Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr into us474487-dns-security-baseline

Author: asudbring

articles/data-factory/connector-upgrade-guidance.md

@@ -9,7 +9,7 @@ ms.topic: concept-article
 ms.custom:
   - references_regions
   - build-2025
-ms.date: 07/31/2025
+ms.date: 08/06/2025
 ---
 
 # Connector upgrade guidance
@@ -107,10 +107,12 @@ You can find more details from the table below on the connector list that is pla
 
 | Connector        | Scenario |
 |------------------|----------|
+| [Amazon RDS for Oracle](connector-amazon-rds-for-oracle.md) | Scenario that doesn't rely on capability below in Oracle (version 1.0):<br><br>• Use procedureRetResults, batchFailureReturnsError, truststore, and truststorepassword as connection properties.<br>• Use query ends with the semicolon.<br><br>If your pipeline runs on self-hosted integration runtime, it requires SHIR version 5.56 or above. |
 | [Amazon Redshift](connector-amazon-redshift.md) | Scenario that doesn't rely on below capability in Amazon Redshift (version 1.0):<br><br>• Linked service that uses Azure integration runtime.<br>• Use [UNLOAD](connector-amazon-redshift.md#use-unload-to-copy-data-from-amazon-redshift).<br><br>Automatic upgrade is only applicable when the driver is installed in your machine that installs the self-hosted integration runtime.<br><br> For more information, go to [Install Amazon Redshift ODBC driver for the version 2.0](connector-amazon-redshift.md#install-amazon-redshift-odbc-driver-for-the-version-20).|
 | [Google BigQuery](connector-google-bigquery.md)  | Scenario that doesn't rely on below capability in Google BigQuery V1:<br><br>  • Use `trustedCertsPath`, `additionalProjects`, `requestgoogledrivescope` connection properties.<br>  • Set `useSystemTrustStore` connection property as `false`.<br>  • Use **STRUCT** and **ARRAY** data types. <br><br>If your pipeline runs on self-hosted integration runtime, it requires SHIR version 5.55 or above. |
 | [Hive](connector-hive.md) | Scenario that doesn't rely on below capability in Hive (version 1.0):<br><br>• Authentication types:<br>&nbsp;&nbsp;• Username<br>• Thrift transport protocol:<br>&nbsp;&nbsp;• HiveServer1<br>• Service discovery mode: True<br>• Use native query: True <br><br>If your pipeline runs on self-hosted integration runtime, it requires SHIR version 5.55 or above.|
 | [Impala](connector-impala.md) | Scenario that doesn't rely on below capability in Impala (version 1.0):<br><br>• Authentication types:<br>&nbsp;&nbsp;• SASL Username<br><br>If your pipeline runs on self-hosted integration runtime, it requires SHIR version 5.55 or above. |
+| [Oracle](connector-oracle.md) | Scenario that doesn't rely on capability below in Oracle (version 1.0):<br><br>• Use procedureRetResults, batchFailureReturnsError, truststore, and truststorepassword as connection properties.<br>• Use Oracle connector as sink.<br>• Use query ends with the semicolon.<br>• Use PL/SQL command in Script activity<br>• Use script parameters in Script activity<br><br>If your pipeline runs on self-hosted integration runtime, it requires SHIR version 5.56 or above. |
 | [Salesforce](connector-salesforce.md) | Scenario that doesn't rely on capability below in Salesforce V1:<br><br>• SOQL queries that use:<br>&nbsp;&nbsp;• TYPEOF clauses<br>&nbsp;&nbsp;• Compound address/geolocations fields<br>• All SQL-92 query<br>• Report query {call "\<report name>"}<br>• Use Self-hosted integration runtime (To be supported) |
 | [Salesforce Service Cloud](connector-salesforce-service-cloud.md) | Scenario that doesn't rely on capability below in Salesforce Service Cloud V1:<br><br>• SOQL queries that use:<br>&nbsp;&nbsp;• TYPEOF clauses<br>&nbsp;&nbsp;• Compound address/geolocations fields<br>• All SQL-92 query<br>• Report query {call "\<report name>"}<br>• Use Self-hosted integration runtime (To be supported) |
 | [Spark](connector-spark.md) | Scenario that doesn't rely on below capability in Spark (version 1.0):<br><br>• Authentication types:<br>&nbsp;&nbsp;• Username<br>• Thrift transport protocol:<br>&nbsp;&nbsp;• SASL<br>&nbsp;&nbsp;• Binary<br>• Thrift transport protocol:<br>&nbsp;&nbsp;• SharkServer<br>&nbsp;&nbsp;• SharkServer2<br><br>If your pipeline runs on self-hosted integration runtime, it requires SHIR version 5.55 or above.|

articles/virtual-network/toc.yml

@@ -32,6 +32,50 @@
       href: virtual-network-vnet-plan-design-arm.md
     - name: Traffic routing
       href: virtual-networks-udr-overview.md
+- name: Security
+  items:
+    - name: Secure Virtual Network
+      href: secure-virtual-network.md
+    - name: Azure Kubernetes network policies
+      href: kubernetes-network-policies.md
+    - name: Azure Policy Regulatory Compliance controls
+      href: ./security-controls-policy.md
+    - name: Azure security baseline for Virtual Network
+      href: /security/benchmark/azure/baselines/virtual-network-security-baseline?toc=%2Fazure%2Fvirtual-network%2Ftoc.json
+    - name: Azure Security blog
+      href: https://techcommunity.microsoft.com/category/azure-network-security/blog/azurenetworksecurityblog
+    - name: DDoS protection
+      items:
+        - name: Overview
+          href: /azure/ddos-protection/ddos-protection-overview?toc=%2Fazure%2Fvirtual-network%2Ftoc.json
+        - name: Create and configure
+          href: /azure/ddos-protection/manage-ddos-protection?toc=%2Fazure%2Fvirtual-network%2Ftoc.json
+        - name: Partnering with Azure DDoS Protection
+          href: /azure/ddos-protection/ddos-protection-partner-onboarding?toc=%2Fazure%2Fvirtual-network%2Ftoc.json
+    - name: Encryption
+      items:
+        - name: Overview
+          href: virtual-network-encryption-overview.md
+        - name: Create a virtual network with encryption
+          href: how-to-create-encryption.md
+        - name: FAQ
+          href: virtual-network-encryption-faq.yml
+    - name: Network security groups
+      items:
+        - name: How network security groups filter traffic
+          href: network-security-group-how-it-works.md
+        - name: Manage network security groups
+          href: manage-network-security-group.md
+    - name: Service endpoint policies for Azure Storage
+      href: virtual-network-service-endpoint-policies-overview.md
+    - name: Virtual network TAP
+      items:
+        - name: Overview
+          href: virtual-network-tap-overview.md
+        - name: Configure virtual network TAP - Azure portal
+          href: tutorial-virtual-network-tap-portal.md
+        - name: Configure virtual network TAP - Azure CLI
+          href: tutorial-tap-virtual-network-cli.md
 - name: Architecture and concepts
   items:
     - name: Azure services network isolation
@@ -82,48 +126,6 @@
       href: tutorial-restrict-network-access-to-resources.md
     - name: Route network traffic
       href: tutorial-create-route-table.md
-- name: Security
-  items:
-    - name: Azure Kubernetes network policies
-      href: kubernetes-network-policies.md
-    - name: Azure Policy Regulatory Compliance controls
-      href: ./security-controls-policy.md
-    - name: Azure security baseline for Virtual Network
-      href: /security/benchmark/azure/baselines/virtual-network-security-baseline?toc=%2Fazure%2Fvirtual-network%2Ftoc.json
-    - name: Azure Security blog
-      href: https://techcommunity.microsoft.com/category/azure-network-security/blog/azurenetworksecurityblog
-    - name: DDoS protection
-      items:
-        - name: Overview
-          href: /azure/ddos-protection/ddos-protection-overview?toc=%2Fazure%2Fvirtual-network%2Ftoc.json
-        - name: Create and configure
-          href: /azure/ddos-protection/manage-ddos-protection?toc=%2Fazure%2Fvirtual-network%2Ftoc.json
-        - name: Partnering with Azure DDoS Protection
-          href: /azure/ddos-protection/ddos-protection-partner-onboarding?toc=%2Fazure%2Fvirtual-network%2Ftoc.json
-    - name: Encryption
-      items:
-        - name: Overview
-          href: virtual-network-encryption-overview.md
-        - name: Create a virtual network with encryption
-          href: how-to-create-encryption.md
-        - name: FAQ
-          href: virtual-network-encryption-faq.yml
-    - name: Network security groups
-      items:
-        - name: How network security groups filter traffic
-          href: network-security-group-how-it-works.md
-        - name: Manage network security groups
-          href: manage-network-security-group.md
-    - name: Service endpoint policies for Azure Storage
-      href: virtual-network-service-endpoint-policies-overview.md
-    - name: Virtual network TAP
-      items:
-        - name: Overview
-          href: virtual-network-tap-overview.md
-        - name: Configure virtual network TAP - Azure portal
-          href: tutorial-virtual-network-tap-portal.md
-        - name: Configure virtual network TAP - Azure CLI
-          href: tutorial-tap-virtual-network-cli.md
 - name: Manage connectivity
   items:
     - name: Accelerated networking