Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr into sergaz-aiosdk

Author: asergaz

articles/api-management/inject-vnet-v2.md

@@ -54,6 +54,8 @@ If you want to enable *public* inbound access to an API Management instance in t
 * Minimum: /27 (32 addresses)
 * Recommended: /24 (256 addresses) - to accommodate scaling of API Management instance
 
+### Network security group
+
 [!INCLUDE [api-management-virtual-network-v2-nsg-rules](../../includes/api-management-virtual-network-v2-nsg-rules.md)]
 
 ### Subnet delegation

articles/api-management/integrate-vnet-outbound.md

@@ -46,8 +46,14 @@ If you want to inject a Premium v2 (preview) API Management instance into a virt
 * Minimum: /27 (32 addresses)
 * Recommended: /24 (256 addresses) - to accommodate scaling of API Management instance
 
+### Network security group
+
 [!INCLUDE [api-management-virtual-network-v2-nsg-rules](../../includes/api-management-virtual-network-v2-nsg-rules.md)]
 
+> [!IMPORTANT]
+> * Inbound NSG rules do not apply when a v2 tier instance is integrated in a virtual network for private outbound access. To enforce inbound NSG rules, use virtual network injection instead of integration.
+> * This differs from networking in the classic Premium tier, where inbound NSG rules are enforced in both external and internal virtual network injection modes. [Learn more](virtual-network-injection-resources.md)
+
 ### Subnet delegation
 
 The subnet needs to be delegated to the **Microsoft.Web/serverFarms** service.

articles/api-management/virtual-network-workspaces-resources.md

@@ -5,7 +5,7 @@ author: dlepow
 
 ms.service: azure-api-management
 ms.topic: concept-article
-ms.date: 06/18/2025
+ms.date: 07/08/2025
 ms.author: danlep
 ---
 
@@ -45,7 +45,6 @@ For information about configuring subnet delegation, see [Add or remove a subnet
 
 #### [Virtual network integration](#tab/external)
 
-
 For virtual network integration, the subnet needs to be delegated to the **Microsoft.Web/serverFarms** service.
 
 :::image type="content" source="media/virtual-network-injection-workspaces-resources/delegate-external.png" alt-text="Screenshot showing subnet delegation to Microsoft.Web/serverFarms in the portal.":::
@@ -65,21 +64,20 @@ For virtual network injection, the subnet needs to be delegated to the **Microso
 
 ---
 
+## Network security group
 
-## Network security group (NSG) rules
+#### [Virtual network integration](#tab/external)
 
-A network security group (NSG) must be attached to the subnet to explicitly allow certain inbound or outbound connectivity. Configure the following rules in the NSG. Set the priority of these rules higher than that of the default rules.
+[!INCLUDE [api-management-virtual-network-v2-nsg-rules](../../includes/api-management-virtual-network-v2-nsg-rules.md)]
 
-Configure other NSG rules to meet your organization's network access requirements.
 
-#### [Virtual network integration](#tab/external)
+#### [Virtual network injection](#tab/internal)
 
-| Direction | Source  | Source port ranges | Destination | Destination port ranges | Protocol |  Action | Purpose | 
-|-------|--------------|----------|---------|------------|-----------|-----|--------|
-| Inbound | AzureLoadBalancer | * | Workspace gateway subnet range  | 80 | TCP | Allow | Allow internal health ping traffic |
-| Inbound | Internet | * | Workspace gateway subnet range  | 80,443 | TCP | Allow | Allow inbound traffic |
+A network security group (NSG) must be associated with the subnet. To set up a network security group, see [Create a network security group](../virtual-network/manage-network-security-group.md). 
 
-#### [Virtual network injection](#tab/internal)
+* Configure the following rules in the NSG. Set the priority of these rules higher than that of the default rules.
+* Configure other outbound rules you need for the gateway to reach your API backends. 
+* Configure other NSG rules to meet your organization’s network access requirements. For example, NSG rules can also be used to block outbound traffic to the internet and allow access only to resources in your virtual network. 
 
 | Direction | Source  | Source port ranges | Destination | Destination port ranges | Protocol |  Action | Purpose | 
 |-------|--------------|----------|---------|------------|-----------|-----|--------|
@@ -89,6 +87,10 @@ Configure other NSG rules to meet your organization's network access requirement
 
 ---
 
+> [!IMPORTANT]
+> * Inbound NSG rules do not apply when you integrate a workspace gateway in a virtual network for private outbound access. To enforce inbound NSG rules, use virtual network injection instead of integration.
+> * This differs from networking in the classic Premium tier, where inbound NSG rules are enforced in both external and internal virtual network injection modes. [Learn more](virtual-network-injection-resources.md)
+
 ## DNS settings for virtual network injection
 
 For virtual network injection, you have to manage your own DNS to enable inbound access to your workspace gateway. 

articles/app-service/configure-authentication-provider-aad.md

@@ -265,7 +265,7 @@ The created app registration authenticates incoming requests for your Microsoft
 
 Your application code is often the best place to handle custom authorization logic. However, for common scenarios, the Microsoft identity platform provides built-in checks that you can use to limit access.
 
-This section shows how to enable built-in checks by using the [App Service authentication V2 API](./configure-authentication-api-version.md). Currently, the only way to configure these built-in checks is by using [Azure Resource Manager templates](/azure/templates/microsoft.web/sites/config-authsettingsv2) or the [REST API](/rest/api/appservice/web-apps/update-auth-settings-v2).
+This section shows how to enable built-in checks by using the [App Service authentication V2 API](./configure-authentication-api-version.md). Currently, the only way to configure these built-in checks is by using [Azure Resource Manager templates](/azure/templates/microsoft.web/sites/config-authsettingsv2) or the [REST API](/rest/api/appservice/web-apps/update-auth-settings-v-2).
 
 Within the API object, the Microsoft Entra identity provider configuration has a `validation` section that can include a `defaultAuthorizationPolicy` object, as shown in the following structure:
 

articles/application-gateway/toc.yml

@@ -12,7 +12,7 @@
   - name: Architecture best practices for Azure Application Gateway v2
     href: /azure/well-architected/service-guides/azure-application-gateway?toc=/azure/application-gateway/toc.json&bc=/azure/application-gateway/breadcrumb/toc.json
   - name: What is load balancing and content delivery?
-    href: /azure/networking/load-balancer-content-delivery/load-balancing-content-delivery-overview.md
+    href: /azure/networking/load-balancer-content-delivery/load-balancing-content-delivery-overview
   - name: Choose a load balancing solution
     href: /azure/architecture/guide/technology-choices/load-balancing-overview?toc=/azure/load-balancer/toc.json
   - name: Create Application Gateway - Portal

articles/azure-functions/functions-create-first-function-resource-manager.md

@@ -30,7 +30,7 @@ Before you begin, you must have an Azure account with an active subscription. [C
 
 ## Review the template
 
-The template used in this quickstart is from [Azure Quickstart Templates](https://azure.microsoft.com/resources/templates/function-app-flex-managed-identities/).
+The template used in this quickstart is from [Azure Quickstart Templates](/samples/azure/azure-quickstart-templates/function-app-flex-managed-identities/).
 
 :::code language="json" source="~/quickstart-templates/quickstarts/microsoft.web/function-app-flex-managed-identities/azuredeploy.json":::
 

articles/azure-web-pubsub/howto-monitor-data-reference.md

@@ -25,6 +25,8 @@ Metrics provide insights into the operational state of the service. The availabl
 |Inbound Traffic|Bytes|Sum|The inbound traffic to the service.|No Dimensions|
 |Outbound Traffic|Bytes|Sum|The outbound traffic from the service.|No Dimensions|
 |Server Load|Percent|Max / Avg|The percentage of server load.|No Dimensions|
+|Rest API Response Time|Count|Sum|The response time of REST API request categorized by endpoint.|ResponseTime, RestApiCategory|
+|Client Request Status Code|Count|Sum|The status code of client connection requests.|ClientType, Status|
 
 For more information, see [Metrics](concept-metrics.md).
 

articles/backup/backup-mabs-unattended-install.md

@@ -3,9 +3,9 @@ title: Silent installation of Azure Backup Server V4
 description: Use a PowerShell script to silently install Azure Backup Server V4. This kind of installation is also called an unattended installation.
 ms.service: azure-backup
 ms.topic: how-to
-ms.date: 09/18/2024
-author: jyothisuri
-ms.author: jsuri
+ms.date: 07/14/2025
+author: AbhishekMallick-MS
+ms.author: v-mallicka
 # Customer intent: As a system administrator, I want to execute a silent installation of Azure Backup Server V4 using PowerShell, so that I can streamline the setup process without manual intervention.
 ---
 # Run an unattended installation of Azure Backup Server
@@ -68,7 +68,8 @@ You can use these flags for the installation:</br>
 
 After you install Backup Server, learn how to prepare your server, or begin protecting a workload.
 
-- [Prepare Backup Server workloads](backup-azure-microsoft-azure-backup.md)
-- [Use Backup Server to back up a VMware server](backup-azure-backup-server-vmware.md)
-- [Use Backup Server to back up SQL Server](backup-azure-sql-mabs.md)
-- [Add Modern Backup Storage to Backup Server](backup-mabs-add-storage.md)
+- [Prepare Backup Server workloads](backup-azure-microsoft-azure-backup.md).
+- [Use Backup Server to back up a VMware server](backup-azure-backup-server-vmware.md).
+- [Use Backup Server to back up SQL Server](backup-azure-sql-mabs.md).
+- [Add Modern Backup Storage to Backup Server](backup-mabs-add-storage.md).
+- [Manage telemetry settings in MABS](manage-telemetry.md).

articles/backup/index.yml

@@ -8,9 +8,9 @@ metadata:
   description: The Azure Backup service provides simple, secure, and cost-effective solutions to back up your data and recover it from the Microsoft Azure cloud.
   ms.service: azure-backup
   ms.topic: landing-page
-  author: jyothisuri
-  ms.author: jsuri
-  ms.date: 07/02/2025
+  author: AbhishekMallick-MS
+  ms.author: v-mallicka
+  ms.date: 07/14/2025
 
 # linkListType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | tutorial | video | whats-new
 
@@ -164,6 +164,10 @@ landingContent:
             url: backup-support-matrix-mars-agent.md
           - text: FAQ - MARS agent
             url: backup-azure-file-folder-backup-faq.yml 
+      - linkListType: how-to-guide
+        links:
+          - text: Offline backup for MARS with customer-owned disks
+            url: backup-azure-backup-import-export.md              
 # Card
   - title: Back up with Microsoft Azure Backup Server (MABS) and DPM
     linkLists:
@@ -183,8 +187,8 @@ landingContent:
             url: offline-backup-azure-data-box.md
           - text: Offline backup using Azure Data Box for DPM and MABS  
             url: offline-backup-azure-data-box-dpm-mabs.md
-          - text: Offline backup for MARS with customer-owned disks
-            url: backup-azure-backup-import-export.md
+          - text: Manage telemetry settings in MABS
+            url: manage-telemetry.md
 # Card
   - title: Manage at scale
     linkLists:

articles/backup/microsoft-azure-backup-server-protection-v3-ur1.md

@@ -1,12 +1,12 @@
 ---
 title: MABS (Azure Backup Server) V3 UR1 protection matrix
 description: This article provides a support matrix listing all workloads, data types, and installations that Azure Backup Server protects.
-ms.date: 11/23/2024
+ms.date: 07/14/2025
 ms.topic: reference
 ms.custom: engagement-fy24, linux-related-content
 ms.service: azure-backup
-author: jyothisuri
-ms.author: jsuri
+author: AbhishekMallick-MS
+ms.author: v-mallicka
 # Customer intent: As a backup administrator, I want to review the protection matrix for Azure Backup Server, so that I can ensure all critical workloads and data types are supported for backup and recovery in my environment.
 ---
 
@@ -167,4 +167,6 @@ MABS doesn't support protecting the following data types:
 
 ## Next steps
 
-* [Support matrix for backup with Microsoft Azure Backup Server or System Center DPM](backup-support-matrix-mabs-dpm.md)
+- [Support matrix for backup with Microsoft Azure Backup Server or System Center DPM](backup-support-matrix-mabs-dpm.md).
+- [Manage telemetry settings in MABS](manage-telemetry.md).
+