Skip to content

Commit 98c7cec

Browse files
add note for minimum secret refresh interval
1 parent 852a4d5 commit 98c7cec

2 files changed

Lines changed: 6 additions & 0 deletions

File tree

articles/azure-app-configuration/reference-dotnet-provider.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -603,6 +603,9 @@ builder.Configuration.AddAzureAppConfiguration(options =>
603603

604604
Azure App Configuration enables you to configure secret refresh intervals independently of your configuration refresh cycle. This is crucial for security because while the Key Vault reference URI in App Configuration remains unchanged, the underlying secret in Key Vault might be rotated as part of your security practices.
605605

606+
> [!NOTE]
607+
> Secret refresh uses a minimum interval of **one minute**. This prevents excessive secret reloads when dynamic refresh is enabled (for example, when `RegisterAll` or `Register` with `refreshAll: true` triggers frequent `TryRefreshAsync` calls during bursts of configuration updates).
608+
606609
To ensure your application always uses the most current secret values, configure the `SetSecretRefreshInterval` method. This forces the provider to retrieve fresh secret values from Key Vault when:
607610

608611
- Your application calls `IConfigurationRefresher.TryRefreshAsync`

articles/azure-app-configuration/reference-javascript-provider.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -422,6 +422,9 @@ const appConfig = await load(endpoint, credential, {
422422
423423
Azure App Configuration enables you to configure secret refresh intervals independently of your configuration refresh cycle. This is crucial for security because while the Key Vault reference URI in App Configuration remains unchanged, the underlying secret in Key Vault might be rotated as part of your security practices.
424424
425+
> [!NOTE]
426+
> Secret refresh uses a minimum interval of **one minute**. This prevents excessive secret reloads when dynamic refresh is enabled and your app triggers frequent `refresh()` calls (for example, request-driven refresh during bursts of configuration updates).
427+
425428
To ensure your application always uses the most current secret values, configure the `secretRefreshIntervalInMs` property in `KeyVaultOptions`. This forces the provider to retrieve fresh secret values from Key Vault when:
426429
427430
- Your application calls `AzureAppConfiguration.refresh`

0 commit comments

Comments
 (0)