Merge pull request #203626 from MicrosoftDocs/main

7/01 AM Publish

Author: huypub

articles/active-directory/app-provisioning/application-provisioning-quarantine-status.md

@@ -47,6 +47,8 @@ There are three ways to check whether an application is in quarantine:
 
 ## Why is my application in quarantine?
 
+Below are the common reasons your application may go into quarantine
+
 |Description|Recommended Action|
 |---|---|
 |**SCIM Compliance issue:** An HTTP/404 Not Found response was returned rather than the expected HTTP/200 OK response. In this case, the Azure AD provisioning service has made a request to the target application and received an unexpected response.|Check the admin credentials section. See if the application requires specifying the tenant URL and that the URL is correct. If you don't see an issue, contact the application developer to ensure that their service is SCIM-compliant. https://tools.ietf.org/html/rfc7644#section-3.4.2 |

articles/active-directory/roles/permissions-reference.md

@@ -84,7 +84,7 @@ The following output example resembles successful creation of the resource group
 Create an AKS cluster using the [az aks create][az-aks-create] command with the *--enable-addons monitoring* parameter to enable [Container insights][azure-monitor-containers]. The following example creates a cluster named *myAKSCluster* with one node and enables a system-assigned managed identity:
 
 ```azurecli-interactive
-az aks create -g myResourceGroup -n myManagedCluster --enable-managed-identity --node-count 1 --enable-addons monitoring
+az aks create -g myResourceGroup -n myAKSCluster --enable-managed-identity --node-count 1 --enable-addons monitoring
 ```
 
 After a few minutes, the command completes and returns JSON-formatted information about the cluster.
@@ -321,4 +321,4 @@ This quickstart is for introductory purposes. For guidance on a creating full so
 [kubernetes-deployment]: ../concepts-clusters-workloads.md#deployments-and-yaml-manifests
 [kubernetes-service]: ../concepts-network.md#services
 [windows-container-cli]: ../windows-container-cli.md
-[aks-solution-guidance]: /azure/architecture/reference-architectures/containers/aks-start-here?WT.mc_id=AKSDOCSPAGE
+[aks-solution-guidance]: /azure/architecture/reference-architectures/containers/aks-start-here?WT.mc_id=AKSDOCSPAGE

articles/aks/learn/quick-kubernetes-deploy-cli.md

@@ -12,7 +12,7 @@ ms.custom: seodec18
 
 In [Azure App Service](overview.md), you can easily restore app backups. You can also make on-demand custom backups or configure scheduled custom backups. You can restore a backup by overwriting an existing app by restoring to a new app or slot. This article shows you how to restore a backup and make custom backups.
 
-Backup and restore**Standard**, **Premium**, **Isolated**. For more information about scaling your App Service plan to use a higher tier, see [Scale up an app in Azure](manage-scale-up.md).
+Back up and restore **Standard**, **Premium**, **Isolated**. For more information about scaling your App Service plan to use a higher tier, see [Scale up an app in Azure](manage-scale-up.md).
 
 ## Automatic vs custom backups
 

articles/app-service/manage-backup.md

@@ -203,7 +203,7 @@ By default, the Hybrid jobs run under the context of System account. However, to
 1. Select **Settings**.
 1. Change the value of **Hybrid Worker credentials** from **Default** to **Custom**.
 1. Select the credential and click **Save**.
-1. If the following permissions are not assigned for Custom users, jobs might get suspended. 
+1. If the following permissions are not assigned for Custom users, jobs might get suspended. Add these permission to the Hybrid Runbook Worker account on the runbook worker machine, instead of adding the account to **Administrators** group because the `Filtered Token` feature of UAC would grant standard user rights to this account when logging-in. For more details, refer to - [Information about UAC on Windows Server](/troubleshoot/windows-server/windows-security/disable-user-account-control#more-information).
 Use your discretion in assigning the elevated permissions corresponding to the following registry keys/folders: 
     
 **Registry path**
@@ -484,4 +484,4 @@ To help troubleshoot issues with your runbooks running on a hybrid runbook worke
 * If your runbooks aren't completing successfully, review the troubleshooting guide for [runbook execution failures](troubleshoot/hybrid-runbook-worker.md#runbook-execution-fails).
 * For more information on PowerShell, including language reference and learning modules, see [PowerShell Docs](/powershell/scripting/overview).
 * Learn about [using Azure Policy to manage runbook execution](enforce-job-execution-hybrid-worker.md) with Hybrid Runbook Workers.
-* For a PowerShell cmdlet reference, see [Az.Automation](/powershell/module/az.automation).
+* For a PowerShell cmdlet reference, see [Az.Automation](/powershell/module/az.automation).

articles/automation/automation-hrw-run-runbooks.md

@@ -39,6 +39,8 @@ For more information, see [Virtual network service tags](../../virtual-network/s
 
 The table below lists the URLs that must be available in order to install and use the Connected Machine agent.
 
+# [Azure Cloud](#tab/azure-cloud)
+
 | Agent resource | Description | When required| Endpoint used with private link |
 |---------|---------|--------|---------|
 |`aka.ms`|Used to resolve the download script during installation|At installation time, only| Public |
@@ -56,6 +58,21 @@ The table below lists the URLs that must be available in order to install and us
 |`*.blob.core.windows.net`|Download source for Azure Arc-enabled servers extensions|Always, except when using private endpoints| Not used when private link is configured |
 |`dc.services.visualstudio.com`|Agent telemetry|Optional| Public |
 
+# [Azure Government](#tab/azure-government)
+
+| Agent resource | Description | When required| Endpoint used with private link |
+|---------|---------|--------|---------|
+|`aka.ms`|Used to resolve the download script during installation|At installation time, only| Public |
+|`download.microsoft.com`|Used to download the Windows installation package|At installation time, only| Public |
+|`packages.microsoft.com`|Used to download the Linux installation package|At installation time, only| Public |
+|`login.microsoftonline.us`|Azure Active Directory|Always| Public |
+|`pasff.usgovcloudapi.net`|Azure Active Directory|Always| Public |
+|`management.usgovcloudapi.net`|Azure Resource Manager - to create or delete the Arc server resource|When connecting or disconnecting a server, only| Public, unless a [resource management private link](../../azure-resource-manager/management/create-private-link-access-portal.md) is also configured |
+|`*.his.arc.azure.us`|Metadata and hybrid identity services|Always| Private |
+|`*.guestconfiguration.azure.us`| Extension management and guest configuration services |Always| Private |
+|`*.blob.core.usgovcloudapi.net`|Download source for Azure Arc-enabled servers extensions|Always, except when using private endpoints| Not used when private link is configured |
+|`dc.applicationinsights.us`|Agent telemetry|Optional| Public |
+
 ## Transport Layer Security 1.2 protocol
 
 To ensure the security of data in transit to Azure, we strongly encourage you to configure machine to use Transport Layer Security (TLS) 1.2. Older versions of TLS/Secure Sockets Layer (SSL) have been found to be vulnerable and while they still currently work to allow backwards compatibility, they are **not recommended**.

articles/azure-arc/servers/network-requirements.md

@@ -1,6 +1,6 @@
 ---
 title: Azure Functions Consumption plan hosting
-description: Learn about how Azure Function Consumption plan hosting lets you run your code in an environment that scales dynamically, but you only pay for resources used during execution. 
+description: Learn about how Azure Functions Consumption plan hosting lets you run your code in an environment that scales dynamically, but you only pay for resources used during execution. 
 ms.date: 8/31/2020
 ms.topic: conceptual
 # Customer intent: As a developer, I want to understand the benefits of using the Consumption plan so I can get the scalability benefits of Azure Functions without having to pay for resources I don't need.

articles/azure-functions/consumption-plan.md

@@ -4,7 +4,7 @@ description: View the Azure Monitor activity log and send it to Azure Monitor Lo
 author: bwren
 services: azure-monitor
 ms.topic: conceptual
-ms.date: 09/09/2021
+ms.date: 07/01/2022
 ms.author: bwren
 ms.reviewer: lualderm
 ---
@@ -69,8 +69,8 @@ You can also access activity log events by using the following methods:
 - Use log queries to perform complex analysis and gain deep insights on activity log entries.
 - Use log alerts with Activity entries for more complex alerting logic.
 - Store activity log entries for longer than the activity log retention period.
-- Incur no data ingestion charges for activity log data stored in a Log Analytics workspace.
-- Incur no data retention charges for the first 90 days for activity log data stored in a Log Analytics workspace.
+- Incur no data ingestion or retention charges for activity log data stored in a Log Analytics workspace.
+- The default retention period in Log Analytics is 90 days
 
  Select **Export Activity Logs** to send the activity log to a Log Analytics workspace.
 

articles/azure-monitor/essentials/activity-log.md

@@ -203,6 +203,8 @@
         href: azure-netapp-files-create-volumes-smb.md
       - name: Enable Continuous Availability on existing SMB volumes
         href: enable-continuous-availability-existing-SMB.md
+      - name: Use DFS-N and DFS Root Consolidation with Azure NetApp Files
+        href: use-dfs-n-and-dfs-root-consolidation-with-azure-netapp-files.md
     - name: Manage dual-protocol volumes
       items:
       - name: Create a dual-protocol volume 
@@ -352,4 +354,4 @@
   - name: Azure Files and Azure NetApp Files comparison
     href: ../storage/files/storage-files-netapp-comparison.md
   - name: Azure NetApp Files on Microsoft Q&A
-    href: /answers/topics/25532/azure-netapp-files.html
+    href: /answers/topics/25532/azure-netapp-files.html