You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/ai-services/content-safety/includes/quickstarts/rest-quickstart-image.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -44,7 +44,7 @@ Paste the command below into a text editor, and make the following changes.
44
44
1. Populate the `"image"` field in the body with either a `"content"` field or a `"blobUrl"` field. For example: `{"image": {"content": "<base_64_string>"}` or `{"image": {"blobUrl": "<your_storage_url>"}`.
45
45
46
46
```shell
47
-
curl --location --request POST '<endpoint>/contentsafety/image:analyze?api-version=2023-10-01' \
47
+
curl --location --request POST '<endpoint>/contentsafety/image:analyze?api-version=2024-09-01' \
@@ -71,7 +71,7 @@ The below fields must be included in the URL:
71
71
72
72
| Name |Required? | Description | Type |
73
73
| :------- |-------- |:--------------- | ------ |
74
-
| **API Version** |Required |This is the API version to be checked. Current version is: `api-version=2023-10-01`. Example: `<endpoint>/contentsafety/image:analyze?api-version=2023-10-01` | String |
74
+
| **API Version** |Required |This is the API version to be checked. Current version is: `api-version=2024-09-01`. Example: `<endpoint>/contentsafety/image:analyze?api-version=2024-09-01` | String |
75
75
76
76
The parameters in the request body are defined in this table:
@@ -47,7 +47,7 @@ The below fields must be included in the url:
47
47
48
48
| Name |Required | Description | Type |
49
49
| :------- |-------- |:--------------- | ------ |
50
-
|**API Version**|Required |This is the API version to be checked. The current version is: api-version=2023-10-01. Example: `<endpoint>/contentsafety/text:analyze?api-version=2023-10-01`| String |
50
+
|**API Version**|Required |This is the API version to be checked. The current version is: api-version=2024-09-01. Example: `<endpoint>/contentsafety/text:analyze?api-version=2024-09-01`| String |
51
51
52
52
The parameters in the request body are defined in this table:
Copy file name to clipboardExpand all lines: articles/ai-services/content-safety/overview.md
+39-38Lines changed: 39 additions & 38 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -142,40 +142,41 @@ For more information, see [Language support](/azure/ai-services/content-safety/l
142
142
143
143
To use the Content Safety APIs, you must create your Azure AI Content Safety resource in a supported region. Currently, the Content Safety features are available in the following Azure regions:
144
144
145
-
| Region | Moderation APIs (text and image) | Moderation APIs (multimodal) | Prompt Shields | Protected material detection for Text | Protected material detection for Code | Groundedness detection (preview) | Custom categories (rapid) (preview) | Custom categories (standard) (preview) | Blocklists |
| Region | Moderation APIs (text and image) | Moderation APIs (multimodal) | Prompt Shields | Protected material detection for Text | Protected material detection for Code | Groundedness detection (preview) | Custom categories (rapid) (preview) | Custom categories (standard) (preview) |
146
+
|--|-|---|-|--|---|-|-|---|
147
+
| Australia East | ✅ || ✅ | ✅ | ✅ || ✅ | ✅|
148
+
| Brazil South | ✅ || ✅| ✅ |||||
149
+
| Canada Central |✅ || ✅ |✅ |||||
150
+
| Central India ||| ✅ | ✅ |||||
151
+
| Canada East | ✅ || ✅ | ✅ | ✅ || ✅ ||
152
+
| Central US | ✅ ||| ✅ | ✅ || ✅ ||
153
+
| East US | ✅ |✅| ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
154
+
| East US 2 | ✅ || ✅ | ✅ | ✅ | ✅| ✅ ||
155
+
| France Central | ✅ || ✅ | ✅ | ✅ || ✅ ||
156
+
| Germany West Central|✅|| ✅| ✅ |||||
157
+
| India North |||✅ |✅ |||||
158
+
| Italy North | ✅ || ✅| ✅ |||||
159
+
| Japan East | ✅ || ✅ | ✅ | ✅ || ✅ ||
160
+
| Japan West ||||| ✅ || ✅ ||
161
+
| Korea Central | ✅ ||||||||
162
+
| North Central US | ✅ || ✅ | ✅ | ✅ || ✅ ||
163
+
| Norway East |✅ ||||||||
164
+
| Poland Central | ✅ || ✅ | ✅ | ✅ || ✅ ||
165
+
| South Africa North| ✅|| ✅ | ✅ | ✅ ||||
166
+
| South Central US | ✅ |||| ✅ || ✅ ||
167
+
| South East Asia ||| ✅ | ✅ ||| ✅ ||
168
+
| South India | ✅ ||| ✅ | ✅ || ✅ ||
169
+
| Sweden Central | ✅ || ✅ | ✅ | ✅ | ✅| ✅ ||
170
+
| Switzerland North | ✅ || ✅ | ✅ ||| ✅ | ✅ |
171
+
| Switzerland West | ✅ || ✅ | ✅ ||| ✅ | ✅ |
172
+
| UAE North | ✅ ||||||||
173
+
| UK South | ✅ || ✅ | ✅ ||| ✅ ||
174
+
| West Europe | ✅ |✅| ✅ | ✅ | ✅ || ✅ ||
175
+
| West US ||| ✅ | ✅ | ✅ || ✅ ||
176
+
| West US 2 | ✅ || ✅ | ✅ | ✅ || ✅ ||
177
+
| West US 3 | ✅ || ✅ | ✅ | ✅ || ✅ ||
178
+
| USGov Arizona | ✅ || ✅ | ✅ |||||
179
+
| USGov Virginia | ✅ || ✅ | ✅ |||||
179
180
180
181
181
182
@@ -189,10 +190,10 @@ Feel free to [contact us](mailto:[email protected]) if your bus
189
190
190
191
Content Safety features have query rate limits in requests-per-second (RPS) or requests-per-10-seconds (RP10S) . See the following table for the rate limits for each feature.
Copy file name to clipboardExpand all lines: articles/ai-services/encryption/cognitive-services-encryption-keys-portal.md
+26-26Lines changed: 26 additions & 26 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,61 +7,61 @@ ms.service: azure-ai-services
7
7
ms.custom:
8
8
- ignite-2023
9
9
ms.topic: conceptual
10
-
ms.date: 11/15/2023
10
+
ms.date: 10/16/2024
11
11
ms.author: pafarley
12
12
---
13
13
14
14
# Customer-managed keys for encryption
15
15
16
-
Azure AI is built on top of multiple Azure services. While the data is stored securely using encryption keys that Microsoft provides, you can enhance security by providing your own (customer-managed) keys. The keys you provide are stored securely using Azure Key Vault.
16
+
Azure AI is built on top of multiple Azure services. While customer data is stored securely using encryption keys that Microsoft provides by default, you can enhance your security by providing your own (customer-managed) keys. The keys you provide are stored securely in Azure Key Vault.
17
17
18
18
## Prerequisites
19
19
20
20
* An Azure subscription.
21
-
* An Azure Key Vault instance. The key vault contains the key(s) used to encrypt your services.
22
-
21
+
* An Azure Key Vault instance. The key vault contains the keys used to encrypt your services.
23
22
* The key vault instance must enable soft delete and purge protection.
24
23
* The managed identity for the services secured by a customer-managed key must have the following permissions in key vault:
25
-
26
24
* wrap key
27
25
* unwrap key
28
26
* get
29
27
30
-
## Customer-managed keys
31
-
32
-
When you don't use a customer-managed key, Microsoft creates and manages these resources in a Microsoft owned Azure subscription and uses a Microsoft-managed key to encrypt the data.
28
+
## What are customer-managed keys?
33
29
34
-
When you use a customer-managed key, these resources are _in your Azure subscription_and encrypted with your key. While they exist in your subscription, these resources are managed by Microsoft. They're automatically created and configured when you create your Azure AI resource.
30
+
By default, Microsoft creates and manages your resources in a Microsoft-owned Azure subscription and uses a Microsoft-managed key to encrypt the data.
35
31
36
-
> [!IMPORTANT]
37
-
> When using a customer-managed key, the costs for your subscription will be higher because these resources are in your subscription. To estimate the cost, use the [Azure pricing calculator](https://azure.microsoft.com/pricing/calculator/).
32
+
When you use a customer-managed key, these resources live in _your_ Azure subscription and are encrypted with your own key. While they exist in your subscription, these resources are still managed by Microsoft. They're automatically created and configured when you create your Azure AI resource.
38
33
39
-
These Microsoft-managed resources are located in a new Azure resource group is created in your subscription. This group is in addition to the resource group for your project. This resource group contains the Microsoft-managed resources that your key is used with. The resource group is named using the formula of `<Azure AI resource group name><GUID>`. It isn't possible to change the naming of the resources in this managed resource group.
34
+
These Microsoft-managed resources are located in a new Azure resource group is created in your subscription. This resource group exists in addition to the resource group for your project. It contains the Microsoft-managed resources that your key is used with. The resource group is named using the formula of `<Azure AI resource group name><GUID>`. It isn't possible to change the naming of the resources in this managed resource group.
40
35
41
36
> [!TIP]
42
-
> *If your AI resource uses a private endpoint, this resource group will also contain a Microsoft-managed Azure Virtual Network. This VNet is used to secure communications between the managed services and the project. You cannot provide your own VNet for use with the Microsoft-managed resources. You also cannot modify the virtual network. For example, you cannot change the IP address range that it uses.
37
+
> If your AI resource uses a private endpoint, this resource group will also contain a Microsoft-managed Azure Virtual Network. This VNet is used to secure communications between the managed services and the project. You cannot provide your own VNet for use with the Microsoft-managed resources. You also cannot modify the virtual network. For example, you cannot change the IP address range that it uses.
43
38
44
39
> [!IMPORTANT]
45
40
> If your subscription does not have enough quota for these services, a failure will occur.
46
41
42
+
> [!IMPORTANT]
43
+
> When using a customer-managed key, the costs for your subscription will be higher because these resources are in your subscription. To estimate the cost, use the [Azure pricing calculator](https://azure.microsoft.com/pricing/calculator/).
44
+
47
45
> [!WARNING]
48
-
> Don't delete the managed resource group any of the resources automatically created in this group. If you need to delete the resource group or Microsoft-managed services in it, you must delete the Azure AI resources that uses it. The resource group resources are deleted when the associated AI resource is deleted.
46
+
> Don't delete the managed resource group any of the resources automatically created in this group. If you need to delete the resource group or Microsoft-managed services in it, you must delete the Azure AI resources that use it. The resource group resources are deleted when the associated AI resource is deleted.
47
+
48
+
## Enable customer-managed keys
49
49
50
-
The process to enable Customer-Managed Keys with Azure Key Vault for Azure AI services varies by product. Use these links for service-specific instructions:
50
+
The process to enable customer-managed keys with Azure Key Vault for Azure AI services varies by product. Use these links for service-specific instructions:
51
51
52
-
*[Azure OpenAI encryption of data at rest](../openai/encrypt-data-at-rest.md)
53
-
*[Custom Vision encryption of data at rest](../custom-vision-service/encrypt-data-at-rest.md)
54
-
*[Face Services encryption of data at rest](../computer-vision/identity-encrypt-data-at-rest.md)
55
-
*[Document Intelligence encryption of data at rest](../../ai-services/document-intelligence/authentication/encrypt-data-at-rest.md)
56
-
*[Translator encryption of data at rest](../translator/encrypt-data-at-rest.md)
57
-
*[Language service encryption of data at rest](../language-service/concepts/encryption-data-at-rest.md)
58
-
*[Speech encryption of data at rest](../speech-service/speech-encryption-of-data-at-rest.md)
59
-
*[Content Moderator encryption of data at rest](../Content-Moderator/encrypt-data-at-rest.md)
60
-
*[Personalizer encryption of data at rest](../personalizer/encrypt-data-at-rest.md)
Azure AI uses compute resources for compute instance and serverless compute when you fine-tune models or build flows. The following table describes the compute options and how data is encrypted by each one:
64
+
Azure AI uses resources for compute instance and serverless compute when you fine-tune models or build flows. The following table describes the compute options and how data is encrypted by each one:
65
65
66
66
| Compute | Encryption |
67
67
| ----- | ----- |
@@ -84,7 +84,7 @@ Each virtual machine also has a local temporary disk for OS operations. If you w
84
84
* Resources that are created in the Microsoft-managed Azure resource group in your subscription can't be modified by you or be provided by you at the time of creation as existing resources.
85
85
* You can't delete Microsoft-managed resources used for customer-managed keys without also deleting your project.
86
86
87
-
## Next steps
87
+
## Related content
88
88
89
89
*[Azure AI services Customer-Managed Key Request Form](https://aka.ms/cogsvc-cmk) is still required for Speech and Content Moderator.
90
90
*[What is Azure Key Vault](/azure/key-vault/general/overview)?
0 commit comments