Skip to content

Commit e74300f

Browse files
author
Jake Willey
committed
Improved the rotation documentation.
1 parent b018d90 commit e74300f

File tree

1 file changed

+10
-2
lines changed

1 file changed

+10
-2
lines changed

articles/cosmos-db/secure-access-to-data.md

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ Azure Cosmos DB uses two types of keys to authenticate users and provide access
2121

2222
<a id="master-keys"></a>
2323

24-
## Master keys
24+
## Master keys
2525

2626
Master keys provide access to all the administrative resources for the database account. Master keys:
2727

@@ -38,7 +38,15 @@ Primary, secondary, read only, and read-write master keys can be retrieved and r
3838

3939
![Access control (IAM) in the Azure portal - demonstrating NoSQL database security](./media/secure-access-to-data/nosql-database-security-master-key-portal.png)
4040

41-
The process of rotating your master key is simple. Navigate to the Azure portal to retrieve your secondary key, then replace your primary key with your secondary key in your application, then rotate the primary key in the Azure portal.
41+
### Key rotation<a id="key-rotation"></a>
42+
43+
The process of rotating your master key is simple.
44+
45+
1. Navigate to the Azure portal to retrieve your secondary key.
46+
2. Replace your primary key with your secondary key in your application.
47+
3. Rotate the primary key in the Azure portal.
48+
4. Validate the new primary key works against all resource. Key rotation process can take any where from less than a minute to hours depending on the size of the Cosmos DB account.
49+
5. Replace the secondary key with the new primary key.
4250

4351
![Master key rotation in the Azure portal - demonstrating NoSQL database security](./media/secure-access-to-data/nosql-database-security-master-key-rotate-workflow.png)
4452

0 commit comments

Comments
 (0)