Merge branch 'master' into iotedge-acrtoken-securityupdates

Author: Nicholas Switzer

articles/applied-ai-services/form-recognizer/concept-custom.md

@@ -140,7 +140,7 @@ Use the programming language code of your choice to create a composed model that
 
 * [**JavaScript**](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/formrecognizer/ai-form-recognizer/samples/v3/javascript/createComposedModel.js).
 
-* [**Python**](https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/formrecognizer/azure-ai-formrecognizer/samples/sample_create_composed_model.py)
+* [**Python**](https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/formrecognizer/azure-ai-formrecognizer/samples/v3.2-beta/sample_create_composed_model.py)
 
 ---
 
@@ -174,7 +174,7 @@ Using the programming language of your choice to analyze a form or document with
 
 * [**JavaScript**](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/formrecognizer/ai-form-recognizer/samples/v3/javascript/recognizeCustomForm.js)
 
-* [**Python**](https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/formrecognizer/azure-ai-formrecognizer/samples/sample_recognize_custom_forms.py)
+* [**Python**](https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/formrecognizer/azure-ai-formrecognizer/samples/v3.1/sample_recognize_custom_forms.py)
 
 ---
 

articles/applied-ai-services/form-recognizer/generate-sas-tokens.md

@@ -63,7 +63,7 @@ To get started, you'll need:
     :::image type="content" source="media/sas-tokens/upload-blob-window.png" alt-text="Screenshot: upload blob window in the Azure portal.":::
 
 > [!NOTE]
-> By default, the REST API will use form documents that are located at the root of your container. However, you can use data organized in subfolders if specified in the API call. *See* [**Organize your data in subfolders**](/azure/applied-ai-services/form-recognizer/build-training-data-set.md#organize-your-data-in-subfolders-optional)
+> By default, the REST API will use form documents that are located at the root of your container. However, you can use data organized in subfolders if specified in the API call. *See* [**Organize your data in subfolders**](/azure/applied-ai-services/form-recognizer/build-training-data-set#organize-your-data-in-subfolders-optional)
 
 ## Create a SAS with the Azure portal
 

articles/azure-arc/servers/plan-evaluate-on-azure-virtual-machine.md

@@ -1,7 +1,7 @@
 ---
 title: How to evaluate Azure Arc-enabled servers with an Azure VM
 description: Learn how to evaluate Azure Arc-enabled servers using an Azure virtual machine.
-ms.date: 09/20/2021
+ms.date: 10/01/2021
 ms.topic: conceptual
 ---
 
@@ -11,6 +11,9 @@ Azure Arc-enabled servers is designed to help you connect servers running on-pre
 
 While you cannot install Azure Arc-enabled servers on an Azure VM for production scenarios, it is possible to configure Azure Arc-enabled servers to run on an Azure VM for *evaluation and testing purposes only*. This article will help you set up an Azure VM before you can enable Azure Arc-enabled servers on it.
 
+> [!NOTE]
+> The steps in this article are intended for virtual machines hosted in the Azure cloud. Azure Arc-enabled servers is not supported on virtual machines running on Azure Stack Hub or Azure Stack Edge.
+
 ## Prerequisites
 
 * Your account is assigned to the [Virtual Machine Contributor](../../role-based-access-control/built-in-roles.md#virtual-machine-contributor) role.

articles/azure-government/compare-azure-government-global-azure.md

@@ -4,7 +4,7 @@ description: Describes the functions to use in a Bicep file to work with strings
 author: mumian
 ms.author: jgao
 ms.topic: conceptual
-ms.date: 09/30/2021
+ms.date: 10/01/2021
 ---
 
 # String functions for Bicep
@@ -142,7 +142,7 @@ The output from the preceding example with the default values is:
 
 ## concat
 
-Instead of using the concat function, use string interpolation. 
+Instead of using the concat function, use string interpolation.
 
 ```bicep
 param prefix string = 'prefix'
@@ -1259,7 +1259,7 @@ resource mystorage 'Microsoft.Storage/storageAccounts@@2018-07-01' = {
 }
 ```
 
-If you need to create a new unique name each time you deploy a Bicep file, and don't intend to update the resource, you can use the [utcNow](./bicep-functions-date.md#utcnow) function with uniqueString. You could use this approach in a test environment. For an example, see [utcNow](./bicep-functions-date.md#utcnow).
+If you need to create a new unique name each time you deploy a Bicep file, and don't intend to update the resource, you can use the [utcNow](./bicep-functions-date.md#utcnow) function with uniqueString. You could use this approach in a test environment. For an example, see [utcNow](./bicep-functions-date.md#utcnow). Note the utcNow function can only be used within an expression for the default value of a parameter.
 
 ### Return value
 

articles/azure-resource-manager/bicep/bicep-functions-string.md

@@ -2,7 +2,7 @@
 title: Deploy resources to resource groups
 description: Describes how to deploy resources in an Azure Resource Manager template. It shows how to target more than one resource group.
 ms.topic: conceptual
-ms.date: 09/14/2021
+ms.date: 10/01/2021
 ms.custom: devx-track-azurepowershell
 ---
 
@@ -59,7 +59,7 @@ New-AzResourceGroupDeployment `
   -Name demoRGDeployment `
   -ResourceGroupName ExampleGroup `
   -TemplateUri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/quickstarts/microsoft.storage/storage-account-create/azuredeploy.json `
-  -storageAccountType Standard_GRS `
+  -storageAccountType Standard_GRS
 ```
 
 ---

articles/azure-resource-manager/templates/deploy-to-resource-group.md

@@ -36,7 +36,7 @@ This section provides a list of Video Analyzer endpoints.
 * **Authentication and Authorization**: initial authentication is done through a short-lived Provisioning Token issued by the Video Analyzer management APIs. Once the initial handshake is completed, the module and service exchange a set of auto-rotating authorization keys that are used from this point forward.
 * **Requirement**: access to this endpoint is required for the correct functioning of the Video Analyzer Edge module. The edge module will stop functioning if this endpoint cannot be reached within a period of 36 hours.
 
-## Telemetry:
+## Telemetry
 
 * **Purpose**:  optional periodic submission of telemetry data which enables Microsoft to better understand how the Video Analyzer edge module is used and proactively identify future improvements that can be done on compatibility, performance, and other product areas.
 * **Authentication and Authorization**: authorization is based on a pre-established key.
@@ -47,6 +47,31 @@ This section provides a list of Video Analyzer endpoints.
 > [!NOTE]
 > The list of endpoints described in this article, is not meant to be a comprehensive list of the associated service endpoints. It is an informative list of the endpoints which are required for the normal operation of Video Analyzer. Refer to each individual Azure service documentation for a complete list of the endpoints exposed by each respective service.
 
+## Azure Storage
+
+* **Purpose**: to record audio, video, and inference data when pipelines(TODO: link) are configured to store video on the cloud via the Video Sink (TODO: link to section in pipeline.md) node.
+* **Authentication and Authorization**: authorization is performed by standard Azure Storage service authentication and authorization enforcement. In this case, storage is accessed through container specific SAS URLs.
+* **Requirement**: access to this endpoint is only required when a Video Analyzer edge pipeline is configured to archive the video to the cloud.
+
+## IoT Hub
+
+* **Purpose**: control and data plane for Azure IoT Hub and Edge Devices.
+* **Authentication and Authorization**: please refer to the Azure IoT Hub documentation.
+* **Requirement**: Properly configured and functioning edge device with Azure IoT Edge Runtime is required to ensure that the Azure Video Analyzer edge module operates correctly.
+
+## 1.1.4	TLS encryption 
+
+* **Encryption and Server Authentication**: all Video Analyzer endpoints are exposed through TLS 1.2 compliant endpoints.
+
+## 1.1.5	References 
+
+Public:
+
+* [Azure Resource Manager overview](../../azure-resource-manager/management/overview.md)
+* [Understand Azure IoT Hub endpoints](../../iot-hub/iot-hub-devguide-endpoints.md)
+* [What is Azure Private Link?](../../private-link/private-link-overview.md)
+* [Azure service tags overview](../../virtual-network/service-tags-overview.md)
+
 ## Next steps
 
 [Access Policies](access-policies.md)