Merge pull request #270586 from arv100kri/arjagann/debug-sessions-cmk

Add a note about debug sessions not supported with CMK enforcement

Author: prmerger-automator[bot]

articles/search/cognitive-search-how-to-debug-skillset.md

@@ -45,6 +45,8 @@ Debug sessions work with all generally available [indexer data sources](search-d
 
 + For custom skills, a user-assigned managed identity isn't supported for a debug session connection to Azure Storage. As stated in the prerequisites, you can use a system managed identity, or specify a full access connection string that includes a key. For more information, see [Connect a search service to other Azure resources using a managed identity](search-howto-managed-identities-data-sources.md).
 
+The portal doesn't support customer-managed key encryption (CMK), which means that portal experiences like debug sessions can't have CMK-encrypted connection strings or other encrypted metadata. If your search service is configured for [CMK enforcement](search-security-manage-encryption-keys.md#6---set-up-policy), debug sessions won't work.
+
 ## Create a debug session
 
 1. Sign in to the [Azure portal](https://portal.azure.com) and find your search service.