Skip to content

Commit d29bfe0

Browse files
committed
Updates for retirements
1 parent ca97619 commit d29bfe0

File tree

3 files changed

+4
-309
lines changed

3 files changed

+4
-309
lines changed

articles/automation/automation-security-guidelines.md

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -10,9 +10,6 @@ ms.service: azure-automation
1010

1111
# Security best practices in Azure Automation
1212

13-
> [!IMPORTANT]
14-
> Azure Automation Run as accounts, including Classic Run as accounts have retired on **30 September 2023** and replaced with [Managed Identities](automation-security-overview.md#managed-identities). You would no longer be able to create or renew Run as accounts through the Azure portal. For more information, see [migrating from an existing Run As accounts to managed identity](migrate-run-as-accounts-managed-identity.md?tabs=run-as-account#sample-scripts).
15-
1613
This article details the best practices to securely execute the automation jobs.
1714
[Azure Automation](./overview.md) provides you the platform to orchestrate frequent, time consuming, error-prone infrastructure management and operational tasks, as well as mission-critical operations. This service allows you to execute scripts, known as automation runbooks seamlessly across cloud and hybrid environments.
1815

@@ -52,7 +49,7 @@ This section guides you in configuring your Automation account securely.
5249

5350
### Authentication certificate and identities
5451

55-
1. For runbook authentication, we recommend that you use [Managed identities](./automation-security-overview.md#managed-identities) instead of Run As accounts. The Run As accounts are an administrative overhead and we plan to deprecate them. A managed identity from Microsoft Entra ID allows your runbook to easily access other Microsoft Entra protected resources such as Azure Key Vault. The identity is managed by the Azure platform and does not require you to provision or rotate any secrets. For more information about managed identities in Azure Automation, see [Managed identities for Azure Automation](./automation-security-overview.md#managed-identities)
52+
1. For runbook authentication, we recommend that you use [Managed identities](./automation-security-overview.md#managed-identities). A managed identity from Microsoft Entra ID allows your runbook to easily access other Microsoft Entra protected resources such as Azure Key Vault. The identity is managed by the Azure platform and does not require you to provision or rotate any secrets. For more information about managed identities in Azure Automation, see [Managed identities for Azure Automation](./automation-security-overview.md#managed-identities)
5653

5754
You can authenticate an Automation account using two types of managed identities:
5855
- **System-assigned identity** is tied to your application and is deleted if your app is deleted. An app can only have one system-assigned identity.

articles/automation/automation-security-overview.md

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -12,17 +12,14 @@ ms.service: azure-automation
1212

1313
# Azure Automation account authentication overview
1414

15-
> [!IMPORTANT]
16-
> Azure Automation Run as accounts, including Classic Run as accounts have retired on **30 September 2023** and replaced with [Managed Identities](automation-security-overview.md#managed-identities). You would no longer be able to create or renew Run as accounts through the Azure portal. For more information, see [migrating from an existing Run As accounts to managed identity](migrate-run-as-accounts-managed-identity.md?tabs=run-as-account#sample-scripts).
17-
1815
Azure Automation allows you to automate tasks against resources in Azure, on-premises, and with other cloud providers such as Amazon Web Services (AWS). You can use runbooks to automate your tasks, or a Hybrid Runbook Worker if you have business or operational processes to manage outside of Azure. Working in any one of these environments require permissions to securely access the resources with the minimal rights required.
1916

2017
This article covers authentication scenarios supported by Azure Automation and tells how to get started based on the environment or environments that you need to manage.
2118

2219

2320
## Automation account
2421

25-
When you start Azure Automation for the first time, you must create at least one Automation account. Automation accounts allow you to isolate your Automation resources, runbooks, assets, and configurations from the resources of other accounts. You can use Automation accounts to separate resources into separate logical environments or delegated responsibilities. For example, you might use one account for development, another for production, and another for your on-premises environment. Or you might dedicate an Automation account to manage operating system updates across all of your machines with [Update Management](update-management/overview.md).
22+
When you start Azure Automation for the first time, you must create at least one Automation account. Automation accounts allow you to isolate your Automation resources, runbooks, assets, and configurations from the resources of other accounts. You can use Automation accounts to separate resources into separate logical environments or delegated responsibilities. For example, you might use one account for development, another for production, and another for your on-premises environment.
2623

2724
An Azure Automation account is different from your Microsoft account or accounts created in your Azure subscription. For an introduction to creating an Automation account, see [Create an Automation account](./quickstarts/create-azure-automation-account-portal.md).
2825

@@ -43,7 +40,7 @@ Here are some of the benefits of using managed identities:
4340
- Using a managed identity instead of the Automation Run As account simplifies management.
4441
- Managed identities can be used without any additional cost.
4542

46-
- You don't have to specify the Run As connection object in your runbook code. You can access resources using your Automation account's managed identity from a runbook without creating certificates, connections, etc.
43+
- You can access resources using your Automation account's managed identity from a runbook without creating certificates, connections, etc.
4744

4845
An Automation account can authenticate using two types of managed identities:
4946

0 commit comments

Comments
 (0)