Merge pull request #264805 from MicrosoftDocs/repo_sync_working_branch

Taojunshen · web-flow · commit a0550384eb56 · 2024-01-31T09:35:04.000-08:00
Confirm merge from repo_sync_working_branch to main to sync with https://github.com/MicrosoftDocs/azure-docs (branch main)
diff --git a/articles/ai-services/speech-service/how-to-speech-synthesis-viseme.md b/articles/ai-services/speech-service/how-to-speech-synthesis-viseme.md
@@ -195,7 +195,7 @@ synthesizer.visemeReceived = function (s, e) {
     window.console.log("(Viseme), Audio offset: " + e.audioOffset / 10000 + "ms. Viseme ID: " + e.visemeId);
 
     // `Animation` is an xml string for SVG or a json string for blend shapes
-    var animation = e.Animation;
+    var animation = e.animation;
 }
 
 // If VisemeID is the only thing you want, you can also use `speakTextAsync()`
diff --git a/articles/api-management/api-management-capacity.md b/articles/api-management/api-management-capacity.md
@@ -42,6 +42,7 @@ To follow the steps in this article, you must have:
 + API Management management plane services, such as management actions applied via the Azure portal or Azure Resource Manager, or load coming from the [developer portal](api-management-howto-developer-portal.md).
 + Selected operating system processes, including processes that involve cost of TLS handshakes on new connections.
 + Platform updates, such as OS updates on the underlying compute resources for the instance.
++ Number of APIs deployed, regardless of activity, which can consume additional capacity.
 
 Total **capacity** is an average of its own values from every [unit](upgrade-and-scale.md) of an API Management instance.
 
@@ -102,4 +103,4 @@ Low **capacity metric** doesn't necessarily mean that your API Management instan
 
 - [Upgrade and scale an Azure API Management service instance](upgrade-and-scale.md)
 - [Automatically scale an Azure API Management instance](api-management-howto-autoscale.md)
-- [Plan and manage costs for API Management](plan-manage-costs.md)
+- [Plan and manage costs for API Management](plan-manage-costs.md)
diff --git a/articles/app-service/configure-language-java.md b/articles/app-service/configure-language-java.md
@@ -14,6 +14,9 @@ ms.author: cephalin
 
 # Configure a Java app for Azure App Service
 
+> [!NOTE]
+> For Spring applications, we recommend using Azure Spring Apps. However, you can still use Azure App Service as a destination. 
+
 Azure App Service lets Java developers to quickly build, deploy, and scale their Java SE, Tomcat, and JBoss EAP web applications on a fully managed service. Deploy applications with Maven plugins, from the command line, or in editors like IntelliJ, Eclipse, or Visual Studio Code.
 
 This guide provides key concepts and instructions for Java developers using App Service. If you've never used Azure App Service, you should read through the [Java quickstart](quickstart-java.md) first. General questions about using App Service that aren't specific to Java development are answered in the [App Service FAQ](faq-configuration-and-management.yml).
diff --git a/articles/app-service/environment/how-to-custom-domain-suffix.md b/articles/app-service/environment/how-to-custom-domain-suffix.md
@@ -30,6 +30,7 @@ Unlike earlier versions, the FTPS endpoints for your App Services on your App Se
 ## Prerequisites
 
 - ILB variation of App Service Environment v3.
+- The Azure Key Vault that has the certificate must be publicly accessible to fetch the certificate. 
 - Valid SSL/TLS certificate must be stored in an Azure Key Vault in .PFX format. For more information on using certificates with App Service, see [Add a TLS/SSL certificate in Azure App Service](../configure-ssl-certificate.md).
 
 ### Managed identity
diff --git a/articles/app-service/environment/how-to-migrate.md b/articles/app-service/environment/how-to-migrate.md
@@ -226,7 +226,7 @@ Under **Get new IP addresses**, confirm you understand the implications and star
 
 ## 3. Update dependent resources with new IPs
 
-When the previous step finishes, you're shown the IP addresses for your new App Service Environment v3. Using the new IPs, update any resources and networking components to ensure your new environment functions as intended once migration is complete. It's your responsibility to make any necessary updates. This step is also a good time to review the [inbound and outbound network](networking.md#ports-and-network-restrictions) dependency changes when moving to App Service Environment v3 including the port change for the Azure Load Balancer, which now uses port 80. Don't move on to the next step until you confirmed that you made these updates.
+When the previous step finishes, you're shown the IP addresses for your new App Service Environment v3. Using the new IPs, update any resources and networking components to ensure your new environment functions as intended once migration is complete. It's your responsibility to make any necessary updates. This step is also a good time to review the [inbound and outbound network](networking.md#ports-and-network-restrictions) dependency changes when moving to App Service Environment v3 including the port change for the Azure Load Balancer, which now uses port 80. Don't move on to the next step until you confirm that you made these updates.
 
 :::image type="content" source="./media/migration/ip-sample.png" alt-text="Screenshot that shows sample IPs generated during premigration.":::
 
diff --git a/articles/app-service/tutorial-java-spring-cosmosdb.md b/articles/app-service/tutorial-java-spring-cosmosdb.md
@@ -11,6 +11,9 @@ ms.custom: mvc, seodec18, seo-java-july2019, seo-java-august2019, seo-java-septe
 
 # Tutorial: Build a Java Spring Boot web app with Azure App Service on Linux and Azure Cosmos DB
 
+> [!NOTE]
+> For Spring applications, we recommend using Azure Spring Apps. However, you can still use Azure App Service as a destination.
+
 This tutorial walks you through the process of building, configuring, deploying, and scaling Java web apps on Azure. 
 When you are finished, you will have a [Spring Boot](https://spring.io/projects/spring-boot) application storing data in [Azure Cosmos DB](../cosmos-db/index.yml) running on [Azure App Service on Linux](overview.md).
 
diff --git a/articles/azure-resource-manager/management/move-support-resources.md b/articles/azure-resource-manager/management/move-support-resources.md
@@ -1771,7 +1771,7 @@ Before starting your move operation, review the [checklist](./move-resource-grou
 > [!div class="mx-tableFixed"]
 > | Resource type | Resource group | Subscription | Region move |
 > | ------------- | ----------- | ---------- | ----------- |
-> | storageaccounts | **Yes** | **Yes** | **Yes**<br/><br/> [Move an Azure Storage account to another region](../../storage/common/storage-account-move.md) |
+> | storageaccounts | **Yes** | **Yes** | [Move an Azure Storage account to another region](../../storage/common/storage-account-move.md) |
 
 ## Microsoft.StorageCache
 
diff --git a/articles/chaos-studio/chaos-studio-quickstart-azure-portal.md b/articles/chaos-studio/chaos-studio-quickstart-azure-portal.md
@@ -92,6 +92,9 @@ Create an Azure resource and ensure that it's one of the supported [fault provid
 1. Search for **Virtual Machine Contributor** and select the role. Select **Next**.
 
    ![Screenshot that shows choosing the role for the VM.](images/quickstart-virtual-machine-contributor.png)
+
+1. Select **Managed identity** option
+    
 1. Choose **Select members** and search for your experiment name. Select your experiment and choose **Select**.
 
    ![Screenshot that shows selecting the experiment.](images/quickstart-select-experiment-role-assignment.png)
diff --git a/articles/cosmos-db/nosql/tutorial-springboot-azure-kubernetes-service.md b/articles/cosmos-db/nosql/tutorial-springboot-azure-kubernetes-service.md
@@ -15,6 +15,9 @@ ms.custom: mode-api, devx-track-azurecli, build-2023, build-2023-dataai
 # Tutorial - Spring Boot Application with Azure Cosmos DB for NoSQL and Azure Kubernetes Service
 [!INCLUDE[NoSQL](../includes/appliesto-nosql.md)]
 
+> [!NOTE]
+> For Spring Boot applications, we recommend using Azure Spring Apps. However, you can still use Azure Kubernetes Service as a destination.
+
 In this tutorial, you will set up and deploy a Spring Boot application that exposes REST APIs to perform CRUD operations on data in Azure Cosmos DB (API for NoSQL account). You will package the application as Docker image, push it to Azure Container Registry, deploy to Azure Kubernetes Service and test the application.
 
 ## Pre-requisites
diff --git a/articles/defender-for-cloud/defender-for-containers-architecture.md b/articles/defender-for-cloud/defender-for-containers-architecture.md
@@ -77,7 +77,7 @@ When you enable the agentless discovery for Kubernetes extension, the following
    Learn more about [AKS Trusted Access](/azure/aks/trusted-access-feature).
 
 - **Discover**: Using the system assigned identity, Defender for Cloud performs a discovery of the AKS clusters in your environment using API calls to the API server of AKS.
-- **Bind**: Upon discovery of an AKS cluster, Defender for Cloud performs an AKS bind operation between the created identity and the Kubernetes role *Microsoft.Security/pricings/microsoft-defender-operator*. The role is visible via API and gives Defender for Cloud data plane read permission inside the cluster.
+- **Bind**: Upon discovery of an AKS cluster, Defender for Cloud performs an AKS bind operation by creating a `ClusterRoleBinding` between the created identity and the Kubernetes `ClusterRole` *aks:trustedaccessrole:defender-containers:microsoft-defender-operator*. The `ClusterRole` is visible via API and gives Defender for Cloud data plane read permission inside the cluster.
 
 ## [**On-premises / IaaS (Arc)**](#tab/defender-for-container-arch-arc)
 
diff --git a/articles/hdinsight-aks/secure-traffic-by-nsg.md b/articles/hdinsight-aks/secure-traffic-by-nsg.md
@@ -54,7 +54,7 @@ When clusters are created, then certain ingress public IPs also get created. To
 The following Azure CLI command can help you get the ingress public IP:
 
 ``` 
-aksManagedResourceGroup=`az rest --uri https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.HDInsight/clusterpools/{clusterPoolName}\?api-version\=2023-06-01-preview --query properties.managedResourceGroupName -o tsv --query properties.aksManagedResourceGroupName -o tsv`
+aksManagedResourceGroup="az rest --uri https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.HDInsight/clusterpools/{clusterPoolName}\?api-version\=2023-06-01-preview --query properties.managedResourceGroupName -o tsv --query properties.aksManagedResourceGroupName -o tsv"
 
 az network public-ip list --resource-group $aksManagedResourceGroup --query "[?starts_with(name, 'kubernetes')].{Name:name, IngressPublicIP:ipAddress}" --output table
 ```
diff --git a/articles/iot-operations/get-started/quickstart-deploy.md b/articles/iot-operations/get-started/quickstart-deploy.md
@@ -270,7 +270,7 @@ az keyvault create --enable-rbac-authorization false --name "<your unique key va
    ```
 
    > [!NOTE]
-   > When using a Github codespace in a browser, `az login` returns a localhost error in the browser window after logging in. To fix, either:
+   > When using a GitHub codespace in a browser, `az login` returns a localhost error in the browser window after logging in. To fix, either:
    >
    > * Open the codespace in VS Code desktop, and then run `az login` again in the browser terminal.
    > * After you get the localhost error on the browser, copy the URL from the browser and run `curl "<URL>"` in a new terminal tab. You should see a JSON response with the message "You have logged into Microsoft Azure!."
diff --git a/articles/machine-learning/concept-prebuilt-docker-images-inference.md b/articles/machine-learning/concept-prebuilt-docker-images-inference.md
@@ -37,10 +37,10 @@ Prebuilt Docker container images for inference are used when deploying a model w
 
 Framework version | CPU/GPU | Pre-installed packages | MCR Path
  --- | --- | --- | --- |
-NA | CPU | NA | `mcr.microsoft.com/azureml/minimal-ubuntu18.04-py37-cpu-inference:latest`
-NA | GPU | NA | `mcr.microsoft.com/azureml/minimal-ubuntu18.04-py37-cuda11.0.3-gpu-inference:latest`
 NA | CPU | NA | `mcr.microsoft.com/azureml/minimal-ubuntu20.04-py38-cpu-inference:latest`
 NA | GPU | NA | `mcr.microsoft.com/azureml/minimal-ubuntu20.04-py38-cuda11.6.2-gpu-inference:latest`
+NA | CPU | NA | `mcr.microsoft.com/azureml/minimal-ubuntu22.04-py39-cpu-inference:latest`
+NA | GPU | NA | `mcr.microsoft.com/azureml/minimal-ubuntu22.04-py39-cuda11.8-gpu-inference:latest`
 
 ## How to use inference prebuilt docker images?
 
@@ -50,4 +50,4 @@ NA | GPU | NA | `mcr.microsoft.com/azureml/minimal-ubuntu20.04-py38-cuda11.6.2-g
 
 * [Deploy and score a machine learning model by using an online endpoint](how-to-deploy-online-endpoints.md)
 * [Learn more about custom containers](how-to-deploy-custom-container.md)
-* [azureml-examples GitHub repository](https://github.com/Azure/azureml-examples/tree/main/cli/endpoints/online)
+* [azureml-examples GitHub repository](https://github.com/Azure/azureml-examples/tree/main/cli/endpoints/online)
diff --git a/articles/machine-learning/how-to-autoscale-endpoints.md b/articles/machine-learning/how-to-autoscale-endpoints.md
@@ -256,7 +256,7 @@ rule_scale_in = ScaleRule(
         metric_resource_uri = deployment.id, 
         time_grain = datetime.timedelta(minutes = 1),
         statistic = "Average",
-        operator = "less Than", 
+        operator = "LessThan", 
         time_aggregation = "Last",
         time_window = datetime.timedelta(minutes = 5), 
         threshold = 30
diff --git a/articles/mysql/flexible-server/concepts-service-tiers-storage.md b/articles/mysql/flexible-server/concepts-service-tiers-storage.md
@@ -214,5 +214,5 @@ If you would like to optimize server cost, you can consider following tips:
 
 ## Next steps
 
-- Learn how to [create a Azure Database for MySQL flexible server instance in the portal](quickstart-create-server-portal.md).
+- Learn how to [create an Azure Database for MySQL flexible server instance in the portal](quickstart-create-server-portal.md).
 - Learn about [service limitations](concepts-limitations.md).
diff --git a/articles/mysql/flexible-server/tutorial-deploy-springboot-on-aks-vnet.md b/articles/mysql/flexible-server/tutorial-deploy-springboot-on-aks-vnet.md
@@ -18,6 +18,7 @@ In this tutorial, you'll learn how to deploy a [Spring Boot](https://spring.io/p
 
 > [!NOTE]
 > This tutorial assumes a basic understanding of Kubernetes concepts, Java Spring Boot and MySQL.
+> For Spring Boot applications, we recommend using Azure Spring Apps. However, you can still use Azure Kubernetes Services as a destination. 
 
 ## Prerequisites
 
diff --git a/articles/synapse-analytics/synapse-service-identity.md b/articles/synapse-analytics/synapse-service-identity.md
@@ -314,6 +314,9 @@ You can easily execute Synapse Spark Notebooks with the system assigned managed
 
 ![synapse-run-as-msi-3](https://user-images.githubusercontent.com/81656932/179053008-0f495b93-4948-48c8-9496-345c58187502.png)
 
+>[!NOTE]
+>  Synapse notebooks and Spark job definitions only support the use of system-assigned managed identity through linked services and the [mssparkutils APIs](./spark/apache-spark-secure-credentials-with-tokenlibrary.md). MSAL and other authentication libraries can't use the system-assigned managed identity. You can instead generate a service principal and store the credentials in Key Vault.
+
 ## User-assigned managed identity
 
 You can create, delete, manage user-assigned managed identities in Microsoft Entra ID. For more details refer to [Create, list, delete, or assign a role to a user-assigned managed identity using the Azure portal](../active-directory/managed-identities-azure-resources/how-to-manage-ua-identity-portal.md). 
diff --git a/articles/virtual-machines/extensions/custom-script-windows.md b/articles/virtual-machines/extensions/custom-script-windows.md
@@ -55,6 +55,7 @@ If your script is on a local server, you might still need to open other firewall
 ### Tips
 
 - Output is limited to the last 4,096 bytes.
+- Properly escaping characters will help ensure that strings are parsed correctly. For example, you always need two backslashes to escape a single literal backslash when dealing with file paths. Sample: {"commandToExecute": "C:\\Windows\\System32\\systeminfo.exe >> D:\\test.txt"}
 - The highest failure rate for this extension is due to syntax errors in the script. Verify that the script runs without errors. Put more logging into the script to make it easier to find failures.
 - Write scripts that are idempotent, so that running them more than once accidentally doesn't cause system changes.
 - Ensure that the scripts don't require user input when they run.

Original file line number	Diff line number	Diff line change
`@@ -195,7 +195,7 @@ synthesizer.visemeReceived = function (s, e) {`
`195`	`195`	`window.console.log("(Viseme), Audio offset: " + e.audioOffset / 10000 + "ms. Viseme ID: " + e.visemeId);`
`196`	`196`
`197`	`197`	// `Animation` is an xml string for SVG or a json string for blend shapes
`198`		`- var animation = e.Animation;`
	`198`	`+ var animation = e.animation;`
`199`	`199`	`}`
`200`	`200`
`201`	`201`	// If VisemeID is the only thing you want, you can also use `speakTextAsync()`