Merge pull request #202760 from Blackmist/cmk-note

adding limitation

Author: PRMerger4

articles/machine-learning/how-to-setup-customer-managed-keys.md

@@ -10,7 +10,7 @@ ms.topic: conceptual
 ms.author: jhirono
 author: jhirono
 ms.reviewer: larryfr
-ms.date: 03/17/2022
+ms.date: 06/24/2022
 ---
 # Use customer-managed keys with Azure Machine Learning
 
@@ -40,6 +40,7 @@ In the [customer-managed keys concepts article](concept-customer-managed-keys.md
 * The customer-managed key for resources the workspace depends on can’t be updated after workspace creation.
 * Resources managed by Microsoft in your subscription can’t transfer ownership to you.
 * You can't delete Microsoft-managed resources used for customer-managed keys without also deleting your workspace.
+* The key vault that contains your customer-managed key must be in the same Azure subscription as the Azure Machine Learning workspace
 
 > [!IMPORTANT]
 > When using a customer-managed key, the costs for your subscription will be higher because of the additional resources in your subscription. To estimate the cost, use the [Azure pricing calculator](https://azure.microsoft.com/pricing/calculator/).
@@ -48,6 +49,9 @@ In the [customer-managed keys concepts article](concept-customer-managed-keys.md
 
 To create the key vault, see [Create a key vault](../key-vault/general/quick-create-portal.md). When creating Azure Key Vault, you must enable __soft delete__ and __purge protection__.
 
+> [!IMPORTANT]
+> The key vault must be in the same Azure subscription that will contain your Azure Machine Learning workspace.
+
 ### Create a key
 
 > [!TIP]
@@ -84,6 +88,9 @@ To create the key vault, see [Create a key vault](../key-vault/general/quick-cre
 
 Create an Azure Machine Learning workspace. When creating the workspace, you must select the __Azure Key Vault__ and the __key__. Depending on how you create the workspace, you specify these resources in different ways:
 
+> [!WARNING]
+> The key vault that contains your customer-managed key must be in the same Azure subscription as the workspace.
+
 * __Azure portal__: Select the key vault and key from a dropdown input box when configuring the workspace.
 * __SDK, REST API, and Azure Resource Manager templates__: Provide the Azure Resource Manager ID of the key vault and the URL for the key. To get these values, use the [Azure CLI](/cli/azure/install-azure-cli) and the following commands: