Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr into varund-jul

Author: varun-dhawan

articles/cosmos-db/online-backup-and-restore.md

@@ -29,6 +29,14 @@ There are two backup modes:
 
 For Azure Synapse Link enabled accounts, analytical store data isn't included in the backups and restores. When Azure Synapse Link is enabled, Azure Cosmos DB will continue to automatically take backups of your data in the transactional store at a scheduled backup interval. Within an analytical store, automatic backup and restore of your data isn't supported at this time.
 
+## Immutability of Cosmos DB backups
+Cosmos DB backups are completely managed by the platform. Actions like restore, update backup retention or redundancy change are controlled via permission model managed by database account administrator. Cosmos DB backups are not exposed to any human actors, customers or any other module for listing, deletion, or disabling of backups. The backups are encrypted and stored in storage accounts secured by rotating certificate-based access. These backups are only accessed by restore module to restore specific backup nondestructively when a customer initiates a restore. These actions are logged and audited regularly. Backups kept under retention policy are:  
+* Not alterable (no modifications are permitted to the backups). 
+* Not allowed to be re-encrypted. 
+* Not allowed to be deleted.   
+* Not allowed to be disabled 
+Customers who chose [CMK (customer managed key)](how-to-setup-customer-managed-keys.md), their data and backup have protection through envelope encryption."  
+
 ## Frequently asked questions
 
 ### Can I restore from an account A in subscription S1 to account B in a subscription S2?

articles/vpn-gateway/create-routebased-vpn-gateway-powershell.md

@@ -5,7 +5,7 @@ description: Learn how to create a route-based virtual network gateway for a VPN
 author: cherylmc
 ms.service: vpn-gateway
 ms.topic: how-to
-ms.date: 03/12/2024
+ms.date: 05/07/2024
 ms.author: cherylmc 
 ms.custom: devx-track-azurepowershell
 ---
@@ -88,7 +88,7 @@ $vnet | Set-AzVirtualNetwork
 
 ## <a name="PublicIP"></a>Request a public IP address
 
-A VPN gateway must have an allocated public IP address. When you create a connection to a VPN gateway, this is the IP address that you specify. Use the following example to request a public IP address:
+A VPN gateway must have an allocated public IP address. When you create a connection to a VPN gateway, this is the IP address that you specify. Use the following example to request a public IP address. Note that if you want to create a VPN gateway using the Basic gateway SKU, use the following values when requesting a public IP address: `-AllocationMethod Dynamic -Sku Basic`.
 
 ```azurepowershell-interactive
 $gwpip = New-AzPublicIpAddress -Name "VNet1GWIP" -ResourceGroupName "TestRG1" -Location "EastUS" -AllocationMethod Static

articles/vpn-gateway/point-to-site-about.md

@@ -13,6 +13,9 @@ ms.author: cherylmc
 
 A Point-to-Site (P2S) VPN gateway connection lets you create a secure connection to your virtual network from an individual client computer. A P2S connection is established by starting it from the client computer. This solution is useful for telecommuters who want to connect to Azure VNets from a remote location, such as from home or a conference. P2S VPN is also a useful solution to use instead of S2S VPN when you have only a few clients that need to connect to a VNet. This article applies to the [Resource Manager deployment model](../azure-resource-manager/management/deployment-models.md).
 
+> [!NOTE]
+> Point-to-site configurations require a route-based VPN type. For more information about VPN types, see [About VPN Gateway settings](vpn-gateway-about-vpn-gateway-settings.md#vpntype).
+
 ## <a name="protocol"></a>What protocol does P2S use?
 
 Point-to-site VPN can use one of the following protocols: