Merge pull request #206805 from MicrosoftDocs/main

8/03 AM Publish

Author: huypub

articles/active-directory-b2c/json-transformations.md

@@ -68,6 +68,7 @@ The following example generates a JSON string based on the claim value of "email
   <InputClaims>
     <InputClaim ClaimTypeReferenceId="email" TransformationClaimType="personalizations.0.to.0.email" />
     <InputClaim ClaimTypeReferenceId="otp" TransformationClaimType="personalizations.0.dynamic_template_data.otp" />
+    <InputClaim ClaimTypeReferenceId="email" TransformationClaimType="personalizations.0.dynamic_template_data.verify-email" />
   </InputClaims>
   <InputParameters>
     <InputParameter Id="template_id" DataType="string" Value="d-4c56ffb40fa648b1aa6822283df94f60"/>
@@ -464,4 +465,4 @@ Output claim:
 
 ## Next steps
 
-- Find more [claims transformation samples](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation/json) on the Azure AD B2C community GitHub repo
+- Find more [claims transformation samples](https://github.com/azure-ad-b2c/unit-tests/tree/main/claims-transformation/json) on the Azure AD B2C community GitHub repo

articles/active-directory/develop/sample-v2-code.md

@@ -76,7 +76,6 @@ The following samples show public client desktop applications that access the Mi
 > | Language/<br/>Platform | Code sample(s) <br/> on GitHub | Auth<br/> libraries | Auth flow |
 > | ------- | -------- | ------------- | -------------- |
 > | .NET Core | &#8226; [Call Microsoft Graph](https://github.com/Azure-Samples/ms-identity-dotnet-desktop-tutorial/tree/master/1-Calling-MSGraph/1-1-AzureAD) <br/> &#8226; [Call Microsoft Graph with token cache](https://github.com/Azure-Samples/ms-identity-dotnet-desktop-tutorial/tree/master/2-TokenCache) <br/> &#8226; [Call Micrsoft Graph with custom web UI HTML](https://github.com/Azure-Samples/ms-identity-dotnet-desktop-tutorial/tree/master/3-CustomWebUI/3-1-CustomHTML) <br/> &#8226; [Call Microsoft Graph with custom web browser](https://github.com/Azure-Samples/ms-identity-dotnet-desktop-tutorial/tree/master/3-CustomWebUI/3-2-CustomBrowser) <br/> &#8226; [Sign in users with device code flow](https://github.com/Azure-Samples/ms-identity-dotnet-desktop-tutorial/tree/master/4-DeviceCodeFlow) | MSAL.NET |&#8226; Authorization code with PKCE <br/> &#8226; Device code |
-> | .NET | &#8226; [Call Microsoft Graph with daemon console](https://github.com/Azure-Samples/active-directory-dotnetcore-daemon-v2/tree/master/1-Call-MSGraph) <br/> &#8226; [Call web API with daemon console](https://github.com/Azure-Samples/active-directory-dotnetcore-daemon-v2/blob/master/2-Call-OwnApi/README.md) | MSAL.NET | Authorization code with PKCE |
 > | .NET | [Invoke protected API with integrated Windows authentication](https://github.com/azure-samples/active-directory-dotnet-iwa-v2) | MSAL.NET | Integrated Windows authentication |
 > | Java | [Call Microsoft Graph](https://github.com/Azure-Samples/ms-identity-msal-java-samples/tree/main/2.%20Client-Side%20Scenarios/Integrated-Windows-Auth-Flow) | MSAL Java | Integrated Windows authentication |
 > | Node.js | [Sign in users](https://github.com/Azure-Samples/ms-identity-javascript-nodejs-desktop) | MSAL Node | Authorization code with PKCE |

articles/availability-zones/migrate-app-service.md

@@ -5,7 +5,7 @@ description: Learn how to migrate Azure App Service to availability zone support
 author: anaharris-ms
 ms.service: app-service
 ms.topic: conceptual
-ms.date: 06/07/2022
+ms.date: 08/03/2022
 ms.author: anaharris
 ms.reviewer: jordanselig
 ms.custom: references_regions
@@ -45,6 +45,7 @@ Availability zone support is a property of the App Service plan. The following a
   - France Central
   - UK South
   - Japan East
+  - East Asia
   - Southeast Asia
   - Australia East
 - Availability zones can only be specified when creating a **new** App Service plan. A pre-existing App Service plan can't be converted to use availability zones.
@@ -146,4 +147,4 @@ There's no additional cost associated with enabling availability zones. Pricing
 > [Overview of autoscale in Microsoft Azure](../azure-monitor/autoscale/autoscale-overview.md)
 
 > [!div class="nextstepaction"]
-> [Manage disaster recovery](../app-service/manage-disaster-recovery.md)
+> [Manage disaster recovery](../app-service/manage-disaster-recovery.md)

articles/azure-arc/data/toc.yml

@@ -116,72 +116,6 @@ items:
           href: troubleshoot-guide.md
         - name: Get logs
           href: troubleshooting-get-logs.md
-- name: Azure Arc-enabled PostgreSQL Hyperscale (preview) 
-  items:
-    - name: Overview
-      items:
-        - name: What is Azure Arc-enabled PostgreSQL Hyperscale
-          href: what-is-azure-arc-enabled-postgres-hyperscale.md
-        - name: Limitations
-          href: limitations-postgresql-hyperscale.md
-    - name: Quickstarts
-      items:
-        - name: Supported versions
-          href: supported-versions-postgres-hyperscale.md
-        - name: Create PostgreSQL Hyperscale server group (CLI)
-          href: create-postgresql-hyperscale-server-group.md
-        - name: Create PostgreSQL Hyperscale server group (portal)
-          href: create-postgresql-hyperscale-server-group-azure-portal.md
-        - name: Create PostgreSQL Hyperscale server group (Azure Data Studio)
-          href: create-postgresql-hyperscale-server-group-azure-data-studio.md
-        - name: Create PostgreSQL Hyperscale server group - Kubernetes native tools
-          href: create-postgresql-hyperscale-server-group-kubernetes-native-tools.md
-        - name: Connect
-          href: get-connection-endpoints-and-connection-strings-postgres-hyperscale.md
-    - name: Concepts
-      items:
-        - name: Distribute data
-          href: concepts-distributed-postgres-hyperscale.md
-        - name: Server group placement
-          href: postgresql-hyperscale-server-group-placement-on-kubernetes-cluster-nodes.md
-    - name: How-to
-      items:
-        - name: Manage
-          items:
-            - name: Backup & restore
-              href: backup-restore-postgresql-hyperscale.md
-            - name: Change PostgreSQL port
-              href: change-postgresql-port.md
-            - name: Configure & scale
-              items:
-                - name: Show configuration
-                  href: show-configuration-postgresql-hyperscale-server-group.md
-                - name: Scale out|in worker nodes
-                  href: scale-out-in-postgresql-hyperscale-server-group.md
-                - name: Scale up|down memory & vCores
-                  href: scale-up-down-postgresql-hyperscale-server-group-using-cli.md
-                - name: Configure server parameters
-                  href: configure-server-parameters-postgresql-hyperscale.md
-            - name: Delete
-              href: delete-postgresql-hyperscale-server-group.md
-            - name: List server groups
-              href: list-server-groups-postgres-hyperscale.md
-            - name: Monitoring, log analytics, billing information (portal)
-              href: monitoring-log-analytics-azure-portal-postgresql.md
-            - name: Secure
-              href: configure-security-postgres-hyperscale.md
-            - name: Manage server group (Azure Data Studio)
-              href: manage-postgresql-hyperscale-server-group-with-azure-data-studio.md
-            - name: Use PostgreSQL extensions
-              href: using-extensions-in-postgresql-hyperscale-server-group.md
-        - name: Migrate
-          items:
-            - name: Migrate PostgreSQL data into a PostgreSQL Hyperscale server group
-              href: migrate-postgresql-data-into-postgresql-hyperscale-server-group.md
-            - name: Import the sample database AdventureWorks
-              href: restore-adventureworks-sample-db-into-postgresql-hyperscale-server-group.md
-        - name: Troubleshoot
-          href: troubleshoot-postgresql-hyperscale-server-group.md
 - name: Azure Arc-enabled SQL Managed Instance
   items:
     - name: Overview

articles/azure-netapp-files/faq-nfs.md

@@ -6,7 +6,7 @@ ms.workload: storage
 ms.topic: conceptual
 author: b-hchen
 ms.author: anfdocs
-ms.date: 10/19/2021
+ms.date: 08/02/2022
 ---
 # NFS FAQs for Azure NetApp Files
 
@@ -50,6 +50,40 @@ For example, if a client mounting a volume becomes unresponsive or crashes beyon
 
 A grace period defines a period of special processing in which clients can try to reclaim their locking state during a server recovery. The default timeout for the leases is 30 seconds with a grace period of 45 seconds. After that time, the client's lease will be released. 
 
+## Oracle dNFS
+
+### Are there any Oracle patches with dNFS?
+
+Customers using Oracle 19c and higher must ensure they **are patched for Oracle bug 32931941**. Most of the patch bundles currently in use by Oracle customers do **\*not\*** include this patch. The patch has only been included in a subset of recent patch bundles.
+
+If a database is exposed to this bug, network interruptions are highly likely to result in fractured block corruption. Network interruptions include events such as storage endpoint relocation, volume relocation, and storage service maintenance events. The corruption may not necessarily be detected immediately.
+
+This is not a bug on ONTAP or the Azure NetApp Files service itself. It is the result of an Oracle dNFS bug. The response to an NFS IO during a certain networking interruption or reconfiguration events is mishandled. The database will erroneously write a block that was being updated as it was written. In some cases, the corrupted block will be silently corrected by a later overwrite of that same block. If not, it will eventually be detected by Oracle database processes. An error should be logged in the Alert logs, and the Oracle instance is likely to terminate. In addition, dbv and RMAN operations can detect the corruption.
+
+Oracle publishes [document 1495104.1](https://support.oracle.com/knowledge/Oracle%20Cloud/1495104_1.html), which is continually updated with recommended dNFS patches. If your database uses dNFS, ensure the DBA team is checking for updates in this document.
+
+### Are there any patches required for use of Oracle dNFS with NFSv4.1?
+
+If your databases are using Oracle dNFS with NFSv4.1, they **need to be patched for Oracle bugs 33132050 and 33676296**. You may have to request a backport for other versions of Oracle. For example, at the time of writing, these patches are available for 19.11, but not yet 19.3. If you cite these bug numbers in the support case, Oracle's support engineers will know what to do.
+
+This requirement applies to ONTAP-based systems and services in general, which includes both on-premises ONTAP and Azure NetApp Files.
+
+Examples of the potential problems if these patches are not applied:
+
+1. Database hangs on backend storage endpoint moves.
+1. Database hangs on Azure NetApp Files service maintenance events.
+1. Brief Oracle hangs during normal operation that may or may not be noticeable.
+1. Slow Oracle shutdowns: if you monitor the shutdown process, you'll see pauses that could add up to minutes of delays as dNFS I/O times out.
+1. Incorrect dNFS reply caching behavior on reads that will hang a database.
+
+The patches include a change in dNFS session management and NFS reply caching that resolves these problems.
+
+**If you cannot patch for these two bugs**, you _must not_ use dNFS with NFSv4.1. You can either disable dNFS or switch to NFSv3. 
+
+### Can I use multipathing with Oracle dNFS and NFSv4.1?
+
+dNFS will not work with multiple paths when using NFSv4.1. If you need multiple paths, you will have to use NFSv3. dNFS requires cluster-wide `clientID` and `sessionID` trunking for NFSv4.1 to work with multiple paths, and this is not supported by Azure NetApp Files. The result when trying to use this is a hang during dNFS startup
+
 ## Next steps  
 
 - [Microsoft Azure ExpressRoute FAQs](../expressroute/expressroute-faqs.md)

articles/azure-resource-manager/bicep/linter-rule-use-stable-resource-identifier.md

@@ -2,7 +2,7 @@
 title: Linter rule - use stable resource identifier
 description: Linter rule - use stable resource identifier
 ms.topic: conceptual
-ms.date: 07/21/2022
+ms.date: 08/03/2022
 ---
 
 # Linter rule - use stable resource identifier
@@ -21,9 +21,10 @@ The following example fails this test because `utcNow()` is used in the resource
 
 ```bicep
 param location string = resourceGroup().location
+param time string = utcNow()
 
 resource sa 'Microsoft.Storage/storageAccounts@2021-09-01' = {
-  name: 'store${toLower(utcNow())}'
+  name: 'store${toLower(time)}'
   location: location
   sku: {
     name: 'Standard_LRS'

articles/azure-resource-manager/bicep/linter.md

@@ -64,6 +64,18 @@ The following screenshot shows the linter in the command line. The output from t
 
 You can integrate these checks as a part of your CI/CD pipelines. You can use a GitHub action to attempt a bicep build. Errors will fail the pipelines.
 
+## Silencing false positives
+
+Sometimes a rule can have false positives. For example you may need to include a link to a blob storage directly without using the [environment()](./bicep-functions-deployment.md#environment) function.
+In this case you can disable the warning for one line only, not the entire document, by adding `#disable-next-line <rule name>` before the line with the warning.
+
+```bicep
+#disable-next-line no-hardcoded-env-urls //Direct download link to my toolset
+scriptDownloadUrl: 'https://mytools.blob.core.windows.net/...'
+```
+
+It is good practice to add a comment explaining why the rule does not apply to this line.
+
 ## Next steps
 
 - For more information about customizing the linter rules, see [Add custom settings in the Bicep config file](bicep-config-linter.md).

articles/container-apps/overview.md

@@ -48,13 +48,13 @@ With Azure Container Apps, you can:
 
 - [**Run containers from any registry**](containers.md), public or private, including Docker Hub and Azure Container Registry (ACR).
 
-- [**Use the Azure CLI extension or ARM templates**](get-started.md) to manage your applications.
+- [**Use the Azure CLI extension, Azure portal or ARM templates**](get-started.md) to manage your applications.
 
 - [**Provide an existing virtual network**](vnet-custom.md) when creating an environment for your container apps.
 
 - [**Securely manage secrets**](manage-secrets.md) directly in your application.
 
-- [**View application logs**](monitor.md) using Azure Log Analytics.
+- [**Monitor your apps**](monitor.md) using Azure Log Analytics.
 
 <sup>1</sup> Applications that [scale on CPU or memory load](scale-app.md) can't scale to zero.
 

articles/defender-for-cloud/defender-for-servers-introduction.md

@@ -1,6 +1,8 @@
 ---
 title: Overview of Microsoft Defender for Servers 
 description: Learn about the benefits and features of Microsoft Defender for Servers.
+author: bmansheim
+ms.author: benmansheim
 ms.date: 06/22/2022
 ms.topic: conceptual
 ---
@@ -10,6 +12,7 @@ Microsoft Defender for Servers is one of the plans provided by Microsoft Defende
 
 - Watch a [Defender for Servers introduction](episode-five.md) in our Defender for Cloud in the Field series.
 - Get pricing details for [Defender for Servers](https://azure.microsoft.com/pricing/details/defender-for-cloud/).
+- [Enable Defender for Servers on your subscriptions](enable-enhanced-security.md).
 
 ## Defender for Servers plans
 

articles/defender-for-cloud/defender-for-sql-usage.md

@@ -30,7 +30,7 @@ Microsoft Defender for SQL servers on machines extends the protections for your
     - [Connect your GCP project to Microsoft Defender for Cloud](quickstart-onboard-gcp.md)
 
     > [!NOTE]
-    > Enable database protection for your multicloud SQL servers through the AWS connector](quickstart-onboard-aws.md?pivots=env-settings#connect-your-aws-account) or the [GCP connector](quickstart-onboard-gcp.md?pivots=env-settings#configure-the-databases-plan).
+    > Enable database protection for your multicloud SQL servers through the [AWS connector](quickstart-onboard-aws.md?pivots=env-settings#connect-your-aws-account) or the [GCP connector](quickstart-onboard-gcp.md?pivots=env-settings#configure-the-databases-plan).
 
 This plan includes functionality for identifying and mitigating potential database vulnerabilities and detecting anomalous activities that could indicate threats to your databases.
 
@@ -44,8 +44,7 @@ Learn more about [vulnerability assessment for Azure SQL servers on machines](de
 |----|:----|
 |Release state:|General availability (GA)|
 |Pricing:|**Microsoft Defender for SQL servers on machines** is billed as shown on the [pricing page](https://azure.microsoft.com/pricing/details/defender-for-cloud/)|
-|Protected SQL versions:|[SQL Server versions currently supported by Microsoft](/mem/configmgr/core/plan-design/configs/support-for-sql-server-versions) in:
-<br>- [SQL on Azure virtual machines](/azure/azure-sql/virtual-machines/windows/sql-server-on-azure-vm-iaas-what-is-overview)<br>- [SQL Server on Azure Arc-enabled servers](/sql/sql-server/azure-arc/overview)<br>- On-premises SQL servers on Windows machines without Azure Arc<br>|
+|Protected SQL versions:|[SQL Server versions currently supported by Microsoft](/mem/configmgr/core/plan-design/configs/support-for-sql-server-versions) in: <br>- [SQL on Azure virtual machines](/azure/azure-sql/virtual-machines/windows/sql-server-on-azure-vm-iaas-what-is-overview)<br>- [SQL Server on Azure Arc-enabled servers](/sql/sql-server/azure-arc/overview)<br>- On-premises SQL servers on Windows machines without Azure Arc<br>|
 |Clouds:|:::image type="icon" source="./media/icons/yes-icon.png"::: Commercial clouds<br>:::image type="icon" source="./media/icons/yes-icon.png"::: Azure Government<br>:::image type="icon" source="./media/icons/no-icon.png"::: Azure China 21Vianet|
 
 ## Set up Microsoft Defender for SQL servers on machines