react to feedback

Author: Rick-Anderson

aspnetcore/security/data-protection/configuration/scaling.md

@@ -40,7 +40,10 @@ Generally, app instances don't know about each other, so coordinating the genera
 
 First, app instances [disable key generation](xref:security/data-protection/configuration/overview#disableautomatickeygeneration).  Next, a new component is introduced that connects to the same key repository and performs a dummy protect operation once a day or so.
 
-For example, with Azure blob storage as the key repository, the key manager could be a simple console app run on a schedule.
+For example, with Azure blob storage as the key repository, the key manager could be a basic console app run on a schedule:
+
+:::code language="csharp" source="~/security/data-protection/configuration/scaling/samples/AzBlobKey/Program.cs":::
+
 
 ```csharp
 using Azure.Identity;

aspnetcore/security/data-protection/configuration/scaling/samples/AzBlobKey/AzBlobKey.csproj

@@ -7,6 +7,7 @@
   </PropertyGroup>
 
   <ItemGroup>
+    <PackageReference Include="Azure.Extensions.AspNetCore.DataProtection.Blobs" Version="1.4.0" />
     <PackageReference Include="Azure.Extensions.AspNetCore.DataProtection.Keys" Version="1.3.0" />
     <PackageReference Include="Azure.Identity" Version="1.13.1" />
     <PackageReference Include="Microsoft.Extensions.Azure" Version="1.9.0" />

aspnetcore/security/data-protection/configuration/scaling/samples/AzBlobKey/Program.cs

@@ -16,6 +16,6 @@
 
 using var host = hostBuilder.Build();
 
-// Perform a dummy operation to force key creation or rotation, if needed
+// Perform a dummy operation to force key creation or rotation, if needed.
 var dataProtector = host.Services.GetDataProtector("Default");
 dataProtector.Protect([]);

aspnetcore/security/data-protection/configuration/scaling/samples/AzBlobKey/appsettings.json

@@ -5,5 +5,9 @@
       "Microsoft.AspNetCore": "Warning"
     }
   },
-  "AllowedHosts": "*"
+  "AllowedHosts": "*",
+    "AzureURIs": {
+      "BlobStorage": "your-blob-storage-uri-here",
+      "KeyVault": "your-key-vault-uri-here"
+    }
 }