Updated draft

Author: MGoedtel

articles/aks/create-nginx-ingress-private-controller.md

@@ -1,17 +1,17 @@
 ---
-title: Configure NGIX ingress controller for Azure private DNS zone
+title: Configure internal NGIX ingress controller for Azure private DNS zone
 description: Understand how to configure an ingress controller with a private IP address and an Azure private DNS zone using the application routing add-on for Azure Kubernetes Service. 
 ms.subservice: aks-networking
 ms.custom: devx-track-azurecli
 ms.topic: how-to
-ms.date: 02/09/2024
+ms.date: 02/27/2024
 author: sabbour
 ms.author: asabbour
 ---
 
-# Configure NGIX ingress controller to support Azure private DNS zone with application routing add-on
+# Configure NGINX ingress controller to support Azure private DNS zone with application routing add-on
 
-This article demonstrates how configure an NGINX ingress controller to work with Azure Private Link and configure a private Azure DNS zone to enable DNS resolution for the private endpoints to resolve specific domains.
+This article demonstrates how configure an NGINX ingress controller to work with Azure internal load balancer and configure a private Azure DNS zone to enable DNS resolution for the private endpoints to resolve specific domains.
 
 ## Before you begin
 

articles/aks/use-managed-identity.md

@@ -5,7 +5,7 @@ ms.topic: article
 ms.custom:
   - devx-track-azurecli
   - ignite-2023
-ms.date: 02/08/2024
+ms.date: 02/27/2024
 ---
 
 # Use a managed identity in Azure Kubernetes Service (AKS)
@@ -61,7 +61,7 @@ AKS uses several managed identities for built-in services and add-ons.
 | Add-on | azure-policy | No identity required. | N/A | No
 | Add-on | Calico | No identity required. | N/A | No
 | Add-on | Dashboard | No identity required. | N/A | No
-| Add-on | application-routing | Manages Azure DNS and Azure Key Vault certificates | Key Vault Secrets User role for Key Vault, DNZ Zone Contributor role for DNS zone | No
+| Add-on | application-routing | Manages Azure DNS and Azure Key Vault certificates | Key Vault Secrets User role for Key Vault, DNZ Zone Contributor role for DNS zones, Private DNS Zone Contributor role for private DNS zones | No
 | Add-on | HTTPApplicationRouting | Manages required network resources. | Reader role for node resource group, contributor role for DNS zone | No
 | Add-on | Ingress application gateway | Manages required network resources. | Contributor role for node resource group | No
 | Add-on | omsagent | Used to send AKS metrics to Azure Monitor. | Monitoring Metrics Publisher role | No