Skip to content

Commit 8e2b3ab

Browse files
committed
art1-1
1 parent 6058a99 commit 8e2b3ab

1 file changed

Lines changed: 3 additions & 4 deletions

File tree

articles/container-apps/dapr-component-connect-services.md

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ ms.service: azure-container-apps
88
ms.subservice: dapr
99
ms.custom: build-2023
1010
ms.topic: concept-article
11-
ms.date: 02/03/2026
11+
ms.date: 03/26/2026
1212
---
1313

1414
# Connect to other Azure or partner services by using Dapr components
@@ -19,15 +19,14 @@ Before getting started, learn more about the [offered support for Dapr component
1919

2020
## Recommendations
2121

22-
Whenever possible, it's recommended that you use Azure components that provide managed identity support for the most secure connection. Use Azure Key Vault secret stores *only* when managed identity authentication isn't supported.
22+
For the most secure connection, we recommended that you use Azure components that provide managed identity support whenever possible. Use Azure Key Vault secret stores *only* when managed identity authentication isn't supported.
2323

2424
| Service type | Recommendation |
2525
| ------------ | -------------- |
2626
| Azure component with managed identity support | [Use the managed identity flow (recommended)](#use-managed-identity-recommended) |
2727
| Azure component without managed identity support | [Use an Azure Key Vault secret store](#azure-key-vault-secret-stores) |
2828
| Non-Azure components | [Use an Azure Key Vault secret store](#azure-key-vault-secret-stores) |
2929

30-
3130
## Use managed identity (recommended)
3231

3332
For Azure-hosted services, Dapr can use the [managed identity of the scoped container apps][aca-managed-id] to authenticate to the backend service provider. When using managed identity, you don't need to include secret information in a component manifest. *Using managed identity is recommended* as it eliminates storage of sensitive input in components and doesn't require managing a secret store.
@@ -72,7 +71,7 @@ scopes:
7271
7372
#### Platform-managed Kubernetes secrets
7473
75-
As an alternative to Kubernetes secrets, local environment variables, and local file Dapr secret stores, Azure Container Apps provides a platform-managed approach for creating and using Kubernetes secrets. This approach can be used to connect to non-Azure services or in dev/test scenarios for quickly deploying components via the CLI without setting up a secret store or managed identity.
74+
As an alternative to Kubernetes secrets, local environment variables, and local file Dapr secret stores, Azure Container Apps provides a platform-managed approach for creating and using Kubernetes secrets. This approach can be used to connect to non-Azure services. Or, in dev/test scenarios it can be used for quickly deploying components via the CLI without setting up a secret store or managed identity.
7675
7776
This component configuration defines the sensitive value as a secret parameter that can be referenced from the metadata section.
7877

0 commit comments

Comments
 (0)