Merge pull request #292689 from MicrosoftDocs/main

Publish to live, Tuesday 4 AM PST, 1/7

Author: ttorble

articles/backup/azure-kubernetes-service-cluster-backup-concept.md

@@ -37,6 +37,8 @@ Azure Backup now allows you to back up AKS clusters (cluster resources and persi
 
 - If Storage Account, to be provided as input for Extension installation, is under Virtual Network/Firewall, then BackupVault needs to be added as trusted access in Storage Account Network Settings. [Learn how to grant access to trusted Azure service](../storage/common/storage-network-security.md?tabs=azure-portal#grant-access-to-trusted-azure-services), which helps to store backups in the Vault datastore
 
+- The blob container provided in input during extension installation should not contain any files unrelated to backup.   
+
 Learn [how to manage the operation to install Backup Extension using Azure CLI](azure-kubernetes-service-cluster-manage-backups.md#backup-extension-related-operations).
 
 ## Trusted Access
@@ -70,10 +72,14 @@ To enable backup for an AKS cluster, see the following prerequisites: .
 
 - The Backup Extension during installation fetches Container Images stored in Microsoft Container Registry (MCR). If you enable a firewall on the AKS cluster, the extension installation process might fail due to access issues on the Registry. Learn [how to allow MCR access from the firewall](/azure/container-registry/container-registry-firewall-access-rules#configure-client-firewall-rules-for-mcr).
 
-- In case you have the cluster in a Private Virtual Network and Firewall, apply the following FQDN/application rules: `*.microsoft.com`, `*.azure.com`, `*.core.windows.net`, `*.azmk8s.io`, `*.digicert.com`, `*.digicert.cn`, `*.geotrust.com`, `*.msocsp.com`. Learn [how to apply FQDN rules](../firewall/dns-settings.md).
+- In case you have the cluster in a Private Virtual Network and Firewall, apply the following FQDN/application rules: `*.microsoft.com`, `mcr.microsoft.com`, `data.mcr.microsoft.com`, `crl.microsoft.com`, `mscrl.microsoft.com`, `oneocsp.microsoft.com` , `*.azure.com`, `management.azure.com`, `gcs.prod.monitoring.core.windows.net`, `*.prod.warm.ingest.monitor.core.windows.net`, `*.blob.core.windows.net`, `*.azmk8s.io`, `ocsp.digicert.com`, `cacerts.digicert.com`, `crl3.digicert.com`, `crl4.digicert.com`, `ocsp.digicert.cn`, `cacerts.digicert.cn`, `cacerts.geotrust.com`, `cdp.geotrust.com`, `status.geotrust.com`, `ocsp.msocsp.com`,  `*.azurecr.io`, `docker.io`, `*.dp.kubernetesconfiguration.azure.com`. Learn [how to apply FQDN rules](../firewall/dns-settings.md).
 
 - If you have any previous installation of *Velero* in the AKS cluster, you need to delete it before installing Backup Extension.
 
+- If you are using [Azure policies in your AKS cluster](/azure/aks/policy-reference), ensure that the extension namespace *dataprotection-microsoft* is excluded from these policies to allow backup and restore operations to run successfully.
+
+- If you are using Azure network security group to filter network traffic between Azure resources in an Azure virtual network then set an inbound rule to allow service tags *azurebackup* and *azurecloud*. 
+     
 
 ## Required roles and permissions
 

articles/cdn/edgio-retirement-faq.md

@@ -48,7 +48,7 @@ The following process is a recap of the migration options we sent to all users:
 
 If Azure CDN from Edgio customers don't [set the Feature Flag](../azure-resource-manager/management/preview-features.md) `DoNotForceMigrateEdgioCDNProfiles` before 7 January 2025, Microsoft will migrate existing Azure CDN from Edgio profiles to Azure Front Door Standard profiles. Migration is happening between January 7th and 14th, 2025. These migrations to Azure Front Door are performed on a "best effort" basis, and doing so might cause issues related to the billing, features, availability, and/or performance you're currently consuming with Azure CDN from Edgio. Hence, as noted previously, customers should migrate themselves and not rely on this automatic migration.
 Important notes regarding these "best effort" automatic migrations to Azure Front Door Standard:
--	Between January 7th and 14th, 2025 you'll receive an email notification confirming if your workloads have been successfully migrated to Azure Front Door Standard or if the migration was unsuccessful. If the migration was successful and you encounter issues with availability, performance, or feature functionality, contact Microsoft support for assistance. For customers whom the migration unsuccessful will be provided guidance on possible next steps they can take.
+-	Between January 7th and 14th, 2025 you'll receive an email notification confirming if your workloads have been successfully migrated to Azure Front Door Standard or if the migration was unsuccessful. If the migration was successful and you encounter issues with availability, performance, or feature functionality, contact Microsoft support for assistance. For customers whom the migration unsuccessful should reach out to Azure support for assistance and move to Akamai/another CDN provider if AFD is not suitable for their traffic.
 -	We're migrating customers to Azure Front Door Standard as it may be more cost-effective. If you need the extra features of Azure Front Door Premium, you can [upgrade your service](../frontdoor/tier-upgrade.md).
 -	Existing Azure CDN from Edgio domains (custom domains and/or *.azureedge.net domains) will be added as custom domains on the new Front Door endpoints and we'll switch the traffic from Edgio platform to Front Door platform.
 -	We are not able to roll back the automatic migration.
@@ -121,6 +121,10 @@ No.
 
 No. We're doing this migration on a "best effort" basis between January 7th and 14th, 2025 for customers who did not take action prior. Therefore we can't inform each customer regarding migration timings, but as noted previously after the migration we'll inform you as to whether it was successful.
 
+### I am not able to stop my Azure CDN from Edgio anymore. What is happening?
+
+For profiles that didn't apply the feature flag, configuration was frozen on January 3rd. These profiles will no longer be allowed to stop their endpoints. You can delete the profile instead. Do note that for Azure CDN from Edgio, stopping an endpoint has always meant as a configuration deletion. When an endpoint is disabled or stopped for any reason, all resources configured through the Edgio supplemental portal will be cleaned up. These configurations can't be restored automatically by restarting the endpoint. 
+
 ## Next steps
 
 [Set up preview features](../azure-resource-manager/management/preview-features.md)

articles/communication-services/concepts/numbers/phone-number-management-for-norway.md

@@ -22,7 +22,7 @@ Use the below tables to find all the relevant information on number availability
 | :---------- | :------------------- | :------------------- | :------------------- | :--------------------- |
 | Toll-Free   |-  | - | General Availability | General Availability\* |
 | Local       | -                    | -                    | General Availability | General Availability\* |
-|Alphanumeric Sender ID\**|General Availability  |-|-|-|
+
 
 \* Please refer to [Inbound calling capabilities page](../telephony/inbound-calling-capabilities.md) for details.
 

articles/hdinsight/azure-monitor-agent.md

@@ -3,7 +3,7 @@ title: Azure Monitor Agent (AMA) migration guide for Azure HDInsight clusters
 description: Learn how to migrate to Azure Monitor Agent (AMA) in Azure HDInsight clusters.
 ms.service: azure-hdinsight
 ms.topic: how-to
-ms.date: 12/03/2024
+ms.date: 01/07/2024
 ---
 
 # Azure Monitor Agent (AMA) migration guide for Azure HDInsight clusters
@@ -513,6 +513,8 @@ We also improved the out-of-box dashboards both at the cluster-level. There's a
 
     * Microsoft will not patch the Azure Monitor integration (preview) clusters except for critical security issues. 
 
+* `HDInsightGatewayAuditLogs_CL` table will no longer be functional from September 14, 2026, as The [Azure Monitor HTTP Data Collector API](/previous-versions/azure/azure-monitor/logs/data-collector-api?tabs=powershell) is being deprecated.
+  
 ## Appendix: Table mapping
 
 For the log table mappings from the classic Azure Monitor integration to the new one, see [Log table mapping](./monitor-hdinsight-reference.md#log-table-mapping). 

articles/migrate/vmware/tutorial-import-vmware-using-rvtools-xlsx.md

@@ -61,6 +61,8 @@ To create a project and register the Azure Migrate appliance, you must have an A
 
 Follow the instructions on [how to set up an Azure Migrate project](../tutorial-discover-import.md#set-up-a-project).
 
+> [!NOTE]
+> Import using RVTools is not supported for Migrate projects configured with private endpoints.
 
 ## Import the servers using the RVTools XLSX file (preview)
 

articles/partner-solutions/includes/subscribe.md

@@ -0,0 +1,21 @@
+---
+author: ProfessorKendrick
+ms.topic: include
+ms.date: 01/06/2025
+ms.author: kkendrick
+---
+
+You can subscribe to this service directly from the [Azure portal](#subscribe-from-azure-portal). 
+
+1. From the Azure portal menu's global search bar, search for **marketplace**. Select **Marketplace** from the **Services** results. 
+
+    The Marketplace's **Get Started** page displays in the working pane. 
+
+1. From the command bar, type the name of the service into the **Search the Marketplace** search bar.
+
+1. Choose the provider from the search results displayed in the working pane.
+
+1. Choose your preferred plan, then select **Subscribe**. 
+
+    The **Create** resource pane displays in the working pane. 
+

articles/partner-solutions/index.yml

@@ -12,10 +12,10 @@ metadata:
   ms.custom:
     - ignite-2023
     - build-2024
-  ms.date: 04/08/2024
+  ms.date: 01/06/2025
 
 highlightedContent:
-# itemType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | tutorial | whats-new
+
   items:
     - title: What are Azure Native ISV Services?
       itemType: overview
@@ -27,75 +27,65 @@ highlightedContent:
 productDirectory:
   title: Available Services
   items:
-    # Card 1
-    - title: Elastic
-      imageSrc: ./media/index/elastic.svg
+    - title: Astro
+      imageSrc: ./media/index/astronomer.svg
       links:
-        - url: ./elastic/overview.md
-          text: Build modern search experiences and maximize visibility into the health, performance, and security of your infrastructure, applications, and data.
-    # Card 2
+        - url: ./astronomer/astronomer-overview.md
+          text: Deploy a fully managed and seamless Apache Airflow on Astro on Azure.
+    - title: Confluent
+      imageSrc: ./media/index/confluent.svg
+      links:
+        - url: ./apache-kafka-confluent-cloud/overview.md
+          text: Deploy a fully managed, cloud-native Apache Kafka service.
     - title: Datadog 
       imageSrc: ./media/index/datadog.svg
       links:
         - url: ./datadog/overview.md
           text: Cloud-scale observability and security for your Azure, hybrid, or multicloud environment to troubleshoot quickly, increase uptime, and control costs.
-    # Card 3
-    - title: Logz.io
-      imageSrc: ./media/index/logz.io.svg
-      links:
-        - url: ./logzio/overview.md
-          text: Centralize log, metric, and tracing analytics in one observability platform.
-  # Card 4
     - title: Dynatrace
       imageSrc: ./media/index/dynatrace.svg
       links:
         - url: ./dynatrace/dynatrace-overview.md
           text:  Get deep cloud observability, advanced AIOps, and continuous runtime application security.
-  # Card 5
-    - title: Confluent
-      imageSrc: ./media/index/confluent.svg
+    - title: Elastic
+      imageSrc: ./media/index/elastic.svg
       links:
-        - url: ./apache-kafka-confluent-cloud/overview.md
-          text: Deploy a fully managed, cloud-native Apache Kafka service.
-  # Card 6
-    - title: NGINX
-      imageSrc: ./media/index/nginx.svg
+        - url: ./elastic/overview.md
+          text: Build modern search experiences and maximize visibility into the health, performance, and security of your infrastructure, applications, and data.
+    - title: Informatica
+      imageSrc: ./media/index/informatica.svg
       links:
-        - url: ./nginx/nginx-overview.md
-          text: Deliver secure, high-performance applications by using familiar and trusted load-balancing solutions.
-  # Card 7
-    - title: Qumulo
-      imageSrc: ./media/index/qumulo.svg
+        - url: ./informatica/informatica-overview.md
+          text: A comprehensive AI-powered cloud data management platform for data and application integration, data quality, data governance and privacy and master data management.
+    - title: Logz.io
+      imageSrc: ./media/index/logz.io.svg
       links:
-        - url: ./qumulo/qumulo-overview.md
-          text: Use a multi-petabyte scale, single namespace, multi-protocol file data platform with the performance, security, and simplicity to meet the most demanding enterprise workloads.
-  # Card 8
+        - url: ./logzio/overview.md
+          text: Centralize log, metric, and tracing analytics in one observability platform.
+    - title: Neon Serverless Postgres
+      imageSrc: ./media/index/neon.svg
+      links:
+        - url: ./neon/overview.md
+          text: Neon offers a serverless Postgres solution that leverages the principles of serverless computing to provide scalable and flexible database services.
     - title: New Relic
       imageSrc: ./media/index/new-relic.svg
       links:
         - url: ./new-relic/new-relic-overview.md
           text: Get end-to-end cloud observability to analyze and troubleshoot performance of applications, infrastructure, logs, real-user monitoring and more.
-  # Card 9
+    - title: NGINX
+      imageSrc: ./media/index/nginx.svg
+      links:
+        - url: ./nginx/nginx-overview.md
+          text: Deliver secure, high-performance applications by using familiar and trusted load-balancing solutions.
     - title: Palo Alto Networks
       imageSrc: ./media/index/palo-alto.svg
       links:
         - url: ./palo-alto/palo-alto-overview.md
           text: Get a next generation firewall solution integrated with Azure that you can use to protect your organization.
-  # Card 10
-    - title: Astro
-      imageSrc: ./media/index/astronomer.svg
-      links:
-        - url: ./astronomer/astronomer-overview.md
-          text: Deploy a fully managed and seamless Apache Airflow on Astro on Azure.
-  # Card 11
-    - title: Informatica
-      imageSrc: ./media/index/informatica.svg
-      links:
-        - url: ./informatica/informatica-overview.md
-          text: A comprehensive AI-powered cloud data management platform for data and application integration, data quality, data governance and privacy and master data management.
-  # Card 12
-    - title: Neon Serverless Postgres
-      imageSrc: ./media/index/neon.svg
+    - title: Qumulo
+      imageSrc: ./media/index/qumulo.svg
       links:
-        - url: ./neon/overview.md
-          text: Neon offers a serverless Postgres solution that leverages the principles of serverless computing to provide scalable and flexible database services.
+        - url: ./qumulo/qumulo-overview.md
+          text: Use a multi-petabyte scale, single namespace, multi-protocol file data platform with the performance, security, and simplicity to meet the most demanding enterprise workloads.
+
+

articles/partner-solutions/overview.md

@@ -1,31 +1,35 @@
 ---
 title: Overview of Azure Native ISV Services
 description: Learn about the Azure Native ISV Services' features and benefits, including unified operations and integrations.
-
-
 ms.topic: conceptual
-ms.date: 10/30/2024
+ms.date: 01/06/2025
 
 ---
 
 # Azure Native ISV Services overview
 
-Easily provision, manage, and tightly integrate *independent software vendor (ISV)* software and services on Azure with Azure Native ISV Services. Microsoft and the ISV work together to develop and manage the service. Currently, several services are publicly available across these areas: observability, data, networking, and storage. 
+Easily provision, manage, and tightly integrate *independent software vendor (ISV)* software and services on Azure with Azure Native ISV Services. Microsoft and the ISV work together to develop and manage the service. 
+
+Currently, services are publicly available in these areas: 
+
+- Observability
+- Data and storage
+- Networking and security
 
-For a list of all our current ISV partner services, see [Extend Azure with Azure Native ISV Services](partners.md).
+For a list of available partner services, see [Extend Azure with Azure Native ISV Services](partners.md).
 
-## Features of Azure Native ISV Services
+## Features
 
-A list of features of any Azure Native ISV Service listed follows.
+Each Azure Native ISV Service offers unified operations and integrations. 
 
 ### Unified operations
 
-- Integrated onboarding: Use ARM template, SDK, CLI, and the Azure portal to create and manage services.
-- Unified management: Manage entire lifecycle of these ISV services through the Azure portal.
-- Unified access: Use Single Sign-on (SSO) through Microsoft Entra ID--no need for separate ISV authentications for subscribing to the service.
+- **Integrated onboarding:** Use ARM template, SDK, CLI, and the Azure portal to create and manage services.
+- **Unified management:** Manage the service's entire lifecycle through the Azure portal.
+- **Unified access:** Utilize Single Sign-on (SSO) through [Microsoft Entra ID](/entra/fundamentals/whatis). 
 
 ### Integrations
 
-- Logs and metrics: Seamlessly direct logs and metrics from Azure Monitor to the Azure Native ISV Service using just a few gestures. You can configure autodiscovery of resources to monitor, and set up automatic log forwarding and metrics shipping. You can easily do the setup in Azure, without needing to create more infrastructure or write custom code.
-- Virtual network injection: Provides private data plane access to Azure Native ISV services from customers’ virtual networks.
-- Unified billing: Engage with a single entity, Microsoft Azure Marketplace, for billing. No separate license purchase is required to use Azure Native ISV Services.
+- **Logs and metrics:** Seamlessly direct logs and metrics from Azure Monitor to the Azure Native ISV Service using just a few gestures. You can configure autodiscovery of resources to monitor, and set up automatic log forwarding and metrics shipping. You can easily do the setup in Azure, without needing to create more infrastructure or write custom code.
+- **Virtual network injection:** Provides private data plane access to Azure Native ISV services from customers’ virtual networks.
+- **Unified billing:** Engage with a single entity, Microsoft Azure Marketplace, for billing. No separate license purchase is required to use Azure Native ISV Services.