Merge pull request #185271 from MicrosoftDocs/repo_sync_working_branch

huypub · web-flow · commit a5faef36e5c8 · 2022-01-18T10:00:56.000-08:00
Confirm merge from repo_sync_working_branch to master to sync with https://github.com/MicrosoftDocs/azure-docs (branch master)
diff --git a/articles/active-directory-b2c/date-transformations.md b/articles/active-directory-b2c/date-transformations.md
@@ -197,8 +197,43 @@ Use this claims transformation to determine if first date plus the `timeSpanInSe
   - **operator**: later than
   - **timeSpanInSeconds**: 7776000 (90 days)
 - Output claims:
-  - **result**: true
-  
+    - **result**: true
+
+## IsTermsOfUseConsentRequired
+
+Determine whether a `dateTime` claim type is earlier or greater than a specific date. The result is a new Boolean claim with a value of `true` or `false`.
+
+| Item | TransformationClaimType | Data type | Notes |
+| ---- | ----------------------- | --------- | ----- |
+| InputClaim | termsOfUseConsentDateTime | dateTime | The `dateTime` claim type to check whether it is earlier or later than the `termsOfUseTextUpdateDateTime` input parameter. Undefined value returns `true` result. |
+| InputParameter | termsOfUseTextUpdateDateTime | dateTime | The `dateTime` claim type to check whether it is earlier or later than the `termsOfUseConsentDateTime` input claim. The time part of the date is optional. |
+| OutputClaim | result | boolean | The claim type that's produced after this claims transformation has been invoked. |
+
+Use this claims transformation to determine whether a `dateTime` claim type is earlier or greater than a specific date. For example, check whether a user has consented to the latest version of your terms of use (TOU) or terms of service. To check the last time a user consented, store the last time the user accepted the TOU in an [extension attribute](user-profile-attributes.md#extension-attributes). When your TOU wording changes, update the `termsOfUseTextUpdateDateTime` input parameter with the time of the change. Then, call this claims transformation to compare the dates. If the claims transformation returns `true`, the `termsOfUseConsentDateTime` value is earlier than the `termsOfUseTextUpdateDateTime` value, and you can ask the user to accept the updated TOU.
+
+```xml
+<ClaimsTransformation Id="IsTermsOfUseConsentRequired" TransformationMethod="IsTermsOfUseConsentRequired">
+  <InputClaims>
+    <InputClaim ClaimTypeReferenceId="extension_termsOfUseConsentDateTime" TransformationClaimType="termsOfUseConsentDateTime" />
+  </InputClaims>
+  <InputParameters>
+    <InputParameter Id="termsOfUseTextUpdateDateTime" DataType="dateTime" Value="2021-11-15T00:00:00" />
+  </InputParameters>
+  <OutputClaims>
+    <OutputClaim ClaimTypeReferenceId="termsOfUseConsentRequired" TransformationClaimType="result" />
+  </OutputClaims>
+</ClaimsTransformation>
+```
+
+### IsTermsOfUseConsentRequired example
+
+- Input claims:
+    - **termsOfUseConsentDateTime**: 2020-03-09T09:15:00 
+- Input parameters: 
+    - **termsOfUseTextUpdateDateTime**: 2021-11-15 
+- Output claims: 
+    - **result**: true 
+
 ## GetCurrentDateTime
 
 Get the current UTC date and time and add the value to a claim type.
diff --git a/articles/aks/concepts-identity.md b/articles/aks/concepts-identity.md
@@ -213,7 +213,7 @@ With the Azure RBAC integration, AKS will use a Kubernetes Authorization webhook
 
 As shown in the above diagram, when using the Azure RBAC integration, all requests to the Kubernetes API will follow the same authentication flow as explained on the [Azure Active Directory integration section](#azure-ad-integration). 
 
-If the identity making the request exists in Azure AD, Azure will team with Kubernetes RBAC to authorize the request. If the identity exists outside of Azure AD (i.e., a Kubernetes service account), authorization will deter to the normal Kubernetes RBAC.
+If the identity making the request exists in Azure AD, Azure will team with Kubernetes RBAC to authorize the request. If the identity exists outside of Azure AD (i.e., a Kubernetes service account), authorization will defer to the normal Kubernetes RBAC.
 
 In this scenario, you use Azure RBAC mechanisms and APIs to assign users built-in roles or create custom roles, just as you would with Kubernetes roles. 
 
diff --git a/articles/app-service/deploy-content-sync.md b/articles/app-service/deploy-content-sync.md
@@ -56,7 +56,7 @@ Because of underlying differences in the APIs, **OneDrive for Business** is not
 Start a sync by running the following command and replacing \<group-name> and \<app-name>:
 
 ```azurecli-interactive
-az webapp deployment source sync –-resource-group <group-name> –-name <app-name>
+az webapp deployment source sync --resource-group <group-name> --name <app-name>
 ```
 
 # [Azure PowerShell](#tab/powershell)
@@ -82,4 +82,4 @@ Invoke-AzureRmResourceAction -ResourceGroupName <group-name> -ResourceType Micro
 ## Next steps
 
 > [!div class="nextstepaction"]
-> [Deploy from local Git repo](deploy-local-git.md)
+> [Deploy from local Git repo](deploy-local-git.md)
diff --git a/articles/azure-functions/durable/quickstart-python-vscode.md b/articles/azure-functions/durable/quickstart-python-vscode.md
@@ -29,7 +29,7 @@ To complete this tutorial:
 
 * Durable Functions require an Azure storage account. You need an Azure subscription.
 
-* Make sure that you have version 3.6, 3.7, or 3.8 of [Python](https://www.python.org/) installed.
+* Make sure that you have version 3.7, 3.8, or 3.9 of [Python](https://www.python.org/) installed.
 
 [!INCLUDE [quickstarts-free-trial-note](../../../includes/quickstarts-free-trial-note.md)]
 
diff --git a/articles/azure-functions/set-runtime-version.md b/articles/azure-functions/set-runtime-version.md
@@ -60,7 +60,7 @@ You can change the runtime version used by your function app. Because of the pot
 
 You can also view and set the `FUNCTIONS_EXTENSION_VERSION` from the Azure CLI.  
 
-Using the Azure CLI, view the current runtime version with the [az functionapp config appsettings set](/cli/azure/functionapp/config/appsettings) command.
+Using the Azure CLI, view the current runtime version with the [az functionapp config appsettings list](/cli/azure/functionapp/config/appsettings) command.
 
 ```azurecli-interactive
 az functionapp config appsettings list --name <function_app> \
diff --git a/articles/azure-maps/how-to-use-map-control.md b/articles/azure-maps/how-to-use-map-control.md
@@ -51,7 +51,7 @@ You can embed a map in a web page by using the Map Control client-side JavaScrip
      ```
 
     > [!NOTE]
-    > Typescript definitions can be imported into your application by adding the following code:
+    > TypeScript definitions can be imported into your application by adding the following code:
     >
     > ```javascript
     > import * as atlas from 'azure-maps-control';
diff --git a/articles/backup/backup-azure-database-postgresql.md b/articles/backup/backup-azure-database-postgresql.md
@@ -28,7 +28,7 @@ You can configure backup on multiple databases across multiple Azure PostgreSQL
 
    :::image type="content" source="./media/backup-azure-database-postgresql/create-or-add-backup-policy-inline.png" alt-text="Screenshot showing the option to add a backup policy." lightbox="./media/backup-azure-database-postgresql/create-or-add-backup-policy-expanded.png":::
 
-1. **Select Azure Postgres databases to back up**: Choose one of the Azure PostgreSQL servers across subscriptions if they're in the same region as that of the vault. Expand the arrow to see the list of databases within a server.
+1. **Select Azure PostgreSQL databases to back up**: Choose one of the Azure PostgreSQL servers across subscriptions if they're in the same region as that of the vault. Expand the arrow to see the list of databases within a server.
 
    >[!Note]
    >You can't (and don't need to) back up the databases *azure_maintenance* and *azure_sys*. Additionally, you can't back up a database already backed-up to a Backup vault.
@@ -155,4 +155,4 @@ Choose from the list of retention rules that were defined in the associated Back
 
 ## Next steps
 
-[Troubleshoot PostgreSQL database backup by using Azure Backup](backup-azure-database-postgresql-troubleshoot.md)
+[Troubleshoot PostgreSQL database backup by using Azure Backup](backup-azure-database-postgresql-troubleshoot.md)
diff --git a/articles/cosmos-db/sql/sql-api-sdk-node.md b/articles/cosmos-db/sql/sql-api-sdk-node.md
@@ -197,7 +197,7 @@ While it was possible to use the v2 SDK in the browser, it was not an ideal expe
 Not always the most visible changes, but they help our team ship better code, faster.
 
 * Use rollup for production builds (#104)
-* Update to Typescript 3.5 (#327)
+* Update to TypeScript 3.5 (#327)
 * Convert to TS project references. Extract test folder (#270)
 * Enable noUnusedLocals and noUnusedParameters (#275)
 * Azure Pipelines YAML for CI builds (#298)
diff --git a/articles/data-factory/connector-troubleshoot-guide.md b/articles/data-factory/connector-troubleshoot-guide.md
@@ -24,7 +24,7 @@ You can refer to the troubleshooting pages for each connector to see problems sp
 - [Azure Blob Storage](connector-troubleshoot-azure-blob-storage.md)
 - [Azure Cosmos DB (including SQL API connector)](connector-troubleshoot-azure-cosmos-db.md)
 - [Azure Data Lake (Gen1 and Gen2)](connector-troubleshoot-azure-data-lake.md)
-- [Azure database for PostgreSQL](connector-troubleshoot-postgresql.md)
+- [Azure Database for PostgreSQL](connector-troubleshoot-postgresql.md)
 - [Azure Files storage](connector-troubleshoot-azure-files.md)
 - [Azure Synapse Analytics, Azure SQL Database, and SQL Server](connector-troubleshoot-synapse-sql.md)
 - [DB2](connector-troubleshoot-db2.md)
diff --git a/articles/iot-edge/how-to-provision-single-device-linux-symmetric.md b/articles/iot-edge/how-to-provision-single-device-linux-symmetric.md
@@ -282,7 +282,7 @@ sudo apt-get remove iotedge
 ::: moniker range=">=iotedge-2020-11"
 
 ```bash
-sudo apt-get remove aziot-edge
+sudo apt-get remove --purge aziot-edge
 ```
 
 ::: moniker-end
diff --git a/articles/load-testing/how-to-parameterize-load-tests.md b/articles/load-testing/how-to-parameterize-load-tests.md
@@ -151,7 +151,7 @@ If you're using Azure Load Testing in your CI/CD workflow, you can also use the
         [
             {
             "name": "appToken",
-            "value": "${{ secrets.MY_SECRET }}",
+            "value": "${{ secrets.MY_SECRET }}"
             }
         ]
     ```
@@ -169,7 +169,7 @@ If you're using Azure Load Testing in your CI/CD workflow, you can also use the
           [
               {
               "name": "appToken",
-              "value": "$(mySecret)",
+              "value": "$(mySecret)"
               }
           ]
     ```
@@ -255,7 +255,7 @@ The following YAML snippet shows a GitHub Actions example:
     [
         {
         "name": "webapp",
-        "value": "myapplication.contoso.com",
+        "value": "myapplication.contoso.com"
         }
     ]
 ```
@@ -273,7 +273,7 @@ The following YAML snippet shows an Azure Pipelines example:
       [
           {
           "name": "webapp",
-          "value": "myapplication.contoso.com",
+          "value": "myapplication.contoso.com"
           }
       ]
 ```
@@ -298,4 +298,4 @@ The values of the parameters aren't stored when they're passed from the CI/CD wo
 
 - For information about high-scale load tests, see [Set up a high-scale load test](./how-to-high-scale-load.md).
 
-- To learn about performance test automation, see [Configure automated performance testing](./tutorial-cicd-azure-pipelines.md).
+- To learn about performance test automation, see [Configure automated performance testing](./tutorial-cicd-azure-pipelines.md).
diff --git a/articles/postgresql/concepts-data-access-and-security-private-link.md b/articles/postgresql/concepts-data-access-and-security-private-link.md
@@ -109,7 +109,7 @@ The following situations and outcomes are possible when you use Private Link in
 
 ## Deny public access for Azure Database for PostgreSQL Single server
 
-If you want to rely only on private endpoints for accessing their Azure Database for PostgreSQL Single server, you can disable setting all public endpoints([firewall rules](concepts-firewall-rules.md) and [VNet service endpoints](concepts-data-access-and-security-vnet.md)) by setting the **Deny Public Network Access** configuration on the database server. 
+If you want to rely only on private endpoints for accessing their Azure Database for PostgreSQL Single server, you can disable setting all public endpoints ([firewall rules](concepts-firewall-rules.md) and [VNet service endpoints](concepts-data-access-and-security-vnet.md)) by setting the **Deny Public Network Access** configuration on the database server. 
 
 When this setting is set to *YES* only connections via private endpoints are allowed to your Azure Database for PostgreSQL. When this setting is set to *NO* clients can connect to your Azure Database for PostgreSQL based on your firewall or VNet service endpoint setting. Additionally, once the value of the Private network access is set, customers cannot add and/or update existing 'Firewall rules' and 'VNet service endpoint rules'.
 
diff --git a/articles/postgresql/overview-postgres-choose-server-options.md b/articles/postgresql/overview-postgres-choose-server-options.md
@@ -13,9 +13,9 @@ ms.date: 12/01/2021
 With Azure, your PostgreSQL Server workloads can run in a hosted virtual machine infrastructure as a service (IaaS) or as a hosted platform as a service (PaaS). PaaS has multiple deployment options, each with multiple service tiers. When you choose between IaaS and PaaS, you must decide if you want to manage your database, apply patches, and make backups, or if you want to delegate these operations to Azure.
 
 When making your decision, consider the following three options in PaaS or alternatively running on Azure VMs (IaaS)
-- [Azure database for PostgreSQL Single Server](./overview-single-server.md)
-- [Azure database for PostgreSQL Flexible Server](./flexible-server/overview.md)
-- [Azure database for PostgreSQL Hyperscale (Citus)](hyperscale/index.yml)
+- [Azure Database for PostgreSQL Single Server](./overview-single-server.md)
+- [Azure Database for PostgreSQL Flexible Server](./flexible-server/overview.md)
+- [Azure Database for PostgreSQL Hyperscale (Citus)](hyperscale/index.yml)
 
 **PostgreSQL on Azure VMs** option falls into the industry category of IaaS. With this service, you can run PostgreSQL Server inside a fully managed virtual machine on the Azure cloud platform. All recent versions and editions of PostgreSQL can be installed on an IaaS virtual machine. In the most significant difference from Azure Database for PostgreSQL, PostgreSQL on Azure VMs offers control over the database engine. However, this control comes at the cost of responsibility to manage the VMs and many database administration (DBA) tasks. These tasks include maintaining and patching database servers, database recovery, and high-availability design.
 
@@ -91,4 +91,4 @@ Additionally, configuring high availability to another data center requires mini
 ## Next steps
 
 - See Azure Database for [PostgreSQL pricing](https://azure.microsoft.com/pricing/details/postgresql/server/).
-- Get started by creating your first server.
+- Get started by creating your first server.
diff --git a/articles/spring-cloud/how-to-config-server.md b/articles/spring-cloud/how-to-config-server.md
@@ -100,7 +100,7 @@ All configurable properties used to set up private Git repository with basic aut
 
 > [!NOTE]
 > Many `Git` repository servers support the use of tokens rather than passwords for HTTP Basic Authentication. Some repositories allow tokens to persist indefinitely. However, some Git repository servers, including Azure DevOps Server, force tokens to expire in a few hours. Repositories that cause tokens to expire shouldn't use token-based authentication with Azure Spring Cloud.
-> Github has removed support for password authentication, so you'll need to use a personal access token instead of password authentication for Github. For more information, see [Token authentication](https://github.blog/2020-12-15-token-authentication-requirements-for-git-operations/).
+> GitHub has removed support for password authentication, so you'll need to use a personal access token instead of password authentication for GitHub. For more information, see [Token authentication](https://github.blog/2020-12-15-token-authentication-requirements-for-git-operations/).
 
 ### Other Git repositories
 
@@ -174,7 +174,7 @@ Now that your configuration files are saved in a repository, you need to connect
 
     > [!CAUTION]
     > Some Git repository servers use a *personal-token* or an *access-token*, such as a password, for **Basic Authentication**. You can use that kind of token as a password in Azure Spring Cloud, because it will never expire. But for other Git repository servers, such as Bitbucket and Azure DevOps Server, the *access-token* expires in one or two hours. This means that the option isn't viable when you use those repository servers with Azure Spring Cloud.
-    > GitHub has removed support for password authentication, so you'll need to use a personal access token instead of password authentication for Github. For more information, see [Token authentication](https://github.blog/2020-12-15-token-authentication-requirements-for-git-operations/).
+    > GitHub has removed support for password authentication, so you'll need to use a personal access token instead of password authentication for GitHub. For more information, see [Token authentication](https://github.blog/2020-12-15-token-authentication-requirements-for-git-operations/).
 
     * **SSH**: In the **Default repository** section, in the **Uri** box, paste the repository URI, and then select the **Authentication** ("pencil" icon) button. In the **Edit Authentication** pane, in the **Authentication type** drop-down list, select **SSH**, and then enter your **Private key**. Optionally, specify your **Host key** and **Host key algorithm**. Be sure to include your public key in your Config Server repository. Select **OK**, and then select **Apply** to finish setting up your Config Server instance.
 
diff --git a/articles/static-web-apps/authentication-authorization.md b/articles/static-web-apps/authentication-authorization.md
@@ -214,7 +214,7 @@ To configure Static Web Apps to use an API function as the role assignment funct
 
 After defining the `rolesSource` property in your app's configuration, add an [API function](apis.md) in your static web app at the path you specified. You can use a managed function app or a bring your own function app.
 
-Each time a user successfully authenticates with an identity provider, the specified function is called. The function is passed a JSON object in the request body that contains the user's information from the provider. For some identity providers, the user information also includes an `accessToken` that the function can use to make API calls using the user's identity.
+Each time a user successfully authenticates with an identity provider, the specified function is called via the POST method. The function is passed a JSON object in the request body that contains the user's information from the provider. For some identity providers, the user information also includes an `accessToken` that the function can use to make API calls using the user's identity.
 
 This is an example payload from Azure Active Directory:
 
diff --git a/articles/storage/blobs/secure-file-transfer-protocol-known-issues.md b/articles/storage/blobs/secure-file-transfer-protocol-known-issues.md
@@ -105,7 +105,7 @@ SFTP support in Azure Blob Storage currently limits its cryptographic algorithm
 
 - Symbolic links are not supported.
 
-- PowerShell and Azure CLI and not supported. You can leverage Portal and ARM templates for Public Preview.
+- PowerShell and Azure CLI are not supported. You can leverage Portal and ARM templates for Public Preview.
 
 - `ssh-keycan` is not supported.
 

Original file line number	Diff line number	Diff line change
`@@ -51,7 +51,7 @@ You can embed a map in a web page by using the Map Control client-side JavaScrip`
`51`	`51`	```
`52`	`52`
`53`	`53`	`> [!NOTE]`
`54`		`- > Typescript definitions can be imported into your application by adding the following code:`
	`54`	`+ > TypeScript definitions can be imported into your application by adding the following code:`
`55`	`55`	`>`
`56`	`56`	> ```javascript
`57`	`57`	`> import * as atlas from 'azure-maps-control';`