Merge pull request #299618 from lilyjma/doc-review2

Minor wording changes and callouts

Author: prmerger-automator[bot]

articles/azure-functions/durable/durable-functions-mssql-container-apps-hosting.md

@@ -5,7 +5,7 @@ ms.topic: how-to
 ms.date: 05/06/2025
 ---
 
-# Host a Durable Functions app in Azure Container Apps 
+# Host a Durable Functions app in Azure Container Apps (.NET isolated)
 
 Azure Functions provides integrated support for developing, deploying, and managing containerized Function Apps on Azure Container Apps. Use Azure Container Apps for your Functions apps when you need to run in the same environment as other microservices, APIs, websites, workflows, or any container hosted programs. Learn more about [running Azure Functions in Container Apps](../../container-apps/functions-overview.md). 
 
@@ -163,7 +163,6 @@ A [workload profile](../functions-container-apps-hosting.md#hosting-and-workload
       --resource-group $resourceGroup \
       --name $containerAppEnv \
       --location $location \
-      --infrastructure-subnet-resource-id $subnetId
     ```
 
 1. Create a container app based on the Durable Functions image.
@@ -178,7 +177,7 @@ A [workload profile](../functions-container-apps-hosting.md#hosting-and-workload
     --query properties.outputs.fqdn
     ```
 
-1. Make note of the app URL, which should look similar to `https://<APP_NAME>.victoriouswave-3866c33e.<REGION>.azurecontainerapps.io`.
+1. Make note of the app URL, which should look similar to `https://<APP_NAME>.<ENVIRONMENT_IDENTIFIER>.<REGION>.azurecontainerapps.io`.
 
 ### Create databases
 
@@ -235,22 +234,22 @@ In this section, you set up **user-assigned managed identity** for Azure Storage
     clientId=$(az identity show --name $identity --resource-group $resourceGroup --query 'clientId' --output tsv)
     ```
 
-1. Assign the role `Storage Blob Data Owner` role for access to the storage account. 
+1. Assign the role **Storage Blob Data Owner** role for access to the storage account. 
 
     ```azurecli
     echo "Assign Storage Blob Data Owner role to identity"
     az role assignment create --assignee "$clientId" --role "Storage Blob Data Owner" --scope "$scope"
     ```
 
 ### Set up app settings
-
-Authenticating to the MSSQL database using managed identity isn't supported when hosting a Durable Functions app in Azure Container Apps. For now, this guide authenticates using connection strings.
+> [!NOTE]
+> Authenticating to the MSSQL database using managed identity isn't supported when hosting a Durable Functions app in Azure Container Apps. For now, this guide authenticates using connection strings.
 
 1. From the SQL database resource in the Azure portal, navigate to **Settings** > **Connection strings** to find the connection string.
 
     :::image type="content" source="./media/quickstart-mssql/mssql-azure-db-connection-string.png" alt-text="Screenshot showing database connection string.":::
 
-    The connection string should be a format similar to: 
+    The connection string should have a format similar to: 
 
     ```bash
     dbserver=<SQL_SERVER_NAME>

articles/azure-functions/durable/quickstart-mssql.md

@@ -76,11 +76,6 @@ Another file, *HelloOrchestration.cs*, contains the basic building blocks of a D
 
 For more information about these functions, see [Durable Functions types and features](./durable-functions-types-features-overview.md).
 
-#### Check for latest extension version
-For .NET apps, check the `.csproj` file and make sure the latest version of the [Microsoft.Azure.Functions.Worker.Extensions.DurableTask](https://www.nuget.org/packages/Microsoft.Azure.Functions.Worker.Extensions.DurableTask) package is referenced.
-
-"Non-.NET apps" references the extension bundles, which automatically use the latest package.
-
 ## Set up your database
 
 > [!NOTE]
@@ -218,13 +213,13 @@ To run your app in Azure, you need to create various resources. For convenient c
 
 > [!NOTE]
 > If you already have an Azure SQL database or another publicly accessible SQL Server instance that you would like to use, you can go to the next section.
+>
+> Refrain from enabling the **Allow Azure services and resources to access this [SQL] server** setting for production scenarios. Real applications should implement more secure approaches, such as stronger firewall restrictions or virtual network configurations.
 
 In the Azure portal, you can [create an Azure SQL database](/azure/azure-sql/database/single-database-create-quickstart). During creation:
 - Enable Azure services and resources to access this server (under _Networking_)
 - Set the value for _Database collation_ (under _Additional settings_) to `Latin1_General_100_BIN2_UTF8`.
 
-Enabling the **Allow Azure services and resources to access this server** setting is _not_ a recommended security practice for production scenarios. Real applications should implement more secure approaches, such as stronger firewall restrictions or virtual network configurations.
-
 ### Create an Azure Functions app and supporting resources
 
 1. Open a terminal window and sign in to Azure:
@@ -289,8 +284,8 @@ principalId=$(az identity show --name $identity --resource-group $resourceGroup
 
 ### Grant access to Azure Storage and Azure SQL Database
 #### Azure Storage
-Assign the identity `Storage Blob Data Owner` role for access to the storage account. 
-```
+Assign the identity **Storage Blob Data Owner** role for access to the storage account. 
+```azurecli
 # Set the scope of the access
 scope="/subscriptions/$subscription/resourceGroups/$resourceGroup/providers/Microsoft.Storage/storageAccounts/$storage"
 
@@ -301,7 +296,7 @@ az role assignment create --assignee "$clientId" --role "Storage Blob Data Owner
 
 #### Azure SQL Database
 >[!NOTE]
-> Authenticating to the MSSQL database using managed identity is _not_ supported when hosting a Durable Functions app in the Flex Consumption plan. Use connection string for now. Thus, if your app is hosted in the Flex Consumption plan, skip to the [set app application settings](#set-required-app-settings) section. 
+> Authenticating to Azure SQL database using managed identity is _not_ supported when hosting a Durable Functions app in the Flex Consumption plan. If your app is hosted in the Flex Consumption plan, skip to the [set app settings](#set-required-app-settings) section. 
 
 1. Start by setting your developer identity as the database's admin.
 
@@ -315,7 +310,7 @@ az role assignment create --assignee "$clientId" --role "Storage Blob Data Owner
     az sql server ad-admin create --resource-group $resourceGroup --server-name <SQL_SERVER_NAME> --display-name ADMIN --object-id "$assignee"
     ```
 
-1. Connect to the SQL database created previously using tools such as [Azure Data Studio](/azure-data-studio/download-azure-data-studio) or [SQL Management Server Studio](/ssms/download-sql-server-management-studio-ssms) to grant access to the managed identity. Or you can run the following [SQLCMD](/sql/tools/sqlcmd/sqlcmd-utility) command to connect:
+1. Connect to the SQL database created previously using tools such as [Azure Data Studio](/azure-data-studio/download-azure-data-studio) or [SQL Management Server Studio](/ssms/download-sql-server-management-studio-ssms). Or you can run the following [SQLCMD](/sql/tools/sqlcmd/sqlcmd-utility) command to connect:
     ```bash
     sqlcmd -S <SQL_SERVER_NAME>.database.windows.net -d <DATABASE_NAME> -U <[email protected]> -P "ACCOUNT_PASSWORD" -G -l 30
     ```
@@ -349,7 +344,7 @@ If you're using user-assigned managed identity to authenticate to the SQL databa
   sqlconnstr="Server=tcp:$dbserver.database.windows.net,1433;Initial Catalog=$sqlDB;Persist Security Info=False;User ID=$clientId;MultipleActiveResultSets=False;Encrypt=True;TrustServerCertificate=False;Authentication='Active Directory Managed Identity';"
   ```
 
-If you're using a simple connection string to authenticate, you can find it by going to the SQL database resource on Azure portal, navigating to the **Settings** tab, then clicking on **Connection strings**:
+For Flex Consumption apps, use a connection string to authenticate for now. You can find it by going to the SQL database resource on Azure portal, navigating to the **Settings** tab, then clicking on **Connection strings**:
 
   :::image type="content" source="./media/quickstart-mssql/mssql-azure-db-connection-string.png" alt-text="Screenshot showing database connection string.":::