Merge pull request #278121 from MicrosoftDocs/main

v-ccolin · web-flow · commit 4542f0d2b88e · 2024-06-13T12:18:57.000+01:00
Merge main to live, 4 AM
diff --git a/articles/active-directory-b2c/TOC.yml b/articles/active-directory-b2c/TOC.yml
@@ -824,8 +824,6 @@
     href: user-flow-versions-legacy.md
 - name: Resources
   items:
-  - name: Azure Roadmap
-    href: https://azure.microsoft.com/updates/?status=nowavailable,inpreview,indevelopment&category=identity,security&query=b2c
   - name: Frequently asked questions
     href: ./faq.yml
     displayName: FAQ
diff --git a/articles/ai-services/speech-service/text-to-speech-avatar/content-credentials.md b/articles/ai-services/speech-service/text-to-speech-avatar/content-credentials.md
@@ -0,0 +1,48 @@
+---
+title: Content Credentials in Azure Text to Speech Avatar
+titleSuffix: Azure Text to Speech Avatar
+description: Learn about the content credentials feature, which lets you verify that a video was generated by the Azure text to speech avatar system.
+author: sally-baolian
+ms.author: v-baolianzou
+ms.service: azure-ai-speech
+ms.topic: conceptual 
+ms.date: 6/11/2024
+manager: nitinme
+---
+
+# Content credentials
+
+The high-quality models in the Azure text to speech avatar feature generate realistic avatar videos from text input. To improve the transparency of the generated content, the Azure text to speech avatar provides content credentials, a tamper-evident way to disclose the origin and history of the content. Content credentials are based on an open technical specification from the [Coalition for Content Provenance and Authenticity (C2PA)](https://www.c2pa.org), a Joint Development Foundation project.
+
+## What are content credentials?
+
+Content credentials in the Azure text to speech avatar provide customers with information about the origin of an avatar video. This information is represented by a manifest attached to the video. The manifest is cryptographically signed by a certificate that traces back to Azure text to speech avatar.
+
+The manifest contains several key pieces of information:
+
+| Field name | Field content |
+| --- | --- |
+| `"generator"` | This field has a value of `"Microsoft Azure Text To Speech Avatar Service"` for all applicable videos, attesting to the AI-generated nature of the video. |
+| `"when"` | The timestamp of when the content credentials were created. |
+
+Content credentials in the Azure text to speech avatar can help people understand when video content is generated by the Azure text to speech avatar system. For more information on how to responsibly build solutions with text to speech avatar models, visit the [Text to speech transparency note](/legal/cognitive-services/speech-service/text-to-speech/transparency-note?context=/azure/ai-services/speech-service/context/context).
+
+## Limitations
+
+The content credentials are only supported in video files generated by batch synthesis of text to speech avatar, and only `mp4` file format is supported.  
+
+## How do I leverage content credentials in my solution today?
+
+You may leverage content credentials by:
+
+- Ensuring that your Azure text to speech avatar generated video files contain content credentials
+
+No additional set-up is necessary. Content credentials are automatically applied to all applicable videos generated by the Azure text to speech avatar.
+
+## Verifying that a video file has content credentials
+
+As for now, self-serve verification of content credentials for text to speech avatar video isn't yet available. You can contact [avatarvoice@microsoft.com](mailto:avatarvoice@microsoft.com) through email for verification of content credentials of Azure text to speech avatar generated videos.
+
+## Next steps
+
+* [Use batch synthesis for text to speech avatar](./batch-synthesis-avatar.md)
diff --git a/articles/ai-services/speech-service/toc.yml b/articles/ai-services/speech-service/toc.yml
@@ -200,6 +200,8 @@ items:
       - name: What is text to speech avatar?
         href: text-to-speech-avatar/what-is-text-to-speech-avatar.md
         displayName: avatar
+      - name: Content credentials
+        href: text-to-speech-avatar/content-credentials.md
       - name: How to synthesize text to speech avatar
         items:
         - name: Real-time synthesis
diff --git a/articles/api-management/TOC.yml b/articles/api-management/TOC.yml
@@ -666,6 +666,7 @@
     - name: Workspaces breaking changes (June 2024)
       href: breaking-changes/workspaces-breaking-changes-june-2024.md
     - name: stv1 compute platform retirement (August 2024)
+      href: breaking-changes/stv1-platform-retirement-august-2024.md
     - name: Git configuration retirement (March 2025)
       href: breaking-changes/git-configuration-retirement-march-2025.md
     - name: Direct management API retirement (March 2025)
diff --git a/articles/azure-app-configuration/reference-kubernetes-provider.md b/articles/azure-app-configuration/reference-kubernetes-provider.md
@@ -457,7 +457,7 @@ spec:
 
 ### Feature Flags
 
-In the following sample, feature flags with keys starting with `app1` and labels equivalent to `common` are downloaded and refreshed every 10 minutes.
+In the following sample, feature flags with keys starting with `app1` and labels equivalent to `common` are downloaded and refreshed every 10 minutes. Note that to populate feature flags in the generated ConfigMap, the `configMapData.type` property must be `json` or `yaml`.
 
 ``` yaml
 apiVersion: azconfig.io/v1
@@ -468,6 +468,9 @@ spec:
   endpoint: <your-app-configuration-store-endpoint>
   target:
     configMapName: configmap-created-by-appconfig-provider
+    configMapData:
+      type: json
+      key: appSettings.json
   featureFlag:
     selectors:
       - keyFilter: app1*
diff --git a/articles/azure-monitor/agents/data-collection-syslog.md b/articles/azure-monitor/agents/data-collection-syslog.md
@@ -49,6 +49,13 @@ The following facilities are supported with the Syslog collector:
 * local6
 * local7
 
+The following are the severity levels of the events:
+* info
+* notice
+* error
+* warning
+* critical
+
 For some device types that don't allow local installation of Azure Monitor Agent, the agent can be installed instead on a dedicated Linux-based log forwarder. The originating device must be configured to send Syslog events to the Syslog daemon on this forwarder instead of the local daemon. For more information, see the [Sentinel tutorial](../../sentinel/forward-syslog-monitor-agent.md).
 
 ## Configure Syslog
diff --git a/articles/backup/backup-azure-vm-backup-faq.yml b/articles/backup/backup-azure-vm-backup-faq.yml
@@ -258,7 +258,7 @@ sections:
 
       - question: Does Cross Subscription Restore support all Azure VM?
         answer: |
-          No, it's unsupported for [Encrypted Azure VMs](backup-azure-vms-introduction.md#encryption-of-azure-vm-backups) and [Trusted Launch VMs](backup-support-matrix-iaas.md#tvm-backup).
+          No, it's unsupported for [Encrypted Azure VMs](backup-azure-vms-introduction.md#encryption-of-azure-vm-backups).
 
       - question: Can I use Azure VM snapshots to restore in another subscription?
         answer: |
@@ -282,7 +282,7 @@ sections:
 
       - question: Does Cross Zonal Restore support all Azure VM?
         answer: |
-          No, it's unsupported for [Encrypted Azure VMs](backup-azure-vms-introduction.md#encryption-of-azure-vm-backups) and [Trusted Launch VMs](backup-support-matrix-iaas.md#tvm-backup).
+          No, it's unsupported for [Encrypted Azure VMs](backup-azure-vms-introduction.md#encryption-of-azure-vm-backups).
 
       - question: Can I use Azure VM snapshots to restore in another zone?
         answer: |
diff --git a/articles/backup/backup-support-matrix-iaas.md b/articles/backup/backup-support-matrix-iaas.md
@@ -2,7 +2,7 @@
 title: Support matrix for Azure VM backups
 description: Get a summary of support settings and limitations for backing up Azure VMs by using the Azure Backup service.
 ms.topic: conceptual
-ms.date: 06/11/2024
+ms.date: 06/13/2024
 ms.custom: references_regions, linux-related-content
 ms.reviewer: sharrai
 ms.service: backup
@@ -181,6 +181,7 @@ Configure standalone Azure VMs in Windows Storage Spaces | Not supported.
 Restore with managed identities | Supported for managed Azure VMs. <br><br> Not supported for classic and unmanaged Azure VMs. <br><br> Cross-region restore isn't supported with managed identities. <br><br> Currently, this is available in all Azure public and national cloud regions. <br><br> [Learn more](backup-azure-arm-restore-vms.md#restore-vms-with-managed-identities).
 <a name="tvm-backup">Back up trusted launch VMs</a>    |  Backup is supported. <br><br> Backup of trusted launch VMs is supported through [Enhanced policy](backup-azure-vms-enhanced-policy.md). You can enable backup through a [Recovery Services vault](./backup-azure-arm-vms-prepare.md), the [pane for managing a VM](./backup-during-vm-creation.md#start-a-backup-after-creating-the-vm), and the [pane for creating a VM](backup-during-vm-creation.md#create-a-vm-with-backup-configured).    <br><br>   **Feature details**   <br><br> - Backup is supported in all regions where trusted launch VMs are available. <br><br> - Configuration of backups, alerts, and monitoring for trusted launch VMs is supported through the backup center. <br><br> - Migration of an existing [Gen2 VM](../virtual-machines/generation-2.md) (protected with Azure Backup) to a trusted launch VM is currently not supported. [Learn how to create a trusted launch VM](../virtual-machines/trusted-launch-portal.md?tabs=portal#deploy-a-trusted-launch-vm).  <br><br> - Item-level restore is supported for the scenarios mentioned [here](backup-support-matrix-iaas.md#support-for-file-level-restore).      <br><br>     Note that if the trusted launch VM was created by converting a Standard VM, ensure that you remove all the recovery points created using Standard policy before enabling the backup operation for the VM. 
 [Back up confidential VMs](../confidential-computing/confidential-vm-overview.md) | Unsupported. <br><br>    Note that the following limited preview support scenarios are discontinued and currently not available: <br><br> - Backup of Confidential VMs with no confidential disk encryption.   <br> - Backup of Confidential VMs with confidential OS disk encryption through a platform-managed key (PMK).
+Backup of VMs with SSE and CMK encryption using HSM | Supported. <br><br> You must assign the permissions get, wrap, and uwrap key to the Key Vault to User-assgined managed identity.
 
 ## VM storage support
 
diff --git a/articles/hdinsight/hadoop/apache-hadoop-connect-hive-power-bi.md b/articles/hdinsight/hadoop/apache-hadoop-connect-hive-power-bi.md
@@ -4,7 +4,7 @@ description: Learn how to use Microsoft Power BI to visualize Hive data processe
 ms.service: hdinsight
 ms.topic: how-to
 ms.custom: hdinsightactive
-ms.date: 06/26/2023
+ms.date: 06/13/2024
 ---
 
 # Visualize Apache Hive data with Microsoft Power BI using ODBC in Azure HDInsight
diff --git a/articles/hdinsight/hdinsight-linux-ambari-ssh-tunnel.md b/articles/hdinsight/hdinsight-linux-ambari-ssh-tunnel.md
@@ -4,7 +4,7 @@ description: Learn how to use an SSH tunnel to securely browse web resources hos
 ms.service: hdinsight
 ms.topic: how-to
 ms.custom: hdinsightactive, linux-related-content
-ms.date: 07/12/2023
+ms.date: 06/13/2024
 ---
 
 # Use SSH tunneling to access Apache Ambari web UI, JobHistory, NameNode, Apache Oozie, and other UIs
diff --git a/articles/operator-insights/managed-identity.md b/articles/operator-insights/managed-identity.md
@@ -31,7 +31,7 @@ Azure Operator Insights use a user-assigned managed identity for:
 
 - Encryption with customer-managed keys, also called CMK-based encryption.
 - Integration with Microsoft Purview. The managed identity allows the Data Product to manage the collection and the data catalog within the collection.
-- Authentication to Azure for an [Azure Operator Insights ingestion agent](ingestion-agent-overview.md) on an Azure VM. The managed identity allows the ingestion agent to access a Data Product's Key Vault. See [use a managed identity for authentication](set-up-ingestion-agent.md#use-a-managed-identity-for-authentication).
+- Authentication to Azure for an [Azure Operator Insights ingestion agent](ingestion-agent-overview.md) on an Azure VM. The managed identity allows the ingestion agent to access a Data Product's Key Vault. See [Use a managed identity for authentication](set-up-ingestion-agent.md#use-a-managed-identity-for-authentication).
 
 When you [create a Data Product](data-product-create.md), you set up the managed identity and associate it with the Data Product. To use the managed identity with Microsoft Purview, you must also [grant the managed identity the appropriate permissions in Microsoft Purview](purview-setup.md#access-and-set-up-your-microsoft-purview-account).
 
diff --git a/articles/sentinel/data-type-cloud-support.md b/articles/sentinel/data-type-cloud-support.md
@@ -1,10 +1,10 @@
 ---
 title: Support for Microsoft Sentinel connector data types in different clouds
 description: This article describes the types of clouds that affect data streaming from the different connectors that Microsoft Sentinel supports.  
-author: limwainstein
+author: batamig
 ms.topic: conceptual
-ms.date: 11/14/2022
-ms.author: lwainstein
+ms.date: 06/09/2024
+ms.author: bagol
 ---
 
 # Support for data types in Microsoft Sentinel across different clouds
@@ -28,7 +28,7 @@ Microsoft Sentinel is built on Microsoft Azure environments—both commercial an
 
 This diagram shows the hierarchy of the Office 365 and Microsoft Azure clouds and how they relate to each other and to Microsoft Sentinel. 
 
-:::image type="content" source="./media/data-type-cloud-support/cloud-architecture-microsoft-sentinel.png" alt-text="Diagram showing how the Microsoft cloud architecture relates to Microsoft Sentinel data." border="false" lightbox="./media/data-type-cloud-support/cloud-architecture-microsoft-sentinel.png":::
+:::image type="content" source="./media/data-type-cloud-support/cloud-architecture-microsoft-sentinel.png" alt-text="Diagram showing how the Microsoft cloud architecture relates to Microsoft Sentinel data." lightbox="./media/data-type-cloud-support/cloud-architecture-microsoft-sentinel.png":::
 
 Because of this complexity, different types of data streaming into Microsoft Sentinel may or may not be fully supported.
 
@@ -52,3 +52,4 @@ In this article, you learned about the types of clouds that affect the supported
 
 - To get started with Microsoft Sentinel, you need a subscription to Microsoft Azure. If you don't have a subscription, you can sign up for a [free trial](https://azure.microsoft.com/free/).
 - Learn how to [onboard your data to Microsoft Sentinel](quickstart-onboard.md) and [get visibility into your data and potential threats](get-visibility.md).
+- Microsoft Sentinel is available as part of the unified security operations platform in the Microsoft Defender portal. For more information, see [Microsoft Sentinel in the Microsoft Defender portal](microsoft-sentinel-defender-portal.md) and [Connect Microsoft Sentinel to Microsoft Defender XDR](/microsoft-365/security/defender/microsoft-sentinel-onboard).
diff --git a/articles/sentinel/feature-availability.md b/articles/sentinel/feature-availability.md
@@ -6,13 +6,15 @@ ms.author: bagol
 ms.topic: feature-availability
 ms.custom: references_regions
 ms.service: microsoft-sentinel
-ms.date: 04/11/2024
+ms.date: 06/06/2024
 ---
 
 # Microsoft Sentinel feature support for Azure commercial/other clouds
 
 This article describes the features available in Microsoft Sentinel across different Azure environments. Features are listed as GA (generally available), public preview, or shown as not available.
 
+While Microsoft Sentinel is also available in the [Microsoft Defender portal](microsoft-sentinel-defender-portal.md), this article only covers Azure environments.
+
 > [!NOTE]
 > These lists and tables do not include feature or bundle availability in the Azure Government Secret or Azure Government Top Secret clouds. 
 > For more information about specific availability for air-gapped clouds, please contact your account team.
diff --git a/articles/sentinel/geographical-availability-data-residency.md b/articles/sentinel/geographical-availability-data-residency.md
@@ -4,7 +4,7 @@ description: In this article, you learn about geographical availability and data
 author: batamig
 ms.author: bagol
 ms.topic: conceptual
-ms.date: 02/22/2024
+ms.date: 06/09/2024
 ms.custom: references_regions
 #Customer intent: As a security operator setting up Microsoft Sentinel, I want to understand where data is stored, so I can meet compliance guidelines.
 ---
@@ -29,6 +29,7 @@ Microsoft Sentinel is a [non-regional service](https://azure.microsoft.com/explo
 - Microsoft Sentinel processes customer data in one of two locations:
     - If the Log Analytics workspace is located in Europe, customer data is processed in Europe.
     - For all other locations, customer data is processed in the US
+- While Microsoft Sentinel is accessible in both the [Microsoft Defender and Azure portals](microsoft-sentinel-defender-portal.md), Microsoft Sentinel data is stored in Azure regions.
 
 ### Supported regions
 
diff --git a/articles/sentinel/media/data-type-cloud-support/cloud-architecture-microsoft-sentinel.png b/articles/sentinel/media/data-type-cloud-support/cloud-architecture-microsoft-sentinel.png
diff --git a/articles/virtual-desktop/whats-new.md b/articles/virtual-desktop/whats-new.md
@@ -32,12 +32,6 @@ You can now use Microsoft Intune to configure client device redirection settings
 
 For more information, see [Configure client device redirection settings for Windows App and the Remote Desktop app using Microsoft Intune](client-device-redirection-intune.md).
 
-### Getting started feature for Azure Virtual Desktop renamed Quickstart
-
-Quickstart offers a streamlined onboarding experience in the Azure portal to set up your Azure Virtual Desktop environment. Create deployments with Microsoft Entra Domain Services or use with an existing Active Directory Domain Services domain the simple and easy way. 
-
-For more information, along with instructions, see [Use quickstart to create a sample infrastructure](quickstart.md).
-
 ### Hibernate support for session hosts in a personal host pool is generally available
 
 Deploying session hosts in a personal host pool with hibernate support is now generally available. With hibernate support, you can pause session hosts you aren't using. For more information, see [Hibernating Windows virtual machines](../virtual-machines/windows/hibernate-resume-windows.md).
