Merge pull request #42813 from MicrosoftDocs/repo_sync_working_branch

Confirm merge from repo_sync_working_branch to master to sync with https://github.com/Microsoft/azure-docs (branch master)

Author: huypub

articles/azure-policy/policy-effects.md

@@ -279,9 +279,9 @@ related resources to match and the template deployment to execute.
   - For _Subscription_, queries the entire subscription for the related resource.
   - Default is _ResourceGroup_.
 - **ExistenceCondition** (optional)
-  - If not specified, any related resource of **type** satisfies the effect and does not trigger the audit.
+  - If not specified, any related resource of **type** satisfies the effect and does not trigger the deployment.
   - Uses the same language as the policy rule for the **if** condition, but is evaluated against each related resource individually.
-  - If any matching related resource evaluates to true, the effect is satisfied and does not trigger the audit.
+  - If any matching related resource evaluates to true, the effect is satisfied and does not trigger the deployment.
   - Can use [field()] to check equivalence with values in the **if** condition.
   - As an example, this could be used to validate that the parent resource (in the **if** condition) is in the same resource location as the matching related resource.
 - **Deployment** [required]
@@ -347,4 +347,4 @@ not, then a deployment to enable it is executed.
 
 Now that you have a deeper understanding of policy definition effects, review the policy samples:
 
-- Review more examples at [Azure Policy samples](json-samples.md).
+- Review more examples at [Azure Policy samples](json-samples.md).

articles/backup/backup-azure-restore-files-from-vm.md

@@ -12,7 +12,7 @@ ms.author: pullabhk
 ---
 # Recover files from Azure virtual machine backup
 
-Azure Backup provides the capability to restore [Azure virtual machines (VMs) and disks](./backup-azure-arm-restore-vms.md) from Azure VM backups, also known as restore points. This article explains how to recover files and folders from an Azure VM backup. Restoring files and folders is available only for Azure VMs deployed using the Resource Manager model and protected to a Recovery services vault.
+Azure Backup provides the capability to restore [Azure virtual machines (VMs) and disks](./backup-azure-arm-restore-vms.md) from Azure VM backups, also known as recovery points. This article explains how to recover files and folders from an Azure VM backup. Restoring files and folders is available only for Azure VMs deployed using the Resource Manager model and protected to a Recovery services vault.
 
 > [!Note]
 > This feature is available for Azure VMs deployed using the Resource Manager model and protected to a Recovery Services vault.
@@ -21,7 +21,7 @@ Azure Backup provides the capability to restore [Azure virtual machines (VMs) an
 
 ## Mount the volume and copy files
 
-To restore files or folders from the restore point, go to the virtual machine and choose to the restore point. 
+To restore files or folders from the recovery point, go to the virtual machine and choose the desired recovery point. 
 
 1. Sign into the [Azure portal](http://portal.Azure.com) and in the left-hand menu, click **Virtual machines**. From the list of virtual machines, select the virtual machine to open that virtual machine's dashboard. 
 

articles/key-vault/key-vault-access-behind-firewall.md

@@ -57,7 +57,7 @@ For all key vault object (keys and secrets) management and cryptographic operati
 | Operations including cryptographic operations on keys; creating, reading, updating, and deleting keys and secrets; setting or getting tags and other attributes on key vault objects (keys or secrets) |**Global:**<br> &lt;vault-name&gt;.vault.azure.net:443<br><br> **Azure China:**<br> &lt;vault-name&gt;.vault.azure.cn:443<br><br> **Azure US Government:**<br> &lt;vault-name&gt;.vault.usgovcloudapi.net:443<br><br> **Azure Germany:**<br> &lt;vault-name&gt;.vault.microsoftazure.de:443 |
 
 ## IP address ranges
-The Key Vault service uses other Azure resources like PaaS infrastructure. So it's not possible to provide a specific range of IP addresses that Key Vault service endpoints will have at any particular time. If your firewall supports only IP address ranges, refer to the [Microsoft Azure Datacenter IP Ranges](https://www.microsoft.com/download/details.aspx?id=41653) document. For authentication and identity (Azure Active Directory), your application must be able to connect to the endpoints described in [Authentication and identity addresses](https://support.office.com/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2).
+The Key Vault service uses other Azure resources like PaaS infrastructure. So it's not possible to provide a specific range of IP addresses that Key Vault service endpoints will have at any particular time. If your firewall supports only IP address ranges, refer to the [Microsoft Azure Datacenter IP Ranges](https://www.microsoft.com/download/details.aspx?id=41653) document. Authentication and Identity (Azure Active Directory) is a global service and may fail over to other regions or move traffic without notice. In this scenario, all of the IP ranges listed in [Authentication and Identity IP Addresses](https://support.office.com/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2#bkmk_identity_ip) should be added to the firewall.
 
 ## Next steps
 If you have questions about Key Vault, visit the [Azure Key Vault Forums](https://social.msdn.microsoft.com/forums/azure/home?forum=AzureKeyVault).