Merge pull request #301496 from MicrosoftDocs/main

Merge main to live, 4 AM

Author: v-ccolin

articles/backup/azure-kubernetes-service-backup-troubleshoot.md

@@ -2,7 +2,7 @@
 title: Troubleshoot Azure Kubernetes Service backup
 description: Symptoms, causes, and resolutions of the Azure Kubernetes Service backup and restore operations.
 ms.topic: troubleshooting
-ms.date: 04/30/2025
+ms.date: 06/18/2025
 ms.service: azure-backup
 ms.custom:
   - ignite-2023
@@ -65,6 +65,9 @@ The extension pods aren't exempt, and require the Microsoft Entra pod identity t
 
 3. To assign the *Storage Blob Data Contributor* role to the extension identity, run the following command:
 
+   >[!Note]
+   >Ensure that you use the latest Terraform script version. [Learn more](quick-kubernetes-backup-terraform.md#prerequisites).
+
    ```azurecli-interactive
    az role assignment create --assignee-object-id $(az k8s-extension show --name azure-aks-backup --cluster-name aksclustername --resource-group aksclusterresourcegroup --cluster-type managedClusters --query aksAssignedIdentity.principalId --output tsv) --role 'Storage Blob Data Contributor' --scope /subscriptions/subscriptionid/resourceGroups/storageaccountresourcegroup/providers/Microsoft.Storage/storageAccounts/storageaccountname
    ```

articles/backup/azure-kubernetes-service-cluster-manage-backups.md

@@ -7,7 +7,7 @@ ms.custom:
   - devx-track-azurecli
   - ignite-2023
   - ignite-2024
-ms.date: 01/16/2025
+ms.date: 06/18/2025
 author: jyothisuri
 ms.author: jsuri
 ---
@@ -22,8 +22,9 @@ In addition, it helps to describe how to manage backup for the Azure Kubernetes
 
 ## Resource provider registrations
 
-- You must register these resource providers on the subscription before initiating any backup and restore operation.
-- Once the registration is complete, you can perform backup and restore operations on all the cluster under the subscription.
+Resource Provider registration is required for installing the Backup Extension, and initiating any backup and restore operation. You can  do this registration as a Subscription Owner. Generally, the Resource Provider is already registered in an Azure subscription. If not, register the `Microsoft.KubernetesConfiguration` resource provider.
+
+After the registration is complete, you can perform backup and restore operations on all the cluster under the subscription.
 
 ### Register the Backup Extension
 

articles/backup/backup-azure-arm-restore-vms.md

@@ -3,7 +3,7 @@ title: Restore VMs by using the Azure portal using Azure Backup
 description: Restore an Azure virtual machine from a recovery point by using the Azure portal, including the Cross Region Restore feature.
 ms.reviewer: nikhilsarode
 ms.topic: how-to
-ms.date: 06/12/2025
+ms.date: 06/18/2025
 ms.service: azure-backup
 author: jyothisuri
 ms.author: jsuri
@@ -121,7 +121,8 @@ As one of the [restore options](#restore-options), you can create a VM quickly w
 1. Select **Restore** to trigger the restore operation.
 
 >[!Note]
->Before you modify any NSG settings, ensure the VM restore operation is complete. Learn about [tracking the restore operation](#track-the-restore-operation).
+>- Before you modify any NSG settings, ensure the VM restore operation is complete. Learn about [tracking the restore operation](#track-the-restore-operation).
+>- During an Alternate Location Restore (Create new VM), the restored VM retains the same SKU as the original VM at the time of the recovery point creation. Any SKU changes made after the backup date don't reflect in the restored VM.
 
 ## Restore disks
 

articles/backup/backup-azure-restore-files-from-vm.md

@@ -2,7 +2,7 @@
 title: Recover files and folders from Azure VM backup
 description: In this article, learn how to recover files and folders from an Azure virtual machine recovery point.
 ms.topic: how-to
-ms.date: 10/16/2024
+ms.date: 06/18/2025
 ms.custom: references_regions
 ms.service: azure-backup
 author: jyothisuri
@@ -141,6 +141,7 @@ If you run the script on a computer with restricted access, ensure there's acces
   - `https://pod01-rec2.GEO-NAME.backup.windowsazure.us` (For Azure US Government) or `AzureBackup` service tag in NSG
   - `https://pod01-rec2.GEO-NAME.backup.windowsazure.de` (For Azure Germany) or `AzureBackup` service tag in NSG
 - Public DNS resolution on port 53 (outbound)
+- The access requirement of the Microsoft Entra ID are `*.microsoft.com`, `*.windowsazure.com`, and `*.windows.net` on port 443 (outbound).
 
 > [!NOTE]
 > Proxies may not support iSCSI protocol or give access to port 3260. Hence it is strongly recommended to run this script on machines which have direct access as required above and not on the machines which will redirect to proxy.

articles/iot/iot-overview-security.md

@@ -300,12 +300,14 @@
       href: connect-logstash-data-connection-rules.md
   - name: Connection instructions for service
     items:
-    - name: Amazon Web Services logs
-      href: connect-aws.md
-    - name: AWS S3 WAF logs
-      href: connect-aws-s3-waf.md
-    - name: CloudWatch events via Lambda function
-      href: cloudwatch-lambda-function.yml      
+    - name: Amazon Web Services
+      items:
+      - name: Connect Microsoft Sentinel to AWS 
+        href: connect-aws-configure-environment.md
+      - name: AWS service logs
+        href: connect-aws.md
+      - name: AWS S3 WAF logs
+        href: connect-aws-s3-waf.md 
     - name: Cisco FTD firewall
       href: cisco-ftd-firewall.md
     - name: Google Cloud Platform connectors 

articles/sentinel/TOC.yml

@@ -52,7 +52,7 @@ The relevant logs don't exist in the S3 bucket.
 ### Solution: Search for logs and export logs if needed
 
 1. In AWS, open the S3 bucket, search for the relevant folder according to the required logs, and check if there are any log files inside the folder.
-1. If the data doesn't exist, there’s an issue with the AWS configuration. In this case, you need to [configure an AWS service to export logs to an S3 bucket](connect-aws.md?tabs=s3#configure-an-aws-service-to-export-logs-to-an-s3-bucket).
+1. If the data doesn't exist, there’s an issue with the AWS configuration. In this case, you need to [configure an AWS service to export logs to an S3 bucket](connect-aws-configure-environment.md#configure-aws-services-to-export-logs-to-an-s3-bucket).
 
 ### Cause 3: The S3 data didn't arrive at the SQS 
 

articles/sentinel/aws-s3-troubleshoot.md

@@ -41,9 +41,11 @@ Before deploying the Microsoft Sentinel solution for Microsoft Business Apps, en
 
    - Microsoft Dataverse
    - Microsoft Power Platform Admin Activity
-   
    - Microsoft Power Automate
-      
+
+    > [!NOTE]
+    > The Dynamics 365 Finance and Operations connector is also included as part of the solution. For more information, see [Deploy for Dynamics 365 Finance and Operations](../dynamics-365/deploy-dynamics-365-finance-operations-solution.md).
+
 1. For each data connector, on the side pane, select **Open connector page > Connect**.
 
 ## Configure data collection for Dataverse