diff --git a/website/blog-cnny/2023-02-07/index.md b/website/blog-cnny/2023-02-07/index.md
index aa22a41964..081f1d7ec1 100644
--- a/website/blog-cnny/2023-02-07/index.md
+++ b/website/blog-cnny/2023-02-07/index.md
@@ -172,6 +172,7 @@ ACR_NAME=<YOUR_ACR_NAME>
 
 az aks enable-addons \
   --addons azure-keyvault-secrets-provider \
+  --enable-secret-rotation \
   --name $AKS_NAME \
   --resource-group $RG_NAME
 ```
diff --git a/website/blog-cnny/2023-02-08/index.md b/website/blog-cnny/2023-02-08/index.md
index 4e428d38c8..74482d0e85 100644
--- a/website/blog-cnny/2023-02-08/index.md
+++ b/website/blog-cnny/2023-02-08/index.md
@@ -172,8 +172,7 @@ az aks enable-addons \
   --name $AKS_NAME \
   --resource-group $RESOURCE_GROUP \
   --addons web_application_routing \
-  --dns-zone-resource-id=$DNS_ZONE_ID \
-  --enable-secret-rotation
+  --dns-zone-resource-id=$DNS_ZONE_ID
 ```
 
 The add-on will also deploy a new Azure Managed Identity which is used by the `external-dns` controller when writing Azure DNS zone entries. Currently, it does not have permission to do that, so let's grant it permission.