Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr into ftpsupport

Author: duongau

articles/active-directory/authentication/how-to-mfa-registration-campaign.md

@@ -266,9 +266,14 @@ No. This feature is available only for users using Azure AD Multi-Factor Authent
 
 Nudge is available only on browsers and not on applications.
 
+**Can users be nudged on a mobile device?** 
+
+Nudge is not available on mobile devices.
+
 **How long will the campaign run for?** 
 
 You can use the APIs to enable the campaign for as long as you like. Whenever you want to be done running the campaign, simply use the APIs to disable the campaign.  
+
 **Can each group of users have a different snooze duration?** 
 
 No. The snooze duration for the prompt is a tenant-wide setting and applies to all groups in scope. 
@@ -295,7 +300,7 @@ No. The feature, for now, aims to nudge users to set up the Authenticator app on
 
 **Is there a way for me to hide the snooze option and force my users to setup the Authenticator app?**  
 
-There is no way to hide the snooze option on the nudge. You can set the snoozeDuration to 0, which will ensure that users will see the nudge during each MFA attempt.  
+Users in organizations with free and trial subscriptions can postpone the app setup up to three times. There is no way to hide the snooze option on the nudge for organizations with paid subscriptions yet. You can set the snoozeDuration to 0, which will ensure that users will see the nudge during each MFA attempt.  
 
 **Will I be able to nudge my users if I am not using Azure AD Multi-Factor Authentication?** 
 
@@ -309,11 +314,20 @@ Yes. If they have been scoped for the nudge using the policy.
 
 It's the same as snoozing.
 
-**Why don’t some users see a nudge when there is a conditional access policy for "Register security information"?**
+**Why don’t some users see a nudge when there is a Conditional Access policy for "Register security information"?**
+
+A nudge won't appear if a user is in scope for a Conditional Access policy that blocks access to the **Register security information** page.
 
-A nudge won't appear if a user is in scope for a conditional access policy that blocks access to the **Register security information** page.
+**Do users see a nudge when there is a terms of use (ToU) screen presented to the user during sign-in?**
+
+A nudge won't appear if a user is presented with the [terms of use (ToU)](/azure/active-directory/conditional-access/terms-of-use) screen during sign-in.
+
+**Do users see a nudge when Conditional Access custom controls are applicable to the sign-in?**
+
+A nudge won't appear if a user is redirected during sign-in due to [Conditional Access custom controls](/azure/active-directory/conditional-access/controls) settings.
 
 ## Next steps
 
 [Enable passwordless sign-in with Microsoft Authenticator](howto-authentication-passwordless-phone.md)
 
+

articles/aks/csi-secrets-store-driver.md

@@ -75,7 +75,9 @@ A container using subPath volume mount won't receive secret updates when it's ro
 
     ```bash
     kubectl get pods -n kube-system -l 'app in (secrets-store-csi-driver,secrets-store-provider-azure)'
+    ```
 
+    ```output
     NAME                                     READY   STATUS    RESTARTS   AGE
     aks-secrets-store-csi-driver-4vpkj       3/3     Running   2          4m25s
     aks-secrets-store-csi-driver-ctjq6       3/3     Running   2          4m21s
@@ -129,14 +131,17 @@ After the pod starts, the mounted content at the volume path that you specified
 
 * Use the following commands to validate your secrets and print a test secret.
 
+To show secrets held in the secrets store:
     ```bash
-    ## show secrets held in secrets-store
     kubectl exec busybox-secrets-store-inline -- ls /mnt/secrets-store/
-
-    ## print a test secret 'ExampleSecret' held in secrets-store
-    kubectl exec busybox-secrets-store-inline -- cat /mnt/secrets-store/ExampleSecret
     ```
 
+To display a secret in the store, for example this command shows the test secret `ExampleSecret`:
+
+```
+kubectl exec busybox-secrets-store-inline -- cat /mnt/secrets-store/ExampleSecret
+```
+
 ## Obtain certificates and keys
 
 The Azure Key Vault design makes sharp distinctions between keys, secrets, and certificates. The Key Vault service’s certificates features were designed to make use of its key and secret capabilities. When a key vault certificate is created, an addressable key and secret are also created with the same name. The key allows key operations, and the secret allows the retrieval of the certificate value as a secret.
@@ -208,13 +213,17 @@ A key vault certificate also contains public x509 certificate metadata. The key
 
 * To disable autorotation, first disable the addon. Then, re-enable the addon without the `enable-secret-rotation` parameter.
 
-    ```azurecli-interactive
-    # disable the addon
-    az aks addon disable -g myResourceGroup -n myAKSCluster2 -a azure-keyvault-secrets-provider
+Disable the secrets provider addon:
 
-    # re-enable the addon without the `enable-secret-rotation` parameter
-    az aks addon enable -g myResourceGroup -n myAKSCluster2 -a azure-keyvault-secrets-provider
-    ```
+```azurecli-interactive
+az aks addon disable -g myResourceGroup -n myAKSCluster2 -a azure-keyvault-secrets-provider
+```
+
+Re-enable the secrets provider addon, but without the `enable-secret-rotation` parameter:
+
+```bash
+az aks addon enable -g myResourceGroup -n myAKSCluster2 -a azure-keyvault-secrets-provider
+```
 
 ### Sync mounted content with a Kubernetes secret
 
@@ -339,17 +348,30 @@ In this article, you learned how to use the Azure Key Vault Provider for Secrets
 
 <!-- LINKS INTERNAL -->
 [az-aks-create]: /cli/azure/aks#az-aks-create
+
 [az-aks-enable-addons]: /cli/azure/aks#az-aks-enable-addons
+
 [az-aks-disable-addons]: /cli/azure/aks#az-aks-disable-addons
+
 [csi-storage-drivers]: ./csi-storage-drivers.md
+
 [identity-access-methods]: ./csi-secrets-store-identity-access.md
+
 [aad-pod-identity]: ./use-azure-ad-pod-identity.md
+
 [aad-workload-identity]: workload-identity-overview.md
+
 [az-keyvault-create]: /cli/azure/keyvault#az-keyvault-create.md
+
 [az-keyvault-secret-set]: /cli/azure/keyvault#az-keyvault-secret-set.md
+
 [az-aks-addon-update]: /cli/azure/aks#addon-update.md
 
 <!-- LINKS EXTERNAL -->
 [kube-csi]: https://kubernetes-csi.github.io/docs/
+
 [reloader]: https://github.com/stakater/Reloader
+
 [kubernetes-version-support]: ./supported-kubernetes-versions.md?tabs=azure-cli#kubernetes-version-support-policy
+
+

articles/digital-twins/concepts-azure-digital-twins-explorer.md

@@ -37,8 +37,6 @@ Developers may find this tool especially useful in the following scenarios:
 
 The explorer's main purpose is to help you visualize and understand your graph, and update your graph as needed. For large-scale solutions and for work that should be repeated or automated, consider using the [APIs and SDKs](./concepts-apis-sdks.md) to interact with your instance through code instead.
 
-[!INCLUDE [digital-twins-explorer-dtdl](../../includes/digital-twins-explorer-dtdl.md)]
-
 ## How to access
 
 The main way to access Azure Digital Twins Explorer is through the [Azure portal](https://portal.azure.com).
@@ -51,8 +49,6 @@ To open Azure Digital Twins Explorer for an Azure Digital Twins instance, first
 
 Azure Digital Twins Explorer is organized into panels, each with a different set of capabilities for exploring and managing your models, twins, and relationships.
 
-[!INCLUDE [digital-twins-explorer-dtdl](../../includes/digital-twins-explorer-dtdl.md)]
-
 The sections of the explorer are as follows:
 * **Query Explorer**: Run queries against the twin graph and see the visual results in the **Twin Graph** panel.
 * **Models**: View a list of your models and perform model actions such as add, remove, and view model details.
@@ -64,6 +60,8 @@ The sections of the explorer are as follows:
 
 For detailed instructions on how to use each feature, see [Use Azure Digital Twins Explorer](how-to-use-azure-digital-twins-explorer.md). 
 
+[!INCLUDE [digital-twins-explorer-dtdl](../../includes/digital-twins-explorer-dtdl.md)]
+
 ## How to contribute
 
 Azure Digital Twins Explorer is an open-source tool that welcomes contributions to the code and documentation. The hosted application is deployed regularly from a source code repository in GitHub.

articles/digital-twins/how-to-use-azure-digital-twins-explorer.md

@@ -98,8 +98,6 @@ The Twin Graph panel also provides several abilities to customize your graph vie
 * [Show and hide twin graph elements](#show-and-hide-twin-graph-elements)
 * [Filter and highlight twin graph elements](#filter-and-highlight-twin-graph-elements)
 
-[!INCLUDE [digital-twins-explorer-dtdl](../../includes/digital-twins-explorer-dtdl.md)]
-
 ### Explore twin data
 
 Run a query using the [Query Explorer](#query-your-digital-twin-graph) to see the twins and relationships in the query result displayed in the **Twin Graph** panel.
@@ -271,8 +269,6 @@ This section describes how to perform the following management activities:
 
 For information about the viewing experience for twins and relationships, see [Explore twins and the Twin Graph](#explore-the-twin-graph).
 
-[!INCLUDE [digital-twins-explorer-dtdl](../../includes/digital-twins-explorer-dtdl.md)]
-
 ### View flat list of twins and relationships
 
 The **Twins** panel shows a flat list of your twins and their associated relationships. You can search for twins by name, and expand them for details about their incoming and outgoing relationships.
@@ -283,8 +279,6 @@ The **Twins** panel shows a flat list of your twins and their associated relatio
 
 You can create a new digital twin from its model definition in the **Models** panel.
 
-[!INCLUDE [digital-twins-explorer-dtdl](../../includes/digital-twins-explorer-dtdl.md)]
-
 To create a twin from a model, find that model in the list and choose the menu dots next to the model name. Then, select **Create a Twin**. You'll be asked to enter a **name** for the new twin, which must be unique. Then save the twin, which will add it to your graph.
 
 :::image type="content" source="media/how-to-use-azure-digital-twins-explorer/models-panel-create-a-twin.png" alt-text="Screenshot of Azure Digital Twins Explorer Models panel. The menu dots for a single model are highlighted, and the menu option to Create a Twin is also highlighted." lightbox="media/how-to-use-azure-digital-twins-explorer/models-panel-create-a-twin-large.png":::
@@ -328,8 +322,6 @@ You can also choose to delete all of the twins in your instance at the same time
 
 ## Explore models and the Model Graph
 
-[!INCLUDE [digital-twins-explorer-dtdl](../../includes/digital-twins-explorer-dtdl.md)]
-
 Models can be viewed both in the **Models** panel on the left side of the Azure Digital Twins Explorer screen, and in the **Model Graph** panel in the middle of the screen.
 
 The **Models** panel:
@@ -338,6 +330,8 @@ The **Models** panel:
 The **Model Graph** panel:
 :::image type="content" source="media/how-to-use-azure-digital-twins-explorer/model-graph-panel.png" alt-text="Screenshot of Azure Digital Twins Explorer. The Model Graph panel is highlighted." lightbox="media/how-to-use-azure-digital-twins-explorer/model-graph-panel.png":::
 
+[!INCLUDE [digital-twins-explorer-dtdl](../../includes/digital-twins-explorer-dtdl.md)]
+
 You can use these panels to [view your models](#view-models).
 
 The Model Graph panel also provides several abilities to customize your graph viewing experience:
@@ -351,6 +345,8 @@ You can view a flat list of the models in your instance in the **Models** panel.
 
 You can use the **Model Graph** panel to view a graphical representation of the models in your instance, along with the relationships, inheritance, and components that connect them to each other.
 
+[!INCLUDE [digital-twins-explorer-dtdl](../../includes/digital-twins-explorer-dtdl.md)]
+
 #### View model definition
 
 To see the full definition of a model, find that model in the **Models** pane and select the menu dots next to the model name. Then, select **View Model**. Doing so will display a **Model Information** modal showing the raw DTDL definition of the model.
@@ -411,8 +407,6 @@ Then, to upload the images at the same time, use the **Upload Model Images** ico
 
 ## Manage models
 
-[!INCLUDE [digital-twins-explorer-dtdl](../../includes/digital-twins-explorer-dtdl.md)]
-
 You can use the **Models** panel on the left side of the Azure Digital Twins Explorer screen to perform management activities on the entire set of models, or on individual models. 
 
 :::image type="content" source="media/how-to-use-azure-digital-twins-explorer/models-panel.png" alt-text="Screenshot of Azure Digital Twins Explorer. The Models panel is highlighted." lightbox="media/how-to-use-azure-digital-twins-explorer/models-panel.png":::
@@ -428,6 +422,8 @@ For information about the viewing experience for models, see [Explore models and
 
 You can upload models from your machine by selecting model files individually, or by uploading an entire folder of model files at once. If you're uploading one JSON file that contains the code for many models, be sure to review the [bulk model upload limitations](#limitations-of-bulk-model-upload).
 
+[!INCLUDE [digital-twins-explorer-dtdl](../../includes/digital-twins-explorer-dtdl.md)]
+
 To upload one or more models that are individually selected, select the **Upload a model** icon showing an upwards arrow.
 
 :::image type="content" source="media/how-to-use-azure-digital-twins-explorer/models-panel-upload.png" alt-text="Screenshot of Azure Digital Twins Explorer Models panel. The Upload a model icon is highlighted.":::

articles/machine-learning/how-to-use-foundation-models.md

@@ -41,8 +41,13 @@ You can filter the list of models in the model catalog by Task, or by license. S
 
 You can quickly test out any pre-trained model using the Sample Inference widget on the model card, providing your own sample input to test the result. Additionally, the model card for each model includes a brief description of the model and links to samples for code based inferencing, finetuning and evaluation of the model.
 
-> [!NOTE]
->If you are using a private workspace, your virtual network needs to allow outbound access in order to use foundation models in Azure Machine Learning
+> [!IMPORTANT]
+> Deploying foundational models to a managed online endpoint is currently supported with __public workspaces__ (and their public associated resources) only.
+>
+> * When `egress_public_network_access` is set to `disabled`, the deployment can only access the workspace-associated resources secured in the virtual network. 
+> * When `egress_public_network_access` is set to `enabled` for a managed online endpoint deployment, the deployment can only access the resources with public access. Which means that it cannot access resources secured in the virtual network.
+>
+> For more information, see [Outbound resource access for managed online endpoints](how-to-secure-online-endpoint.md#outbound-resource-access).
 
 ## How to evaluate foundation models using your own test data
 
@@ -82,7 +87,7 @@ To enable users to get started with model evaluation, we have published samples
 ## How to finetune foundation models using your own training data
 
 In order to improve model performance in your workload, you might want to fine tune a foundation model using your own training data. You can easily finetune these foundation models by using either the finetune settings in the studio or by using the code based samples linked from the model card.
-		
+        
 ### Finetune using the studio
 You can invoke the finetune settings form by selecting on the **Finetune** button on the model card for any foundation model.