Merge pull request #293391 from MicrosoftDocs/repo_sync_working_branch

Taojunshen · web-flow · commit b9b16619d0fb · 2025-01-23T01:30:42.000+08:00
Confirm merge from repo_sync_working_branch to main to sync with https://github.com/MicrosoftDocs/azure-docs (branch main)
diff --git a/articles/active-directory-b2c/enable-authentication-angular-spa-app-options.md b/articles/active-directory-b2c/enable-authentication-angular-spa-app-options.md
@@ -411,7 +411,7 @@ if (this.msalGuardConfig.authRequest) {
   authRequestConfig = { ...this.msalGuardConfig.authRequest } as RedirectRequest
 }
 
-authRequestConfig.extraQueryParameters = {"id_token_hint": idToken};;
+authRequestConfig.extraQueryParameters = {"id_token_hint": idToken};
 
 this.authService.loginRedirect(authRequestConfig);
 
diff --git a/articles/active-directory-b2c/partner-asignio.md b/articles/active-directory-b2c/partner-asignio.md
@@ -435,7 +435,7 @@ If you have an Asignio Signature, you're prompted to authenticate with your Asig
 ## Next steps
 
 * [Solutions and Training for Azure Active Directory B2C](solution-articles.md)
-* Ask questions on [Stackoverflow](https://stackoverflow.com/questions/tagged/azure-ad-b2c)
+* Ask questions on [Stack Overflow](https://stackoverflow.com/questions/tagged/azure-ad-b2c)
 * [Azure AD B2C Samples](https://stackoverflow.com/questions/tagged/azure-ad-b2c)
 * YouTube: [Identity Azure AD B2C Series](https://www.youtube.com/playlist?list=PL3ZTgFEc7LyuJ8YRSGXBUVItCPnQz3YX0)
 * [Azure AD B2C custom policy overview](custom-policy-overview.md)
diff --git a/articles/active-directory-b2c/partner-transmit-security.md b/articles/active-directory-b2c/partner-transmit-security.md
@@ -444,5 +444,5 @@ Using the directory with your Azure AD B2C tenant, test your custom policy:
 
 ## Next steps
 
-* Ask questions on [Stackoverflow](https://stackoverflow.com/questions/tagged/azure-ad-b2c)
+* Ask questions on [Stack Overflow](https://stackoverflow.com/questions/tagged/azure-ad-b2c)
 * Check out the [Azure AD B2C custom policy overview](custom-policy-overview.md)
diff --git a/articles/active-directory-b2c/partner-trusona.md b/articles/active-directory-b2c/partner-trusona.md
@@ -495,7 +495,7 @@ For additional information, review the following articles:
 
 - [Azure AD B2C docs](solution-articles.md)
 
-- [Ask your question on Stackoverflow](https://stackoverflow.com/questions/tagged/azure-ad-b2c)
+- [Ask your question on Stack Overflow](https://stackoverflow.com/questions/tagged/azure-ad-b2c)
 
 - [Azure AD B2C Samples](https://stackoverflow.com/questions/tagged/azure-ad-b2c)
 
diff --git a/articles/azure-app-configuration/rest-api-key-value.md b/articles/azure-app-configuration/rest-api-key-value.md
@@ -156,7 +156,7 @@ If `If-Match` or `If-None-Match` are omitted, the operation is unconditional.
 The following response gets the key-value only if the current representation matches the specified `etag`:
 
 ```http
-GET /kv?key={key}label={label}&api-version={api-version} HTTP/1.1
+GET /kv?key={key}&label={label}&api-version={api-version} HTTP/1.1
 If-Match: "4f6dd610dd5e4deebc7fbaef685fb903"
 ```
 
@@ -175,7 +175,7 @@ HTTP/1.1 200 OK
 The following response gets the key-values only if the current representation doesn't match the specified `etag`:
 
 ```http
-GET /kv?key={key}label={label}&api-version={api-version} HTTP/1.1
+GET /kv?key={key}&label={label}&api-version={api-version} HTTP/1.1
 If-None-Match: "4f6dd610dd5e4deebc7fbaef685fb903"
 ```
 
@@ -498,4 +498,4 @@ HTTP/1.1 204 No Content
 
 This is similar to the "Set key (conditionally)" section earlier in this article.
 
-:::zone-end
+:::zone-end
diff --git a/articles/azure-government/connect-with-azure-pipelines.md b/articles/azure-government/connect-with-azure-pipelines.md
@@ -168,7 +168,7 @@ For more information, see the following resources:
 
 - [Sign up for Azure Government trial](https://azure.microsoft.com/global-infrastructure/government/request/?ReqType=Trial)
 - [Acquiring and accessing Azure Government](https://azure.microsoft.com/offers/azure-government/)
-- [Ask questions via the azure-gov tag on StackOverflow](https://stackoverflow.com/tags/azure-gov)
+- [Ask questions via the azure-gov tag on Stack Overflow](https://stackoverflow.com/tags/azure-gov)
 - [Azure Government blog](https://devblogs.microsoft.com/azuregov/)
 - [What is Infrastructure as Code? – Azure DevOps](/devops/deliver/what-is-infrastructure-as-code)
 - [DevSecOps for infrastructure as code (IaC) – Azure Architecture Center](/azure/architecture/solution-ideas/articles/devsecops-infrastructure-as-code)
diff --git a/articles/azure-government/documentation-government-ase-disa-cap.md b/articles/azure-government/documentation-government-ase-disa-cap.md
@@ -70,7 +70,7 @@ This template deploys an **ILB ASE** into the Azure Government or DoD regions.
 
 - [Sign up for Azure Government trial](https://azure.microsoft.com/global-infrastructure/government/request/?ReqType=Trial)
 - [Acquiring and accessing Azure Government](https://azure.microsoft.com/offers/azure-government/)
-- [Ask questions via the azure-gov tag on StackOverflow](https://stackoverflow.com/tags/azure-gov)
+- [Ask questions via the azure-gov tag on Stack Overflow](https://stackoverflow.com/tags/azure-gov)
 - [Azure Government blog](https://devblogs.microsoft.com/azuregov/)
 - [Azure Government overview](./documentation-government-welcome.md)
 - [Azure Government security](./documentation-government-plan-security.md)
diff --git a/articles/azure-government/documentation-government-developer-guide.md b/articles/azure-government/documentation-government-developer-guide.md
@@ -73,7 +73,7 @@ For more information about Azure Government, see the following resources:
 
 - [Sign up for a trial](https://azure.microsoft.com/global-infrastructure/government/request/?ReqType=Trial)
 - [Acquiring and accessing Azure Government](https://azure.microsoft.com/offers/azure-government/)
-- [Ask questions via the azure-gov tag in StackOverflow](https://stackoverflow.com/tags/azure-gov)
+- [Ask questions via the azure-gov tag in Stack Overflow](https://stackoverflow.com/tags/azure-gov)
 - [Azure Government blog](https://devblogs.microsoft.com/azuregov/)
 - [Azure Government overview](./documentation-government-welcome.md)
 - [Azure Government security](./documentation-government-plan-security.md)
diff --git a/articles/azure-relay/includes/relay-hybrid-connections-node-get-started-client.md b/articles/azure-relay/includes/relay-hybrid-connections-node-get-started-client.md
@@ -23,7 +23,7 @@ Run `npm install hyco-ws` from a Node command prompt in your project folder.
         .createInterface({
             input: process.stdin,
             output: process.stdout
-        });;
+        });
     ```
 2. Add the following constants to the `sender.js` file for the hybrid connection details. Replace the placeholders in brackets with the values you obtained when you created the hybrid connection.
    
@@ -59,7 +59,7 @@ Run `npm install hyco-ws` from a Node command prompt in your project folder.
         .createInterface({
             input: process.stdin,
             output: process.stdout
-        });;
+        });
    
     const ns = "{RelayNamespace}";
     const path = "{HybridConnectionName}";
diff --git a/articles/container-apps/dapr-component-connection.md b/articles/container-apps/dapr-component-connection.md
@@ -6,7 +6,7 @@ ms.author: hannahhunter
 ms.reviewer: nickgreenf
 ms.service: azure-container-apps
 ms.topic: how-to 
-ms.date: 12/11/2024
+ms.date: 01/21/2025
 ms.custom: template-tutorial, service-connector, build-2023, engagement
 ---
 
@@ -35,7 +35,7 @@ Start by navigating to the Dapr component creation feature.
    :::image type="content" source="media/dapr-component-connection/select-azure-component.png" alt-text="Screenshot of selecting Azure Component from the drop down menu.":::
 
    > [!NOTE]
-   > Currently, creating Dapr components using Service Connector in the Azure portal only works with Azure services (Azure Service Bus, Azure Cosmos DB, etc.). To create non-Azure Dapr components (Redis), use the manual component creation option.    
+   > Currently, creating Dapr components using Service Connector in the Azure portal is in preview and only works with Azure services (Azure Service Bus, Azure Cosmos DB, etc.). To create non-Azure Dapr components (Redis), use the manual component creation option.    
 
 ### Provide required metadata
 
@@ -107,4 +107,4 @@ You can then check the YAML/Bicep artifact into a repo and recreate it outside o
 
 Learn more about:
 - [Using Dapr with Azure Container Apps](./dapr-overview.md)
-- [Connecting to cloud services using Service Connector](./service-connector.md)
+- [Connecting to cloud services using Service Connector](./service-connector.md)
diff --git a/articles/hdinsight-aks/index.yml b/articles/hdinsight-aks/index.yml
@@ -9,6 +9,7 @@ metadata:
   ms.topic: landing-page # Required
   author: yeturis
   ms.author: sairamyeturi
+  ROBOTS: NOINDEX
   ms.date: 08/29/2023 #Required; mm/dd/yyyy format.
 
 # linkListType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | tutorial | video | whats-new
diff --git a/articles/migrate/migrate-replication-appliance.md b/articles/migrate/migrate-replication-appliance.md
@@ -158,8 +158,8 @@ Process server | The process server receives replication data, optimizes, and en
 
 The appliance is upgraded manually from the Azure Migrate hub. We recommend that you always run the latest version.
 
-1. In Azure Migrate > Servers > Azure Migrate: Server Assessment, Infrastructure servers, select **Configuration servers**.
-2. In **Configuration servers**, a link appears in **Agent Version** when a new version of the replication appliance is available. 
+1. In Azure Migrate > Servers, databases and web apps> Migration and modernization > Overview > Migration > Infrastructure servers  select **Configuration servers**.
+2. In **Configuration servers** screen, a link appears in **Agent Version** when a new version of the replication appliance is available. 
 3. Download the installer to the replication appliance machine, and install the upgrade. The installer detects the version currently running on the appliance.
  
 ## Next steps
diff --git a/articles/remote-rendering/overview/features/cut-planes.md b/articles/remote-rendering/overview/features/cut-planes.md
@@ -32,7 +32,7 @@ void CreateCutPlane(RenderingSession session, Entity ownerEntity)
 ```cpp
 void CreateCutPlane(ApiHandle<RenderingSession> session, ApiHandle<Entity> ownerEntity)
 {
-    ApiHandle<CutPlaneComponent> cutPlane = session->Connection()->CreateComponent(ObjectType::CutPlaneComponent, ownerEntity)->as<CutPlaneComponent>();;
+    ApiHandle<CutPlaneComponent> cutPlane = session->Connection()->CreateComponent(ObjectType::CutPlaneComponent, ownerEntity)->as<CutPlaneComponent>();
     cutPlane->SetNormal(Axis::X); // normal points along the positive x-axis of the owner object's orientation
     Color4Ub fadeColor;
     fadeColor.channels = { 255, 0, 0, 128 }; // fade to 50% red
@@ -95,4 +95,4 @@ Each active cut plane incurs a small cost during rendering. Disable or delete cu
 ## Next steps
 
 * [Single sided rendering](single-sided-rendering.md)
-* [Spatial queries](spatial-queries.md)
+* [Spatial queries](spatial-queries.md)
diff --git a/articles/service-bus-messaging/build-message-driven-apps-nservicebus.md b/articles/service-bus-messaging/build-message-driven-apps-nservicebus.md
@@ -140,7 +140,7 @@ public class SenderWorker : BackgroundService
             var round = 0;
             while (!stoppingToken.IsCancellationRequested)
             {
-                await messageSession.Send(new Ping { Round = round++ });;
+                await messageSession.Send(new Ping { Round = round++ });
 
                 logger.LogInformation($"Message #{round}");
 
diff --git a/articles/service-bus-messaging/jms-developer-guide.md b/articles/service-bus-messaging/jms-developer-guide.md
@@ -114,7 +114,7 @@ TokenCredential tokenCredential = new ClientSecretCredentialBuilder()
                 .tenantId("")
                 .clientId("")
                 .clientSecret("")
-                .build();;
+                .build();
 ```
 
 The Connection factory can then be instantiated with the below parameters.
diff --git a/articles/synapse-analytics/security/synapse-workspace-ip-firewall.md b/articles/synapse-analytics/security/synapse-workspace-ip-firewall.md
@@ -42,11 +42,15 @@ Make sure that the firewall on your network and local computer allows outgoing c
 
 To connect using tools such as SSMS and Power BI, you must allow outgoing communication on TCP port 1433. The 1433 port used by SSMS (Desktop Application).
 
-## Manage the Azure Synapse workspace firewall 
+> [!NOTE]
+> Azure Policy operates at a level above other Azure services by applying policy rules against PUT requests and GET responses of resource types exchanged between Azure Resource Manager and the owning resource provider (RP). However, updates to Synapse workspace firewall settings in the Azure Portal are made using POST calls, such as the replaceAllIpFirewallRules operation.\
+> Due to this design, Azure Policy definitions cannot block changes to networking settings made via POST operations. As a result, modifications to firewall rules through the Azure Portal may bypass Azure Policy, even if restrictive policies are in place.
+
+## Manage the Azure Synapse workspace firewall
 
 For more information on managing the firewall, see [the Azure SQL documentation to manage server-level firewalls](/azure/azure-sql/database/firewall-configure#create-and-manage-ip-firewall-rules). Azure Synapse only supports server-level IP firewall rules. It doesn't support database-level IP firewall rules.
 
-For more information on the methods to manage the firewall programmatically, see: 
+For more information on the methods to manage the firewall programmatically, see:
 - [API](/rest/api/synapse/ip-firewall-rules)
 - [PowerShell](/powershell/module/az.synapse/new-azsynapsefirewallrule)
 - [Azure CLI](/cli/azure/sql/server/firewall-rule)
diff --git a/articles/virtual-network/ip-services/associate-public-ip-address-vm.md b/articles/virtual-network/ip-services/associate-public-ip-address-vm.md
@@ -116,7 +116,7 @@ Install the [Azure CLI](/cli/azure/install-azure-cli?toc=%2fazure%2fvirtual-netw
    > [!NOTE]
    > An IP address is assigned from the pool of public IP addresses reserved for an Azure region. For a list of the address pools used in each region, see [Azure IP ranges and service tags](https://www.microsoft.com/download/details.aspx?id=56519). If you need the address to be assigned from a specific prefix, use a [Public IP address prefix](public-ip-address-prefix.md).
 
-1. Open the necessary ports in your security groups by adjusting the security rules in the network security groups. For information, see [Allow network traffic to the VM](#allow-network-traffic-to-the-vm).
+1. Open the necessary ports in your network security groups by adjusting the inbound security rules. For information, see [Allow network traffic to the VM](#allow-network-traffic-to-the-vm).
 
 # [Azure PowerShell](#tab/azure-powershell)
 
@@ -214,15 +214,15 @@ Install [Azure PowerShell](/powershell/azure/install-azure-powershell) on your m
    > [!NOTE]
    > An IP address is assigned from the pool of public IP addresses reserved for an Azure region. For a list of the address pools used in each region, see [Azure IP ranges and service tags](https://www.microsoft.com/download/details.aspx?id=56519). If you need the address to be assigned from a specific prefix, use a [Public IP address prefix](public-ip-address-prefix.md).
 
-1. Open the necessary ports in your security groups by adjusting the security rules in the network security groups. For information, see [Allow network traffic to the VM](#allow-network-traffic-to-the-vm).
+1. Open the necessary ports in your network security groups by adjusting the inbound security rules. For information, see [Allow network traffic to the VM](#allow-network-traffic-to-the-vm).
 
 ---
 > [!NOTE]  
 > To share a VM with an external user, you must add a public IP address to the VM. Alternatively, external users can connect to VM's private IP address through Azure Bastion.
 
 ## Allow network traffic to the VM
 
-Before you can connect to a public IP address from the internet, you must open the necessary ports in your security groups. These ports must be open in any network security group that you might have associated to the network interface, the subnet of the network interface, or both. Although security groups filter traffic to the private IP address of the network interface, after inbound internet traffic arrives at the public IP address, Azure translates the public address to the private IP address. Therefore, if a network security group prevents the traffic flow, the communication with the public IP address fails.
+Before you can connect to a public IP address from the internet, you must open the necessary ports/protocols in your network security groups. These ports must be open in any network security group that you might have associated to the network interface, the subnet of the network interface, or both. Although network security groups filter traffic to the private IP address of the network interface, after inbound internet traffic arrives at the public IP address, Azure translates the public address to the private IP address. Therefore, if a network security group prevents the traffic flow, the communication with the public IP address fails.
 
 You can view the effective security rules for a network interface and its subnet for the [Azure portal](../../virtual-network/diagnose-network-traffic-filter-problem.md#diagnose-using-azure-portal), the [Azure CLI](../../virtual-network/diagnose-network-traffic-filter-problem.md#diagnose-using-azure-cli), or [Azure PowerShell](../../virtual-network/diagnose-network-traffic-filter-problem.md#diagnose-using-powershell).
 

Original file line number	Diff line number	Diff line change
`@@ -411,7 +411,7 @@ if (this.msalGuardConfig.authRequest) {`
`411`	`411`	`authRequestConfig = { ...this.msalGuardConfig.authRequest } as RedirectRequest`
`412`	`412`	`}`
`413`	`413`
`414`		`-authRequestConfig.extraQueryParameters = {"id_token_hint": idToken};;`
	`414`	`+authRequestConfig.extraQueryParameters = {"id_token_hint": idToken};`
`415`	`415`
`416`	`416`	`this.authService.loginRedirect(authRequestConfig);`
`417`	`417`