Merge pull request #270209 from MicrosoftDocs/main

Saisang · web-flow · commit b0b0c42ee0ad · 2024-03-26T21:02:23.000+08:00
Release Fabric community conference - Scheduled release at 6AM of 3/26
diff --git a/articles/aks/azure-cni-overlay.md b/articles/aks/azure-cni-overlay.md
@@ -92,6 +92,7 @@ Azure CNI Overlay has the following limitations:
 - You can't use Application Gateway as an Ingress Controller (AGIC) for an Overlay cluster.
 - Virtual Machine Availability Sets (VMAS) aren't supported for Overlay.
 - You can't use [DCsv2-series](/azure/virtual-machines/dcv2-series) virtual machines in node pools. To meet Confidential Computing requirements, consider using [DCasv5 or DCadsv5-series confidential VMs](/azure/virtual-machines/dcasv5-dcadsv5-series) instead.
+- In case you are using your own subnet to deploy the cluster, the names of the subnet, VNET and resource group which contains the VNET, must be 63 characters or less. This comes from the fact that these names will be used as labels in AKS worker nodes, and are therefore subjected to [Kubernetes label syntax rules](https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#syntax-and-character-set).  
 
 ## Set up Overlay clusters
 
diff --git a/articles/backup/backup-azure-private-endpoints-configure-manage.md b/articles/backup/backup-azure-private-endpoints-configure-manage.md
@@ -3,7 +3,7 @@ title: How to create and manage private endpoints (with v2 experience) for Azure
 description: This article explains how to configure and manage private endpoints for Azure Backup.
 ms.topic: how-to
 ms.service: backup
-ms.date: 07/27/2023
+ms.date: 03/26/2024
 author: AbhishekMallick-MS
 ms.author: v-abhmallick
 ---
@@ -201,6 +201,16 @@ But if you remove private endpoints for the vault after a MARS agent has been re
 > - Private endpoints are supported with only DPM server 2022 and later.
 > - Private endpoints are not yet supported with MABS.
 
+#### Cross Subscription Restore to a Private Endpoint enabled vault
+
+To perform Cross Subscription Restore to a Private Endpoint enabled vault:
+
+1. In the *source Recovery Services vault*, go to the **Networking** tab.
+2. Go to the **Private access** section and create **Private Endpoints**.
+3. Select the *subscription* of the target vault in which you want to restore.
+4. In the **Virtual Network** section, select the **VNet** of the target VM that you want to restore across subscription.
+5. Create the **Private Endpoint** and trigger the restore process.
+
 ## Deleting private endpoints
 
 To delete private endpoints using REST API, see [this section](/rest/api/virtualnetwork/privateendpoints/delete).
diff --git a/articles/backup/backup-azure-recovery-services-vault-overview.md b/articles/backup/backup-azure-recovery-services-vault-overview.md
@@ -2,7 +2,7 @@
 title: Overview of Recovery Services vaults
 description: An overview of Recovery Services vaults.
 ms.topic: conceptual
-ms.date: 01/25/2024
+ms.date: 03/26/2024
 ms.service: backup
 author: AbhishekMallick-MS
 ms.author: v-abhmallick
@@ -28,6 +28,9 @@ Recovery Services vaults are based on the Azure Resource Manager model of Azure,
 
 - **Cross Region Restore**:  Cross Region Restore (CRR) allows you to restore Azure VMs in a secondary region, which is an Azure paired region. By enabling this feature at the [vault level](backup-create-rs-vault.md#set-cross-region-restore), you can restore the replicated data in the secondary region any time, when you choose. This enables you to restore the secondary region data for audit-compliance, and during outage scenarios, without waiting for Azure to declare a disaster (unlike the GRS settings of the vault). [Learn more](backup-azure-arm-restore-vms.md#cross-region-restore).
 
+- **Data isolation**: With Azure Backup, the vaulted backup data is stored in Microsoft-managed Azure subscription and tenant. External users or guests have no direct access to this backup storage or its contents, which ensures the isolation of backup data from the production environment where the data source resides. This robust approach ensures that even in a compromised environment, existing backups can't be tampered or deleted by unauthorized users.
+ 
+
 ## Storage settings in the Recovery Services vault
 
 A Recovery Services vault is an entity that stores the backups and recovery points created over time. The Recovery Services vault also contains the backup policies that are associated with the protected virtual machines.
diff --git a/articles/backup/sap-hana-database-restore.md b/articles/backup/sap-hana-database-restore.md
@@ -2,7 +2,7 @@
 title: Restore SAP HANA databases on Azure VMs
 description: In this article, you'll learn how to restore SAP HANA databases that are running on Azure virtual machines. You can also use Cross Region Restore to restore your databases to a secondary region.
 ms.topic: how-to
-ms.date: 01/24/2024
+ms.date: 03/26/2024
 ms.service: backup
 author: AbhishekMallick-MS
 ms.author: v-abhmallick
@@ -368,6 +368,16 @@ With Cross Subscription Restore (CSR), you have the flexibility of restoring to
 >- CSR is supported only for streaming/Backint-based backups and is not supported for snapshot-based backup.
 >- Cross Regional Restore (CRR) with CSR is not supported.
 
+**Cross Subscription Restore to a Private Endpoint enabled vault**
+
+To perform Cross Subscription Restore to a Private Endpoint enabled vault:
+
+1. In the *source Recovery Services vault*, go to the **Networking** tab.
+2. Go to the **Private access** section and create **Private Endpoints**.
+3. Select the *subscription* of the target vault in which you want to restore.
+4. In the **Virtual Network** section, select the **VNet** of the target VM that you want to restore across subscription.
+5. Create the **Private Endpoint** and trigger the restore process.
+
 **Azure RBAC  requirements**
 
 | Operation type | Backup operator | Recovery Services vault | Alternate operator |
@@ -404,6 +414,7 @@ Add the parameter `--target-subscription-id` that enables you to provide the tar
 
 ```
 
+
 ## Next steps
 
 - [Manage SAP HANA databases by using Azure Backup](sap-hana-db-manage.md)
diff --git a/articles/cosmos-db/nosql/TOC.yml b/articles/cosmos-db/nosql/TOC.yml
@@ -73,6 +73,9 @@
     - name: Connect using Spark
       href: tutorial-spark-connector.md
       displayName: Python, Scala, Spark, Java, Databricks
+    - name: Mirror database to Microsoft Fabric
+      displayName: Mirroring, Warehouse, Lighthouse, Fabric
+      href: /fabric/database/mirrored-database/azure-cosmos-db-tutorial?toc=/azure/cosmos-db/toc.json&bc=/azure/cosmos-db/breadcrumb/toc.json
 - name: Samples
   items:
     - name: Solution accelerators
diff --git a/articles/cosmos-db/nosql/index.yml b/articles/cosmos-db/nosql/index.yml
@@ -56,6 +56,16 @@ landingContent:
             url: how-to-dotnet-get-started.md
           - text: Develop Python applications
             url: how-to-python-get-started.md
+  - title: Integrate
+    linkLists:
+      - linkListType: tutorial
+        links:
+          - text: Deploy app on Azure Kubernetes Service (AKS) cluster using Bicep
+            url: tutorial-deploy-app-bicep-aks.md
+          - text: Connect using Apache Spark
+            url: tutorial-spark-connector.md
+          - text: Mirror database to Microsoft Fabric
+            url: /fabric/database/mirrored-database/azure-cosmos-db-tutorial?toc=/azure/cosmos-db/toc.json&bc=/azure/cosmos-db/breadcrumb/toc.json
   - title: Query items from a container
     linkLists:
       - linkListType: concept
diff --git a/articles/defender-for-iot/organizations/integrate-overview.md b/articles/defender-for-iot/organizations/integrate-overview.md
@@ -1,7 +1,7 @@
 ---
 title: Integrate with partner services | Microsoft Defender for IoT
 description: Learn about supported integrations across your organization's security stack with Microsoft Defender for IoT.
-ms.date: 03/24/2024
+ms.date: 09/06/2023
 ms.topic: overview
 ms.custom: enterprise-iot
 ---
@@ -101,10 +101,9 @@ Integrate Microsoft Defender for IoT with partner services to view data from acr
 
 |Name  |Description  |Support scope  |Supported by  |Learn more |
 |---------|---------|---------|---------|---------|
-| **Vulnerability Response Integration with Microsoft Azure Defender for IoT** | View Defender for IoT device vulnerabilities in ServiceNow.  |  - Supports the Central Manager <br>- Locally managed sensors and on-premises management consoles  |    ServiceNow  | [ServiceNow store](https://store.servicenow.com/sn_appstore_store.do#!/store/application/463a7907c3313010985a1b2d3640dd7e/1.0.1?referer=%2Fstore%2Fsearch%3Flistingtype%3Dallintegrations%25253Bancillary_app%25253Bcertified_apps%25253Bcontent%25253Bindustry_solution%25253Boem%25253Butility%25253Btemplate%26q%3Ddefender%2520for%2520iot&sl=sh) |
-| **Service Graph Connector Integration with Microsoft Azure Defender for IoT** | View Defender for IoT device detections, sensors, and network connections in ServiceNow. | - Supports the Azure based sensor<br>- Locally managed sensors and on-premises management consoles      |    ServiceNow     |  [ServiceNow store](https://store.servicenow.com/sn_appstore_store.do#!/store/application/ddd4bf1b53f130104b5cddeeff7b1229/1.0.0?referer=%2Fstore%2Fsearch%3Flistingtype%3Dallintegrations%25253Bancillary_app%25253Bcertified_apps%25253Bcontent%25253Bindustry_solution%25253Boem%25253Butility%25253Btemplate%26q%3Ddefender%2520for%2520iot&sl=sh) |
-| **Service Graph Connector for Microsoft Defender for IoT (On-premises Management Console)** | View Defender for IoT device detections, sensors, and network connections in ServiceNow. | - Supports the On Premises sensor <br>- Locally managed sensors and on-premises management consoles       |    ServiceNow     |  [ServiceNow store](https://store.servicenow.com/sn_appstore_store.do#!/store/application/ddd4bf1b53f130104b5cddeeff7b1229/1.0.0?referer=%2Fstore%2Fsearch%3Flistingtype%3Dallintegrations%25253Bancillary_app%25253Bcertified_apps%25253Bcontent%25253Bindustry_solution%25253Boem%25253Butility%25253Btemplate%26q%3Ddefender%2520for%2520iot&sl=sh) |
-| **Microsoft Defender for IoT** (Legacy) | View Defender for IoT device detections and alerts in ServiceNow.  | - Supports the Legacy version <br>- Locally managed sensors and on-premises management consoles       |    Microsoft     |  [ServiceNow store](https://store.servicenow.com/sn_appstore_store.do#!/store/application/6dca6137dbba13406f7deeb5ca961906/3.1.5?referer=%2Fstore%2Fsearch%3Flistingtype%3Dallintegrations%25253Bancillary_app%25253Bcertified_apps%25253Bcontent%25253Bindustry_solution%25253Boem%25253Butility%25253Btemplate%26q%3Ddefender%2520for%2520iot&sl=sh)<br><br>[Integrate ServiceNow with Microsoft Defender for IoT](tutorial-servicenow.md) |
+| **Vulnerability Response Integration with Microsoft Azure Defender for IoT** | View Defender for IoT device vulnerabilities in ServiceNow.  |    - OT networks<br>- Locally managed sensors and on-premises management consoles  |    ServiceNow  | [ServiceNow store](https://store.servicenow.com/sn_appstore_store.do#!/store/application/463a7907c3313010985a1b2d3640dd7e/1.0.1?referer=%2Fstore%2Fsearch%3Flistingtype%3Dallintegrations%25253Bancillary_app%25253Bcertified_apps%25253Bcontent%25253Bindustry_solution%25253Boem%25253Butility%25253Btemplate%26q%3Ddefender%2520for%2520iot&sl=sh) |
+| **Service Graph Connector Integration with Microsoft Azure Defender for IoT** | View Defender for IoT device detections, sensors, and network connections in ServiceNow. |  - OT networks<br>- Locally managed sensors and on-premises management consoles       |    ServiceNow     |  [ServiceNow store](https://store.servicenow.com/sn_appstore_store.do#!/store/application/ddd4bf1b53f130104b5cddeeff7b1229/1.0.0?referer=%2Fstore%2Fsearch%3Flistingtype%3Dallintegrations%25253Bancillary_app%25253Bcertified_apps%25253Bcontent%25253Bindustry_solution%25253Boem%25253Butility%25253Btemplate%26q%3Ddefender%2520for%2520iot&sl=sh) |
+| **Microsoft Defender for IoT** (Legacy) | View Defender for IoT device detections and alerts in ServiceNow.  |    - OT networks<br>- Locally managed sensors and on-premises management consoles       |    Microsoft     |  [ServiceNow store](https://store.servicenow.com/sn_appstore_store.do#!/store/application/6dca6137dbba13406f7deeb5ca961906/3.1.5?referer=%2Fstore%2Fsearch%3Flistingtype%3Dallintegrations%25253Bancillary_app%25253Bcertified_apps%25253Bcontent%25253Bindustry_solution%25253Boem%25253Butility%25253Btemplate%26q%3Ddefender%2520for%2520iot&sl=sh)<br><br>[Integrate ServiceNow with Microsoft Defender for IoT](tutorial-servicenow.md) |
 
 ## Skybox
 
diff --git a/articles/defender-for-iot/organizations/tutorial-servicenow.md b/articles/defender-for-iot/organizations/tutorial-servicenow.md
@@ -2,12 +2,12 @@
 title: Integrate ServiceNow with Microsoft Defender for IoT
 description: In this tutorial, learn how to integrate ServiceNow with Microsoft Defender for IoT.
 ms.topic: how-to
-ms.date: 03/24/2024
+ms.date: 08/11/2022
 ---
 
 # Integrate ServiceNow with Microsoft Defender for IoT
 
-The Defender for IoT integration with ServiceNow provides an extra level of centralized visibility, monitoring, and control for the IoT and OT landscape. These bridged platforms enable automated device visibility and threat management to previously unreachable ICS & IoT devices.
+The Defender for IoT integration with ServiceNow provides a extra level of centralized visibility, monitoring, and control for the IoT and OT landscape. These bridged platforms enable automated device visibility and threat management to previously unreachable ICS & IoT devices.
 
 The [Operational Technology Manager](https://store.servicenow.com/sn_appstore_store.do#!/store/application/31eed0f72337201039e2cb0a56bf65ef/1.1.2?referer=%2Fstore%2Fsearch%3Flistingtype%3Dallintegrations%25253Bancillary_app%25253Bcertified_apps%25253Bcontent%25253Bindustry_solution%25253Boem%25253Butility%25253Btemplate%26q%3Doperational%2520technology%2520manager&sl=sh) integration is available from the ServiceNow store, which streamlines Microsoft Defender for IoT sensor appliances, OT assets, network connections, and vulnerabilities to ServiceNow’s Operational Technology (OT) data model.
 
@@ -17,11 +17,9 @@ Once you have the Operational Technology Manager application, two integrations a
 
 ### Service Graph Connector (SGC)
 
-Import Microsoft Defender for IoT sensors with more attributes, including connection details and Purdue model zones, into the Network Intrusion Detection Systems (NIDS) class. Provide visibility into your OT network status and manage it within the ServiceNow application.
+Import Microsoft Defender for IoT sensors with additional attributes, including connection details and Purdue model zones, into the Network Intrusion Detection Systems (NIDS) class. Provide visibility into your OT network status and manage it within the ServiceNow application.
 
-For more information about the On-premises Management Console option, see the [Service Graph Connector (SGC) for Microsoft Defender for IoT (On-premises Management Console)](https://store.servicenow.com/sn_appstore_store.do#!/store/application/ddd4bf1b53f130104b5cddeeff7b1229) information on the ServiceNow store.
-
-For more information about the Azure Defender for IoT option, see the [Service Graph Connector (SGC) Integration with Microsoft Azure Defender for IoT](https://store.servicenow.com/sn_appstore_store.do#!/store/application/ddd4bf1b53f130104b5cddeeff7b1229) information on the ServiceNow store.
+For more information, please see the [Service Graph Connector (SGC)](https://store.servicenow.com/sn_appstore_store.do#!/store/application/ddd4bf1b53f130104b5cddeeff7b1229) information on the ServiceNow store.
 
 ### Vulnerability Response (VR)
 
