Merge pull request #203713 from MicrosoftDocs/repo_sync_working_branch

huypub · web-flow · commit 410336e09c68 · 2022-07-05T09:56:02.000-07:00
Confirm merge from repo_sync_working_branch to main to sync with https://github.com/MicrosoftDocs/azure-docs (branch main)
diff --git a/articles/api-management/authorizations-how-to.md b/articles/api-management/authorizations-how-to.md
@@ -73,7 +73,7 @@ Four steps are needed to set up an authorization with the authorization code gra
 1. Sign in to your GitHub account if you're prompted to do so.
 1. Select **Authorize** so that the application can access the signed-in user’s account. 
     
-     :::image type="content" source="media/authorizations-how-to/consent-to-authorization.png" alt-text="Screenshot of consenting to authorize with Github."::: 
+     :::image type="content" source="media/authorizations-how-to/consent-to-authorization.png" alt-text="Screenshot of consenting to authorize with GitHub."::: 
 
     After authorization, the browser is redirected to API Management and the window is closed. If prompted during redirection, select **Allow access**. In API Management, select **Next**.
 1. On the **Access policy** page, create an access policy so that API Management has access to use the authorization. Ensure that a managed identity is configured for API Management. [Learn more about managed identities in API Management](api-management-howto-use-managed-service-identity.md#create-a-system-assigned-managed-identity).
diff --git a/articles/app-service/environment/using-an-ase.md b/articles/app-service/environment/using-an-ase.md
@@ -116,7 +116,7 @@ In an ILB ASE, the domain suffix used for app creation is *.&lt;asename&gt;.apps
 
 For information about how to create an ILB ASE, see [Create and use an ILB ASE][MakeILBASE].
 
-The SCM URL is used to access the Kudu console or for publishing your app by using Web Deploy. For information on the Kudu console, see [Kudu console for Azure App Service][Kudu]. The Kudu console gives you a web UI for debugging, uploading files, editing files, and much more.
+The SCM URL is used to access the Kudu console or for publishing your app by using Web Deploy. The Kudu console gives you a web UI for debugging, uploading files, editing files, and much more.
 
 ### DNS configuration 
 
@@ -300,7 +300,6 @@ For more specific examples, use: az find "az appservice ase"
 [Pricing]: https://azure.microsoft.com/pricing/details/app-service/
 [ARMOverview]: ../../azure-resource-manager/management/overview.md
 [ConfigureSSL]: ../configure-ssl-certificate.md
-[Kudu]: https://azure.microsoft.com/resources/videos/super-secret-kudu-debug-console-for-azure-web-sites/
 [AppDeploy]: ../deploy-local-git.md
 [ASEWAF]: ./integrate-with-application-gateway.md
 [AppGW]: ../../web-application-firewall/ag/ag-overview.md
diff --git a/articles/azure-cache-for-redis/cache-best-practices-memory-management.md b/articles/azure-cache-for-redis/cache-best-practices-memory-management.md
@@ -30,7 +30,7 @@ Add monitoring on memory usage to ensure that you don't run out of memory and ha
 
 Configure your [maxmemory-reserved setting](cache-configure.md#memory-policies) to improve system responsiveness:
 
-- A sufficient reservation setting is especially important for write-heavy workloads or if you're storing values of 100 KB or more in your cache. By default when you create a cache, 10% of the available memory is reserved for `maxmemory-reserved`. Another 10% is reserved for `maxfragmentationmemory-reserved`. You can increase the amount reserved if you have write-heavy loads.
+- A sufficient reservation setting is especially important for write-heavy workloads or if you're storing values of 100 KB or more in your cache. By default when you create a cache, approximately 10% of the available memory is reserved for `maxmemory-reserved`. Another 10% is reserved for `maxfragmentationmemory-reserved`. You can increase the amount reserved if you have write-heavy loads.
 
 - The `maxmemory-reserved` setting configures the amount of memory, in MB per instance in a cluster, that is reserved for non-cache operations, such as replication during failover. Setting this value allows you to have a more consistent Redis server experience when your load varies. This value should be set higher for workloads that write large amounts of data. When memory is reserved for such operations, it's unavailable for storage of cached data. The allowed range for `maxmemory-reserved` is 10% - 60% of `maxmemory`. If you try to set these values lower than 10% or higher than 60%, they are re-evaluated and set to the 10% minimum and 60% maximum. The values are rendered in megabytes.
 
diff --git a/articles/azure-monitor/alerts/alerts-types.md b/articles/azure-monitor/alerts/alerts-types.md
@@ -25,7 +25,7 @@ This table can help you decide when to use what type of alert. For more detailed
 
 |Alert Type  |When to Use |Pricing Information|
 |---------|---------|---------|
-|Metric alert|Metric alerts are useful when you want to be alerted about data that requires little or no manipulation.  Metric data is stored in the system already pre-computed, so metric alerts are less expensive than log alerts. If the data you want to monitor is available in metric data, you would want to metric alerts.|Each metrics alert rule is charged based on the number of time-series that are monitored. |
+|Metric alert|Metric alerts are useful when you want to be alerted about data that requires little or no manipulation.  Metric data is stored in the system already pre-computed, so metric alerts are less expensive than log alerts. If the data you want to monitor is available in metric data, using metric alerts is recommended.|Each metrics alert rule is charged based on the number of time-series that are monitored. |
 |Log alert|Log alerts allow you to perform advanced logic operations on your data. If the data you want to monitor is available in logs, or requires advanced logic, you can use the robust features of KQL for data manipulation using log alerts. Log alerts are more expensive than metric alerts.|Each Log Alert rule is billed based the interval at which the log query is evaluated (more frequent query evaluation results in a higher cost). Additionally, for Log Alerts configured for [at scale monitoring](#splitting-by-dimensions-in-log-alert-rules), the cost will also depend on the number of time series created by the dimensions resulting from your query. | 
 |Activity Log alert|Activity logs provide auditing of all actions that occurred on resources. Use activity log alerts to be alerted when a specific event happens to a resource, for example, a restart, a shutdown, or the creation or deletion of a resource.|For more information, see the [pricing page](https://azure.microsoft.com/pricing/details/monitor/).|
 
diff --git a/articles/azure-monitor/logs/logs-export-logic-app.md b/articles/azure-monitor/logs/logs-export-logic-app.md
@@ -32,7 +32,7 @@ SecurityEvent
 | project TimeGenerated , Account , AccountType , Computer
 ```
 
-When you export the data on a schedule, use the ingestion_time() function in your query to ensure that you don’t miss late arriving data. If data is delayed due to network or platform issues, using the ingestion time ensures that data is included in the next Logic App execution. See *Add Azure Monitor Logs action* under [Logic App procedure]](#logic-app-procedure) for an example.
+When you export the data on a schedule, use the ingestion_time() function in your query to ensure that you don’t miss late arriving data. If data is delayed due to network or platform issues, using the ingestion time ensures that data is included in the next Logic App execution. See *Add Azure Monitor Logs action* under [Logic App procedure](#logic-app-procedure) for an example.
 
 ## Prerequisites
 Following are prerequisites that must be completed before this procedure.
diff --git a/articles/azure-resource-manager/bicep/data-types.md b/articles/azure-resource-manager/bicep/data-types.md
@@ -167,7 +167,7 @@ var myVar = 'what\'s up?'
 All strings in Bicep support interpolation. To inject an expression, surround it by `${` and `}`. Expressions that are referenced can't span multiple lines.
 
 ```bicep
-var storageName = 'storage${uniqueString(resourceGroup().id)}
+var storageName = 'storage${uniqueString(resourceGroup().id)}'
 ```
 
 ## Multi-line strings
diff --git a/articles/azure-resource-manager/bicep/overview.md b/articles/azure-resource-manager/bicep/overview.md
@@ -101,7 +101,7 @@ To decompile an existing ARM template to Bicep, see [Decompiling ARM template JS
 
 To learn about the resources that are available in your Bicep file, see [Bicep resource reference](/azure/templates/)
 
-Bicep examples can be found in the [Bicep GitHub repo](https://github.com/Azure/bicep/tree/main/docs/examples).
+Bicep examples can be found in the [Bicep GitHub repo](https://github.com/Azure/azure-quickstart-templates/tree/master/quickstarts)
 
 ## About the language
 
diff --git a/articles/azure-sql-edge/deploy-dacpac.md b/articles/azure-sql-edge/deploy-dacpac.md
@@ -28,10 +28,27 @@ SQL Database dacpac and bacpac packages can be deployed to SQL Edge using the `M
 
 To deploy (or import) a SQL Database DAC package `(*.dacpac)` or a BACPAC file `(*.bacpac)` using Azure Blob storage and a zip file, follow the steps below. 
 
-1. Create/Extract a DAC package or Export a Bacpac File using the mechanism mentioned below. 
+1. Create/Extract a DAC package or Export a Bacpac File using one of the mechanism mentioned below. 
+    - Use [SQL Database Project Extension - Azure Data Studio](/sql/azure-data-studio/extensions/sql-database-project-extension-getting-started) to [create a new database project or export an existing database](/sql/azure-data-studio/extensions/sql-database-project-extension-getting-started)
     - Create or extract a SQL Database DAC package. See [Extracting a DAC from a database](/sql/relational-databases/data-tier-applications/extract-a-dac-from-a-database/) for information on how to generate a DAC package for an existing SQL Server database.
     - Exporting a deployed DAC package or a database. See [Export a Data-tier Application](/sql/relational-databases/data-tier-applications/export-a-data-tier-application/) for information on how to generate a bacpac file for an existing SQL Server database.
 
+> [!NOTE]
+> If you are using external streaming jobs as part of the database, please ensure the following:
+> 
+> - The generated dacpac will capture all the SQL Server Objects corresponding to the inputs/output streams and the streaming jobs. But the jobs will not be automatically started. In order to have the external streaming job automatically started after deployment, add a post-deployment script that restarts the jobs as follows:
+>   
+>   ```
+>   exec sys.sp_stop_streaming_job @name=N'<JOB NAME>';
+>   GO
+>   exec sys.sp_start_streaming_job @name=N'<JOB NAME>';
+>   GO
+>   ```
+>   
+> - Ensure any credentials required by the external streaming jobs to access input or output streams are provided as part of the dacpac.
+
+
+
 2. Zip the `*.dacpac` or the `*.bacpac` file and upload it to an Azure Blob storage account. For more information on uploading files to Azure Blob storage, see [Upload, download, and list blobs with the Azure portal](../storage/blobs/storage-quickstart-blobs-portal.md).
 
 3. Generate a shared access signature for the zip file by using the Azure portal. For more information, see [Delegate access with shared access signatures (SAS)](../storage/common/storage-sas-overview.md).
@@ -68,4 +85,4 @@ During some DACPAC or BACPAC deployments users may encounter a command timeouts,
 
 - [Deploy SQL Edge through Azure portal](deploy-portal.md).
 - [Stream Data](stream-data.md)
-- [Machine learning and AI with ONNX in SQL Edge](onnx-overview.md)
+- [Machine learning and AI with ONNX in SQL Edge](onnx-overview.md)
diff --git a/articles/cognitive-services/language-service/conversational-language-understanding/how-to/create-project.md b/articles/cognitive-services/language-service/conversational-language-understanding/how-to/create-project.md
@@ -99,9 +99,9 @@ You can export a Conversational Language Understanding project as a JSON file at
 
 [!INCLUDE [Language Studio project details](../includes/language-studio/project-details.md)]
 
-### [Rest APIs](#tab/rest-api)
+### [REST APIs](#tab/rest-api)
 
-[!INCLUDE [Rest APIs project details](../includes/rest-api/project-details.md)]
+[!INCLUDE [REST APIs project details](../includes/rest-api/project-details.md)]
 
 ---
 
diff --git a/articles/cognitive-services/language-service/custom-named-entity-recognition/how-to/create-project.md b/articles/cognitive-services/language-service/custom-named-entity-recognition/how-to/create-project.md
@@ -67,9 +67,9 @@ Once your resource and storage container are configured, create a new custom NER
 
 [!INCLUDE [Language Studio project creation](../includes/language-studio/create-project.md)]
 
-### [Rest APIs](#tab/rest-api)
+### [REST APIs](#tab/rest-api)
 
-[!INCLUDE [Rest APIs project creation](../includes/rest-api/create-project.md)]
+[!INCLUDE [REST APIs project creation](../includes/rest-api/create-project.md)]
 
 ---
 
@@ -81,7 +81,7 @@ If you have already labeled data, you can use it to get started with the service
 
 [!INCLUDE [Import project](../includes/language-studio/import-project.md)]
 
-### [Rest APIs](#tab/rest-api)
+### [REST APIs](#tab/rest-api)
 
 [!INCLUDE [Import project](../includes/rest-api/import-project.md)]
 
@@ -93,9 +93,9 @@ If you have already labeled data, you can use it to get started with the service
 
 [!INCLUDE [Language Studio project details](../includes/language-studio/project-details.md)]
 
-### [Rest APIs](#tab/rest-api)
+### [REST APIs](#tab/rest-api)
 
-[!INCLUDE [Rest APIs project details](../includes/rest-api/project-details.md)]
+[!INCLUDE [REST APIs project details](../includes/rest-api/project-details.md)]
 
 ---
 
@@ -105,7 +105,7 @@ If you have already labeled data, you can use it to get started with the service
 
 [!INCLUDE [Delete project using Language studio](../includes/language-studio/delete-project.md)]
 
-### [Rest APIs](#tab/rest-api)
+### [REST APIs](#tab/rest-api)
 
 [!INCLUDE [Delete project using the REST API](../includes/rest-api/delete-project.md)]
 
diff --git a/articles/cognitive-services/language-service/custom-text-classification/how-to/create-project.md b/articles/cognitive-services/language-service/custom-text-classification/how-to/create-project.md
@@ -71,9 +71,9 @@ Once your resource and storage container are configured, create a new custom tex
 [!INCLUDE [Language Studio project creation](../includes/language-studio/create-project.md)]
 
 
-### [Rest APIs](#tab/apis)
+### [REST APIs](#tab/apis)
 
-[!INCLUDE [Rest APIs project creation](../includes/rest-api/create-project.md)]
+[!INCLUDE [REST APIs project creation](../includes/rest-api/create-project.md)]
 
 ---
 
@@ -85,7 +85,7 @@ If you have already labeled data, you can use it to get started with the service
 
 [!INCLUDE [Import project](../includes/language-studio/import-project.md)]
 
-### [Rest APIs](#tab/apis)
+### [REST APIs](#tab/apis)
 
 [!INCLUDE [Import project](../includes/rest-api/import-project.md)]
 
@@ -97,9 +97,9 @@ If you have already labeled data, you can use it to get started with the service
 
 [!INCLUDE [Language Studio project details](../includes/language-studio/project-details.md)]
 
-### [Rest APIs](#tab/apis)
+### [REST APIs](#tab/apis)
 
-[!INCLUDE [Rest API project details](../includes/rest-api/project-details.md)]
+[!INCLUDE [REST API project details](../includes/rest-api/project-details.md)]
 
 ---
 
@@ -109,7 +109,7 @@ If you have already labeled data, you can use it to get started with the service
 
 [!INCLUDE [Delete project using Language Studio](../includes/language-studio/delete-project.md)]
 
-### [Rest APIs](#tab/apis)
+### [REST APIs](#tab/apis)
 
 [!INCLUDE [Delete project using the REST API](../includes/rest-api/delete-project.md)]
 
diff --git a/articles/cognitive-services/language-service/orchestration-workflow/how-to/create-project.md b/articles/cognitive-services/language-service/orchestration-workflow/how-to/create-project.md
@@ -96,9 +96,9 @@ You can export an orchestration workflow project as a JSON file at any time.
 
 [!INCLUDE [Language Studio project details](../includes/language-studio/project-details.md)]
 
-### [Rest APIs](#tab/rest-api)
+### [REST APIs](#tab/rest-api)
 
-[!INCLUDE [Rest APIs project details](../includes/rest-api/project-details.md)]
+[!INCLUDE [REST APIs project details](../includes/rest-api/project-details.md)]
 
 ---
 
diff --git a/articles/defender-for-cloud/update-regulatory-compliance-packages.md b/articles/defender-for-cloud/update-regulatory-compliance-packages.md
@@ -24,7 +24,7 @@ Microsoft tracks the regulatory standards themselves and automatically improves
 
 ## What regulatory compliance standards are available in Defender for Cloud?
 
-By default, every subscription has the **Azure Security Benchmark** assigned. This is the Microsoft-authored, Azure-specific guidelines for security and compliance best practices based on common compliance frameworks. [Learn more about Azure Security Benchmark](/security/benchmark/azure/introduction).
+By default, every Azure subscription has the **Azure Security Benchmark** assigned. This is the Microsoft-authored, Azure-specific guidelines for security and compliance best practices based on common compliance frameworks. [Learn more about Azure Security Benchmark](/security/benchmark/azure/introduction).
 
 Available regulatory standards:
 
@@ -45,6 +45,21 @@ Available regulatory standards:
 - FedRAMP H
 - FedRAMP M
 
+By default, every AWS connector subscription has the **AWS Foundational Security Best Practices** assigned. This is the AWS-specific guidelines for security and compliance best practices based on common compliance frameworks. 
+
+Available AWS regulatory standards:
+- AWS CIS 1.2.0
+- AWS PCI DSS 3.2.1
+
+By default, every GCP connector subscription has the **GCP Default** assigned. This is the GCP-specific guidelines for security and compliance best practices based on common compliance frameworks. 
+
+Available GCP regulatory standards:
+- GCP CIS 1.1.0
+- GCP CIS 1.2.0
+- GCP ISO 27001
+- GCP NIST 800 53
+- PCI DSS 3.2.1
+
 > [!TIP]
 > Standards are added to the dashboard as they become available. The preceding list might not contain recently added standards.
 
@@ -58,7 +73,7 @@ To add standards to your dashboard:
 - The subscription must have Defender for Cloud's enhanced security features enabled
 - The user must have owner or policy contributor permissions
 
-### Add a standard
+### Add a standard to your Azure resources
 
 1. From Defender for Cloud's menu, select **Regulatory compliance** to open the regulatory compliance dashboard. Here you can see the compliance standards currently assigned to the currently selected subscriptions.   
 
diff --git a/articles/expressroute/expressroute-faqs.md b/articles/expressroute/expressroute-faqs.md
@@ -187,7 +187,7 @@ No. We do not support layer 2 connectivity extensions into Azure.
 
 ### Can I have more than one ExpressRoute circuit in my subscription?
 
-Yes. You can have more than one ExpressRoute circuit in your subscription. The default limit is set to 10. You can contact Microsoft Support to increase the limit, if needed.
+Yes. You can have more than one ExpressRoute circuit in your subscription. The default limit is set to 50. You can contact Microsoft Support to increase the limit, if needed.
 
 ### Can I have ExpressRoute circuits from different service providers?
 
@@ -455,4 +455,4 @@ Vnet-to-Vnet connectivity over ExpressRoute is not recommended. To acheive this,
 
 ### Does the ExpressRoute service store customer data?
 
-No.
+No.
diff --git a/articles/private-link/private-link-service-overview.md b/articles/private-link/private-link-service-overview.md
@@ -130,6 +130,7 @@ The following are the known limitations when using the Private Link service:
 - Supported only on Standard Load Balancer where backend pool is configured by NIC when using VM/VMSS.
 - Supports IPv4 traffic only
 - Supports TCP and UDP traffic only
+- Private Link Service has an idle timeout of ~5 minutes (300 seconds). To avoid hitting this limit, applications connecting through Private Link Service must leverage TCP Keep Alives lower than that time.
 
 
 ## Next steps
diff --git a/articles/virtual-machines/workloads/sap/sap-rise-integration.md b/articles/virtual-machines/workloads/sap/sap-rise-integration.md
@@ -125,7 +125,7 @@ See [SAP's documentation](https://help.sap.com/docs/PRIVATE_LINK) and a series o
 
 Your SAP landscape runs within SAP RISE/ECS subscription, you can access the SAP system through available ports. Each application communicating with your SAP system might require different ports to access it.
 
-For SAP Fiori, standalone or embedded within the SAP S/4 HANA or NetWeaver system, the customer can connect applications through OData or Rest API. Both use https for incoming requests to the SAP system. Applications running on-premise or within the customer’s own Azure subscription and vnet, use the established vnet peering or VPN vnet-to-vnet connection through a private IP address. Applications accessing a publicly available IP, exposed through SAP RISE managed Azure application gateway, are also able to contact the SAP system through https. For details and security for the application gateway and NSG open ports, contact SAP.
+For SAP Fiori, standalone or embedded within the SAP S/4 HANA or NetWeaver system, the customer can connect applications through OData or REST API. Both use https for incoming requests to the SAP system. Applications running on-premise or within the customer’s own Azure subscription and vnet, use the established vnet peering or VPN vnet-to-vnet connection through a private IP address. Applications accessing a publicly available IP, exposed through SAP RISE managed Azure application gateway, are also able to contact the SAP system through https. For details and security for the application gateway and NSG open ports, contact SAP.
 
 Applications using remote function calls (RFC) or direct database connections using JDBC/ODBC protocols are only possible through private networks and thus via the vnet peering or VPN from customer’s vnet(s).
 
