Merge pull request #245282 from MicrosoftDocs/main

Publish to live, Tuesday 4 AM PST, 7/18

Author: ttorble

articles/active-directory/app-provisioning/inbound-provisioning-api-faqs.md

@@ -48,7 +48,7 @@ Yes, the provisioning API supports on-premises AD domains as a target.
 
 ## How do we get the /bulkUpload API endpoint for our provisioning app?
 
-The /bulkUpload API is available only for apps of the type: "API-driven inbound provisioning to Azure AD" and "API-driven inbound provisioning to on-premises Active Directory". You can retrieve the unique API endpoint for each provisioning app from the Provisioning blade home page.  In **Statistics to date** > **View technical information** and copy the **Provisioning API Endpoint** URL. It has the format:
+The /bulkUpload API is available only for apps of the type: "API-driven inbound provisioning to Azure AD" and "API-driven inbound provisioning to on-premises Active Directory". You can retrieve the unique API endpoint for each provisioning app from the Provisioning blade home page.  In **Statistics to date** > **View technical information**,copy the **Provisioning API Endpoint** URL. It has the format:
 
 ```http
 https://graph.microsoft.com/beta/servicePrincipals/{servicePrincipalId}/synchronization/jobs/{jobId}/bulkUpload
@@ -184,4 +184,4 @@ The current API only supports inbound data. Here are some options to consider fo
 ## Next steps
 
 - [Configure API-driven inbound provisioning app](inbound-provisioning-api-configure-app.md)
-- To learn more about API-driven inbound provisioning, see [inbound user provisioning API concepts](inbound-provisioning-api-concepts.md).
+- To learn more about API-driven inbound provisioning, see [inbound user provisioning API concepts](inbound-provisioning-api-concepts.md).

articles/active-directory/app-provisioning/plan-auto-user-provisioning.md

@@ -64,7 +64,7 @@ This article uses the following terms:
 | Resources| Link and Description |
 | - | - |
 | On-demand webinars| [Manage your Enterprise Applications with Azure AD](https://info.microsoft.com/CO-AZUREPLAT-WBNR-FY18-03Mar-06-ManageYourEnterpriseApplicationsOption1-MCW0004438_02OnDemandRegistration-ForminBody.html)<br>‎Learn how Azure AD can help you achieve SSO to your enterprise SaaS applications and best practices for controlling access. |
-| Videos| [What is user provisioning in Active Azure Directory?](https://youtu.be/_ZjARPpI6NI) <br> [How to deploy user provisioning in Active Azure Directory?](https://youtu.be/pKzyts6kfrw) <br> [Integrating Salesforce with Azure AD: How to automate User Provisioning](https://azure.microsoft.com/resources/videos/integrating-salesforce-with-azure-ad-how-to-automate-user-provisioning/) |
+| Videos| [What is user provisioning in Active Azure Directory?](https://youtu.be/_ZjARPpI6NI) <br> [How to deploy user provisioning in Active Azure Directory?](https://youtu.be/pKzyts6kfrw) <br> [Integrating Salesforce with Azure AD: How to automate User Provisioning](https://youtu.be/MAy8s5WSe3A) 
 | Online courses| SkillUp Online:  [Managing Identities](https://skillup.online/courses/course-v1:Microsoft+AZ-100.5+2018_T3/) <br> Learn how to integrate Azure AD with many SaaS applications and to secure user access to those applications. |
 | Books| [Modern Authentication with Azure Active Directory for Web Applications (Developer Reference) 1st Edition](https://www.amazon.com/Authentication-Directory-Applications-Developer-Reference/dp/0735696942/ref=sr_1_fkmr0_1?keywords=Azure+multifactor+authentication&qid=1550168894&s=gateway&sr=8-1-fkmr0).  <br> ‎This is an authoritative, deep-dive guide to building Active Directory authentication solutions for these new environments. |
 | Tutorials| See the [list of tutorials on how to integrate SaaS apps with Azure AD](../saas-apps/tutorial-list.md). |

articles/advisor/toc.yml

@@ -42,7 +42,7 @@
     href: ./resource-graph-samples.md
 - name: How-to guides
   items:
-  - name: Optimize costs
+  - name: Optimize virtual machine spend by resizing or shutting down underutilized instances
     href: advisor-cost-recommendations.md
   - name: Improve security
     href: advisor-security-recommendations.md

articles/app-service/quickstart-nodejs.md

@@ -6,9 +6,8 @@ author: msangapu-msft
 ms.author: msangapu
 ms.topic: quickstart
 ms.custom: mvc, devcenter, seodec18, devdivchpfy22, ignite-2022, devx-track-js
-ms.date: 03/22/2022
+ms.date: 07/17/2023
 ms.devlang: javascript
-#zone_pivot_groups: app-service-ide-oss
 zone_pivot_groups: app-service-vscode-cli-portal
 ---
 # Deploy a Node.js web app in Azure
@@ -224,16 +223,13 @@ Sign in to the Azure portal at https://portal.azure.com.
 
 ### Create Azure resources
 
-1. Type **app services** in the search. Under **Services**, select **App Services**.
+1. To start creating a Node.js app, browse to [https://ms.portal.azure.com/#create/Microsoft.WebSite](https://ms.portal.azure.com/#create/Microsoft.WebSite).
 
-     :::image type="content" source="./media/quickstart-nodejs/portal-search.png?text=Azure portal search details" alt-text="Screenshot of portal search":::
-
-1. In the **App Services** page, select **Create**.
 1. In the **Basics** tab, under **Project details**, ensure the correct subscription is selected and then select to **Create new** resource group. Type *myResourceGroup* for the name.
 
     :::image type="content" source="./media/quickstart-nodejs/project-details.png" alt-text="Screenshot of the Project details section showing where you select the Azure subscription and the resource group for the web app":::
 
-1. Under **Instance details**, type a globally unique name for your web app and select **Code**. Select *Node 14 LTS* **Runtime stack**, an **Operating System**, and a **Region** you want to serve your app from.
+1. Under **Instance details**, type a globally unique name for your web app and select **Code**. Select *Node 18 LTS* **Runtime stack**, an **Operating System**, and a **Region** you want to serve your app from.
 
     :::image type="content" source="./media/quickstart-nodejs/instance-details.png" alt-text="Screenshot of the Instance details section where you provide a name for the virtual machine and select its region, image and size":::
 
@@ -251,7 +247,7 @@ Sign in to the Azure portal at https://portal.azure.com.
 
     :::image type="content" source="./media/quickstart-nodejs/next-steps.png" alt-text="Screenshot showing the next step of going to the resource":::
 
-### Get FTP credentials
+### Get FTPS credentials
 
 Azure App Service supports [**two types of credentials**](deploy-configure-credentials.md) for FTP/S deployment. These credentials aren't the same as your Azure subscription credentials. In this section, you get the *application-scope credentials* to use with FileZilla.
 
@@ -261,13 +257,13 @@ Azure App Service supports [**two types of credentials**](deploy-configure-crede
 
 1. Open **FileZilla** and create a new site.
 
-1. From the **FTPS credentials** tab, copy **FTPS endpoint**, **Username**, and **Password** into FileZilla.
+1. From the **FTPS credentials** tab, under **Application scope**, copy **FTPS endpoint**, **FTPS Username**, and **Password** into FileZilla.
 
     :::image type="content" source="./media/quickstart-nodejs/filezilla-ftps-connection.png" alt-text="FTPS connection details":::
 
 1. Select **Connect** in FileZilla.
 
-### Deploy files with FTP
+### Deploy files with FTPS
 
 1. Copy all files and directories files to the [**/site/wwwroot** directory](https://github.com/projectkudu/kudu/wiki/File-structure-on-azure) in Azure.
 
@@ -316,7 +312,7 @@ You can deploy changes to this app by making edits in Visual Studio Code, saving
 
 :::zone target="docs" pivot="development-environment-azure-portal"
 
-2. Save your changes, then redeploy the app using your FTP client again.
+2. Save your changes, then redeploy the app using your FTP client.
     
 1. Once deployment is complete, refresh the webpage `http://<app-name>.azurewebsites.net`. You should see that the `Welcome to Express` message has been changed to `Welcome to Azure!`.
 

articles/application-gateway/application-gateway-ssl-policy-overview.md

@@ -140,6 +140,7 @@ Application Gateway supports the following cipher suites from which you can choo
   - TLS_DHE_DSS_WITH_AES_128_CBC_SHA
   - TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
   - TLS_DHE_DSS_WITH_AES_256_CBC_SHA
+- Constrained clients looking for "Maximum Fragment Length Negotiation" support must use the newer [**2022 Predefined**](#predefined-tls-policy) or [**Customv2 policies**](#custom-tls-policy).
 
 ## Next steps
 

articles/application-gateway/tutorial-manage-web-traffic-cli.md

@@ -81,7 +81,8 @@ Use [az network application-gateway create](/cli/azure/network/application-gatew
   --frontend-port 80 \
   --http-settings-port 80 \
   --http-settings-protocol Http \
-  --public-ip-address myAGPublicIPAddress
+  --public-ip-address myAGPublicIPAddress \
+  --priority 100
  ```
 
 It may take several minutes for the application gateway to be created. After the application gateway is created, you'll see these new features:
@@ -150,4 +151,4 @@ When no longer needed, remove the resource group, application gateway, and all r
 
 ## Next steps
 
-[Restrict web traffic with a web application firewall](../web-application-firewall/ag/tutorial-restrict-web-traffic-cli.md)
+[Restrict web traffic with a web application firewall](../web-application-firewall/ag/tutorial-restrict-web-traffic-cli.md)

articles/automation/change-tracking/configure-alerts.md

@@ -21,7 +21,7 @@ The following example shows that the file **c:\windows\system32\drivers\etc\host
 
 Let's use this example to discuss the steps for creating alerts on a change.
 
-1. On the **Change tracking** page from your Automation account, select **Log Analytics**.
+1. On the **Change tracking** page from your Virtual Machine, select **Log Analytics**.
 
 2. In the Logs search, look for content changes to the **hosts** file with the query `ConfigurationChange | where FieldsChanged contains "FileContentChecksum" and FileSystemPath contains "hosts"`. This query looks for content changes for files with fully qualified path names containing the word `hosts`. You can also ask for a specific file by changing the path portion to its fully qualified form, for example, using `FileSystemPath == "c:\windows\system32\drivers\etc\hosts"`.
 
@@ -65,4 +65,4 @@ Once you have your alerts configured, you can set up an action group, which is a
 
 * Learn about [log queries](../../azure-monitor/logs/log-query-overview.md) to retrieve and analyze data from a Log Analytics workspace.
 
-* [Analyze usage in Log Analytics workspace](../../azure-monitor/logs/analyze-usage.md) describes how to analyze and alert on your data usage.
+* [Analyze usage in Log Analytics workspace](../../azure-monitor/logs/analyze-usage.md) describes how to analyze and alert on your data usage.

articles/azure-arc/system-center-virtual-machine-manager/enable-group-management.md

@@ -0,0 +1,44 @@
+---
+title:  Enable guest management
+description: The article provides information about how to enable guest management and includes supported environments and prerequisites. 
+ms.date: 07/18/2023
+ms.topic: conceptual
+ms.services: azure-arc
+ms.subservice: azure-arc-scvmm
+author: jyothisuri
+ms.author: jsuri
+keywords: "VMM, Arc, Azure"
+---
+
+
+# Enable guest management
+
+The article provides information about how to enable guest management and includes supported environments and prerequisites.
+
+## Supported environments
+
+- **VMM version**: VMs managed by VMM 2019 UR5 or later and VMM 2022 UR1 or later.
+
+- **Host version OS version**: VMs running on Windows Server 2016, 2019, 2022, Azure Stack HCI 21H2 and Azure Stack HCI 22H2.  
+
+- **Guest OS version**: Windows Server 2012 R2, 2016, 2019, 2022, Windows 10, and Windows 11.
+
+- Linux OS versions aren’t supported.
+
+## Prerequisites
+
+Ensure the following prerequisites:
+
+- VM is running in a supported environment.
+- VM can connect through the firewall to communicate over the internet.
+- [These URLs](/azure/azure-arc/servers/network-requirements#urls) aren’t blocked.
+- The VM is powered on, and the resource bridge has network connectivity to the host running the VM.
+
+## To Enable guest management
+
+To enable guest management, do the following:
+
+1. Sign in to the [Azure portal](https://portal.azure.com/), search for SCVMM VM and select it.
+2. Select **Configuration**.
+3. Select **Enable guest management** and provide the administrator username and password to enable guest management.
+4. Select **Apply**.

articles/azure-arc/system-center-virtual-machine-manager/toc.yml

@@ -16,6 +16,8 @@
     href: create-virtual-machine.md
   - name: Enable SCVMM inventory resources  
     href: enable-scvmm-inventory-resources.md
+  - name: Enable guest management
+    href: enable-group-management.md
 
 - name: Reference
   items:

articles/azure-monitor/agents/agent-data-sources.md

@@ -2,8 +2,8 @@
 title: Log Analytics agent data sources in Azure Monitor
 description: Data sources define the log data that Azure Monitor collects from agents and other connected sources. This article describes how Azure Monitor uses data sources, explains how to configure them, and summarizes the different data sources available.
 ms.topic: conceptual
-author: bwren
-ms.author: bwren
+author: guywi-ms
+ms.author: guywild
 ms.date: 05/10/2022
 ms.reviewer: shseth