Skip to content

Commit 3f8d1bc

Browse files
Merge pull request #292958 from spelluru/msgbuild0113
Event Grid: aka.ms -> relative links
2 parents e23e9e5 + 32cba8d commit 3f8d1bc

File tree

4 files changed

+18
-18
lines changed

4 files changed

+18
-18
lines changed

articles/event-grid/event-schema-api-center.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -165,7 +165,7 @@ The data object has the following properties:
165165

166166
|Title |Description |
167167
|---------|---------|
168-
| [Enable linting and analysis for API governance in your API center](https://aka.ms/apicenter/docs/linting)| Use Event Grid events to trigger linting to analyze API definitions in your API center. |
168+
| [Enable linting and analysis for API governance in your API center](../api-center/enable-api-analysis-linting.md)| Use Event Grid events to trigger linting to analyze API definitions in your API center. |
169169

170170
## Related content
171171

articles/event-grid/mqtt-client-microsoft-entra-token-and-rbac.md

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: Microsoft Entra JWT authentication and RBAC authorization for clients with Microsoft Entra identity
2+
title: Microsoft Entra `JWT` authentication and RBAC authorization for clients with Microsoft Entra identity
33
description: Describes JWT authentication and RBAC roles to authorize clients with Microsoft Entra identity to publish or subscribe MQTT messages
44
ms.topic: conceptual
55
ms.custom:
@@ -12,14 +12,14 @@ ms.subservice: mqtt
1212

1313
# Microsoft Entra JWT authentication and Azure RBAC authorization to publish or subscribe MQTT messages
1414

15-
You can authenticate MQTT clients with Microsoft Entra JWT to connect to Event Grid namespace. You can use Azure role-based access control (Azure RBAC) to enable MQTT clients, with Microsoft Entra identity, to publish or subscribe access to specific topic spaces.
15+
You can authenticate MQTT clients with Microsoft Entra JWT to connect to Event Grid namespace. You can use Azure role-based access control (Azure RBAC) to enable MQTT clients, with Microsoft Entra identity, to publish or subscribe access to specific topic spaces.
1616

1717
> [!IMPORTANT]
1818
> - This feature is supported only when using MQTT v5 protocol version
1919
> - JWT authentication is supported for Managed Identities and Service principals only
2020
2121
## Prerequisites
22-
- You need an Event Grid namespace with MQTT enabled. Learn about [creating Event Grid namespace](/azure/event-grid/create-view-manage-namespaces#create-a-namespace)
22+
- You need an Event Grid namespace with MQTT enabled. Learn about [creating Event Grid namespace](/azure/event-grid/create-view-manage-namespaces#create-a-namespace)
2323

2424
<a name='authentication-using-azure-ad-jwt'></a>
2525

@@ -44,21 +44,21 @@ In AUTH packet, you can provide required values in the following fields:
4444
Authenticate Reason Code with value 25 signifies reauthentication.
4545

4646
> [!NOTE]
47-
> - Audience: aud claim must be set to "https://eventgrid.azure.net/".
47+
> - Audience: `aud` claim must be set to `https://eventgrid.azure.net/`.
4848
4949
## Authorization to grant access permissions
50-
A client using Microsoft Entra ID based JWT authentication needs to be authorized to communicate with the Event Grid namespace. You can assign the following two built-in roles to provide either publish or subscribe permissions, to clients with Microsoft Entra identities.
50+
A client using Microsoft Entra ID based JWT authentication needs to be authorized to communicate with the Event Grid namespace. You can assign the following two built-in roles to provide either publish or subscribe permissions, to clients with Microsoft Entra identities.
5151

5252
- Use **EventGrid TopicSpaces Publisher** role to provide MQTT message publisher access
5353
- Use **EventGrid TopicSpaces Subscriber** role to provide MQTT message subscriber access
5454

55-
You can use these roles to provide permissions at subscription, resource group, Event Grid namespace or Event Grid topicspace scope.
55+
You can use these roles to provide permissions at subscription, resource group, Event Grid namespace, or Event Grid topic space scope.
5656

57-
## Assigning the publisher role to your Microsoft Entra identity at topicspace scope
57+
## Assigning the publisher role to your Microsoft Entra identity at topic space scope
5858

5959
1. In the Azure portal, navigate to your Event Grid namespace
60-
1. Navigate to the topicspace to which you want to authorize access.
61-
1. Go to the Access control (IAM) page of the topicspace
60+
1. Navigate to the topic space to which you want to authorize access.
61+
1. Go to the Access control (IAM) page of the topic space
6262
1. Select the **Role assignments** tab to view the role assignments at this scope.
6363
1. Select **+ Add** and Add role assignment.
6464
1. On the Role tab, select the "Event Grid TopicSpaces Publisher" role.
@@ -69,7 +69,7 @@ You can use these roles to provide permissions at subscription, resource group,
6969
1. Select **Review + assign** on the Review + assign tab.
7070

7171
> [!NOTE]
72-
> You can follow similar steps to assign the built-in EventGrid TopicSpaces Subscriber role at topicspace scope.
72+
> You can follow similar steps to assign the built-in Event Grid TopicSpaces Subscriber role at topic space scope.
7373
7474
## Next steps
7575
- See [Publish and subscribe to MQTT message using Event Grid](mqtt-publish-and-subscribe-portal.md)
@@ -78,4 +78,4 @@ You can use these roles to provide permissions at subscription, resource group,
7878
- To learn more about Azure Identity client library, you can refer to [using Azure Identity client library](/entra/identity/managed-identities-azure-resources/how-to-use-vm-token#get-a-token-using-the-azure-identity-client-library)
7979
- To learn more about implementing an interface for credentials that can provide a token, you can refer to [TokenCredential Interface](/java/api/com.azure.core.credential.tokencredential)
8080
- To learn more about how to authenticate using Azure Identity, you can refer to [examples](https://github.com/Azure/azure-sdk-for-java/wiki/Azure-Identity-Examples)
81-
- If you prefer to use custom roles, you can review the process to [create a custom role](/azure/role-based-access-control/custom-roles-portal)
81+
- If you prefer to use custom roles, you can review the process to [create a custom role](../role-based-access-control/custom-roles-portal.md)

articles/event-grid/mqtt-overview.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ MQTT is a publish-subscribe messaging transport protocol that was designed for c
4848
- **Last Will and Testament (LWT)** notifies your MQTT clients with the abrupt disconnections of other MQTT clients. You can use LWT to ensure predictable and reliable flow of communication among MQTT clients during unexpected disconnections.
4949
- **Persistent sessions** ensure reliability by preserving the client's subscription information and messages when a client disconnects.
5050
- **QoS 0 and 1** provide your clients with control over the efficiency and reliability of the communication.
51-
- MQTT broker is adding more MQTT v3.1.1 features in the future to align more with the MQTT specifications. The following items detail the current differences between features supported by MQTT broker and the MQTT v3.1.1 specification: Retain flag, Message ordering and QoS 2 aren't supported.
51+
- MQTT broker is adding more MQTT v3.1.1 features in the future to align more with the MQTT specifications. The following items detail the current differences between features supported by MQTT broker and the MQTT v3.1.1 specification: Retain flag, Message ordering, and QoS 2 aren't supported.
5252

5353
[Learn more about the MQTT broker and current limitations.](mqtt-support.md)
5454

@@ -97,7 +97,7 @@ Event Grid allows you to route your MQTT messages to Azure services or webhooks
9797
:::image type="content" source="media/mqtt-overview/routing-high-res.png" alt-text="Diagram that shows MQTT message routing in Azure Event Grid." border="false":::
9898

9999
### Edge MQTT broker integration
100-
Event Grid integrates with [Azure IoT Operations](https://aka.ms/iot-mq) to bridge its MQTT broker capability on the edge with Azure Event Grid’s MQTT broker feature in the cloud. Azure IoT Operations provides a new distributed MQTT broker for edge computing, running on Arc enabled Kubernetes clusters. It can connect to Event Grid MQTT broker with Microsoft Entra ID authentication using system-assigned managed identity, which simplifies credential management. MQTT Broker provides high availability, scalability, and security for your IoT devices and applications. It's now available in [public preview](https://aka.ms/iot-mq-preview) as part of Azure IoT Operations. [Learn more about connecting Azure IoT Operations MQTT Broker to Azure Event Grid's MQTT broker](https://aka.ms/iot-mq-eg-bridge).
100+
Event Grid integrates with [Azure IoT Operations](../iot-operations/manage-mqtt-broker/overview-broker.md) to bridge its MQTT broker capability on the edge with Azure Event Grid’s MQTT broker feature in the cloud. Azure IoT Operations provides a new distributed MQTT broker for edge computing, running on Arc enabled Kubernetes clusters. It can connect to Event Grid MQTT broker with Microsoft Entra ID authentication using system-assigned managed identity, which simplifies credential management. MQTT Broker provides high availability, scalability, and security for your IoT devices and applications. It's now available in [public preview](../iot-operations/manage-mqtt-broker/overview-broker.md) as part of Azure IoT Operations. [Learn more about connecting Azure IoT Operations MQTT Broker to Azure Event Grid's MQTT broker](../iot-operations/connect-to-cloud/howto-create-dataflow.md).
101101

102102
### MQTT Clients Life Cycle Events
103103

articles/event-grid/overview.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ Azure Event Grid is used at different stages of data pipelines to achieve a dive
2424

2525
**MQTT messaging**. IoT devices and applications can communicate with each other over MQTT. Event Grid can also be used to route MQTT messages to Azure services or custom endpoints for further data analysis, visualization, or storage. This integration with Azure services enables you to build data pipelines that start with data ingestion from your IoT devices.
2626

27-
**Data distribution using push and pull delivery modes**. At any point in a data pipeline, HTTP applications can consume messages using push or pull APIs. The source of the data may include MQTT clients’ data, but also includes the following data sources that send their events over HTTP:
27+
**Data distribution using push and pull delivery modes**. At any point in a data pipeline, HTTP applications can consume messages using push or pull APIs. The source of the data might include MQTT clients’ data, but also includes the following data sources that send their events over HTTP:
2828

2929
- Azure services
3030
- Your custom applications
@@ -43,7 +43,7 @@ Event Grid offers a rich mixture of features. These features include:
4343
- **Publish-subscribe messaging model** - Communicate efficiently using one-to-many, many-to-one, and one-to-one messaging patterns.
4444
- **[Built-in cloud integration](mqtt-routing.md)** - Route your MQTT messages to Azure services or custom webhooks for further processing.
4545
- **Flexible and fine-grained [access control model](mqtt-access-control.md)** - Group clients and topic to simplify access control management, and use the variable support in topic templates for a fine-grained access control.
46-
- **MQTT broker authentication methods** - [X.509 certificate authentication](mqtt-client-authentication.md) is the industry authentication standard in IoT devices, [Microsoft Entra IDauthentication](mqtt-client-microsoft-entra-token-and-rbac.md) is Azure's authentication standard for applications and [OAuth 2.0 (JSON Web Token) authentication](oauth-json-web-token-authentication.md) provides a lightweight, secure, and flexible option for MQTT clients that are not provisioned in Azure.
46+
- **MQTT broker authentication methods** - [X.509 certificate authentication](mqtt-client-authentication.md) is the industry authentication standard in IoT devices, [Microsoft Entra IDauthentication](mqtt-client-microsoft-entra-token-and-rbac.md) is Azure's authentication standard for applications and [OAuth 2.0 (JSON Web Token) authentication](oauth-json-web-token-authentication.md) provides a lightweight, secure, and flexible option for MQTT clients that aren't provisioned in Azure.
4747
- **TLS 1.2 and TLS 1.3 support** - Secure your client communication using robust encryption protocols.
4848
- **Multi-session support** - Connect your applications with multiple active sessions to ensure reliability and scalability.
4949
- **MQTT over WebSockets** - Enable connectivity for clients in firewall-restricted environments.
@@ -72,7 +72,7 @@ Event Grid supports the following use cases:
7272

7373
Event Grid enables your clients to communicate on [custom MQTT topic names](https://docs.oasis-open.org/mqtt/mqtt/v5.0/os/mqtt-v5.0-os.html#_Toc3901107) using a publish-subscribe messaging model. Event Grid supports clients that publish and subscribe to messages over MQTT v3.1.1, MQTT v3.1.1 over WebSockets, MQTT v5, and MQTT v5 over WebSockets. Event Grid allows you to send MQTT messages to the cloud for data analysis, storage, and visualizations, among other use cases.
7474

75-
Event Grid integrates with [Azure IoT MQ](https://aka.ms/iot-mq) to bridge its MQTT broker capability on the edge with Event Grid’s MQTT broker capability in the cloud. Azure IoT MQ is a new distributed MQTT broker for edge computing, running on Arc enabled Kubernetes clusters. It's now available in [public preview](https://aka.ms/iot-mq-preview) as part of Azure IoT Operations.
75+
Event Grid integrates with [Azure IoT MQ](../iot-operations/manage-mqtt-broker/overview-broker.md) to bridge its MQTT broker capability on the edge with Event Grid’s MQTT broker capability in the cloud. Azure IoT MQ is a new distributed MQTT broker for edge computing, running on Arc enabled Kubernetes clusters. It's now available in [public preview](../iot-operations/manage-mqtt-broker/overview-broker.md) as part of Azure IoT Operations.
7676

7777
The MQTT broker feature in Azure Event Grid is ideal for the implementation of automotive and mobility scenarios, among others. See [the reference architecture](mqtt-automotive-connectivity-and-data-solution.md) to learn how to build secure and scalable solutions for connecting millions of vehicles to the cloud, using Azure’s messaging and data analytics services.
7878

@@ -151,7 +151,7 @@ Azure Event Grid features [pull CloudEvents delivery](pull-delivery-overview.md#
151151
One or more clients can connect to Azure Event Grid to read messages at their own pace. Event Grid affords clients full control on events consumption. Your application can receive events at certain times of the day, for example. Your solution can also increase the rate of consumption by adding more clients that read from Event Grid.
152152

153153
#### Consume events over a private link
154-
:::image type="content" source="media/overview/consume-private-link-pull-api.png" alt-text="High-level diagram of a consumer app inside a VNET reading events from Event Grid over a private endpoint inside the VNET." lightbox="media/overview/consume-private-link-pull-api-high-res.png" border="false":::
154+
:::image type="content" source="media/overview/consume-private-link-pull-api.png" alt-text="High-level diagram of a consumer app inside a virtual network reading events from Event Grid over a private endpoint inside the virtual network." lightbox="media/overview/consume-private-link-pull-api-high-res.png" border="false":::
155155

156156
You can configure **private links** to connect to Azure Event Grid to **publish and read** CloudEvents through a [private endpoint](../private-link/private-endpoint-overview.md) in your virtual network. Traffic between your virtual network and Event Grid travels the Microsoft backbone network.
157157

0 commit comments

Comments
 (0)