Indicate trusted flows from Kusto to Storage Account don't yet work for Event Grid data connections #2615
Conversation
Event Grid doesn't support using Managed Identity in the trusted service flow described here. There's an ICM where a customer was successfully using Managed Private Endpoint in their Event Grid flow, and when they removed that MPE in favor of a MI (per this doc), the storage account stopped trusting their Kusto Event Grid connection. The other Kusto flows that connect to storage, such as native ingestion, do support MI. Event Grid is flighting via feature flag to support the trusted flow via MI, and so should be supported in the near future. Therefore, we made a note internally that once that process completes, we'll remove from this doc the exception we're adding now.
|
@yihezkel : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change. |
|
Learn Build status updates of commit d26e1aa: ✅ Validation status: passed
For more details, please refer to the build report. For any questions, please:
|
yihezkel
changed the title
|
@yihezkel did you intend to open this PR in the private repo? It looks like you have access to the private repo, and if so, you should use that for content updates. I'll leave this PR open in case @shsagir wants to review it here. If you decide to open a new PR in the private repo, please close this PR. Thanks. Can you review the proposed changes? IMPORTANT: When the changes are ready for publication, adding a #label:"aq-pr-triaged" |
prmerger-automator
bot
added
the
aq-pr-triaged
|
#sign-off |
|
Invalid command: '#sign-off'. Only the assigned author of one or more file in this PR can sign off. @shsagir |
|
#sign-off |
data-explorer/security-network-managed-private-endpoint-create.md
Outdated
Show resolved
Hide resolved
|
Learn Build status updates of commit c52ac81: ✅ Validation status: passed
For more details, please refer to the build report. For any questions, please:
|
5 participants
Event Grid doesn't support using Managed Identity in the trusted service flow described here. There's an ICM where a customer was successfully using Managed Private Endpoint in their Event Grid flow, and when they removed that MPE in favor of a MI (per this doc), the storage account stopped trusting their Kusto Event Grid connection.
The other Kusto flows that connect to storage, such as native ingestion, do support MI.
Event Grid is flighting via feature flag to support the trusted flow via MI, and so should be supported in the near future. Therefore, we made a note internally that once that process completes, we'll remove from this doc the exception we're adding now.
Thank you for contributing to Kusto documentation
Please add a brief comment outlining the purpose of this PR. Add links to any relevant references such as DevOps work items.
Make sure you've done the following:
Acrolinx: Make sure your Acrolinx score is at least 80 (higher is better) and with 0 spelling issues.
Successful build: Review the build status to make sure all files are green (Succeeded) and there are no errors, warnings, or suggestions.
Preview the pages: Click each Preview URL link, scan the entire page looking for formatting issues, in particular the parts you edited.
Check the Table of Contents: If you're adding a new markdown file, make sure it is linked from the table of contents.
Sign off: Once the PR is finalized, add a comment with
#sign-off. If you need to cancel the sign-off, add a comment with#hold-off.NOTE: Signing off means the document can be published at any time.
Next steps
Learn more about how to contribute