Merge branch 'master' of https://github.com/MicrosoftDocs/azure-docs-pr into rolyon-rbac-terminology-v23

Author: rolyon

.openpublishing.redirection.json

@@ -31824,8 +31824,8 @@
     },
     {
       "source_path": "articles/marketplace/cloud-partner-portal-orig/cloud-partner-portal-automate-offer-publishing.md",
-      "redirect_url": "/azure/marketplace/azure-vm-create",
-      "redirect_document_id": true
+      "redirect_url": "/azure/marketplace/marketplace-virtual-machines",
+      "redirect_document_id": false
     },
     {
       "source_path": "articles/marketplace/cloud-partner-portal-orig/appsource-package-preparation.md",
@@ -31837,6 +31837,11 @@
       "redirect_url": "/azure/marketplace/enable-appsource-marketplace-using-azure-ad",
       "redirect_document_id": true
     },
+    {
+      "source_path": "articles/marketplace/partner-center-portal/azure-vm-create-offer.md",
+      "redirect_url": "/azure/marketplace/marketplace-virtual-machines",
+      "redirect_document_id": true
+    },
     {
       "source_path": "articles/marketplace/gtm-promote-your-business.md",
       "redirect_url": "/azure/marketplace/gtm-marketing-best-practices",
@@ -32054,7 +32059,7 @@
     },
     {
       "source_path": "articles/marketplace-publishing/marketplace-publishing-vm-image-post-publishing.md",
-      "redirect_url": "/azure/marketplace/azure-vm-create",
+      "redirect_url": "/azure/marketplace/marketplace-virtual-machines",
       "redirect_document_id": false
     },
     {
@@ -32064,7 +32069,7 @@
     },
     {
       "source_path": "articles/marketplace/cloud-partner-portal-orig/cloud-partner-portal-publish-virtual-machine.md",
-      "redirect_url": "/azure/marketplace/azure-vm-create",
+      "redirect_url": "/azure/marketplace/marketplace-virtual-machines",
       "redirect_document_id": false
     },
     {
@@ -45524,32 +45529,32 @@
     },
     {
       "source_path": "articles/marketplace/cloud-partner-portal/virtual-machine/cpp-create-offer.md",
-      "redirect_url": "/azure/marketplace/azure-vm-create",
+      "redirect_url": "/azure/marketplace/marketplace-virtual-machines",
       "redirect_document_id": false
     },
     {
       "source_path": "articles/marketplace/cloud-partner-portal/virtual-machine/cpp-offer-settings-tab.md",
-      "redirect_url": "/azure/marketplace/azure-vm-create",
+      "redirect_url": "/azure/marketplace/marketplace-virtual-machines",
       "redirect_document_id": false
     },
     {
       "source_path": "articles/marketplace/cloud-partner-portal/virtual-machine/cpp-skus-tab.md",
-      "redirect_url": "/azure/marketplace/azure-vm-create",
+      "redirect_url": "/azure/marketplace/marketplace-virtual-machines",
       "redirect_document_id": false
     },
     {
       "source_path": "articles/marketplace/cloud-partner-portal/virtual-machine/cpp-test-drive-tab.md",
-      "redirect_url": "/azure/marketplace/azure-vm-create",
+      "redirect_url": "/azure/marketplace/marketplace-virtual-machines",
       "redirect_document_id": false
     },
     {
       "source_path": "articles/marketplace/cloud-partner-portal/virtual-machine/cpp-marketplace-tab.md",
-      "redirect_url": "/azure/marketplace/azure-vm-create",
+      "redirect_url": "/azure/marketplace/marketplace-virtual-machines",
       "redirect_document_id": false
     },
     {
       "source_path": "articles/marketplace/cloud-partner-portal/virtual-machine/cpp-support-tab.md",
-      "redirect_url": "/azure/marketplace/azure-vm-create",
+      "redirect_url": "/azure/marketplace/marketplace-virtual-machines",
       "redirect_document_id": false
     },
     {
@@ -45564,7 +45569,12 @@
     },
     {
       "source_path": "articles/marketplace/cloud-partner-portal/virtual-machine/cpp-common-vhd-creation-issues.md",
-      "redirect_url": "/azure/marketplace/partner-center-portal/common-issues-during-vhd-creation",
+      "redirect_url": "/azure/marketplace/azure-vm-create-certification-faq",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/marketplace/partner-center-portal/common-issues-during-vhd-creation.md",
+      "redirect_url": "/azure/marketplace/azure-vm-create-certification-faq",
       "redirect_document_id": false
     },
     {
@@ -45584,12 +45594,12 @@
     },
     {
       "source_path": "articles/marketplace/cloud-partner-portal/virtual-machine/cpp-winrm-over-https.md",
-      "redirect_url": "/azure/marketplace/azure-vm-create",
+      "redirect_url": "/azure/marketplace/marketplace-virtual-machines",
       "redirect_document_id": false
     },
     {
       "source_path": "articles/marketplace/cloud-partner-portal/virtual-machine/cpp-configure-winrm-after-vm-creation.md",
-      "redirect_url": "/azure/marketplace/azure-vm-create",
+      "redirect_url": "/azure/marketplace/marketplace-virtual-machines",
       "redirect_document_id": false
     },
     {
@@ -45604,7 +45614,7 @@
     },
     {
       "source_path": "articles/marketplace/partner-center-portal/create-azure-vm-technical-asset.md",
-      "redirect_url": "/azure/marketplace/azure-vm-create-technical-assets",
+      "redirect_url": "/azure/marketplace/azure-vm-create-using-approved-base",
       "redirect_document_id": false
     },
     {
@@ -45664,12 +45674,12 @@
     },
     {
       "source_path": "articles/marketplace/cloud-partner-portal/virtual-machine/cpp-publish-offer.md",
-      "redirect_url": "/azure/marketplace/azure-vm-create",
+      "redirect_url": "/azure/marketplace/marketplace-virtual-machines",
       "redirect_document_id": false
     },
     {
       "source_path": "articles/marketplace/cloud-partner-portal/virtual-machine/cpp-update-existing-offer.md",
-      "redirect_url": "/azure/marketplace/azure-vm-create",
+      "redirect_url": "/azure/marketplace/marketplace-virtual-machines",
       "redirect_document_id": false
     },
     {
@@ -56840,7 +56850,7 @@
     },
     {
       "source_path": "articles/marketplace/cloud-partner-portal/virtual-machine/cpp-virtual-machine-offer.md",
-      "redirect_url": "/azure/marketplace/azure-vm-create",
+      "redirect_url": "/azure/marketplace/marketplace-virtual-machines",
       "redirect_document_id": false
     },
     {

articles/azure-monitor/platform/agent-linux.md

@@ -39,9 +39,11 @@ Starting with versions released after August 2018, we are making the following c
 >[!NOTE]
 >If you are using a distro or version that is not currently supported and doesn't align to our support model, we recommend that you fork this repo, acknowledging that Microsoft support will not provide assistance with forked agent versions.
 
-### Python 2 requirement
+### Python requirement
 
- The Log Analytics agent requires Python 2. If your virtual machine is using a distro that doesn't include Python 2 by default then you must install it. The following sample commands will install Python 2 on different distros.
+Starting from Agent version 1.13.27, the Linux Agent will support both Python 2 and 3. We always recommend using the latest agent. 
+
+If you are using an older version of the agent, you must have the Virtual Machine use python 2 by default. If your virtual machine is using a distro that doesn't include Python 2 by default then you must install it. The following sample commands will install Python 2 on different distros.
 
  - Red Hat, CentOS, Oracle: `yum install -y python2`
  - Ubuntu, Debian: `apt-get install -y python2`
@@ -67,7 +69,7 @@ The OMS Agent has limited customization support for Linux.
 The following are currently supported: 
 - FIPs
 
-The following are planned but not yet supported:
+The following are in consideration but not yet supported:
 - CIS
 - SELINUX
 

articles/cosmos-db/concepts-limits.md

@@ -30,7 +30,7 @@ You can provision throughput at a container-level or a database-level in terms o
 | Maximum storage per container | Unlimited |
 | Maximum storage per database | Unlimited |
 | Maximum attachment size per Account (Attachment feature is being deprecated) | 2 GB |
-| Minimum RUs required per 1 GB | 10 RU/s |
+| Minimum RU/s required per 1 GB | 10 RU/s<br>**Note:** if your container or database contains more than 1 TB of data, your account may be eligible to our ["high storage / low throughput" program](set-throughput.md#high-storage-low-throughput-program) |
 
 > [!NOTE]
 > To learn about best practices for managing workloads that have partition keys requiring higher limits for storage or throughput, see [Create a synthetic partition key](synthetic-partition-keys.md).

articles/cosmos-db/set-throughput.md

@@ -91,7 +91,7 @@ You can combine the two models. Provisioning throughput on both the database and
 
 After you create an Azure Cosmos container or a database, you can update the provisioned throughput. There is no limit on the maximum provisioned throughput that you can configure on the database or the container.
 
-### Current provisioned throughput
+### <a id="current-provisioned-throughput"></a> Current provisioned throughput
 
 You can retrieve the provisioned throughput of a container or a database in the Azure portal or by using the SDKs:
 
@@ -131,6 +131,14 @@ You can programmatically check the scaling progress by reading the [current prov
 
 You can use [Azure Monitor metrics](monitor-cosmos-db.md#view-operation-level-metrics-for-azure-cosmos-db) to view the history of provisioned throughput (RU/s) and storage on a resource.
 
+## <a id="high-storage-low-throughput-program"></a> High storage / low throughput program
+
+As described in the [Current provisioned throughput](#current-provisioned-throughput) section above, the minimum throughput you can provision on a container or database depends on a number of factors. One of them is the amount of data currently stored, as Azure Cosmos DB enforces a minimum throughput of 10 RU/s per GB of storage.
+
+This can be a concern in situations where you need to store large amounts of data, but have low throughput requirements in comparison. To better accommodate these scenarios, Azure Cosmos DB has introduced a **"high storage / low throughput" program** that decreases the RU/s per GB constraint from 10 to 1 on eligible accounts.
+
+You currently need to have at least 1 container or shared-throughput database containing more than 1 TB of data in your account to be eligible. To join this program and assess your full eligibility, all you have to do is to fill [this survey](https://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=v4j5cvGGr0GRqy180BHbRzBPrdEMjvxPuDm8fCLUtXpUREdDU0pCR0lVVFY5T1lRVEhWNUZITUJGMC4u). The Azure Cosmos DB team will then follow up and proceed with your onboarding.
+
 ## Comparison of models
 This table shows a comparison between provisioning standard (manual) throughput on a database vs. on a container. 
 

articles/event-hubs/network-security.md

@@ -2,7 +2,7 @@
 title: Network security for Azure Event Hubs 
 description: This article describes how to configure access from private endpoints
 ms.topic: conceptual
-ms.date: 06/23/2020
+ms.date: 10/20/2020
 ---
 
 # Network security for Azure Event Hubs 
@@ -67,8 +67,8 @@ For more information, see [How to configure virtual network service endpoints fo
 
 A private endpoint is a network interface that connects you privately and securely to a service powered by Azure Private Link. The private endpoint uses a private IP address from your VNet, effectively bringing the service into your VNet. All traffic to the service can be routed through the private endpoint, so no gateways, NAT devices, ExpressRoute or VPN connections, or public IP addresses are needed. Traffic between your virtual network and the service traverses over the Microsoft backbone network, eliminating exposure from the public Internet. You can connect to an instance of an Azure resource, giving you the highest level of granularity in access control.
 
-> [!NOTE]
-> This feature is supported only with the **dedicated** tier. For more information about the dedicated tier, see [Overview of Event Hubs Dedicated](event-hubs-dedicated-overview.md). 
+> [!IMPORTANT]
+> This feature is supported for both **standard** and **dedicated** tiers. It's not supported in the **basic** tier.
 
 For more information, see [How to configure private endpoints for an event hub](private-link-service.md)
 

articles/frontdoor/front-door-faq.md

@@ -9,7 +9,7 @@ ms.devlang: na
 ms.topic: article
 ms.tgt_pltfrm: na
 ms.workload: infrastructure-services
-ms.date: 09/18/2020
+ms.date: 10/20/2020
 ms.author: duau
 ---
 
@@ -157,6 +157,10 @@ Learn about all the documented [timeouts and limits for Azure Front Door](../azu
 
 The Rules Engine configuration takes about 10 to 15 minutes to complete an update. You can expect the rule to take effect as soon as the update is completed. 
 
+### Can I configure Azure CDN behind my Front Door profile or vice versa?
+
+Azure Front Door and Azure CDN can't be configured together because both services utilizes the same Azure edge sites when responding to requests. 
+
 ## Performance
 
 ### How does Azure Front Door support high availability and scalability?
@@ -269,4 +273,4 @@ Yes, Azure Front Door does support alerts. Alerts are configured on metrics.
 ## Next steps
 
 - Learn how to [create a Front Door](quickstart-create-front-door.md).
-- Learn [how Front Door works](front-door-routing-architecture.md).
+- Learn [how Front Door works](front-door-routing-architecture.md).

articles/index.yml

@@ -252,6 +252,13 @@ productDirectory:
         - ai-machine-learning
       url: genomics/index.yml
     # Card
+    - title: Metrics Advisor (Preview)
+      summary: An AI service that monitors metrics and diagnoses issues
+      imageSrc: ./media/index/metrics-advisor.svg
+      azureCategories:
+        - ai-machine-learning
+      url: cognitive-services/metrics-advisor/index.yml
+    # Card
     - title: Personalizer
       summary: An AI service that delivers a personalized user experience
       imageSrc: https://static.docs.com/ui/media/product/azure/cognitive-services.svg

articles/key-vault/certificates/how-to-integrate-certificate-authority.md

@@ -49,9 +49,9 @@ After gathering above information from DigiCert CertCentral account, you can now
 1.	To add DigiCert certificate authority, navigate to the key vault you want to add DigiCert. 
 2.	On the Key Vault properties pages, select **Certificates**.
 3.	Select **Certificate Authorities** tab.
-![Certificate properties](../media/certificates/how-to-integrate-certificate-authority/select-certificate-authorities.png)
+![select certificate authorities](../media/certificates/how-to-integrate-certificate-authority/select-certificate-authorities.png)
 4.	Select **Add** option.
- ![Certificate properties](../media/certificates/how-to-integrate-certificate-authority/add-certificate-authority.png)
+ ![add certificate authorities](../media/certificates/how-to-integrate-certificate-authority/add-certificate-authority.png)
 5.	On the **Create a certificate Authority** screen choose the following values:
     - 	**Name**: Add an identifiable Issuer name. Example DigicertCA
     - 	**Provider**: Select DigiCert from the menu.
@@ -98,24 +98,22 @@ New-AzKeyVault -Name 'Contoso-Vaultname' -ResourceGroupName 'ContosoResourceGrou
 - Define **Account ID** variable
 - Define **Org ID** variable
 - Define **API Key** variable
-- Define **Issuer Name** variable
 
 ```azurepowershell-interactive
 $accountId = "myDigiCertCertCentralAccountID"
-$org = New-AzKeyVaultCertificateOrganizationDetails -Id OrganizationIDfromDigiCertAccount
+$org = New-AzKeyVaultCertificateOrganizationDetail -Id OrganizationIDfromDigiCertAccount
 $secureApiKey = ConvertTo-SecureString DigiCertCertCentralAPIKey -AsPlainText –Force
-$issuerName = "DigiCertCA"
 ```
 
-4. Set **Issuer**. This will add Digicert as a Certificate Authority in the key vault.
+4. Set **Issuer**. This will add Digicert as a Certificate Authority in the key vault. To learn more about the parameters, [read here](https://docs.microsoft.com/powershell/module/az.keyvault/Set-AzKeyVaultCertificateIssuer)
 ```azurepowershell-interactive
-Set-AzureKeyVaultCertificateIssuer -VaultName $vaultName -IssuerName $issuerName -IssuerProvider DigiCert -AccountId $accountId -ApiKey $secureApiKey -OrganizationDetails $org
+Set-AzKeyVaultCertificateIssuer -VaultName "Contoso-Vaultname" -Name "TestIssuer01" -IssuerProvider DigiCert -AccountId $accountId -ApiKey $secureApiKey -OrganizationDetails $org -PassThru
 ```
 
 5. **Setting Policy for the certificate and issuing certificate** from DigiCert directly inside Key Vault.
 
 ```azurepowershell-interactive
-$Policy = New-AzKeyVaultCertificatePolicy -SecretContentType "application/x-pkcs12" -SubjectName "CN=contoso.com" -IssuerName DigiCertCA -ValidityInMonths 12 -RenewAtNumberOfDaysBeforeExpiry 60
+$Policy = New-AzKeyVaultCertificatePolicy -SecretContentType "application/x-pkcs12" -SubjectName "CN=contoso.com" -IssuerName "TestIssuer01" -ValidityInMonths 12 -RenewAtNumberOfDaysBeforeExpiry 60
 Add-AzKeyVaultCertificate -VaultName "Contoso-Vaultname" -Name "ExampleCertificate" -CertificatePolicy $Policy
 ```
 
@@ -125,7 +123,7 @@ Certificate has now been successfully issued by Digicert CA inside specified Key
 
 If the certificate issued is in 'disabled' status in the Azure portal, proceed to view the **Certificate Operation** to review the DigiCert error message for that certificate.
 
- ![Certificate properties](../media/certificates/how-to-integrate-certificate-authority/certificate-operation-select.png)
+ ![Certificate operation](../media/certificates/how-to-integrate-certificate-authority/certificate-operation-select.png)
 
 For more information, see the [Certificate operations in the Key Vault REST API reference](/rest/api/keyvault). For information on establishing permissions, see [Vaults - Create or Update](/rest/api/keyvault/vaults/createorupdate) and [Vaults - Update Access Policy](/rest/api/keyvault/vaults/updateaccesspolicy).
 

articles/machine-learning/policy-reference.md

@@ -1,7 +1,7 @@
 ---
 title: Built-in policy definitions for Azure Machine Learning
 description: Lists Azure Policy built-in policy definitions for Azure Machine Learning. These built-in policy definitions provide common approaches to managing your Azure resources.
-ms.date: 10/07/2020
+ms.date: 10/20/2020
 author: j-martens
 ms.author: jmartens
 ms.topic: reference

articles/mariadb/policy-reference.md

@@ -1,7 +1,7 @@
 ---
 title: Built-in policy definitions for Azure Database for MariaDB
 description: Lists Azure Policy built-in policy definitions for Azure Database for MariaDB. These built-in policy definitions provide common approaches to managing your Azure resources.
-ms.date: 10/07/2020
+ms.date: 10/20/2020
 ms.topic: reference
 author: ajlam
 ms.author: andrela