Merge pull request #178957 from MicrosoftDocs/master

jborsecnik · web-flow · commit 5af89a2a7b38 · 2021-11-07T16:03:43.000-08:00
merge master to live, 4 PM Sunday
diff --git a/.openpublishing.redirection.security-benchmark.json b/.openpublishing.redirection.security-benchmark.json
@@ -516,6 +516,11 @@
         "redirect_url": "/security/benchmark/azure/baselines/virtual-network-security-baseline",
         "redirect_document_id": false
     },
+    {
+        "source_path_from_root": "/articles/virtual-network/nat-gateway/nat-security-baseline.md",
+        "redirect_url": "/security/benchmark/azure/baselines/virtual-network-nat-security-baseline",
+        "redirect_document_id": false
+    },
     {
         "source_path_from_root": "/articles/virtual-network/nat-security-baseline.md",
         "redirect_url": "/security/benchmark/azure/baselines/virtual-network-nat-security-baseline",
@@ -526,6 +531,17 @@
         "redirect_url": "/security/benchmark/azure/baselines/virtual-wan-security-baseline",
         "redirect_document_id": false
     },
+    {
+        "source_path_from_root": "/articles/virtual-desktop/security-baseline.md",
+        "redirect_url": "/security/benchmark/azure/baselines/virtual-desktop-security-baseline",
+        "redirect_document_id": false
+    },
+    {
+        "source_path_from_root": "/articles/cloud-services/security-baseline.md",
+        "redirect_url": "/security/benchmark/azure/baselines/cloud-services-security-baseline",
+        "redirect_document_id": false
+    },
+
     {
         "source_path_from_root": "/articles/vpn-gateway/security-baseline.md",
         "redirect_url": "/security/benchmark/azure/baselines/vpn-gateway-security-baseline",
diff --git a/articles/cloud-services/security-baseline.md b/articles/cloud-services/security-baseline.md
diff --git a/articles/cognitive-services/Speech-Service/intent-recognition.md b/articles/cognitive-services/Speech-Service/intent-recognition.md
@@ -13,8 +13,6 @@ keywords: intent recognition
 
 # What is intent recognition?
 
-[!INCLUDE [TLS 1.2 enforcement](../../../includes/cognitive-services-tls-announcement.md)]
-
 In this overview, you will learn about the benefits and capabilities of intent recognition. The Cognitive Services Speech SDK provides two ways to recognize intents, both described below. An intent is something the user wants to do: book a flight, check the weather, or make a call. Using intent recognition, your applications, tools, and devices can determine what the user wants to initiate or do based on options you define in the Intent Recognizer or LUIS.
 
 ## Pattern matching
diff --git a/articles/cognitive-services/Speech-Service/overview.md b/articles/cognitive-services/Speech-Service/overview.md
@@ -35,9 +35,6 @@ The following features are part of the Speech service. Use the links in this tab
 | [Voice assistants](voice-assistants.md) | Voice assistants | Voice assistants using the Speech service empower developers to create natural, human-like conversational interfaces for their applications and experiences. The voice assistant service provides fast, reliable interaction between a device and an assistant implementation that uses the Bot Framework's Direct Line Speech channel or the integrated Custom Commands service for task completion. | [Yes](voice-assistants.md) | No |
 | [Speaker Recognition](speaker-recognition-overview.md) | Speaker verification & identification | The Speaker Recognition service provides algorithms that verify and identify speakers by their unique voice characteristics. Speaker Recognition is used to answer the question “who is speaking?”. | Yes | [Yes](/rest/api/speakerrecognition/) |
 
-
-[!INCLUDE [TLS 1.2 enforcement](../../../includes/cognitive-services-tls-announcement.md)]
-
 ## Try the Speech service for free
 
 For the following steps, you need both a Microsoft account and an Azure account. If you do not have a Microsoft account, you can sign up for one free of charge at the [Microsoft account portal](https://account.microsoft.com/account). Select **Sign in with Microsoft** and then, when asked to sign in, select **Create a Microsoft account**. Follow the steps to create and verify your new Microsoft account.
diff --git a/articles/cognitive-services/Speech-Service/speech-to-text.md b/articles/cognitive-services/Speech-Service/speech-to-text.md
@@ -32,8 +32,6 @@ This documentation contains the following article types:
 > Bing Speech was decommissioned on October 15, 2019. If your applications, tools, or products are using the Bing Speech APIs, we've created guides to help you migrate to the Speech service.
 > - [Migrate from Bing Speech to the Speech service](how-to-migrate-from-bing-speech.md)
 
-[!INCLUDE [TLS 1.2 enforcement](../../../includes/cognitive-services-tls-announcement.md)]
-
 ## Get started
 
 See the [quickstart](get-started-speech-to-text.md) to get started with speech-to-text. The service is available via the [Speech SDK](speech-sdk.md), the [REST API](rest-speech-to-text.md#pronunciation-assessment-parameters), and the [Speech CLI](spx-overview.md).
diff --git a/articles/cognitive-services/Speech-Service/speech-translation.md b/articles/cognitive-services/Speech-Service/speech-translation.md
@@ -16,8 +16,6 @@ keywords: speech translation
 
 # What is speech translation?
 
-[!INCLUDE [TLS 1.2 enforcement](../../../includes/cognitive-services-tls-announcement.md)]
-
 In this overview, you learn about the benefits and capabilities of the speech translation service, which enables real-time, [multi-language speech-to-speech](language-support.md#speech-translation) and speech-to-text translation of audio streams. With the Speech SDK, your applications, tools, and devices have access to source transcriptions and translation outputs for provided audio. Interim transcription and translation results are returned as speech is detected, and final results can be converted into synthesized speech.
 
 This documentation contains the following article types:
diff --git a/articles/cognitive-services/Speech-Service/swagger-documentation.md b/articles/cognitive-services/Speech-Service/swagger-documentation.md
@@ -14,7 +14,7 @@ ms.author: alexeyo
 
 # Swagger documentation
 
-Speech service offers a Swagger specification to interact with a handful of REST APIs used to import data, create models, test model accuracy, create custom endpoints, queue up batch transcriptions, and manage subscriptions. Most operations available through [the Custom Speech area of the Speech Studio](./custom-speech-overview.md) can be completed programmatically using these APIs.
+Speech service offers a Swagger specification to interact with a handful of REST APIs used to import data, create models, test model accuracy, create custom endpoints, queue up batch transcriptions, and manage subscriptions. Most operations available through the [Custom Speech area of the Speech Studio](https://aka.ms/speechstudio/customspeech) can be completed programmatically using these APIs.
 
 > [!NOTE]
 > Speech service has several REST APIs for [Speech-to-text](rest-speech-to-text.md) and [Text-to-speech](rest-text-to-speech.md).  
diff --git a/articles/cognitive-services/Speech-Service/text-to-speech.md b/articles/cognitive-services/Speech-Service/text-to-speech.md
@@ -16,8 +16,6 @@ keywords: text to speech
 
 # What is neural text-to-speech?
 
-[!INCLUDE [TLS 1.2 enforcement](../../../includes/cognitive-services-tls-announcement.md)]
-
 Microsoft neural text-to-speech uses deep neural networks to make the voices of computers nearly indistinguishable from recordings of people. With the human-like natural prosody and clear articulation of words, neural text-to-speech has significantly reduced listening fatigue when you interact with AI systems.
 
 The patterns of stress and intonation in spoken language are called _prosody_. Traditional text-to-speech systems break down prosody into separate linguistic analysis and acoustic prediction steps that are governed by independent models. That can result in muffled, buzzy voice synthesis. Microsoft neural text-to-speech capability does prosody prediction and voice synthesis simultaneously, uses deep neural networks to overcome the limits of traditional text-to-speech systems in matching the patterns of stress and intonation in spoken language, and synthesizes the units of speech into a computer voice. The result is a more fluid and natural-sounding voice.
diff --git a/articles/cognitive-services/Speech-Service/toc.yml b/articles/cognitive-services/Speech-Service/toc.yml
@@ -376,8 +376,6 @@ items:
       href: keyword-recognition-guidelines.md
     - name: Region support
       href: keyword-recognition-region-support.md
-- name: Language identification
-  href: language-identification.md
 - name: Scenario deep-dives
   items:
     - name: Conversation scenarios
diff --git a/articles/healthcare-apis/iot/iot-connector-custom-functions.md b/articles/healthcare-apis/iot/iot-connector-custom-functions.md
@@ -5,11 +5,11 @@ author: msjasteppe
 ms.service: healthcare-apis
 ms.subservice: fhir
 ms.topic: how-to
-ms.date: 11/05/2021
+ms.date: 11/07/2021
 ms.author: jasteppe
 ---
 
-# How to use custom functions
+# How to use Custom Functions
 
 > [!IMPORTANT]
 > Azure Healthcare APIs is currently in PREVIEW. The [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) include additional legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
@@ -186,7 +186,7 @@ Examples:
 
 ## Next steps
 
-In this article, you learned how to use IoT connector custom functions. To learn how to use Device mappings, see
+In this article, you learned how to use IoT connector Custom Functions. To learn how to use Custom Functions with Device mappings, see
 
 >[!div class="nextstepaction"]
 >[How to use Device mappings](how-to-use-device-mapping-iot.md)
diff --git a/articles/healthcare-apis/iot/toc.yml b/articles/healthcare-apis/iot/toc.yml
@@ -24,9 +24,9 @@ items:
       href: iot-data-flow.md
     - name: IoT connector and Azure Machine Learning Service
       href: iot-connector-machine-learning.md
-    - name: IoT connector and Microsoft Power BI
+    - name: IoT connector and Microsoft Power BI 
       href: iot-connector-power-bi.md
-    - name: IoT connector and Microsoft Teams
+    - name: IoT connector and Microsoft Teams notifications
       href: iot-connector-teams.md
 
 - name: How-to guides
@@ -36,7 +36,7 @@ items:
       href: device-data-through-iot-hub.md 
     - name: Use Device mappings
       href: how-to-use-device-mapping-iot.md
-    - name: Use custom functions
+    - name: Use Custom Functions
       href: iot-connector-custom-functions.md  
     - name: Use FHIR destination mappings
       href: how-to-use-fhir-mapping-iot.md
diff --git a/articles/security-center/defender-for-container-registries-introduction.md b/articles/security-center/defender-for-container-registries-introduction.md
@@ -3,7 +3,7 @@ title: Microsoft Defender for container registries - the benefits and features
 description: Learn about the benefits and features of Microsoft Defender for container registries.
 author: memildin
 ms.author: memildin
-ms.date: 10/04/2021
+ms.date: 11/07/2021
 ms.topic: overview
 ms.service: security-center
 manager: rkarlin
@@ -59,7 +59,7 @@ There are three triggers for an image scan:
 
 - **On import** - Azure Container Registry has import tools to bring images to your registry from Docker Hub, Microsoft Container Registry, or another Azure container registry. **Microsoft Defender for container registries** scans any supported images you import. Learn more in [Import container images to a container registry](../container-registry/container-registry-import-images.md).
  
-The scan completes typically within 2 minutes, but it might take up to 15 minutes. Findings are made available as security recommendations such as this one:
+The scan completes typically within 2 minutes, but it might take up to 40 minutes. Findings are made available as security recommendations such as this one:
 
 [![Sample Microsoft Defender for Cloud recommendation about vulnerabilities discovered in an Azure Container Registry (ACR) hosted image.](media/azure-container-registry-integration/container-security-acr-page.png)](media/azure-container-registry-integration/container-security-acr-page.png#lightbox)
 
diff --git a/articles/security-center/quickstart-onboard-aws.md b/articles/security-center/quickstart-onboard-aws.md
@@ -3,7 +3,7 @@ title: Connect your AWS account to Microsoft Defender for Cloud
 description: Defend your AWS resources with Microsoft Defender for Cloud
 author: memildin
 ms.author: memildin
-ms.date: 11/02/2021
+ms.date: 11/07/2021
 ms.topic: quickstart
 ms.service: security-center
 manager: rkarlin
@@ -49,20 +49,12 @@ This screenshot shows AWS accounts displayed in Defender for Cloud's [overview d
 - To connect an AWS account to your Azure subscription, you'll obviously need access to an AWS account.
 
 - **To enable the Defender for Kubernetes plan**, you'll need:
-    - At least one Amazon EKS cluster with permission to access to the EKS K8s API server.
+    - At least one Amazon EKS cluster with permission to access to the EKS K8s API server. If you need to create a new EKS cluster, follow the instructions in [Getting started with Amazon EKS – eksctl](https://docs.aws.amazon.com/eks/latest/userguide/getting-started-eksctl.html).
     - The resource capacity to create a new SQS queue, Kinesis Fire Hose delivery stream, and S3 bucket in the cluster's region.
-    
-    > [!TIP]
-    > To create a new EKS cluster follow guidance in [Getting started with Amazon EKS – eksctl](https://docs.aws.amazon.com/eks/latest/userguide/getting-started-eksctl.html)
 
 - **To enable the Defender for servers plan**, you'll need:
-    - Microsoft Defender for servers enabled (see [Quickstart: Enable enhanced security features](enable-enhanced-security.md)
-    - An active AWS account with EC2 instances managed by AWS Systems Manager (SSM) and using SSM agent
-
-    > [!TIP]
-    > Some Amazon Machine Images (AMIs) have the SSM agent pre-installed, their AMIs are listed in [AMIs with SSM Agent preinstalled](https://docs.aws.amazon.com/systems-manager/latest/userguide/ssm-agent-technical-details.html#ami-preinstalled-agent). 
-
-    - If your EC2 instances don't have the SSM Agent, follow the relevant instructions from Amazon:
+    - Microsoft Defender for servers enabled (see [Quickstart: Enable enhanced security features](enable-enhanced-security.md).
+    - An active AWS account with EC2 instances managed by AWS Systems Manager (SSM) and using SSM agent. Some Amazon Machine Images (AMIs) have the SSM agent pre-installed, their AMIs are listed in [AMIs with SSM Agent preinstalled](https://docs.aws.amazon.com/systems-manager/latest/userguide/ssm-agent-technical-details.html#ami-preinstalled-agent). If your EC2 instances don't have the SSM Agent, follow the relevant instructions from Amazon:
         - [Install SSM Agent for a hybrid environment (Windows)](https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-install-managed-win.html)
         - [Install SSM Agent for a hybrid environment (Linux)](https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-install-managed-linux.html)
 
@@ -82,11 +74,14 @@ Follow the steps below to create your AWS cloud connector.
 
 1. The select plans tab is where you choose which Defender for Cloud capabilities to enable for this AWS account. 
 
-    > [!IMPORTANT]
+    > [!NOTE]
     > Each capability has its own requirements for permissions and might incur charges.
 
     :::image type="content" source="media/quickstart-onboard-aws/add-aws-account-plans-selection.png" alt-text="The select plans tab is where you choose which Defender for Cloud capabilities to enable for this AWS account.":::
 
+    > [!IMPORTANT]
+    > To present the current status of your recommendations, the CSPM plan queries the AWS resource APIs several times a day. These read-only API calls incur no charges, but they *are* registered in CloudTrail if you've enabled a trail for read events. As explained in [the AWS documentation](https://aws.amazon.com/cloudtrail/pricing/), there are no additional charges for keeping one trail. If you're exporting the data out of AWS (for example, to an external SIEM), this increased volume of calls might also increase ingestion costs. In such cases, We recommend filtering out the read-only calls from the Defender for Cloud user or role ARN: arn:aws:iam::[accountId]:role/CspmMonitorAws (this is the default role name, confirm the role name  configured on your account).
+
     - To extend Defender for Servers coverage to your AWS EC2, set the **Servers** plan to **On** and edit the configuration as required. 
 
     - To extend Defender for Kubernetes coverage to your AWS EKS Linux clusters, set the **Containers** plan to **On** and edit the configuration as required.
diff --git a/articles/sentinel/ci-cd.md b/articles/sentinel/ci-cd.md
@@ -115,7 +115,7 @@ Each connection can support multiple types of custom content, including analytic
     ---
 
     > [!NOTE]
-    > You cannot create create duplicate connections, with the same repository and branch, in a single Azure Sentinel workspace.
+    > You cannot create duplicate connections, with the same repository and branch, in a single Azure Sentinel workspace.
     >
 
 After the connection is created, a new workflow or pipeline is generated in your repository, and the content stored in your repository is deployed to your Azure Sentinel workspace.
diff --git a/articles/virtual-desktop/security-baseline.md b/articles/virtual-desktop/security-baseline.md
diff --git a/articles/virtual-network/nat-gateway/nat-security-baseline.md b/articles/virtual-network/nat-gateway/nat-security-baseline.md
diff --git a/articles/virtual-network/nat-gateway/toc.yml b/articles/virtual-network/nat-gateway/toc.yml
