Add link

Author: sethmanheim

AKS-Hybrid/aks-whats-new-23h2.md

@@ -46,7 +46,7 @@ This section lists the new features and improvements in AKS Arc in each release
 
 The following Kubernetes cluster deployment and management capabilities are available:
 
-- **Workload Identity**. You can now deploy AKS Arc clusters with workload identity enabled and deploy application pods with the workload identity label to access Microsoft Entra ID protected resources, such as Azure Key Vault. For more information, see TBD.
+- **Workload Identity**. You can now deploy AKS Arc clusters with workload identity enabled and deploy application pods with the workload identity label to access Microsoft Entra ID protected resources, such as Azure Key Vault. For more information, see [Deploy and configure Workload Identity](workload-identity.md).
 - **Arc Gateway integration**. You can now deploy AKS Arc clusters with pod-level Arc Proxy and communicate with the Arc gateway, reducing the list of outbound URLs to configure in an isolated network environment. For more information, see [Workload Identity](workload-identity.md).
 - **Control Plane IP**. You can now deploy AKS Arc clusters without specifying the control plane IP. The IP address is assigned automatically.
 - **Disable Windows image download**. You can now disable Windows image downloads by disabling the Windows node pool after cluster creation, reducing network traffic over HTTP connections and providing better support for low bandwidth environments.