Merge pull request #253729 from pauljewellmsft/cloud-resource-id-stg-91

Update blob resource ID table

Author: prmerger-automator[bot]

articles/storage/blobs/authorize-access-azure-active-directory.md

@@ -59,12 +59,20 @@ While Microsoft recommends using the Azure Identity client library when possible
 
 When you use MSAL to acquire an OAuth token for access to Azure Storage, you need to provide an Azure AD resource ID. The Azure AD resource ID indicates the audience for which a token that is issued can be used to provide access to an Azure resource. In the case of Azure Storage, the resource ID may be specific to a single storage account, or it may apply to any storage account.
 
-The following table describes the values that you can provide for the resource ID. The resource ID for Azure Storage is the same for all public and sovereign clouds:
+When you provide a resource ID that is specific to a single storage account and service, the resource ID is used to acquire a token for authorizing requests to the specified account and service only. The following table lists the value to use for the resource ID, based on the cloud you're working with. Replace `<account-name>` with the name of your storage account.
 
-| Resource ID | Description |
-|---|---|
-| `https://<account>.blob.core.windows.net` | The service endpoint for a given storage account. Use this value to acquire a token for authorizing requests to that specific Azure Storage account and service only. Replace the value in brackets with the name of your storage account. |
-| `https://storage.azure.com/` | Use to acquire a token for authorizing requests to any Azure Storage account. |
+| Cloud | Resource ID |
+| --- | --- |
+| Azure Global | `https://<account-name>.blob.core.windows.net` |
+| Azure Government | `https://<account-name>.blob.core.usgovcloudapi.net` |
+| Azure Germany | `https://<account-name>.blob.core.cloudapi.de` |
+| Azure China 21Vianet | `https://<account-name>.blob.core.chinacloudapi.cn` |
+
+You can also provide a resource ID that applies to any storage account, as shown in the following table. This resource ID is the same for all public and sovereign clouds, and is used to acquire a token for authorizing requests to any storage account.
+
+| Cloud | Resource ID |
+| --- | --- |
+| Azure Global</br>Azure Government</br>Azure Germany</br>Azure China 21Vianet</br> | `https://storage.azure.com/` | 
 
 ## Assign Azure roles for access rights
 

articles/storage/queues/authorize-access-azure-active-directory.md

@@ -58,12 +58,20 @@ While Microsoft recommends using the Azure Identity client library when possible
 
 When you use MSAL to acquire an OAuth token for access to Azure Storage, you need to provide an Azure AD resource ID. The Azure AD resource ID indicates the audience for which a token that is issued can be used to provide access to an Azure resource. In the case of Azure Storage, the resource ID may be specific to a single storage account, or it may apply to any storage account.
 
-The following table describes the values that you can provide for the resource ID. The resource ID for Azure Storage is the same for all public and sovereign clouds:
+When you provide a resource ID that is specific to a single storage account and service, the resource ID is used to acquire a token for authorizing requests to the specified account and service only. The following table lists the value to use for the resource ID, based on the cloud you're working with. Replace `<account-name>` with the name of your storage account.
 
-| Resource ID | Description |
-|---|---|
-| `https://<account>.queue.core.windows.net` | The service endpoint for a given storage account. Use this value to acquire a token for authorizing requests to that specific Azure Storage account and service only. Replace the value in brackets with the name of your storage account. |
-| `https://storage.azure.com/` | Use to acquire a token for authorizing requests to any Azure Storage account. |
+| Cloud | Resource ID |
+| --- | --- |
+| Azure Global | `https://<account-name>.queue.core.windows.net` |
+| Azure Government | `https://<account-name>.queue.core.usgovcloudapi.net` |
+| Azure Germany | `https://<account-name>.queue.core.cloudapi.de` |
+| Azure China 21Vianet | `https://<account-name>.queue.core.chinacloudapi.cn` |
+
+You can also provide a resource ID that applies to any storage account, as shown in the following table. This resource ID is the same for all public and sovereign clouds, and is used to acquire a token for authorizing requests to any storage account.
+
+| Cloud | Resource ID |
+| --- | --- |
+| Azure Global</br>Azure Government</br>Azure Germany</br>Azure China 21Vianet</br> | `https://storage.azure.com/` | 
 
 ## Assign Azure roles for access rights