You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
A common challenge when building cloud applications is how to manage the credentials in your code for authenticating to cloud services. Keeping the credentials secure is an important task. Ideally, the credentials never appear on developer workstations and aren't checked into source control. Azure Key Vault provides a way to securely store credentials, secrets, and other keys, but your code has to authenticate to Key Vault to retrieve them.
26
+
A common challenge when building cloud applications is how to manage the credentials in your code for authenticating to cloud services. Keeping the credentials secure is an important task. Ideally, the credentials never appear on developer workstations and aren't checked into source control. Azure Key Vault provides a way to securely store credentials, secrets, and other keys, but your code has to authenticate to Key Vault to retrieve them.
27
27
28
28
The managed identities for Azure resources feature in Azure Active Directory (Azure AD) solves this problem. The feature provides Azure services with an automatically managed identity in Azure AD. You can use the identity to authenticate to any service that supports Azure AD authentication, including Key Vault, without any credentials in your code.
29
29
@@ -47,9 +47,9 @@ There are two types of managed identities:
47
47
- A **system-assigned managed identity** is enabled directly on an Azure service instance. When the identity is enabled, Azure creates an identity for the instance in the Azure AD tenant that's trusted by the subscription of the instance. After the identity is created, the credentials are provisioned onto the instance. The lifecycle of a system-assigned identity is directly tied to the Azure service instance that it's enabled on. If the instance is deleted, Azure automatically cleans up the credentials and the identity in Azure AD.
48
48
- A **user-assigned managed identity** is created as a standalone Azure resource. Through a create process, Azure creates an identity in the Azure AD tenant that's trusted by the subscription in use. After the identity is created, the identity can be assigned to one or more Azure service instances. The lifecycle of a user-assigned identity is managed separately from the lifecycle of the Azure service instances to which it's assigned.
49
49
50
-
Internally, managed identities are service principals of a special type, which are locked to only be used with Azure resources. When the managed identity is deleted, the corresponding service principal is automatically removed.
50
+
Internally, managed identities are service principals of a special type, which are locked to only be used with Azure resources. When the managed identity is deleted, the corresponding service principal is automatically removed.
51
51
52
-
Your code can use a managed identity to request access tokens for services that support Azure AD authentication. Azure takes care of rolling the credentials that are used by the service instance.
52
+
Your code can use a managed identity to request access tokens for services that support Azure AD authentication. Azure takes care of rolling the credentials that are used by the service instance.
53
53
54
54
The following diagram shows how managed service identities work with Azure virtual machines (VMs):
55
55
@@ -60,7 +60,7 @@ The following diagram shows how managed service identities work with Azure virtu
60
60
| Creation | Created as part of an Azure resource (for example, an Azure virtual machine or Azure App Service) | Created as a stand-alone Azure resource |
61
61
| Lifecycle | Shared lifecycle with the Azure resource that the managed identity is created with. <br/> When the parent resource is deleted, the managed identity is deleted as well. | Independent life-cycle. <br/> Must be explicitly deleted. |
62
62
| Sharing across Azure resources | Cannot be shared. <br/> It can only be associated with a single Azure resource. | Can be shared <br/> The same user-assigned managed identity can be associated with more than one Azure resource. |
63
-
| Common use cases | Workloads that are contained within a single Azure resource <br/> Workloads for which you need independent identities. <br/> For example, an application that runs on a single virtual machine | Workloads that run on multiple resources and which can share a single identity. <br/> Workloads that need pre-authorization to a secure resource as part of a provisioning flow. <br/> Workloads where resources are recycled frequently, but permissions should stay consistent. <br/> For example, a workload where multiple virtual machines need to access the same resource |
63
+
| Common use cases | Workloads that are contained within a single Azure resource <br/> Workloads for which you need independent identities. <br/> For example, an application that runs on a single virtual machine | Workloads that run on multiple resources and which can share a single identity. <br/> Workloads that need pre-authorization to a secure resource as part of a provisioning flow. <br/> Workloads where resources are recycled frequently, but permissions should stay consistent. <br/> For example, a workload where multiple virtual machines need to access the same resource |
64
64
65
65
### How a system-assigned managed identity works with an Azure VM
66
66
@@ -113,7 +113,7 @@ Learn how to use a managed identity with a Windows VM:
113
113
*[Access Azure Data Lake Store](tutorial-windows-vm-access-datalake.md)
Copy file name to clipboardExpand all lines: articles/azure-monitor/platform/resource-logs-collect-storage.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -13,7 +13,7 @@ ms.subservice: logs
13
13
[Resource logs](resource-logs-overview.md) in Azure provide rich, frequent data about the internal operation of an Azure resource. This article describes collecting resource logs to an Azure storage account to retain data for archiving.
14
14
15
15
## Prerequisites
16
-
You need to [create an Azure storage account](../../storage/common/storage-quickstart-create-account.md) if you don't already have one. The storage account does not have to be in the same subscription as the resource sending logs as long as the user who configures the setting has appropriate RBAC access to both subscriptions.
16
+
You need to [create an Azure storage account](../../storage/common/storage-account-create.md) if you don't already have one. The storage account does not have to be in the same subscription as the resource sending logs as long as the user who configures the setting has appropriate RBAC access to both subscriptions.
> The deployment fails if **newOrExisting** is **new**, but the storage account with the storage account name specified already exists.
152
152
153
-
Try making another deployment with **newOrExisting** set to "existing" and specify an existing storage account. To create a storage account beforehand, see [Create a storage account](../storage/common/storage-quickstart-create-account.md).
153
+
Try making another deployment with **newOrExisting** set to "existing" and specify an existing storage account. To create a storage account beforehand, see [Create a storage account](../storage/common/storage-account-create.md).
Copy file name to clipboardExpand all lines: articles/cloud-services/cloud-services-how-to-monitor.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -47,7 +47,7 @@ As each role is created, Visual Studio adds the Azure Diagnostics extension to i
47
47
48
48
## Setup diagnostics extension
49
49
50
-
First, if you don't have a **classic** storage account, [create one](../storage/common/storage-quickstart-create-account.md). Make sure the storage account is created with the **Classic deployment model** specified.
50
+
First, if you don't have a **classic** storage account, [create one](../storage/common/storage-account-create.md). Make sure the storage account is created with the **Classic deployment model** specified.
51
51
52
52
Next, navigate to the **Storage account (classic)** resource. Select **Settings** > **Access keys** and copy the **Primary connection string** value. You need this value for the cloud service.
Copy file name to clipboardExpand all lines: articles/cognitive-services/form-recognizer/tutorial-form-recognizer-with-logic-apps.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -47,7 +47,7 @@ In this tutorial, we learn how to extract the information from such tables into
47
47
48
48
You use this container to upload sample data that is required to train the model.
49
49
50
-
1. Follow the instructions in [Create an Azure Storage account](../../storage/common/storage-quickstart-create-account.md) to create a storage account. Use **formrecostorage** as the storage account name.
50
+
1. Follow the instructions in [Create an Azure Storage account](../../storage/common/storage-account-create.md) to create a storage account. Use **formrecostorage** as the storage account name.
51
51
1. Follow the instructions in [Create an Azure blob container](../../storage/blobs/storage-quickstart-blobs-portal.md) to create a container within the Azure Storage account. Use **formrecocontainer** as the container name. Make sure you set the public access level to **Container (anonymous read access for containers and blobs)**.
Copy file name to clipboardExpand all lines: articles/cost-management/storage-accounts.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -22,7 +22,7 @@ You can save Cloudyn reports in the Cloudyn portal, Azure storage, or AWS storag
22
22
23
23
You must have either an Azure storage account or an Amazon storage bucket.
24
24
25
-
If you don't have an Azure storage account, you need to create one. For more information about creating an Azure storage account, see [Create a storage account](../storage/common/storage-quickstart-create-account.md).
25
+
If you don't have an Azure storage account, you need to create one. For more information about creating an Azure storage account, see [Create a storage account](../storage/common/storage-account-create.md).
26
26
27
27
If you don't have an AWS simple storage service (S3) bucket, you need to create one. For more information about creating an S3 bucket, see [Create a Bucket](https://docs.aws.amazon.com/AmazonS3/latest/gsg/CreatingABucket.html).
Copy file name to clipboardExpand all lines: articles/data-factory/quickstart-create-data-factory-python.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -29,7 +29,7 @@ If you don't have an Azure subscription, create a [free](https://azure.microsoft
29
29
30
30
## Prerequisites
31
31
32
-
***Azure Storage account**. You use the blob storage as **source** and **sink** data store. If you don't have an Azure storage account, see the [Create a storage account](../storage/common/storage-quickstart-create-account.md) article for steps to create one.
32
+
***Azure Storage account**. You use the blob storage as **source** and **sink** data store. If you don't have an Azure storage account, see the [Create a storage account](../storage/common/storage-account-create.md) article for steps to create one.
33
33
***Create an application in Azure Active Directory** following [this instruction](../active-directory/develop/howto-create-service-principal-portal.md#create-an-azure-active-directory-application). Make note of the following values that you use in later steps: **application ID**, **authentication key**, and **tenant ID**. Assign application to "**Contributor**" role by following instructions in the same article.
Copy file name to clipboardExpand all lines: articles/data-factory/v1/data-factory-customer-profiling-usecase.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -24,7 +24,7 @@ Contoso’s goal is to identify up-sell/cross-sell opportunities based on the ga
24
24
In this solution, Contoso wants to evaluate the effectiveness of a marketing campaign it has recently launched. We start with the raw gaming logs, process and enrich them with geolocation data, join it with advertising reference data, and lastly copy them into an Azure SQL Database to analyze the campaign’s impact.
25
25
26
26
## Deploy Solution
27
-
All you need to access and try out this simple use case is an [Azure subscription](https://azure.microsoft.com/pricing/free-trial/), an [Azure Blob storage account](../../storage/common/storage-quickstart-create-account.md), and an [Azure SQL Database](../../sql-database/sql-database-get-started.md). You deploy the customer profiling pipeline from the **Sample pipelines** tile on the home page of your data factory.
27
+
All you need to access and try out this simple use case is an [Azure subscription](https://azure.microsoft.com/pricing/free-trial/), an [Azure Blob storage account](../../storage/common/storage-account-create.md), and an [Azure SQL Database](../../sql-database/sql-database-get-started.md). You deploy the customer profiling pipeline from the **Sample pipelines** tile on the home page of your data factory.
28
28
29
29
1. Create a data factory or open an existing data factory. See [Copy data from Blob Storage to SQL Database using Data Factory](data-factory-copy-data-from-azure-blob-storage-to-sql-database.md) for steps to create a data factory.
30
30
2. In the **DATA FACTORY** blade for the data factory, click the **Sample pipelines** tile.
1. To subscribe to events, create either a general-purpose v2 storage account or a Blob storage account. For more information, see [Create a storage account](../storage/common/storage-quickstart-create-account.md).
35
+
1. To subscribe to events, create either a general-purpose v2 storage account or a Blob storage account. For more information, see [Create a storage account](../storage/common/storage-account-create.md).
Copy file name to clipboardExpand all lines: articles/event-hubs/event-hubs-kafka-stream-analytics.md
+2-2
Original file line number
Diff line number
Diff line change
@@ -35,7 +35,7 @@ To complete this quickstart, make sure you have the following prerequisites:
35
35
*[Java Development Kit (JDK) 1.7+](https://aka.ms/azure-jdks).
36
36
*[Download](https://maven.apache.org/download.cgi) and [install](https://maven.apache.org/install.html) a Maven binary archive.
37
37
*[Git](https://www.git-scm.com/)
38
-
* An **Azure Storage account**. If you don't have one, [create one](../storage/common/storage-quickstart-create-account.md) before proceeding further. The Stream Analytics job in this walkthrough stores the output data in an Azure blob storage.
38
+
* An **Azure Storage account**. If you don't have one, [create one](../storage/common/storage-account-create.md) before proceeding further. The Stream Analytics job in this walkthrough stores the output data in an Azure blob storage.
39
39
40
40
41
41
## Create a Kafka enabled Event Hubs namespace
@@ -111,7 +111,7 @@ You can now stream events from your applications that use the Kafka protocol int
## Process event data using a Stream Analytics job
114
-
In this section, you create an Azure Stream Analytics job. The Kafka client sends events to the event hub. You create a Stream Analytics job that takes event data as input and outputs it to an Azure blob storage. If you don't have an **Azure Storage account**, [create one](../storage/common/storage-quickstart-create-account.md).
114
+
In this section, you create an Azure Stream Analytics job. The Kafka client sends events to the event hub. You create a Stream Analytics job that takes event data as input and outputs it to an Azure blob storage. If you don't have an **Azure Storage account**, [create one](../storage/common/storage-account-create.md).
115
115
116
116
The query in the Stream Analytics job passes through the data without performing any analytics. You can create a query that transforms the input data to produce output data in a different format or with gained insights.
Copy file name to clipboardExpand all lines: articles/guides/operations/azure-operations-guide.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -403,7 +403,7 @@ There are several options for deploying a storage account.
403
403
404
404
#### Portal
405
405
406
-
Deploying a storage account by using the Azure portal requires only an active Azure subscription and access to a web browser. You can deploy a new storage account into a new or existing resource group. After you’ve created the storage account, you can create a blob container or file share by using the portal. You can create Table and Queue storage entities programmatically. For more information, see [Create a storage account](../../storage/common/storage-quickstart-create-account.md).
406
+
Deploying a storage account by using the Azure portal requires only an active Azure subscription and access to a web browser. You can deploy a new storage account into a new or existing resource group. After you’ve created the storage account, you can create a blob container or file share by using the portal. You can create Table and Queue storage entities programmatically. For more information, see [Create a storage account](../../storage/common/storage-account-create.md).
407
407
408
408
In addition to deploying a storage account from the Azure portal, you can deploy an Azure Resource Manager template from the portal. This will deploy and configure all resources as defined in the template, including any storage accounts. For more information, see [Deploy resources with Resource Manager templates and Azure portal](../../azure-resource-manager/resource-group-template-deploy-portal.md).
Copy file name to clipboardExpand all lines: articles/iot-accelerators/iot-accelerators-device-simulation-protobuf.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -38,7 +38,7 @@ To follow the steps in this how-to guide, you need:
38
38
* Postman. You can download [Postman for Mac, windows, or Linux](https://www.getpostman.com/apps).
39
39
* An [IoT hub deployed to your Azure subscription](../iot-hub/iot-hub-create-through-portal.md). You need the IoT hub's connection string to complete the steps in this guide. You can get the connection string from the Azure portal.
40
40
* A [Cosmos DB database deployed to your Azure subscription](../cosmos-db/create-sql-api-dotnet.md#create-account) that uses the SQL API and that's configured for [strong consistency](../cosmos-db/manage-account.md). You need the Cosmos DB database's connection string to complete the steps in this guide. You can get the connection string from the Azure portal.
41
-
* An [Azure storage account deployed to your Azure subscription](../storage/common/storage-quickstart-create-account.md). You need the storage account's connection string to complete the steps in this guide. You can get the connection string from the Azure portal.
41
+
* An [Azure storage account deployed to your Azure subscription](../storage/common/storage-account-create.md). You need the storage account's connection string to complete the steps in this guide. You can get the connection string from the Azure portal.
Copy file name to clipboardExpand all lines: articles/iot-accelerators/iot-accelerators-remote-monitoring-bulk-configuration-update.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -41,7 +41,7 @@ To follow this tutorial, you need a deployed instance of the Remote Monitoring s
41
41
42
42
If you haven't deployed the Remote Monitoring solution accelerator yet, you should complete the [Deploy a cloud-based remote monitoring solution](quickstart-remote-monitoring-deploy.md) quickstart.
43
43
44
-
You need an Azure storage account to host your firmware files. You can use an existing storage account, or [create a new storage account](../storage/common/storage-quickstart-create-account.md) in your subscription.
44
+
You need an Azure storage account to host your firmware files. You can use an existing storage account, or [create a new storage account](../storage/common/storage-account-create.md) in your subscription.
45
45
46
46
The tutorial uses an [IoT DevKit](https://microsoft.github.io/azure-iot-developer-kit/) device as a sample device.
0 commit comments