You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Use managed identities to access App Configuration
13
14
14
15
Azure Active Directory [managed identities](../active-directory/managed-identities-azure-resources/overview.md) simplify secrets management for your cloud application. With a managed identity, your code can use the service principal created for the Azure service it runs on. You use a managed identity instead of a separate credential stored in Azure Key Vault or a local connection string.
15
16
16
17
Azure App Configuration and its .NET Core, .NET Framework, and Java Spring client libraries have managed identity support built into them. Although you aren't required to use it, the managed identity eliminates the need for an access token that contains secrets. Your code can access the App Configuration store using only the service endpoint. You can embed this URL in your code directly without exposing any secret.
17
18
19
+
:::zone target="docs" pivot="framework-dotnet"
20
+
18
21
This article shows how you can take advantage of the managed identity to access App Configuration. It builds on the web app introduced in the quickstarts. Before you continue, [Create an ASP.NET Core app with App Configuration](./quickstart-aspnet-core-app.md) first.
19
22
23
+
:::zone-end
24
+
25
+
:::zone target="docs" pivot="framework-spring"
26
+
27
+
This article shows how you can take advantage of the managed identity to access App Configuration. It builds on the web app introduced in the quickstarts. Before you continue, [Create a Java Spring app with Azure App Configuration](./quickstart-java-spring-app.md) first.
28
+
29
+
:::zone-end
30
+
20
31
> [!IMPORTANT]
21
32
> Managed Identity cannot be used to authenticate locally-running applications. Your application must be deployed to an Azure service that supports Managed Identity. This article uses Azure App Service as an example, but the same concept applies to any other Azure service that supports managed identity, for example, [Azure Kubernetes Service](../aks/use-azure-ad-pod-identity.md), [Azure Virtual Machine](../active-directory/managed-identities-azure-resources/qs-configure-portal-windows-vm.md), and [Azure Container Instances](../container-instances/container-instances-managed-identity.md). If your workload is hosted in one of those services, you can leverage the service's managed identity support, too.
22
33
@@ -28,14 +39,25 @@ In this article, you learn how to:
28
39
> * Grant a managed identity access to App Configuration.
29
40
> * Configure your app to use a managed identity when you connect to App Configuration.
@@ -66,16 +88,18 @@ The following steps describe how to assign the App Configuration Data Reader rol
66
88
67
89
1. On the **Role** tab, select the **App Configuration Data Reader** role.
68
90
69
-
91
+
70
92
71
93
1. On the **Members** tab, select **Managed identity**, and then select **Select members**.
72
94
73
-
1. Select your Azure subscription, select **System-assigned managed identity**, and then select **App Service**.
95
+
1. Select your Azure subscription, for Managed Identity select **App Service**, then select your App Service name.
74
96
75
97
1. On the **Review + assign** tab, select **Review + assign** to assign the role.
76
98
77
99
## Use a managed identity
78
100
101
+
:::zone target="docs" pivot="framework-dotnet"
102
+
79
103
1. Add a reference to the *Azure.Identity* package:
80
104
81
105
```bash
@@ -158,13 +182,38 @@ The following steps describe how to assign the App Configuration Data Reader rol
158
182
> });
159
183
>```
160
184
>As explained in the [Managed Identities forAzure resources FAQs](../active-directory/managed-identities-azure-resources/known-issues.md), there is a default way to resolve which managed identity is used. In this case, the Azure Identity library enforces you to specify the desired identity to avoid posible runtime issuesin the future (for instance, if a new user-assigned managed identity is added or if the system-assigned managed identity is enabled). So, you will need to specify the clientId even if only one user-assigned managed identity is defined, and there is no system-assigned managed identity.
161
-
162
-
185
+
186
+
:::zone-end
187
+
188
+
:::zone target="docs" pivot="framework-spring"
189
+
190
+
1. Find the endpoint to your App Configuration store. This URL is listed on the **Overview** tab forthe storein the Azure portal.
191
+
192
+
1. Open `bootstrap.properties`, remove the connection-string property and replace it with endpoint:
> If you want to use **user-assigned managed identity** the property `spring.cloud.azure.appconfiguration.stores[0].managed-identity.client-id`, be sure to specify the clientId when creating the [ManagedIdentityCredential](/java/api/com.azure.identity.managedidentitycredential).
200
+
201
+
:::zone-end
163
202
164
203
## Deploy your application
165
204
205
+
:::zone target="docs" pivot="framework-dotnet"
206
+
166
207
Using managed identities requires you to deploy your app to an Azure service. Managed identities can't be used for authentication of locally-running apps. To deploy the .NET Core app that you created in the [Create an ASP.NET Core app with App Configuration](./quickstart-aspnet-core-app.md) quickstart and modified to use managed identities, follow the guidance in [Publish your web app](../app-service/quickstart-dotnetcore.md?pivots=development-environment-vs&tabs=netcore31#publish-your-web-app).
167
208
209
+
:::zone-end
210
+
211
+
:::zone target="docs" pivot="framework-spring"
212
+
213
+
Using managed identities requires you to deploy your app to an Azure service. Managed identities can't be used forauthentication of locally-running apps. To deploy the Spring app that you createdin the [Create a Java Spring app with Azure App Configuration](./quickstart-java-spring-app.md) quickstart and modified to use managed identities, follow the guidance in [Publish your web app](../app-service/quickstart-java.md?tabs=javase&pivots=platform-linux).
214
+
215
+
:::zone-end
216
+
168
217
In addition to App Service, many other Azure services support managed identities. For more information, see [Services that support managed identities for Azure resources](../active-directory/managed-identities-azure-resources/services-support-managed-identities.md).
Copy file name to clipboardExpand all lines: articles/azure-arc/overview.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -28,7 +28,7 @@ Currently, Azure Arc allows you to manage the following resource types hosted ou
28
28
*[Azure data services](data/overview.md): Run Azure data services on-premises, at the edge, and in public clouds using Kubernetes and the infrastructure of your choice. SQL Managed Instance
29
29
and PostgreSQL Hyperscale (preview) services are currently available.
30
30
*[SQL Server](/sql/sql-server/azure-arc/overview): Extend Azure services to SQL Server instances hosted outside of Azure.
31
-
* Virtual machines (preview): Provision, resize, delete and manage virtual machines based on [VMware vSphere](/vmware-vsphere/overview.md) or [Azure Stack HCI](/azure-stack/hci/manage/azure-arc-enabled-virtual-machines) and enable VM self-service through role-based access.
31
+
* Virtual machines (preview): Provision, resize, delete and manage virtual machines based on [VMware vSphere](/azure/azure-arc/vmware-vsphere/overview) or [Azure Stack HCI](/azure-stack/hci/manage/azure-arc-enabled-virtual-machines) and enable VM self-service through role-based access.
32
32
33
33
## Key features and benefits
34
34
@@ -48,7 +48,7 @@ Some of the key scenarios that Azure Arc supports are:
48
48
49
49
* Create [custom locations](./kubernetes/custom-locations.md) on top of your [Azure Arc-enabled Kubernetes](./kubernetes/overview.md) clusters, using them as target locations for deploying Azure services instances. Deploy your Azure service cluster extensions for [Azure Arc-enabled Data Services](./data/create-data-controller-direct-azure-portal.md), [App Services on Azure Arc](../app-service/overview-arc-integration.md) (including web, function, and logic apps) and [Event Grid on Kubernetes](../event-grid/kubernetes/overview.md).
50
50
51
-
* Perform virtual machine lifecycle and management operations for [VMware vSphere](/vmware-vsphere/overview.md) and [Azure Stack HCI](/azure-stack/hci/manage/azure-arc-enabled-virtual-machines) environments.
51
+
* Perform virtual machine lifecycle and management operations for [VMware vSphere](/azure/azure-arc/vmware-vsphere/overview) and [Azure Stack HCI](/azure-stack/hci/manage/azure-arc-enabled-virtual-machines) environments.
52
52
53
53
* A unified experience viewing your Azure Arc-enabled resources, whether you are using the Azure portal, the Azure CLI, Azure PowerShell, or Azure REST API.
54
54
@@ -84,5 +84,5 @@ For information, see the [Azure pricing page](https://azure.microsoft.com/pricin
84
84
* Learn about [Azure Arc-enabled Kubernetes](./kubernetes/overview.md).
85
85
* Learn about [Azure Arc-enabled data services](https://azure.microsoft.com/services/azure-arc/hybrid-data-services/).
86
86
* Learn about [SQL Server on Azure Arc-enabled servers](/sql/sql-server/azure-arc/overview).
87
-
* Learn about [Azure Arc-enabled VMware vSphere](vmware-vsphere/overview.md) and [Azure Arc-enabled Azure Stack HCI](https://docs.microsoft.com/azure-stack/hci/manage/azure-arc-enabled-virtual-machines)
87
+
* Learn about [Azure Arc-enabled VMware vSphere](vmware-vsphere/overview.md) and [Azure Arc-enabled Azure Stack HCI](/azure-stack/hci/manage/azure-arc-enabled-virtual-machines)
88
88
* Experience Azure Arc-enabled services by exploring the [Jumpstart proof of concept](https://azurearcjumpstart.io/azure_arc_jumpstart/).
Copy file name to clipboardExpand all lines: articles/azure-monitor/essentials/activity-logs-insights.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -18,9 +18,9 @@ Before using Activity log insights, you'll have to [enable sending logs to your
18
18
19
19
## How does Activity logs insights work?
20
20
21
-
Activity logs you send to a [Log Analytics workspace](/articles/azure-monitor/logs/log-analytics-workspace-overview.md) are stored in a table called AzureActivity.
21
+
Activity logs you send to a [Log Analytics workspace](/azure/azure-monitor/logs/log-analytics-workspace-overview) are stored in a table called AzureActivity.
22
22
23
-
Activity logs insights are a curated [Log Analytics workbook](/articles/azure-monitor/visualize/workbooks-overview.md) with dashboards that visualize the data in the AzureActivity table. For example, which administrators deleted, updated or created resources, and whether the activities failed or succeeded.
23
+
Activity logs insights are a curated [Log Analytics workbook](/azure/azure-monitor/visualize/workbooks-overview) with dashboards that visualize the data in the AzureActivity table. For example, which administrators deleted, updated or created resources, and whether the activities failed or succeeded.
@@ -52,7 +52,7 @@ To view Activity logs insights on a resource level:
52
52
1. At the top of the **Activity Logs Insights** page, select:
53
53
54
54
1. A time range for which to view data from the **TimeRange** dropdown.
55
-
***Azure Activity Logs Entries** shows the count of Activity log records in each [activity log category](/articles/azure-monitor/essentials/activity-log-schema#categories).
55
+
***Azure Activity Logs Entries** shows the count of Activity log records in each [activity log category](/azure/azure-monitor/essentials/activity-log-schema#categories).
Copy file name to clipboardExpand all lines: articles/communication-services/samples/chat-hero-sample.md
+16-25Lines changed: 16 additions & 25 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -50,20 +50,10 @@ Below you'll find more information on prerequisites and steps to set up the samp
50
50
51
51
## Prerequisites
52
52
53
+
-[Visual Studio Code (Stable Build)](https://code.visualstudio.com/download)
54
+
-[Node.js (16.14.2 and above)](https://nodejs.org/en/download/)
53
55
- Create an Azure account with an active subscription. For details, see [Create an account for free](https://azure.microsoft.com/free/?WT.mc_id=A261C142F).
54
-
-[Node.js (8.11.2 and above)](https://nodejs.org/en/download/)
55
-
-[Visual Studio (2017 and above)](https://visualstudio.microsoft.com/vs/)
56
-
-[.NET Core 3.1](https://dotnet.microsoft.com/download/dotnet-core/3.1) (Make sure to install version that corresponds with your visual studio instance, 32 vs 64 bit)
57
-
- Create an Azure Communication Services resource. For details, see [Create an Azure Communication Services resource](../quickstarts/create-communication-resource.md). You'll need to record your resource **connection string** for this quickstart.
58
-
59
-
## Locally deploying the service & client app
60
-
61
-
The single threaded chat sample is essentially two "applications" a client and server application.
62
-
63
-
Open up Visual Studio on the chat.csproj and run in Debug mode, this will start up the chat front end service. When the server app is visited
64
-
from the browser, it will redirect traffic towards the locally deployed chat front end service.
65
-
66
-
You can test the sample locally by opening multiple browser sessions with the URL of your chat to simulate a multi-user chat.
56
+
- Create an Azure Communication Services resource. For details, see [Create an Azure Communication Resource](../quickstarts/create-communication-resource.md). You'll need to record your resource **connection string** for this quickstart.
67
57
68
58
## Before running the sample for the first time
69
59
@@ -72,22 +62,24 @@ You can test the sample locally by opening multiple browser sessions with the UR
72
62
3. Get the `Connection String` and `Endpoint URL` from the Azure portal. For more information on connection strings, see [Create an Azure Communication Services resources](../quickstarts/create-communication-resource.md)
73
63
4. Once you get the `Connection String` and `Endpoint URL`, Add both values to the **Server/appsettings.json** file found under the Chat Hero Sample folder. Input your connection string in the variable: `ResourceConnectionString` and endpoint URL in the variable: `EndpointUrl`.
74
64
75
-
### Local run
76
-
77
-
1. Go to the Chat folder and open the `Chat.csproj` solution in Visual Studio
78
-
2. Run the project. The browser will open at localhost:5000.
65
+
## Local run
79
66
80
-
#### Troubleshooting
67
+
1. Set your connection string in `Server/appsettings.json`
68
+
2. Set your endpoint URL string in `Server/appsettings.json`
69
+
3.`npm run setup` from the root directory
70
+
4.`npm run start` from the root directory
81
71
82
-
- Solution doesn't build, it throws errors during NPM installation/build
83
-
84
-
Clean/rebuild the C# solution
72
+
You can test the sample locally by opening multiple browser sessions with the URL of your chat to simulate a multi-user chat.
85
73
86
74
## Publish the sample to Azure
87
75
88
-
1. Right click on the `Chat` project and select Publish.
89
-
2. Create a new publish profile and select your Azure subscription.
90
-
3. Before publishing, add your connection string with `Edit App Service Settings`, and fill in `ResourceConnectionString` as the key and provide your connection string (copied from appsettings.json) as the value.
76
+
1. Under the root director, run these commands:
77
+
```
78
+
npm run setup
79
+
npm run build
80
+
npm run package
81
+
```
82
+
2. Use the Azure extension and deploy the Chat/dist directory to your app service
91
83
92
84
## Clean up resources
93
85
@@ -110,4 +102,3 @@ For more information, see the following articles:
110
102
-[Redux](https://redux.js.org/) - Client-side state management
111
103
-[FluentUI](https://aka.ms/fluent-ui) - Microsoft powered UI library
112
104
-[React](https://reactjs.org/) - Library for building user interfaces
113
-
-[ASP.NET Core](/aspnet/core/introduction-to-aspnet-core?preserve-view=true&view=aspnetcore-3.1) - Framework for building web applications
0 commit comments