images

Author: alexwolfmsft

docs/azure/sdk/authentication/local-development-service-principal.md

@@ -21,7 +21,7 @@ During local development, applications need to authenticate to Azure to access v
 
 Using dedicated application service principals allows you to adhere to the principle of least privilege when accessing Azure resources. Permissions are limited to the specific requirements of the app during development, preventing accidental access to Azure resources intended for other apps or services. This approach also helps avoid issues when the app is moved to production by ensuring it isn't over-privileged in the development environment.
 
-:::image type="content" source="../media/local-dev-service-principal-overview.png" alt-text="A diagram showing how a local .NET app uses the developer's credentials to connect to Azure by using locally installed development tools.":::
+:::image type="content" source="../media/mermaidjs/local-service-principal-authentication.svg" alt-text="A diagram showing how a local .NET app uses the developer's credentials to connect to Azure by using locally installed development tools.":::
 
 When the app is registered in Azure, an application service principal is created. For local development:
 

docs/azure/sdk/media/mermaidjs/local-broker-authentication.md

@@ -0,0 +1,22 @@
+---
+ms.topic: include
+ms.date: 08/07/2024
+---
+
+```mermaid
+flowchart LR
+    APP["Local .NET app"]
+    BK["Developer account credentials supplied by broker"]
+    AS["Azure services <br/><br/> Azure AI Services, Azure Blob Storage, Azure Key Vault, other Azure services"]
+    
+    APP --> BK
+    BK --> AS
+    
+    classDef app fill:#e6f3ff,stroke:#0078d4,stroke-width:2px,color:#000,font-size:16px
+    classDef serviceP fill:#D4F4D4,stroke:#7BC97B,stroke-width:2px,color:#000,font-size:16px
+    classDef services fill:#0078d4,stroke:#005ba1,stroke-width:2px,color:#fff,font-size:16px
+    
+    class APP app
+    class SP serviceP
+    class AS services
+```

docs/azure/sdk/media/mermaidjs/local-broker-authentication.svg

@@ -0,0 +1,22 @@
+---
+ms.topic: include
+ms.date: 08/07/2024
+---
+
+```mermaid
+flowchart LR
+    APP["Local .NET app"]
+    SP["App service principal stored in environment variables"]
+    AS["Azure services <br/><br/> Azure AI Services, Azure Blob Storage, Azure Key Vault, other Azure services"]
+    
+    APP --> SP
+    SP --> AS
+    
+    classDef app fill:#e6f3ff,stroke:#0078d4,stroke-width:2px,color:#000,font-size:16px
+    classDef serviceP fill:#D4F4D4,stroke:#7BC97B,stroke-width:2px,color:#000,font-size:16px
+    classDef services fill:#0078d4,stroke:#005ba1,stroke-width:2px,color:#fff,font-size:16px
+    
+    class APP app
+    class SP serviceP
+    class AS services
+```