You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/event-grid/event-schema-api-center.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -165,7 +165,7 @@ The data object has the following properties:
165
165
166
166
|Title |Description |
167
167
|---------|---------|
168
-
|[Enable linting and analysis for API governance in your API center](https://aka.ms/apicenter/docs/linting)| Use Event Grid events to trigger linting to analyze API definitions in your API center. |
168
+
|[Enable linting and analysis for API governance in your API center](../api-center/enable-api-analysis-linting.md)| Use Event Grid events to trigger linting to analyze API definitions in your API center. |
Copy file name to clipboardExpand all lines: articles/event-grid/mqtt-client-microsoft-entra-token-and-rbac.md
+11-11Lines changed: 11 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,5 @@
1
1
---
2
-
title: Microsoft Entra JWT authentication and RBAC authorization for clients with Microsoft Entra identity
2
+
title: Microsoft Entra `JWT` authentication and RBAC authorization for clients with Microsoft Entra identity
3
3
description: Describes JWT authentication and RBAC roles to authorize clients with Microsoft Entra identity to publish or subscribe MQTT messages
4
4
ms.topic: conceptual
5
5
ms.custom:
@@ -12,14 +12,14 @@ ms.subservice: mqtt
12
12
13
13
# Microsoft Entra JWT authentication and Azure RBAC authorization to publish or subscribe MQTT messages
14
14
15
-
You can authenticate MQTT clients with Microsoft Entra JWT to connect to Event Grid namespace. You can use Azure role-based access control (Azure RBAC) to enable MQTT clients, with Microsoft Entra identity, to publish or subscribe access to specific topic spaces.
15
+
You can authenticate MQTT clients with Microsoft Entra JWT to connect to Event Grid namespace. You can use Azure role-based access control (Azure RBAC) to enable MQTT clients, with Microsoft Entra identity, to publish or subscribe access to specific topic spaces.
16
16
17
17
> [!IMPORTANT]
18
18
> - This feature is supported only when using MQTT v5 protocol version
19
19
> - JWT authentication is supported for Managed Identities and Service principals only
20
20
21
21
## Prerequisites
22
-
- You need an Event Grid namespace with MQTT enabled. Learn about [creating Event Grid namespace](/azure/event-grid/create-view-manage-namespaces#create-a-namespace)
22
+
- You need an Event Grid namespace with MQTT enabled. Learn about [creating Event Grid namespace](/azure/event-grid/create-view-manage-namespaces#create-a-namespace)
23
23
24
24
<aname='authentication-using-azure-ad-jwt'></a>
25
25
@@ -44,21 +44,21 @@ In AUTH packet, you can provide required values in the following fields:
44
44
Authenticate Reason Code with value 25 signifies reauthentication.
45
45
46
46
> [!NOTE]
47
-
> - Audience: “aud” claim must be set to "https://eventgrid.azure.net/".
47
+
> - Audience: `aud` claim must be set to `https://eventgrid.azure.net/`.
48
48
49
49
## Authorization to grant access permissions
50
-
A client using Microsoft Entra ID based JWT authentication needs to be authorized to communicate with the Event Grid namespace. You can assign the following two built-in roles to provide either publish or subscribe permissions, to clients with Microsoft Entra identities.
50
+
A client using Microsoft Entra ID based JWT authentication needs to be authorized to communicate with the Event Grid namespace. You can assign the following two built-in roles to provide either publish or subscribe permissions, to clients with Microsoft Entra identities.
51
51
52
52
- Use **EventGrid TopicSpaces Publisher** role to provide MQTT message publisher access
53
53
- Use **EventGrid TopicSpaces Subscriber** role to provide MQTT message subscriber access
54
54
55
-
You can use these roles to provide permissions at subscription, resource group, Event Grid namespace or Event Grid topicspace scope.
55
+
You can use these roles to provide permissions at subscription, resource group, Event Grid namespace, or Event Grid topic space scope.
56
56
57
-
## Assigning the publisher role to your Microsoft Entra identity at topicspace scope
57
+
## Assigning the publisher role to your Microsoft Entra identity at topic space scope
58
58
59
59
1. In the Azure portal, navigate to your Event Grid namespace
60
-
1. Navigate to the topicspace to which you want to authorize access.
61
-
1. Go to the Access control (IAM) page of the topicspace
60
+
1. Navigate to the topic space to which you want to authorize access.
61
+
1. Go to the Access control (IAM) page of the topic space
62
62
1. Select the **Role assignments** tab to view the role assignments at this scope.
63
63
1. Select **+ Add** and Add role assignment.
64
64
1. On the Role tab, select the "Event Grid TopicSpaces Publisher" role.
@@ -69,7 +69,7 @@ You can use these roles to provide permissions at subscription, resource group,
69
69
1. Select **Review + assign** on the Review + assign tab.
70
70
71
71
> [!NOTE]
72
-
> You can follow similar steps to assign the built-in EventGrid TopicSpaces Subscriber role at topicspace scope.
72
+
> You can follow similar steps to assign the built-in Event Grid TopicSpaces Subscriber role at topic space scope.
73
73
74
74
## Next steps
75
75
- See [Publish and subscribe to MQTT message using Event Grid](mqtt-publish-and-subscribe-portal.md)
@@ -78,4 +78,4 @@ You can use these roles to provide permissions at subscription, resource group,
78
78
- To learn more about Azure Identity client library, you can refer to [using Azure Identity client library](/entra/identity/managed-identities-azure-resources/how-to-use-vm-token#get-a-token-using-the-azure-identity-client-library)
79
79
- To learn more about implementing an interface for credentials that can provide a token, you can refer to [TokenCredential Interface](/java/api/com.azure.core.credential.tokencredential)
80
80
- To learn more about how to authenticate using Azure Identity, you can refer to [examples](https://github.com/Azure/azure-sdk-for-java/wiki/Azure-Identity-Examples)
81
-
- If you prefer to use custom roles, you can review the process to [create a custom role](/azure/role-based-access-control/custom-roles-portal)
81
+
- If you prefer to use custom roles, you can review the process to [create a custom role](../role-based-access-control/custom-roles-portal.md)
Copy file name to clipboardExpand all lines: articles/event-grid/mqtt-overview.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -48,7 +48,7 @@ MQTT is a publish-subscribe messaging transport protocol that was designed for c
48
48
- **Last Will and Testament (LWT)** notifies your MQTT clients with the abrupt disconnections of other MQTT clients. You can use LWT to ensure predictable and reliable flow of communication among MQTT clients during unexpected disconnections.
49
49
- **Persistent sessions** ensure reliability by preserving the client's subscription information and messages when a client disconnects.
50
50
- **QoS 0 and 1** provide your clients with control over the efficiency and reliability of the communication.
51
-
- MQTT broker is adding more MQTT v3.1.1 features in the future to align more with the MQTT specifications. The following items detail the current differences between features supported by MQTT broker and the MQTT v3.1.1 specification: Retain flag, Message ordering and QoS 2 aren't supported.
51
+
- MQTT broker is adding more MQTT v3.1.1 features in the future to align more with the MQTT specifications. The following items detail the current differences between features supported by MQTT broker and the MQTT v3.1.1 specification: Retain flag, Message ordering, and QoS 2 aren't supported.
52
52
53
53
[Learn more about the MQTT broker and current limitations.](mqtt-support.md)
54
54
@@ -97,7 +97,7 @@ Event Grid allows you to route your MQTT messages to Azure services or webhooks
97
97
:::image type="content" source="media/mqtt-overview/routing-high-res.png" alt-text="Diagram that shows MQTT message routing in Azure Event Grid." border="false":::
98
98
99
99
### Edge MQTT broker integration
100
-
Event Grid integrates with [Azure IoT Operations](https://aka.ms/iot-mq) to bridge its MQTT broker capability on the edge with Azure Event Grid’s MQTT broker feature in the cloud. Azure IoT Operations provides a new distributed MQTT broker for edge computing, running on Arc enabled Kubernetes clusters. It can connect to Event Grid MQTT broker with Microsoft Entra ID authentication using system-assigned managed identity, which simplifies credential management. MQTT Broker provides high availability, scalability, and security for your IoT devices and applications. It's now available in [public preview](https://aka.ms/iot-mq-preview) as part of Azure IoT Operations. [Learn more about connecting Azure IoT Operations MQTT Broker to Azure Event Grid's MQTT broker](https://aka.ms/iot-mq-eg-bridge).
100
+
Event Grid integrates with [Azure IoT Operations](../iot-operations/manage-mqtt-broker/overview-broker.md) to bridge its MQTT broker capability on the edge with Azure Event Grid’s MQTT broker feature in the cloud. Azure IoT Operations provides a new distributed MQTT broker for edge computing, running on Arc enabled Kubernetes clusters. It can connect to Event Grid MQTT broker with Microsoft Entra ID authentication using system-assigned managed identity, which simplifies credential management. MQTT Broker provides high availability, scalability, and security for your IoT devices and applications. It's now available in [public preview](../iot-operations/manage-mqtt-broker/overview-broker.md) as part of Azure IoT Operations. [Learn more about connecting Azure IoT Operations MQTT Broker to Azure Event Grid's MQTT broker](../iot-operations/connect-to-cloud/howto-create-dataflow.md).
Copy file name to clipboardExpand all lines: articles/event-grid/overview.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -24,7 +24,7 @@ Azure Event Grid is used at different stages of data pipelines to achieve a dive
24
24
25
25
**MQTT messaging**. IoT devices and applications can communicate with each other over MQTT. Event Grid can also be used to route MQTT messages to Azure services or custom endpoints for further data analysis, visualization, or storage. This integration with Azure services enables you to build data pipelines that start with data ingestion from your IoT devices.
26
26
27
-
**Data distribution using push and pull delivery modes**. At any point in a data pipeline, HTTP applications can consume messages using push or pull APIs. The source of the data may include MQTT clients’ data, but also includes the following data sources that send their events over HTTP:
27
+
**Data distribution using push and pull delivery modes**. At any point in a data pipeline, HTTP applications can consume messages using push or pull APIs. The source of the data might include MQTT clients’ data, but also includes the following data sources that send their events over HTTP:
28
28
29
29
- Azure services
30
30
- Your custom applications
@@ -43,7 +43,7 @@ Event Grid offers a rich mixture of features. These features include:
43
43
-**Publish-subscribe messaging model** - Communicate efficiently using one-to-many, many-to-one, and one-to-one messaging patterns.
44
44
-**[Built-in cloud integration](mqtt-routing.md)** - Route your MQTT messages to Azure services or custom webhooks for further processing.
45
45
-**Flexible and fine-grained [access control model](mqtt-access-control.md)** - Group clients and topic to simplify access control management, and use the variable support in topic templates for a fine-grained access control.
46
-
-**MQTT broker authentication methods** - [X.509 certificate authentication](mqtt-client-authentication.md) is the industry authentication standard in IoT devices, [Microsoft Entra IDauthentication](mqtt-client-microsoft-entra-token-and-rbac.md) is Azure's authentication standard for applications and [OAuth 2.0 (JSON Web Token) authentication](oauth-json-web-token-authentication.md) provides a lightweight, secure, and flexible option for MQTT clients that are not provisioned in Azure.
46
+
-**MQTT broker authentication methods** - [X.509 certificate authentication](mqtt-client-authentication.md) is the industry authentication standard in IoT devices, [Microsoft Entra IDauthentication](mqtt-client-microsoft-entra-token-and-rbac.md) is Azure's authentication standard for applications and [OAuth 2.0 (JSON Web Token) authentication](oauth-json-web-token-authentication.md) provides a lightweight, secure, and flexible option for MQTT clients that aren't provisioned in Azure.
47
47
-**TLS 1.2 and TLS 1.3 support** - Secure your client communication using robust encryption protocols.
48
48
-**Multi-session support** - Connect your applications with multiple active sessions to ensure reliability and scalability.
49
49
-**MQTT over WebSockets** - Enable connectivity for clients in firewall-restricted environments.
@@ -72,7 +72,7 @@ Event Grid supports the following use cases:
72
72
73
73
Event Grid enables your clients to communicate on [custom MQTT topic names](https://docs.oasis-open.org/mqtt/mqtt/v5.0/os/mqtt-v5.0-os.html#_Toc3901107) using a publish-subscribe messaging model. Event Grid supports clients that publish and subscribe to messages over MQTT v3.1.1, MQTT v3.1.1 over WebSockets, MQTT v5, and MQTT v5 over WebSockets. Event Grid allows you to send MQTT messages to the cloud for data analysis, storage, and visualizations, among other use cases.
74
74
75
-
Event Grid integrates with [Azure IoT MQ](https://aka.ms/iot-mq) to bridge its MQTT broker capability on the edge with Event Grid’s MQTT broker capability in the cloud. Azure IoT MQ is a new distributed MQTT broker for edge computing, running on Arc enabled Kubernetes clusters. It's now available in [public preview](https://aka.ms/iot-mq-preview) as part of Azure IoT Operations.
75
+
Event Grid integrates with [Azure IoT MQ](../iot-operations/manage-mqtt-broker/overview-broker.md) to bridge its MQTT broker capability on the edge with Event Grid’s MQTT broker capability in the cloud. Azure IoT MQ is a new distributed MQTT broker for edge computing, running on Arc enabled Kubernetes clusters. It's now available in [public preview](../iot-operations/manage-mqtt-broker/overview-broker.md) as part of Azure IoT Operations.
76
76
77
77
The MQTT broker feature in Azure Event Grid is ideal for the implementation of automotive and mobility scenarios, among others. See [the reference architecture](mqtt-automotive-connectivity-and-data-solution.md) to learn how to build secure and scalable solutions for connecting millions of vehicles to the cloud, using Azure’s messaging and data analytics services.
One or more clients can connect to Azure Event Grid to read messages at their own pace. Event Grid affords clients full control on events consumption. Your application can receive events at certain times of the day, for example. Your solution can also increase the rate of consumption by adding more clients that read from Event Grid.
152
152
153
153
#### Consume events over a private link
154
-
:::image type="content" source="media/overview/consume-private-link-pull-api.png" alt-text="High-level diagram of a consumer app inside a VNET reading events from Event Grid over a private endpoint inside the VNET." lightbox="media/overview/consume-private-link-pull-api-high-res.png" border="false":::
154
+
:::image type="content" source="media/overview/consume-private-link-pull-api.png" alt-text="High-level diagram of a consumer app inside a virtual network reading events from Event Grid over a private endpoint inside the virtual network." lightbox="media/overview/consume-private-link-pull-api-high-res.png" border="false":::
155
155
156
156
You can configure **private links** to connect to Azure Event Grid to **publish and read** CloudEvents through a [private endpoint](../private-link/private-endpoint-overview.md) in your virtual network. Traffic between your virtual network and Event Grid travels the Microsoft backbone network.
0 commit comments