: JillGrant615

articles/service-connector/quickstart-cli-aks-connection.md

@@ -1,39 +1,40 @@
 ---
-title: Quickstart - Create a service connection in Azure Kubernetes Service (AKS) with the Azure CLI
-description: Quickstart showing how to create a service connection in Azure Kubernetes Service (AKS) with the Azure CLI
+title: "Quickstart: Create a Service Connection in Azure Kubernetes Service (AKS) with the Azure CLI"
+description: Quickstart showing how to create a service connection in Azure Kubernetes Service (AKS) with the Azure CLI.
 author: houk-ms
 ms.author: honc
 ms.service: service-connector
 ms.topic: quickstart
-ms.date: 05/06/2024
+ms.date: 07/23/2025
 ms.devlang: azurecli
 ms.custom: devx-track-azurecli
+#customer intent: As a developer who uses Azure Kubernetes Service, I want to connect my clusters to other Cloud resources, with Service Connection managing authentication and networking settings.
+
 ---
 # Quickstart: Create a service connection in AKS cluster with the Azure CLI
 
-This quickstart shows you how to connect Azure Kubernetes Service (AKS) to other Cloud resources using Azure CLI and Service Connector. Service Connector lets you quickly connect compute services to cloud services, while managing your connection's authentication and networking settings.
+In this quickstart, you connect Azure Kubernetes Service (AKS) to other Cloud resources using Azure CLI and Service Connector. Service Connector lets you quickly connect compute services to cloud services. It manages your connection's authentication and networking settings.
 
 [!INCLUDE [quickstarts-free-trial-note](~/reusable-content/ce-skilling/azure/includes/quickstarts-free-trial-note.md)]
 
 [!INCLUDE [azure-cli-prepare-your-environment.md](~/reusable-content/azure-cli/azure-cli-prepare-your-environment.md)]
 
-* This quickstart requires version 2.30.0 or higher of the Azure CLI. If using Azure Cloud Shell, the latest version is already installed.
-* This quickstart assumes that you already have an AKS cluster. If you don't have one yet, [create an AKS cluster](/azure/aks/learn/quick-kubernetes-deploy-cli).
-* This quickstart assumes that you already have an Azure Storage account. If you don't have one yet, [create an Azure Storage account](../storage/common/storage-account-create.md).
+- This quickstart requires version 2.30.0 or higher of the Azure CLI. If using Azure Cloud Shell, the latest version is already installed.
+- This quickstart assumes that you already have an AKS cluster. If you don't have one yet, [create an AKS cluster](/azure/aks/learn/quick-kubernetes-deploy-cli).
+- This quickstart assumes that you already have an Azure Storage account. If you don't have one yet, [create an Azure Storage account](../storage/common/storage-account-create.md).
 
 ## Initial set-up
 
-1. If you're using Service Connector for the first time, start by running the command [az provider register](/cli/azure/provider#az-provider-register) to register the Service Connector and Kubernetes Configuration resource providers.
+1. If you're using Service Connector for the first time, run the [az provider register](/cli/azure/provider#az-provider-register) command to register the Service Connector and Kubernetes Configuration resource providers.
 
    ```azurecli
-   az provider register -n Microsoft.ServiceLinker
-   ```
-   ```azurecli
-   az provider register -n Microsoft.KubernetesConfiguration
+   az provider register --name Microsoft.ServiceLinker
+
+   az provider register --name Microsoft.KubernetesConfiguration
    ```
 
    > [!TIP]
-   > You can check if these resource providers have already been registered by running the commands `az provider show -n "Microsoft.ServiceLinker" --query registrationState` and `az provider show -n "Microsoft.KubernetesConfiguration" --query registrationState`.
+   > You can check if these resource providers are already registered by running the commands `az provider show --name "Microsoft.ServiceLinker" --query registrationState` and `az provider show --name "Microsoft.KubernetesConfiguration" --query registrationState`.
 
 1. Optionally, use the Azure CLI command to get a list of supported target services for AKS cluster.
 
@@ -46,41 +47,41 @@ This quickstart shows you how to connect Azure Kubernetes Service (AKS) to other
 ### [Using a workload identity](#tab/Using-Managed-Identity)
 
 > [!IMPORTANT]
-> Using Managed Identity requires you have the permission to [Microsoft Entra ID role assignment](../active-directory/managed-identities-azure-resources/howto-assign-access-portal.md). If you don't have the permission, your connection creation will fail. You can ask your subscription owner for the permission or use an access key to create the connection.
+> Using Managed Identity requires you have the permission to [Microsoft Entra ID role assignment](/entra/identity/managed-identities-azure-resources/how-to-assign-access-azure-resource). If you don't have the permission, your connection creation fails. You can ask your subscription owner for the permission or use an access key to create the connection.
 
 Use the Azure CLI command to create a service connection to a Blob Storage with a workload identity, providing the following information:
 
-* **Source compute service resource group name:** the resource group name of the AKS cluster.
-* **AKS cluster name:** the name of your AKS cluster that connects to the target service.
-* **Target service resource group name:** the resource group name of the Blob Storage.
-* **Storage account name:** the account name of your Blob Storage.
-* **User-assigned identity resource ID:** the resource ID of the user assigned identity that is used to create workload identity
+- **Source compute service resource group name:** the resource group name of the AKS cluster.
+- **AKS cluster name:** the name of your AKS cluster that connects to the target service.
+- **Target service resource group name:** the resource group name of the Blob Storage.
+- **Storage account name:** the account name of your Blob Storage.
+- **User-assigned identity resource ID:** the resource ID of the user assigned identity that is used to create workload identity.
 
 ```azurecli
 az aks connection create storage-blob \
     --workload-identity <user-identity-resource-id>
 ```
 
 > [!NOTE]
-> If you don't have a Blob Storage, you can run `az aks connection create storage-blob --new --workload-identity <user-identity-resource-id>"` to provision a new one and get connected to your function app straightaway.
+> If you don't have a Blob Storage, you can run `az aks connection create storage-blob --new --workload-identity <user-identity-resource-id>` to provision a new one and connect it to your AKS cluster.
 
 ### [Using an access key](#tab/Using-access-key)
 
 > [!WARNING]
-> Microsoft recommends that you use the most secure authentication flow available. The authentication flow described in this procedure requires a very high degree of trust in the application, and carries risks that are not present in other flows. You should only use this flow when other more secure flows, such as managed identities, aren't viable.
+> Microsoft recommends that you use the most secure authentication flow available. The authentication flow described in this procedure requires a very high degree of trust in the application. It carries risks that aren't present in other flows. You should only use this flow when other more secure flows, such as managed identities, aren't viable.
 
-Run the following Azure CLI command to create a service connection to an Azure Blob Storage with an access key, providing the following information.
+Run the following Azure CLI command to create a service connection to an Azure Blob Storage with an access key.
 
 ```azurecli
 az aks connection create storage-blob --secret
 ```
 
 Provide the following information as prompted:
 
-* **Source compute service resource group name:** the resource group name of the AKS cluster.
-* **AKS cluster name:** the name of your AKS cluster that connects to the target service.
-* **Target service resource group name:** the resource group name of the Blob Storage.
-* **Storage account name:** the account name of your Blob Storage.
+- **Source compute service resource group name:** the resource group name of the AKS cluster.
+- **AKS cluster name:** the name of your AKS cluster that connects to the target service.
+- **Target service resource group name:** the resource group name of the Blob Storage.
+- **Storage account name:** the account name of your Blob Storage.
 
 > [!NOTE]
 > If you don't have a Blob Storage, you can run `az aks connection create storage-blob --new --secret` to provision a new one and connect it to your AKS cluster.
@@ -89,21 +90,21 @@ Provide the following information as prompted:
 
 ## View connections
 
-Use the Azure CLI [az aks connection list](/cli/azure/functionapp/connection#az-functionapp-connection-list) command to list connections to your AKS Cluster, providing the following information:
+Use the Azure CLI [az aks connection list](/cli/azure/functionapp/connection#az-functionapp-connection-list) command to list connections to your AKS Cluster. Provide the following information:
 
-* **Source compute service resource group name:** the resource group name of the AKS cluster.
-* **AKS cluster name:** the name of your AKS cluster that connects to the target service.
+- **Source compute service resource group name:** the resource group name of the AKS cluster.
+- **AKS cluster name:** the name of your AKS cluster that connects to the target service.
 
 ```azurecli
 az aks connection list \
-    -g "<your-aks-cluster-resource-group>" \
-    -n "<your-aks-cluster-name>" \
+    --resource-group "<your-aks-cluster-resource-group>" \
+    --name "<your-aks-cluster-name>" \
     --output table
 ```
 
-## Next steps
+## Related content
 
-Go to the following tutorials to start connecting AKS cluster to Azure services with Service Connector.
+Start connecting AKS cluster to Azure services with Service Connector.
 
 > [!div class="nextstepaction"]
 > [Tutorial: Connect to Azure Key Vault using CSI driver](./tutorial-python-aks-keyvault-csi-driver.md)