Merge pull request #205641 from MicrosoftDocs/repo_sync_working_branch

Confirm merge from repo_sync_working_branch to main to sync with https://github.com/MicrosoftDocs/azure-docs (branch main)

Author: huypub

articles/active-directory/fundamentals/road-to-the-cloud-migrate.md

@@ -100,15 +100,15 @@ Non-Windows workstations can be integrated with Azure AD to enhance user experie
 
 * macOS
 
-    * [Set up enrollment for macOS devices - Microsoft Intune](/mem/intune/enrollment/macos-enroll)
+    * Register macOS to Azure AD and [enroll/manage them with MDM solution](/mem/intune/enrollment/macos-enroll)
 
-    * Deploy [Microsoft Enterprise SSO plug-in for Apple devices - Microsoft identity platform | Azure](../develop/apple-sso-plugin.md)
+    * Deploy [Microsoft Enterprise SSO plug-in for Apple devices](../develop/apple-sso-plugin.md)
 
-* Linux
+    * Plan to deploy [Platform SSO for macOS 13](https://techcommunity.microsoft.com/t5/microsoft-endpoint-manager-blog/microsoft-simplifies-endpoint-manager-enrollment-for-apple/ba-p/3570319)
 
-    * Consider Linux on Azure VM where possible
+* Linux
 
-    * [Sign in to a Linux VM with Azure Active Directory credentials - Azure Virtual Machines](../../active-directory/devices/howto-vm-sign-in-azure-ad-linux.md)
+    * [Sign in to a Linux VM with Azure Active Directory credentials](../../active-directory/devices/howto-vm-sign-in-azure-ad-linux.md) is available on Linux on Azure VM
 
 ### Replace Other Windows versions as Workstation use
 

articles/app-service/configure-ssl-certificate.md

@@ -220,7 +220,10 @@ If you use Azure Key Vault to manage your certificates, you can import a PKCS12
 ### Authorize App Service to read from the vault
 By default, the App Service resource provider doesn’t have access to the Key Vault. In order to use a Key Vault for a certificate deployment, you need to [authorize the resource provider read access to the KeyVault](../key-vault/general/assign-access-policy-cli.md). 
 
-`abfa0a7c-a6b6-4736-8310-5855508787cd`  is the resource provider service principal name for App Service, and it's the same for all Azure subscriptions. For Azure Government cloud environment, use `6a02c803-dafd-4136-b4c3-5a6f318b4714` instead as the resource provider service principal name.
+| Resource Provider | Service Principal AppId | KeyVault secret permissions | KeyVault certificate permissions |
+|--|--|--|--|
+| `Microsoft Azure App Service` or `Microsoft.Azure.WebSites` | `abfa0a7c-a6b6-4736-8310-5855508787cd` (It's the same for all Azure subscriptions)<br/><br/>For Azure Government cloud environment, use `6a02c803-dafd-4136-b4c3-5a6f318b4714`. | Get | Get |
+| Microsoft.Azure.CertificateRegistration |  | Get<br/>List<br/>Set<br/>Delete | Get<br/>List |
 
 > [!NOTE]
 > Currently, Key Vault Certificate only supports Key Vault access policy but not RBAC model.

articles/app-service/overview-hosting-plans.md

@@ -98,7 +98,17 @@ Since you pay for the computing resources your App Service plan allocates (see [
 
 Isolate your app into a new App Service plan when:
 
-- The app is resource-intensive.
+- The app is resource-intensive. The number may actually be lower depending on how resource intensive the hosted applications are, however as a general guidance, you may refer to the table below:
+
+  | App Service Plan SKU | Max Apps |
+  |--|--|
+  | B1, S1, P1v2, I1v1 | 8 |
+  | B2, S2, P2v2, I2v1 | 16 |
+  | B3, S3, P3v2, I3v1 | 32 |
+  | P1v3, I1v2 | 16 |
+  | P2v3, I2v2 | 32 |
+  | P3v3, I3v2 | 64 |
+
 - You want to scale the app independently from the other apps in the existing plan.
 - The app needs resource in a different geographical region.
 
@@ -107,4 +117,4 @@ This way you can allocate a new set of resources for your app and gain greater c
 ## Manage an App Service plan
 
 > [!div class="nextstepaction"]
-> [Manage an App Service plan](app-service-plan-manage.md)
+> [Manage an App Service plan](app-service-plan-manage.md)