Skip to content

Commit 314eea7

Browse files
committed
2 parents 27fb84d + 6ddd5ed commit 314eea7

26 files changed

+238
-82
lines changed

articles/aks/use-kms-etcd-encryption.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Learn how to use Key Management Service (KMS) etcd encryption with
44
ms.topic: article
55
ms.subservice: aks-security
66
ms.custom: devx-track-azurecli
7-
ms.date: 06/19/2024
7+
ms.date: 06/26/2024
88
---
99

1010
# Add Key Management Service etcd encryption to an Azure Kubernetes Service cluster
@@ -191,7 +191,7 @@ After you change the key ID (including changing either the key name or the key v
191191
> [!WARNING]
192192
> Remember to update all secrets after key rotation. If you don't update all secrets, the secrets are inaccessible if the keys that were created earlier don't exist or no longer work.
193193
>
194-
> After you rotate the key, the previous key (key1) is still cached and shouldn't be deleted. If you want to delete the previous key (key1) immediately, you need to rotate the key twice. Then key2 and key3 are cached, and key1 can be deleted without affecting the existing cluster.
194+
> KMS uses 2 keys at the same time. After the first key rotation, you need to ensure both the old and new keys are valid (not expired) until the next key rotation. After the second key rotation, the oldest key can be safely removed/expired
195195
196196
```azurecli-interactive
197197
az aks update --name myAKSCluster --resource-group MyResourceGroup --enable-azure-keyvault-kms --azure-keyvault-kms-key-vault-network-access "Public" --azure-keyvault-kms-key-id $NEW_KEY_ID

articles/app-service/environment/using.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Use an App Service Environment
33
description: Learn how to use your App Service Environment to host isolated applications.
44
author: madsd
55
ms.topic: article
6-
ms.date: 03/27/2023
6+
ms.date: 06/26/2024
77
ms.author: madsd
88
---
99

@@ -47,7 +47,7 @@ Every App Service app runs in an App Service plan. App Service Environments hold
4747

4848
When you scale an App Service plan, the needed infrastructure is added automatically. Be aware that there's a time delay to scale operations while the infrastructure is being added. For example, when you scale an App Service plan, and you have another scale operation of the same operating system and size running, there might be a delay of a few minutes until the requested scale starts.
4949

50-
A scale operation on one size and operating system won't affect scaling of the other combinations of size and operating system. For example, if you are scaling a Windows I2v2 App Service plan, a scale operation to a Windows I3v2 App Service plan starts immediately. Scaling normally takes less than 15 minutes.
50+
A scale operation on one size and operating system won't affect scaling of the other combinations of size and operating system. For example, if you are scaling a Windows I2v2 App Service plan, a scale operation to a Windows I3v2 App Service plan starts immediately. Scaling normally takes less than 15 minutes but can take up to 45 minutes.
5151

5252
In a multi-tenant App Service, scaling is immediate, because a pool of shared resources is readily available to support it. App Service Environment is a single-tenant service, so there's no shared buffer, and resources are allocated based on need.
5353

articles/azure-monitor/alerts/alerts-types.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -133,7 +133,7 @@ Log search alerts can measure two different things, which can be used for differ
133133
- **Table rows**: The number of rows returned can be used to work with events such as Windows event logs, Syslog, and application exceptions.
134134
- **Calculation of a numeric column**: Calculations based on any numeric column can be used to include any number of resources. An example is CPU percentage.
135135

136-
You can configure if log search alerts are [stateful or stateless](alerts-overview.md#alerts-and-state). This feature is currently in preview.
136+
You can configure if log search alerts are [stateful or stateless](alerts-overview.md#alerts-and-state).
137137
Note that stateful log search alerts have these limitations:
138138
- they can trigger up to 300 alerts per evaluation.
139139
- you can have a maximum of 5000 alerts with the `fired` alert condition.
Lines changed: 150 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,150 @@
1+
---
2+
title: Wildcard indexes in Azure Cosmos DB for MongoDB vCore
3+
titleSuffix: Azure Cosmos DB for MongoDB vCore
4+
description: Sample to create wildcard indexes in Azure Cosmos DB for MongoDB vCore.
5+
author: abinav2307
6+
ms.author: abramees
7+
ms.reviewer: sidandrews
8+
ms.service: cosmos-db
9+
ms.subservice: mongodb-vcore
10+
ms.topic: conceptual
11+
ms.date: 6/25/2024
12+
---
13+
14+
15+
# Create wildcard indexes in Azure Cosmos DB for MongoDB vCore
16+
17+
[!INCLUDE[MongoDB vCore](~/reusable-content/ce-skilling/azure/includes/cosmos-db/includes/appliesto-mongodb-vcore.md)]
18+
19+
While most workloads have a predictable set of fields used in query filters and predicates, adhoc query patterns may use filters on any field in the json document structure.
20+
21+
Wildcard indexing can be helpful in the following scenarios:
22+
- Queries filtering on any field in the document making indexing all fields through a single command easier than indexing each field individually.
23+
- Queries filtering on most fields in the document making indexing all but a few fields through a single easier than indexing most fields individually.
24+
25+
This sample describes a simple workaround to minimize the effort needed to create individual indexes until wildcard indexing is generally available in Azure Cosmos DB for MongoDB vCore.
26+
27+
## Solution
28+
Consider the json document below:
29+
```json
30+
{
31+
"firstName": "Steve",
32+
"lastName": "Smith",
33+
"companyName": "Microsoft",
34+
"division": "Azure",
35+
"subDivision": "Data & AI",
36+
"timeInOrgInYears": 7,
37+
"roles": [
38+
{
39+
"teamName" : "Windows",
40+
"teamSubName" "Operating Systems",
41+
"timeInTeamInYears": 3
42+
},
43+
{
44+
"teamName" : "Devices",
45+
"teamSubName" "Surface",
46+
"timeInTeamInYears": 2
47+
},
48+
{
49+
"teamName" : "Devices",
50+
"teamSubName" "Surface",
51+
"timeInTeamInYears": 2
52+
}
53+
]
54+
}
55+
```
56+
57+
The following indices are created under the covers when wildcard indexing is used.
58+
- db.collection.createIndex({"firstName", 1})
59+
- db.collection.createIndex({"lastName", 1})
60+
- db.collection.createIndex({"companyName", 1})
61+
- db.collection.createIndex({"division", 1})
62+
- db.collection.createIndex({"subDivision", 1})
63+
- db.collection.createIndex({"timeInOrgInYears", 1})
64+
- db.collection.createIndex({"subDivision", 1})
65+
- db.collection.createIndex({"roles.teamName", 1})
66+
- db.collection.createIndex({"roles.teamSubName", 1})
67+
- db.collection.createIndex({"roles.timeInTeamInYears", 1})
68+
69+
While this sample document only requires a combination of 10 fields to be explicitly indexed, larger documents with hundreds or thousands of fields can get tedious and error prone when indexing fields individually.
70+
71+
The jar file detailed in the rest of this document makes indexing fields in larger documents simpler. The jar takes a sample JSON document as input, parses the document and executes createIndex commands for each field without the need for user intervention.
72+
73+
## Prerequisites
74+
75+
### Java 21
76+
After the virtual machine is deployed, use SSH to connect to the machine, and install CQLSH using the below commands:
77+
78+
```bash
79+
# Install default-jdk
80+
sudo apt update
81+
sudo apt install openjdk-21-jdk
82+
```
83+
84+
## Sample jar to create individual indexes for all fields
85+
86+
Clone the repository containing the Java sample to iterate through each field in the JSON document's structure and issue createIndex operations for each field in the document.
87+
88+
```bash
89+
git clone https://github.com/Azure-Samples/cosmosdb-mongodb-vcore-wildcard-indexing.git
90+
```
91+
92+
The cloned repository does not need to be built if there are no changes to be made to the solution. The built runnable jar named azure-cosmosdb-mongo-data-indexer-1.0-SNAPSHOT.jar is already included in the runnableJar/ folder. The jar can be executed by specifying the following required parameters:
93+
- Azure Cosmos DB for MongoDB vCore cluster connection string with the username and password used when the cluster was provisioned
94+
- The Azure Cosmos DB for MongoDB vCore database
95+
- The collection to be indexed
96+
- The location of the json file with the document structure for the collection. This document is parsed by the jar file to extract every field and issue individual createIndex operations.
97+
98+
```bash
99+
java -jar azure-cosmosdb-mongo-data-indexer-1.0-SNAPSHOT.jar mongodb+srv://<user>:<password>@abinav-test-benchmarking.global.mongocluster.cosmos.azure.com/?tls=true&authMechanism=SCRAM-SHA-256&retrywrites=false&maxIdleTimeMS=120000 cosmicworks employee sampleEmployee.json
100+
```
101+
102+
## Track the status of a createIndex operation
103+
The jar file is designed to not wait on a response from each createIndex operation. The indexes are created asynchronously on the server and the progress of the index build operation on the cluster can be tracked.
104+
105+
Consider this sample to track indexing progress on the 'cosmicworks' database.
106+
```javascript
107+
use cosmicworks;
108+
db.currentOp()
109+
```
110+
111+
When a createIndex operation is in progress, the response looks like:
112+
```json
113+
{
114+
"inprog": [
115+
{
116+
"shard": "defaultShard",
117+
"active": true,
118+
"type": "op",
119+
"opid": "30000451493:1719209762286363",
120+
"op_prefix": 30000451493,
121+
"currentOpTime": "2024-06-24T06:16:02.000Z",
122+
"secs_running": 0,
123+
"command": { "aggregate": "" },
124+
"op": "command",
125+
"waitingForLock": false
126+
},
127+
{
128+
"shard": "defaultShard",
129+
"active": true,
130+
"type": "op",
131+
"opid": "30000451876:1719209638351743",
132+
"op_prefix": 30000451876,
133+
"currentOpTime": "2024-06-24T06:13:58.000Z",
134+
"secs_running": 124,
135+
"command": { "createIndexes": "" },
136+
"op": "workerCommand",
137+
"waitingForLock": false,
138+
"progress": {},
139+
"msg": ""
140+
}
141+
],
142+
"ok": 1
143+
}
144+
```
145+
146+
## Related content
147+
148+
Check out the full sample here - https://github.com/Azure-Samples/cosmosdb-mongodb-vcore-wildcard-indexing
149+
150+
Check out [indexing best practices](how-to-create-indexes.md), which details best practices for indexing on Azure Cosmos DB for MongoDB vCore.

articles/defender-for-cloud/TOC.yml

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -741,9 +741,6 @@
741741
- name: Kubeaudit events in advanced hunting
742742
displayName: k8s, containers
743743
href: kubeaudit-events-advanced-hunting.md
744-
- name: Vulnerability assessment for Azure powered by Qualys (Deprecated)
745-
displayName: ACR, registry, images, qualys
746-
href: defender-for-containers-vulnerability-assessment-azure.md
747744
- name: Defender for Kubernetes (deprecated)
748745
displayName: clusters, k8s, aks
749746
href: defender-for-kubernetes-introduction.md

articles/defender-for-iot/organizations/release-notes.md

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,6 +38,7 @@ Cloud features may be dependent on a specific sensor version. Such features are
3838
| Version / Patch | Release date | Scope | Supported until |
3939
| ------- | ------------ | ----------- | ------------------- |
4040
| **24.1** | | | |
41+
| 24.1.4 |06/2024 | Major |05/2025 |
4142
| 24.1.3 |04/2024 | Major |03/2025 |
4243
| 24.1.2 |02/2024 | Major |01/2025 |
4344
| **23.2** | | | |
@@ -106,6 +107,16 @@ To understand whether a feature is supported in your sensor version, check the r
106107

107108
## Versions 24.1.x
108109

110+
### Version 24.1.4
111+
112+
**Release date**: 06/2024
113+
114+
**Supported until**: 05/2025
115+
116+
This version includes the following updates and enhancements:
117+
118+
- [Malicious URL path alert](whats-new.md#malicious-url-path-alert)
119+
109120
### Version 24.1.3
110121

111122
**Release date**: 04/2024

articles/defender-for-iot/organizations/whats-new.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,9 +19,9 @@ Features released earlier than nine months ago are described in the [What's new
1919

2020
|Service area |Updates |
2121
|---------|---------|
22-
| **OT networks** | - [Malicious alert path](#malicious-alert-path)<br> |
22+
| **OT networks** | - [Malicious URL path alert](#malicious-url-path-alert)<br> |
2323

24-
### Malicious alert path
24+
### Malicious URL path alert
2525

2626
The new alert, Malicious URL path, allows users to identify malicious paths in legitimate URLs. The Malicious URL path alert expands Defender for IoT's threat identification to include generic URL signatures, crucial for countering a wide range of cyber threats.
2727

articles/iot-central/core/concepts-quotas-limits.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Azure IoT Central quotas and limits
33
description: This article lists the key quotas and limits that apply to an IoT Central application including from the underlying DPS and IoT Hub services.
44
author: dominicbetts
55
ms.author: dobett
6-
ms.date: 10/26/2023
6+
ms.date: 06/17/2024
77
ms.topic: conceptual
88
ms.service: iot-central
99
services: iot-central
@@ -57,12 +57,12 @@ There are various quotas and limits that apply to IoT Central applications. IoT
5757

5858
## Data export
5959

60-
| Item | Quota or limit | Notes |
61-
| ---- | -------------- | ----- |
62-
| Number of data export jobs | 10 | If you need to exceed this limit, contact support to discuss increasing it for your application. |
63-
| Number of data export destinations | 10 | If you need to exceed this limit, contact support to discuss increasing it for your application. |
64-
| Number of data export destinations per job | 10 | If you need to exceed this limit, contact support to discuss increasing it for your application. |
65-
| Number of filters and enrichments per data export job | 10 | If you need to exceed this limit, contact support to discuss increasing it for your application. |
60+
| Item | Quota or limit |
61+
| ---- | -------------- |
62+
| Number of data export jobs | 10 |
63+
| Number of data export destinations | 10 |
64+
| Number of data export destinations per job | 10 |
65+
| Number of filters and enrichments per data export job | 10 |
6666

6767
For large volumes of export data, you may experience up to 60 seconds of latency. Typically, the latency is much lower than this.
6868

articles/iot-central/core/howto-faq.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ sections:
3939
- question: |
4040
How many IoT Central applications can I deploy in my subscription?
4141
answer: |
42-
Each Azure subscription has default quotas that could impact the scope of your IoT solution. Currently, IoT Central limits the number of applications you can deploy in a subscription to 100. If you need to increase this limit, contact [Microsoft support](https://azure.microsoft.com/support/options/).
42+
Each Azure subscription has default quotas that could impact the scope of your IoT solution. IoT Central limits the number of applications you can deploy in a subscription to 100.
4343
4444
- question: |
4545
How do I file a ticket with customer support?

articles/migrate/migrate-support-matrix-physical-migration.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ms.author: vijain
66
ms.manager: kmadnani
77
ms.topic: conceptual
88
ms.service: azure-migrate
9-
ms.date: 10/16/2023
9+
ms.date: 06/18/2024
1010
ms.custom: engagement-fy24
1111
---
1212

@@ -40,7 +40,7 @@ Linux file system/guest storage | For the latest information, see the [Linux fil
4040
Network/Storage | For the latest information, see the [network](../site-recovery/vmware-physical-azure-support-matrix.md#network) and [storage](../site-recovery/vmware-physical-azure-support-matrix.md#storage) prerequisites for Site Recovery. Azure Migrate and Modernize provides identical network/storage requirements.
4141
Azure requirements | For the latest information, see the [Azure network](../site-recovery/vmware-physical-azure-support-matrix.md#azure-vm-network-after-failover), [storage](../site-recovery/vmware-physical-azure-support-matrix.md#azure-storage), and [compute](../site-recovery/vmware-physical-azure-support-matrix.md#azure-compute) requirements for Site Recovery. Azure Migrate and Modernize has identical requirements for physical server migration.
4242
Mobility service | Install the Mobility service agent on each machine you want to migrate.
43-
UEFI boot | Supported. UEFI-based machines are migrated to Azure generation 2 VMs. <br/><br/> The OS disk should have up to four partitions, and volumes should be formatted with NTFS.
43+
UEFI boot | Supported. <br/><br/> Windows : NTFS <br/><br/> Linux: The following filesystem types are supported: ext4, xfs, btrfs. Some filesystems such as ZFS, UFS, ReiserFS, and DazukoFS may not be supported subject to additional command requirements to mount them.
4444
UEFI - Secure boot | Not supported for migration.
4545
Target disk | Machines can be migrated only to managed disks (standard HDD, standard SSD, premium SSD) in Azure.
4646
Ultra disk | Ultra disk migration isn't supported from the Azure Migrate and Modernize portal. You have to do an out-of-band migration for the disks that are recommended as Ultra disks. That is, you can migrate selecting it as premium disk type and change it to Ultra disk after migration.

0 commit comments

Comments
 (0)