Container insights AMA final fixes

Author: bwren

articles/aks/learn/quick-kubernetes-deploy-cli.md

@@ -81,10 +81,10 @@ The following output example resembles successful creation of the resource group
 
 ## Create AKS cluster
 
-Create an AKS cluster using the [az aks create][az-aks-create] command with the *--enable-addons monitoring* parameter to enable [Container insights][azure-monitor-containers]. The following example creates a cluster named *myAKSCluster* with one node and enables a system-assigned managed identity:
+Create an AKS cluster using the [az aks create][az-aks-create] command with the `--enable-addons monitoring` and `--enable-msi-auth-for-monitoring` parameter to enable [Azure Monitor Container insights][azure-monitor-containers] with managed identity authentication (preview). The following example creates a cluster named *myAKSCluster* with one node and enables a system-assigned managed identity:
 
 ```azurecli-interactive
-az aks create -g myResourceGroup -n myAKSCluster --enable-managed-identity --node-count 1 --enable-addons monitoring
+az aks create -g myResourceGroup -n myAKSCluster --enable-managed-identity --node-count 1 --enable-addons monitoring --enable-msi-auth-for-monitoring  --generate-ssh-keys
 ```
 
 After a few minutes, the command completes and returns JSON-formatted information about the cluster.

articles/azure-monitor/containers/container-insights-enable-existing-clusters.md

@@ -14,6 +14,10 @@ If you're connecting an existing AKS cluster to an Azure Log Analytics workspace
 
 
 ## [CLI](#tab/azure-cli)
+
+> [!NOTE]
+> Azure CLI version 2.39.0 or higher required for managed identity authentication.
+
 The following step enables monitoring of your AKS cluster using Azure CLI. In this example, you are not required to pre-create or specify an existing workspace. This command simplifies the process for you by creating a default workspace in the default resource group of the AKS cluster subscription if one does not already exist in the region.  The default workspace created resembles the format of *DefaultWorkspace-\<GUID>-\<Region>*.
 
 ```azurecli
@@ -400,7 +404,7 @@ After a few minutes, the command completes and returns JSON-formatted informatio
 ## Migrate to managed identity authentication
 
 ### Existing clusters with service principal 
-AKS Clusters with service principal must first disable monitoring and then upgrade to managed identity. Only Azure public cloud is currently supported for this migration.
+AKS Clusters with service principal must first disable monitoring and then upgrade to managed identity. Only Azure public cloud, Azure China cloud, and Azure Government cloud are currently supported for this migration.
 
 
 1.	Disable monitoring with the following command: