Merge pull request #255946 from MicrosoftDocs/main

10/23/2023 PM Publish

Author: Taojunshen

articles/active-directory-b2c/billing.md

@@ -113,7 +113,7 @@ To change your pricing tier, follow these steps:
 1. Sign in to the [Azure portal](https://portal.azure.com/).
 
 1. Make sure you're using the Microsoft Entra directory that contains the subscription your Azure B2C tenant and not the Azure AD B2C tenant itself:
-    1. In the Azure portal toolbar, select the **Directories + subscriptions** (:::image type="icon" source="./../active-directory/develop/media/common/portal-directory-subscription-filter.png" border="false":::) icon.
+    1. In the Azure portal toolbar, select the **Directories + subscriptions** icon.
 
     1. On the **Portal settings | Directories + subscriptions** page, find your Microsoft Entra directory in the **Directory name** list, and then select **Switch** button next to it.
 

articles/active-directory-b2c/find-help-open-support-ticket.md

@@ -39,7 +39,7 @@ If you're unable to find answers by using self-help resources, you can open an o
 
 1. Make sure you're using the Microsoft Entra tenant that contains your Azure subscription:
 
-    1. In the Azure portal toolbar, select the **Directories + subscriptions** (:::image type="icon" source="./../active-directory/develop/media/common/portal-directory-subscription-filter.png" border="false":::) icon.
+    1. In the Azure portal toolbar, select the **Directories + subscriptions** icon.
 
     1. On the **Portal settings | Directories + subscriptions** page, find your Microsoft Entra directory in the **Directory name** list, and then select **Switch** button next to it.
 

articles/active-directory-b2c/index.yml

@@ -45,42 +45,6 @@ highlightedContent:
 
 
 ## BAND 2 ####################################################################################################################################################
-productDirectory:
-  sections:
-    - title: Authenticate and authorize for any app type
-      summary: Select the app type that you want to build to access documentation focusing on it.
-      items:
-        ## ROW 1 ######################
-        - title: Single-page app (SPA)
-          url: index-spa.yml
-          imageSrc: ../active-directory/develop/media/hub/app-type-spa.svg
-          summary: A web application whose code is downloaded and run in the browser itself such as vanilla JavaScript, React and Angular.
-        - title: Web app
-          url: index-web-app.yml
-          #url: web-app-quickstart.md
-          imageSrc: ../active-directory/develop/media/hub/app-type-web.svg
-          summary: A web app whose code runs on a server, returning page data for the browser to render such as Node.js, ASP.NET or Java.
-        - title: Web API
-          url: index-web-api.yml
-          #url: web-api-quickstart.md
-          imageSrc: ../active-directory/develop/media/hub/app-type-api.svg
-          summary: A RESTful web service that is accessed by any app type or other web APIs, and is protected by Azure AD B2C.
-        ## ROW 2 ######################
-        - title: Desktop app
-          url: index-desktop.yml
-          #url: desktop-app-quickstart.md
-          imageSrc: ../active-directory/develop/media/hub/app-type-desktop.svg
-          summary: Applications with a user interface (UI) whose code runs on a user's desktop, laptop, or notebook computer such as Windows OS.
-        - title: Mobile app
-          url: index-mobile.yml
-          #url: mobile-app-quickstart.md
-          imageSrc: ../active-directory/develop/media/hub/app-type-mobile.svg
-          summary: Applications with a UI whose code runs on a user's phone, tablet, or other mobile device such as Android and iOS.
-        - title: Back-end service or daemon
-          url: index-service.yml
-          #url: mobile-app-quickstart.md
-          imageSrc: ../active-directory/develop/media/hub/app-type-daemon-console.svg
-          summary: An application or script without a UI that performs non-interactive tasks like server-to-server communication or scheduled jobs.
 ## BAND 2 - PRODUCT DIRECTORY END ##########################################################################################################################
 
 
@@ -341,12 +305,6 @@ tools:
   - title: MSAL.NET
     url: https://github.com/AzureAD/microsoft-authentication-library-for-dotnet
     imageSrc: https://docs.microsoft.com/media/logos/logo_Csharp.svg
-  - title: MSAL Android
-    url: https://github.com/AzureAD/microsoft-authentication-library-for-android
-    imageSrc: ../active-directory/develop/media/hub/android.svg
-  - title: MSAL Angular
-    url: https://github.com/AzureAD/microsoft-authentication-library-for-js/tree/dev/lib/msal-angular
-    imageSrc: ../active-directory/develop/media/hub/angular.svg
   ## ROW 2 ######################
   - title: MSAL iOS
     url: https://github.com/AzureAD/microsoft-authentication-library-for-objc
@@ -358,13 +316,7 @@ tools:
     url: https://github.com/AzureAD/microsoft-authentication-library-for-js/tree/dev/lib/msal-browser
     imageSrc: https://docs.microsoft.com/media/logos/logo_js.svg
   ## ROW 3 ######################
-  - title: MSAL Node
-    url: https://github.com/AzureAD/microsoft-authentication-library-for-js/tree/dev/lib/msal-node
-    imageSrc: ../active-directory/develop/media/hub/node.svg
   - title: MSAL Python
     url: https://github.com/AzureAD/microsoft-authentication-library-for-python
     imageSrc: https://docs.microsoft.com/media/logos/logo_python.svg
-  - title: MSAL React
-    url: https://github.com/AzureAD/microsoft-authentication-library-for-js/tree/dev/lib/msal-react
-    imageSrc: ../active-directory/develop/media/hub/react.svg
 ## BAND 4 - TOOLS END #######################################################################################################################################

articles/active-directory-b2c/tutorial-create-tenant.md

@@ -51,7 +51,7 @@ Before you create your Azure AD B2C tenant, you need to take the following consi
 
 1. Make sure you're using the Microsoft Entra tenant that contains your subscription: 
 
-    1. In the Azure portal toolbar, select the **Directories + subscriptions** (:::image type="icon" source="./../active-directory/develop/media/common/portal-directory-subscription-filter.png" border="false":::) icon.
+    1. In the Azure portal toolbar, select the **Directories + subscriptions** icon.
 
     1. On the **Portal settings | Directories + subscriptions** page, find your Microsoft Entra directory that contains your subscription in the **Directory name** list, and then select **Switch** button next to it.
 
@@ -99,7 +99,7 @@ Azure AD B2C allows you to activate Go-Local add-on on an existing tenant as lon
 
 1. Make sure you're using the directory that contains your Azure AD B2C tenant: 
 
-    1. In the Azure portal toolbar, select the **Directories + subscriptions** (:::image type="icon" source="./../active-directory/develop/media/common/portal-directory-subscription-filter.png" border="false":::) icon.
+    1. In the Azure portal toolbar, select the **Directories + subscriptions** icon.
 
     1. On the **Portal settings | Directories + subscriptions** page, find your Azure AD B2C directory in the **Directory name** list, and then select the **Switch** button next to it.
 
@@ -116,7 +116,7 @@ Azure AD B2C allows you to activate Go-Local add-on on an existing tenant as lon
 ## Select your B2C tenant directory
 
 To start using your new Azure AD B2C tenant, you need to switch to the directory that contains the tenant:
-1. In the Azure portal toolbar, select the **Directories + subscriptions** filter icon (:::image type="icon" source="./../active-directory/develop/media/common/portal-directory-subscription-filter.png" border="false":::).
+1. In the Azure portal toolbar, select the **Directories + subscriptions** filter icon.
 1. On the **All Directories** tab, find the directory that contains your Azure AD B2C tenant and then select the **Switch** button next to it.
 
 If at first you don't see your new Azure B2C tenant in the list, refresh your browser window or sign out and sign back in. Then in the Azure portal toolbar, select the **Directories + subscriptions** filter again.

articles/ai-services/openai/encrypt-data-at-rest.md

@@ -121,8 +121,8 @@ To delete the individual versions of a key, run the [az-keyvault-key-delete](/cl
 
 ```azurecli
 az keyvault key delete  \
-  --name <key-vault-name> \
-  --object-id $identityPrincipalID \                     
+  --vault-name <key-vault-name> \
+  --id <key-ID>                     
 ```
 
 > [!IMPORTANT]

articles/ai-services/security-controls-policy.md

@@ -1,7 +1,7 @@
 ---
 title: Azure Policy Regulatory Compliance controls for Azure AI services
 description: Lists Azure Policy Regulatory Compliance controls available for Azure AI services. These built-in policy definitions provide common approaches to managing the compliance of your Azure resources.
-ms.date: 10/18/2023
+ms.date: 10/23/2023
 ms.topic: sample
 author: PatrickFarley
 ms.author: pafarley

articles/aks/TOC.yml

@@ -449,12 +449,16 @@
               href: use-psa.md
             - name: Secrets Store CSI Driver
               items:
-                - name: Secrets Store CSI Driver configuration
-                  href: csi-secrets-store-driver.md
-                - name: Provide Azure Key Vault access
-                  href: csi-secrets-store-identity-access.md
                 - name: Configure TLS for NGINX ingress controller
                   href: csi-secrets-store-nginx-tls.md
+                - name: Azure Key Vault provider with Secrets Store CSI Driver
+                  items:
+                    - name: 1 - Configure Secrets Store CSI Driver
+                      href: csi-secrets-store-driver.md
+                    - name: 2 - Provide Azure Key Vault access
+                      href: csi-secrets-store-identity-access.md
+                    - name: 3 - Apply extra configurations or perform troubleshooting
+                      href: csi-secrets-store-configuration-options.md
     - name: Configure networking
       items:
         - name: Create or use existing virtual network

articles/aks/app-routing.md

@@ -100,7 +100,7 @@ The following extra add-on is required:
 - **azure-keyvault-secrets-provider**: The Secret Store CSI provider for Azure Key Vault is required to retrieve the certificates from Azure Key Vault.
 
 > [!IMPORTANT]
-> To enable the add-on to reload certificates from Azure Key Vault when they change, you should to enable the [secret autorotation feature](./csi-secrets-store-driver.md#enable-and-disable-autorotation) of the Secret Store CSI driver with the `--enable-secret-rotation` argument. When the autorotation is enabled, the driver updates the pod mount and the Kubernetes secret by polling for changes periodically, based on the rotation poll interval you can define. The default rotation poll interval is two minutes.
+> To enable the add-on to reload certificates from Azure Key Vault when they change, you should enable the [secret autorotation feature](./csi-secrets-store-configuration-options.md#enable-and-disable-auto-rotation) of the Secret Store CSI driver with the `--enable-secret-rotation` argument. When the autorotation is enabled, the driver updates the pod mount and the Kubernetes secret by polling for changes periodically, based on the rotation poll interval you can define. The default rotation poll interval is two minutes.
 
 ### Enable application routing on a new cluster
 
@@ -126,7 +126,7 @@ The following extra add-ons are required:
 - **open-service-mesh**:  If you require encrypted intra cluster traffic (recommended) between the nginx ingress and your services, the Open Service Mesh add-on is required which provides mutual TLS (mTLS).
 
 > [!IMPORTANT]
-> To enable the add-on to reload certificates from Azure Key Vault when they change, you should to enable the [secret autorotation feature](./csi-secrets-store-driver.md#enable-and-disable-autorotation) of the Secret Store CSI driver with the `--enable-secret-rotation` argument. When the autorotation is enabled, the driver updates the pod mount and the Kubernetes secret by polling for changes periodically, based on the rotation poll interval you can define. The default rotation poll interval is two minutes.
+> To enable the add-on to reload certificates from Azure Key Vault when they change, you should enable the [secret autorotation feature](./csi-secrets-store-configuration-options.md#enable-and-disable-auto-rotation) of the Secret Store CSI driver with the `--enable-secret-rotation` argument. When the autorotation is enabled, the driver updates the pod mount and the Kubernetes secret by polling for changes periodically, based on the rotation poll interval you can define. The default rotation poll interval is two minutes.
 
 ### Enable application routing on a new cluster
 
@@ -157,7 +157,7 @@ The following extra add-on is required:
 - **azure-keyvault-secrets-provider**: The Secret Store CSI provider for Azure Key Vault is required to retrieve the certificates from Azure Key Vault.
 
 > [!IMPORTANT]
-> To enable the add-on to reload certificates from Azure Key Vault when they change, you should to enable the [secret autorotation feature](./csi-secrets-store-driver.md#enable-and-disable-autorotation) of the Secret Store CSI driver with the `--enable-secret-rotation` argument. When the autorotation is enabled, the driver updates the pod mount and the Kubernetes secret by polling for changes periodically, based on the rotation poll interval you can define. The default rotation poll interval is two minutes.
+> To enable the add-on to reload certificates from Azure Key Vault when they change, you should enable the [secret autorotation feature](./csi-secrets-store-configuration-options.md#enable-and-disable-auto-rotation) of the Secret Store CSI driver with the `--enable-secret-rotation` argument. When the autorotation is enabled, the driver updates the pod mount and the Kubernetes secret by polling for changes periodically, based on the rotation poll interval you can define. The default rotation poll interval is two minutes.
 
 ### Enable application routing on a new cluster
 
@@ -621,7 +621,7 @@ If you haven't configured Azure DNS integration, you need to configure your own
     az aks disable-addons --addons web_application_routing --name myAKSCluster --resource-group myResourceGroup 
     ```
 
-When the application routing add-on is disabled, some Kubernetes resources may remain in the cluster. These resources include *configMaps* and *secrets* and are created in the *app-routing-system* namespace. You can remove these resources if you want.
+When the application routing add-on is disabled, some Kubernetes resources might remain in the cluster. These resources include *configMaps* and *secrets* and are created in the *app-routing-system* namespace. You can remove these resources if you want.
 
 <!-- LINKS - internal -->
 [az-aks-create]: /cli/azure/aks#az-aks-create