You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/ai-services/language-service/native-document-support/shared-access-signatures.md
+7-9Lines changed: 7 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ ms.topic: how-to
6
6
manager: nitinme
7
7
ms.author: lajanuar
8
8
author: laujan
9
-
ms.date: 11/21/2024
9
+
ms.date: 03/05/2025
10
10
---
11
11
12
12
# SAS tokens for your storage containers
@@ -19,17 +19,15 @@ Learn to create user delegation, shared access signature (SAS) tokens, using the
19
19
>
20
20
> [Role-based access control (managed identities)](../concepts/role-based-access-control.md) provide an alternate method for granting access to your storage data without the need to include SAS tokens with your HTTP requests.
21
21
>
22
-
> *You can use managed identities to grant access to any resource that supports Microsoft Entra authentication, including your own applications.
22
+
> *Using managed identities grants access to any resource that supports Microsoft Entra authentication, including your own applications.
23
23
> * Using managed identities replaces the requirement for you to include shared access signature tokens (SAS) with your source and target URLs.
24
-
> *There's no added cost to use managed identities in Azure.
24
+
> *Using managed identities doesn't require an added cost in Azure.
25
25
26
26
At a high level, here's how SAS tokens work:
27
27
28
28
* Your application submits the SAS token to Azure Storage as part of a REST API request.
29
29
30
-
* If the storage service verifies that the SAS is valid, the request is authorized.
31
-
32
-
* If the SAS token is deemed invalid, the request is declined, and the error code 403 (Forbidden) is returned.
30
+
* The storage service verifies that the SAS is valid and then the request is authorized. If the SAS token is deemed invalid, the request is declined, and the error code 403 (Forbidden) is returned.
> * SAS tokens are used to grant permissions to storage resources, and should be protected in the same manner as an account key.
43
41
>
44
-
> * Operations that use SAS tokens should be performed only over an HTTPS connection, and SAS URIs should only be distributed on a secure connection such as HTTPS.
42
+
> * Operations that use SAS tokens should be performed only over an HTTPS connection, and `SAS URI`s should only be distributed on a secure connection such as HTTPS.
* Consider setting a longer duration period for the time you're using your storage account for Language Service operations.
81
79
* The value of the expiry time is determined by whether you're using an **Account key** or **User delegation key****Signing method**:
82
80
***Account key**: No imposed maximum time limit; however, best practices recommended that you configure an expiration policy to limit the interval and minimize compromise. [Configure an expiration policy for shared access signatures](/azure/storage/common/sas-expiration-policy).
83
-
***User delegation key**: The value for the expiry time is a maximum of seven days from the creation of the SAS token. The SAS is invalid after the user delegation key expires, so a SAS with an expiry time of greater than seven days will still only be valid for seven days. For more information,*see*[Use Microsoft Entra credentials to secure a SAS](/azure/storage/blobs/storage-blob-user-delegation-sas-create-cli#use-azure-ad-credentials-to-secure-a-sas).
81
+
***User delegation key**: The value for the expiry time is a maximum of seven days from the creation of the SAS token. The SAS is invalid after the user delegation key expires, so a SAS with an expiry time of greater than seven days will still only be valid for seven days. For more information,*see*[Use Microsoft Entra credentials to secure a SAS](/azure/storage/blobs/storage-blob-user-delegation-sas-create-cli#use-azure-ad-credentials-to-secure-a-sas).
84
82
85
-
1. The **Allowed IP addresses** field is optional and specifies an IP address or a range of IP addresses from which to accept requests. If the request IP address doesn't match the IP address or address range specified on the SAS token, authorization fails. The IP address or a range of IP addresses must be public IPs, not private. For more information,*see*, [**Specify an IP address or IP range**](/rest/api/storageservices/create-account-sas#specify-an-ip-address-or-ip-range).
83
+
1. The **Allowed IP addresses** field is optional and specifies an IP address or a range of IP addresses from which to accept requests. If the request IP address doesn't match the IP address or address range specified on the SAS token, authorization fails. The IP address or a range of IP addresses must be public IPs, not private. For more information,*see*, [**Specify an IP address or IP range**](/rest/api/storageservices/create-account-sas#specify-an-ip-address-or-ip-range).
86
84
87
85
1. The **Allowed protocols** field is optional and specifies the protocol permitted for a request made with the SAS. The default value is HTTPS.
Copy file name to clipboardExpand all lines: articles/ai-services/language-service/overview.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -27,21 +27,21 @@ The Language service also provides several new features as well, which can eithe
27
27
> [!TIP]
28
28
> Unsure which feature to use? See [Which Language service feature should I use](#which-language-service-feature-should-i-use) to help you decide.
29
29
30
-
[**Azure AI Foundry**](https://ai.azure.com) enables you to use most of the below service features without needing to write code.
30
+
[**Azure AI Foundry**](https://ai.azure.com) enables you to use most of the following service features without needing to write code.
31
31
32
32
### Named Entity Recognition (NER)
33
33
34
34
:::row:::
35
35
:::column span="":::
36
-
:::image type="content" source="media/overview/named-entity-recognition.png" alt-text="A screenshot of named entity recognition in Azure AI Foundry."lightbox="media/overview/named-entity-recognition.png":::
36
+
:::image type="content" source="media/overview/named-entity-recognition.png" alt-text="A screenshot of named entity recognition in Azure AI Foundry."lightbox="media/overview/named-entity-recognition.png":::
37
37
:::column-end:::
38
38
:::column span="":::
39
-
[Named entity recognition](./named-entity-recognition/overview.md) identifies different entries in text and categorizes them into pre-defined types.
39
+
[Named entity recognition](./named-entity-recognition/overview.md) identifies different entries in text and categorizes them into predefined types.
40
40
41
41
:::column-end:::
42
42
:::row-end:::
43
43
44
-
### Personally identifying (PII) and health (PHI) information detection
44
+
### Personal and health data information detection
45
45
46
46
:::row:::
47
47
:::column span="":::
@@ -73,7 +73,7 @@ The Language service also provides several new features as well, which can eithe
73
73
:::image type="content" source="media/overview/sentiment-analysis.png" alt-text="A screenshot of sentiment analysis in Azure AI Foundry." lightbox="media/overview/sentiment-analysis.png":::
74
74
:::column-end:::
75
75
:::column span="":::
76
-
[Sentiment analysis and opinion mining](./sentiment-opinion-mining/overview.md)are preconfigured features that help you find out what people think of your brand or topic by mining text for clues about positive or negative sentiment, and can associate them with specific aspects of the text.
76
+
[Sentiment analysis and opinion mining](./sentiment-opinion-mining/overview.md) preconfigured features that help you understand public perception of your brand or topic. These features analyze text to identify positive or negative sentiments and can link them to specific elements within the text.
77
77
78
78
:::column-end:::
79
79
:::row-end:::
@@ -88,7 +88,7 @@ The Language service also provides several new features as well, which can eithe
88
88
:::column-end:::
89
89
:::column span="":::
90
90
[Summarization](./summarization/overview.md) condenses information for text and conversations (chat and transcripts).
91
-
Text summarization generates a summary, supporting two approaches: Extractive summarization produces a summary by extracting salient sentences within the document along with the positioning information of these sentences, and abstractive summarization, which generates a summary with concise, coherent sentences or words that aren't verbatim extract sentences from the original document.
91
+
Text summarization generates a summary, supporting two approaches: Extractive summarization creates a summary by selecting key sentences from the document and preserving their original positions. In contrast, abstractive summarizationgenerates a summary by producing new, concise, and coherent sentences or phrases that aren't directly copied from the original document.
92
92
Conversation summarization recaps and segments long meetings into timestamped chapters. Call center summarization summarizes customer issues and resolution.
93
93
:::column-end:::
94
94
:::row-end:::
@@ -180,7 +180,7 @@ Conversation summarization recaps and segments long meetings into timestamped ch
180
180
:::image type="content" source="media/studio-examples/question-answering.png" alt-text="A screenshot of a question answering example." lightbox="media/studio-examples/question-answering.png":::
181
181
:::column-end:::
182
182
:::column span="":::
183
-
[Question answering](./question-answering/overview.md) is a custom feature that finds the most appropriate answer for inputs from your users, and is commonly used to build conversational client applications, such as social media applications, chat bots, and speech-enabled desktop applications.
183
+
[Question answering](./question-answering/overview.md) is a custom feature that identifies the most suitable answer for user inputs. This feature is typically utilized to develop conversational client applications, including social media platforms, chat bots, and speech-enabled desktop applications.
184
184
185
185
:::column-end:::
186
186
:::row-end:::
@@ -191,7 +191,7 @@ This section helps you decide which Language service feature you should use for
191
191
192
192
|What do you want to do? |Document format |Your best solution | Is this solution customizable?*|
193
193
|---------|---------|---------|---------|
194
-
| Detect and/or redact sensitive information such as PII and PHI. | Unstructured text, <br> transcribed conversations |[PII detection](./personally-identifiable-information/overview.md)||
194
+
| Detect and/or redact sensitive information such as `PII` and `PHI`. | Unstructured text, <br> transcribed conversations |[PII detection](./personally-identifiable-information/overview.md)||
195
195
| Extract categories of information without creating a custom model. | Unstructured text | The [preconfigured NER feature](./named-entity-recognition/overview.md)||
196
196
| Extract categories of information using a model specific to your data. | Unstructured text |[Custom NER](./custom-named-entity-recognition/overview.md)| ✓ |
197
197
|Extract main topics and important phrases. | Unstructured text |[Key phrase extraction](./key-phrase-extraction/overview.md)||
Copy file name to clipboardExpand all lines: articles/ai-services/language-service/personally-identifiable-information/how-to/redact-conversation-pii.md
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -24,23 +24,23 @@ By default, this feature uses the latest available AI model on your input. You c
24
24
25
25
### Language support
26
26
27
-
See the [PII Language Support page](../language-support.md) for more details. Currently the conversational PII GA model only supports the English language. The preview model and API support the [same list languages](../../concepts/language-support.md) as the other Language services.
27
+
For more information, *see*the [PII Language Support page](../language-support.md). Currently the conversational PII GA model only supports the English language. The preview model and API support the [same list languages](../../concepts/language-support.md) as the other Language services.
28
28
29
29
### Region support
30
30
31
31
The conversational PII API supports all Azure regions supported by the Language service.
32
32
33
33
## Submitting data
34
34
35
-
You can submit the input to the API as list of conversation items. Analysis is performed upon receipt of the request. Because the API is asynchronous, there may be a delay between sending an API request, and receiving the results. For information on the size and number of requests you can send per minute and second, see the data limits below.
35
+
You can submit the input to the API as list of conversation items. Analysis is performed upon receipt of the request. Because the API is asynchronous, there may be a delay between sending an API request, and receiving the results. For information on the size and number of requests you can send per minute and second, see the following data limits.
36
36
37
-
When using the async feature, the API results are available for 24 hours from the time the request was ingested, and is indicated in the response. After this time period, the results are purged and are no longer available for retrieval.
37
+
When you use the async feature, the API results are available for 24 hours from the time the request was ingested, and is indicated in the response. After this time period, the results are purged and are no longer available for retrieval.
38
38
39
39
When you submit data to conversational PII, you can send one conversation (chat or spoken) per request.
40
40
41
41
The API attempts to detect all the [defined entity categories](../concepts/conversations-entity-categories.md) for a given conversation input. If you want to specify which entities are detected and returned, use the optional `piiCategories` parameter with the appropriate entity categories.
42
42
43
-
For spoken transcripts, the entities detected are returned on the `redactionSource` parameter value provided. Currently, the supported values for `redactionSource` are `text`, `lexical`, `itn`, and `maskedItn` (which maps to Speech to text REST API's `display`\\`displayText`, `lexical`, `itn` and `maskedItn` format respectively). Additionally, for the spoken transcript input, this API also provides audio timing information to empower audio redaction. For using the audioRedaction feature, use the optional `includeAudioRedaction` flag with `true` value. The audio redaction is performed based on the lexical input format.
43
+
For spoken transcripts, the entities detected are returned on the `redactionSource` parameter value provided. Currently, the supported values for `redactionSource` are `text`, `lexical`, `itn`, and `maskedItn` (which maps to Speech to text REST API's `display`\\`displayText`, `lexical`, `itn`, and `maskedItn` format respectively). Additionally, for the spoken transcript input, this API also provides audio timing information to empower audio redaction. For using the audioRedaction feature, use the optional `includeAudioRedaction` flag with `true` value. The audio redaction is performed based on the lexical input format.
44
44
45
45
> [!NOTE]
46
46
> Conversation PII now supports 40,000 characters as document size.
@@ -56,7 +56,7 @@ When you get results from PII detection, you can stream the results to an applic
56
56
57
57
1. Go to your resource overview page in the [Azure portal](https://portal.azure.com/#home)
58
58
59
-
2. From the menu on the left side, select **Keys and Endpoint**. You'll need one of the keys and the endpoint to authenticate your API requests.
59
+
2. From the menu on the left side, select **Keys and Endpoint**. You need one of the keys and the endpoint to authenticate your API requests.
60
60
61
61
3. Download and install the client library package for your language of choice:
62
62
@@ -65,7 +65,7 @@ When you get results from PII detection, you can stream the results to an applic
In version 2024-11-15-preview, you're able to define the `redactionPolicy` parameter to reflect the redaction policy to be used when redacting the document in the response. The policy field supports 3 policy types:
77
+
In version 2024-11-15-preview, you're able to define the `redactionPolicy` parameter to reflect the redaction policy to be used when redacting the document in the response. The policy field supports three policy types:
78
78
79
79
-`noMask`
80
80
-`characterMask` (default)
81
81
-`entityMask`
82
82
83
83
The `noMask` policy allows the user to return the response without the `redactedText` field.
84
84
85
-
The `characterMask` policy allows the `redactedText` to be masked with a character, preserving the length and offset of the original text. This is the existing behavior.
85
+
The `characterMask` policy allows the `redactedText` to be masked with a character, preserving the length and offset of the original text. This behavior is the existing expectation.
86
86
87
-
There is also an optional field called `redactionCharacter` where you can input the character to be used in redaction if you're using the `characterMask` policy
87
+
There's also an optional field called `redactionCharacter` where you can input the character to be used in redaction if you're using the `characterMask` policy
88
88
89
89
The `entityMask` policy allows you to mask the detected PII entity text with the detected entity type
Copy file name to clipboardExpand all lines: articles/ai-services/language-service/personally-identifiable-information/how-to/redact-document-pii.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,7 +7,7 @@ author: jboback
7
7
manager: nitinme
8
8
ms.service: azure-ai-language
9
9
ms.topic: how-to
10
-
ms.date: 01/31/2025
10
+
ms.date: 03/05/2025
11
11
ms.author: lajanuar
12
12
ms.custom: language-service-pii
13
13
---
@@ -17,7 +17,7 @@ ms.custom: language-service-pii
17
17
> [!IMPORTANT]
18
18
>
19
19
> * Azure AI Language public preview releases provide early access to features that are in active development.
20
-
> * Features, approaches, and processes may change, prior to General Availability (GA), based on user feedback.
20
+
> * Features, approaches, and processes may change, before General Availability (GA), based on user feedback.
21
21
22
22
Azure AI Language is a cloud-based service that applies Natural Language Processing (NLP) features to text-based data. The native document support capability enables you to send API requests asynchronously, using an HTTP POST request body to send your data and HTTP GET request query string to retrieve the status results. Your processed documents are located in your Azure Blob Storage target container.
23
23
@@ -61,7 +61,7 @@ A native document refers to the file format used to create the original document
61
61
* For this project, we use the cURL command line tool to make REST API calls.
62
62
63
63
> [!NOTE]
64
-
> The cURL package is pre-installed on most Windows 10 and Windows 11 and most macOS and Linux distributions. You can check the package version with the following commands:
64
+
> The cURL package is preinstalled on most Windows 10 and Windows 11 and most macOS and Linux distributions. You can check the package version with the following commands:
65
65
> Windows: `curl.exe -V`
66
66
> macOS `curl -V`
67
67
> Linux: `curl --version`
@@ -84,9 +84,9 @@ A native document refers to the file format used to create the original document
84
84
85
85
1.**Subscription**. Select one of your available Azure subscriptions.
86
86
87
-
1.**Resource Group**. You can create a new resource group or add your resource to a pre-existing resource group that shares the same lifecycle, permissions, and policies.
87
+
1.**Resource Group**. You can create a new resource group or add your resource to a preexisting resource group that shares the same lifecycle, permissions, and policies.
88
88
89
-
1.**Resource Region**. Choose **Global** unless your business or application requires a specific region. If you're planning on using a [system-assigned managed identity (RBAC)](../../concepts/role-based-access-control.md) for authentication, choose a **geographic** region like **West US**.
89
+
1.**Resource Region**. Choose **Global** unless your business or application requires a specific region. If you're planning on using a [system-assigned managed identity](../../concepts/role-based-access-control.md) for authentication, choose a **geographic** region like **West US**.
90
90
91
91
1.**Name**. Enter the name you chose for your resource. The name you choose must be unique within Azure.
0 commit comments