updates

Author: mlhoop

articles/aks/azure-disk-customer-managed-keys.md

@@ -115,6 +115,30 @@ You can also encrypt the AKS data disks with your own keys.  Replace myResourceG
 
 Ensure you have the proper AKS credentials. The Service principal will need to have contributor access to the resource group where the diskencryptionset is present. Otherwise, you will get an error suggesting that the service principal does not have permissions.
 
+```azurecli-interactive
+# Retrieve your Azure Subscription Id using the following command, and use the id property
+az account list
+```
+
+```
+someuser@Azure:~$ az account list
+[
+  {
+    "cloudName": "AzureCloud",
+    "id": "666e66d8-1e43-4136-be25-f25bb5de5893",
+    "isDefault": true,
+    "name": "MyAzureSubscription",
+    "state": "Enabled",
+    "tenantId": "3ebbdf90-2069-4529-a1ab-7bdcb24df7cd",
+    "user": {
+      "cloudShellID": true,
+      "name": "[email protected]",
+      "type": "user"
+    }
+  }
+]
+```
+
 Create a file called **byok-azure-disk.yaml** that contains the following information.  Replace myAzureSubscriptionId, myResourceGroup, and myDiskEncrptionSetName with your values.
 
 ```