Merge pull request #271879 from MicrosoftDocs/main

v-ccolin · web-flow · commit c7a36057f701 · 2024-04-11T12:15:08.000+01:00
Merge main to live, 4 AM
diff --git a/.openpublishing.publish.config.json b/.openpublishing.publish.config.json
@@ -1232,6 +1232,7 @@
   ".openpublishing.redirection.government.json",
   ".openpublishing.redirection.guidance.json",
   ".openpublishing.redirection.industry.json",
+  ".openpublishing.redirection.iot-accelerators.json",
   ".openpublishing.redirection.iot-develop.json",
   ".openpublishing.redirection.iot-hub-device-update.json",
   ".openpublishing.redirection.json",
@@ -1297,7 +1298,6 @@
   "articles/hdinsight/.openpublishing.redirection.hdinsight.json",
   "articles/healthcare-apis/.openpublishing.redirection.healthcare-apis.json",
   "articles/internet-peering/.openpublishing.redirection.internet-peering.json",
-  "articles/iot-accelerators/.openpublishing.redirection.iot-accelerators.json",
   "articles/iot-central/.openpublishing.redirection.iot-central.json",
   "articles/iot-dps/.openpublishing.redirection.iot-dps.json",
   "articles/iot-edge/.openpublishing.redirection.iot-edge.json",
diff --git a/.openpublishing.redirection.iot-accelerators.json b/.openpublishing.redirection.iot-accelerators.json
diff --git a/articles/azure-web-pubsub/tutorial-serverless-notification.md b/articles/azure-web-pubsub/tutorial-serverless-notification.md
@@ -105,7 +105,7 @@ In this tutorial, you learn how to:
 
     # [Python](#tab/python)
     ```bash
-    func init --worker-runtime python
+    func init --worker-runtime python --model V1
     ```
     
 2. Follow the steps to install `Microsoft.Azure.WebJobs.Extensions.WebPubSub`.
diff --git a/articles/defender-for-cloud/TOC.yml b/articles/defender-for-cloud/TOC.yml
@@ -1004,7 +1004,13 @@
         - name: Unified insights from Microsoft Entra permissions management
           href: episode-forty-three.md
         - name: Agentless malware detection
-          href: episode-forty-four.md   
+          href: episode-forty-four.md
+        - name: Risk prioritization
+          href: episode-forty-five.md
+        - name: DevOps Security Capabilities in Defender CSPM
+          href: episode-forty-six.md
+        - name: Vulnerability management in Defender CSPM
+          href: episode-forty-seven.md
     - name: Manage user data
       href: privacy.md
     - name: Microsoft Defender for IoT documentation
diff --git a/articles/defender-for-cloud/episode-forty-five.md b/articles/defender-for-cloud/episode-forty-five.md
@@ -0,0 +1,36 @@
+---
+title: Risk prioritization | Defender for Cloud in the field
+description: Learn about risk prioritization in Defender for Cloud.
+ms.topic: reference
+ms.date: 04/11/2024
+---
+
+# Risk prioritization in Defender for Cloud
+
+**Episode description**: In this episode of Defender for Cloud in the Field, Aviram Yitzhak joins Yuri Diogenes to talk about recommendation prioritization in Microsoft Defender for Cloud. Aviram explains the correlation between recommendation prioritization and attack path, and when to use each dashboard. Aviram also demonstrates the user experience when using recommendation prioritization dashboard to triage recommendations based on risk factors.
+
+> [!VIDEO https://aka.ms/docs/player?id=a6d91bc3-2b57-4365-8fc9-35214d6ffb15]
+
+- [01:54](/shows/mdc-in-the-field/risk-prioritization#time=01m54s) - What is recommendation prioritization
+- [03:51](/shows/mdc-in-the-field/risk-prioritization#time=04m25s) - How recommendations are listed in this new format
+- [04:38](/shows/mdc-in-the-field/risk-prioritization#time=06m25s) - When to use recommendation prioritization
+- [07:58](/shows/mdc-in-the-field/risk-prioritization#time=09m45s) - Correlation with secure score
+- [08:17](/shows/mdc-in-the-field/risk-prioritization#time=11m15s) - Demonstration
+
+## Recommended resources
+
+- Learn more about [Risk prioritization](risk-prioritization.md).
+- Learn more about [Microsoft Security](https://msft.it/6002T9HQY).
+- Subscribe to [Microsoft Security on YouTube](https://www.youtube.com/playlist?list=PL3ZTgFEc7LysiX4PfHhdJPR7S8mGO14YS).
+
+- Follow us on social media:
+
+  - [LinkedIn](https://www.linkedin.com/showcase/microsoft-security/)
+  - [Twitter](https://twitter.com/msftsecurity)
+
+- Join our [Tech Community](https://aka.ms/SecurityTechCommunity).
+
+## Next steps
+
+> [!div class="nextstepaction"]
+> [DevOps security capabilities in Defender CSPM](episode-forty-six.md)
diff --git a/articles/defender-for-cloud/episode-forty-four.md b/articles/defender-for-cloud/episode-forty-four.md
@@ -33,4 +33,4 @@ ms.date: 01/28/2024
 ## Next steps
 
 > [!div class="nextstepaction"]
-> [New AWS Connector in Microsoft Defender for Cloud](episode-one.md)
+> [Risk prioritization](episode-forty-five.md)
diff --git a/articles/defender-for-cloud/episode-forty-seven.md b/articles/defender-for-cloud/episode-forty-seven.md
@@ -0,0 +1,37 @@
+---
+title: Vulnerability management in Defender CSPM | Defender for Cloud in the field
+description: Learn about vulnerability management in Defender CSPM in Defender for Cloud.
+ms.topic: reference
+ms.date: 04/11/2024
+---
+
+# Vulnerability management in Defender CSPM
+
+**Episode description**: In this episode of Defender for Cloud in the Field, Shahar Bahat joins Yuri Diogenes to talk about some updates in vulnerability management in Defender for Cloud. Shahar talks about the different aspects of vulnerability management in Defender for Cloud, how to use attack path to identify the effect of a vulnerability and how to use Cloud Security Explorer to gain visualization of CVEs at scale across all your subscriptions. Shahar also demonstrates how to utilize these capabilities in Defender for Cloud.
+  
+
+> [!VIDEO https://aka.ms/docs/player?id=1827b0e1-dd27-4e83-a2b5-6adfea3f8ed5]
+
+- [01:15](/shows/mdc-in-the-field/vulnerability-management#time=01m15s) - Overview of Vulnerability Management solution in Defender for Cloud
+- [02:31](/shows/mdc-in-the-field/vulnerability-management#time=02m31s) - Insights available as a result of the vulnerability scanning
+- [03:41](/shows/mdc-in-the-field/vulnerability-management#time=03m41s) - Integration with Microsoft Threat Vulnerability Management
+- [04:52](/shows/mdc-in-the-field/vulnerability-management#time=04m52s) - Querying vulnerability scan results at scale
+- [06:53](/shows/mdc-in-the-field/vulnerability-management#time=06m53s) - Demonstration
+
+## Recommended resources
+
+- Learn more about [vulnerability management](https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/defender-for-cloud-unified-vulnerability-assessment-powered-by/ba-p/3990112).
+- Learn more about [Microsoft Security](https://msft.it/6002T9HQY).
+- Subscribe to [Microsoft Security on YouTube](https://www.youtube.com/playlist?list=PL3ZTgFEc7LysiX4PfHhdJPR7S8mGO14YS).
+
+- Follow us on social media:
+
+  - [LinkedIn](https://www.linkedin.com/showcase/microsoft-security/)
+  - [Twitter](https://twitter.com/msftsecurity)
+
+- Join our [Tech Community](https://aka.ms/SecurityTechCommunity).
+
+## Next steps
+
+> [!div class="nextstepaction"]
+> [New AWS Connector in Microsoft Defender for Cloud](episode-one.md)
diff --git a/articles/defender-for-cloud/episode-forty-six.md b/articles/defender-for-cloud/episode-forty-six.md
@@ -0,0 +1,36 @@
+---
+title: DevOps Security Capabilities in Defender CSPM | Defender for Cloud in the field
+description: Learn about DevOps security capabilities in Defender for Cloud.
+ms.topic: reference
+ms.date: 04/11/2024
+---
+
+# DevOps security capabilities in Defender CSPM
+
+**Episode description**: In this episode of Defender for Cloud in the Field, Charles Oxyer joins Yuri Diogenes to talk about DevOps security capabilities in Defender CSPM. Charles explains the importance of DevOps security in Microsoft CNAPP solution, what are the free capabilities available as part of Foundational CSPM, and what are the advanced DevOps security features included in Defender CSPM. Charles demonstrates how to improve the DevOps security posture by remediating recommendations, and how to use code to cloud contextualization with Cloud Security Explorer.
+
+> [!VIDEO https://aka.ms/docs/player?id=386a8435-8154-4c1d-90cc-324e8d41b95f]
+
+- [01:47](/shows/mdc-in-the-field/devops-security#time=01m54s) - What role does DevOps Security plays in a CNAPP solution?
+- [04:40](/shows/mdc-in-the-field/devops-security#time=04m40s) - What's new in Defender for Cloud DevOps Security GA?
+- [07:08](/shows/mdc-in-the-field/devops-security#time=07m08s) - How Defenders for Cloud DevOps Security capabilities help customers to identify risk across devops state?
+- [09:38](/shows/mdc-in-the-field/devops-security#time=09m38s) - Code to cloud contextualization
+- [13:44](/shows/mdc-in-the-field/devops-security#time=13m44s) - Demonstration
+
+## Recommended resources
+
+- Learn more about [Overview of Microsoft Defender for Cloud DevOps security](defender-for-devops-introduction.md).
+- Learn more about [Microsoft Security](https://msft.it/6002T9HQY).
+- Subscribe to [Microsoft Security on YouTube](https://www.youtube.com/playlist?list=PL3ZTgFEc7LysiX4PfHhdJPR7S8mGO14YS).
+
+- Follow us on social media:
+
+  - [LinkedIn](https://www.linkedin.com/showcase/microsoft-security/)
+  - [Twitter](https://twitter.com/msftsecurity)
+
+- Join our [Tech Community](https://aka.ms/SecurityTechCommunity).
+
+## Next steps
+
+> [!div class="nextstepaction"]
+> [Vulnerability anagement in Defender CSPM](episode-forty-seven.md)
diff --git a/articles/hdinsight/hdinsight-40-component-versioning.md b/articles/hdinsight/hdinsight-40-component-versioning.md
@@ -3,7 +3,7 @@ title: Open-source components and versions - Azure HDInsight 4.0
 description: Learn about the open-source  components and versions in Azure HDInsight 4.0.
 ms.service: hdinsight
 ms.topic: conceptual
-ms.date: 03/08/2023
+ms.date: 04/11/2024
 ---
 
 # HDInsight 4.0 component versions
diff --git a/articles/hdinsight/hdinsight-hadoop-provision-linux-clusters.md b/articles/hdinsight/hdinsight-hadoop-provision-linux-clusters.md
@@ -4,7 +4,7 @@ description: Set up Hadoop, Kafka, Spark, or HBase clusters for HDInsight from a
 ms.service: hdinsight
 ms.topic: conceptual
 ms.custom: hdinsightactive, devx-track-azurepowershell, linux-related-content
-ms.date: 03/16/2023
+ms.date: 04/11/2024
 ---
 
 # Set up clusters in HDInsight with Apache Hadoop, Apache Spark, Apache Kafka, and more
@@ -37,7 +37,7 @@ This article walks you through setup in the [Azure portal](https://portal.azure.
 
 ## Basics
 
-:::image type="content" source="./media/hdinsight-hadoop-provision-linux-clusters/azure-portal-cluster-basics-blank-fs.png" alt-text="hdinsight create options custom quick.":::
+:::image type="content" source="./media/hdinsight-hadoop-provision-linux-clusters/azure-portal-cluster-basics-blank-fs.png" alt-text="HDInsight create options custom quick.":::
 
 ### Project details
 
@@ -88,15 +88,15 @@ With HDInsight clusters, you can configure two user accounts during cluster crea
 The HTTP username has the following restrictions:
 
 * Allowed special characters: `_` and `@`
-* Characters not allowed:  #;."',/:`!*?$(){}[]<>|&--=+%~^space
+* Characters not allowed:  `#;."',/:`!*?$(){}[]<>|&--=+%~^space`
 * Max length: 20
 
 The SSH username has the following restrictions:
 
 * Allowed special characters:`_` and `@`
-* Characters not allowed:  #;."',/:`!*?$(){}[]<>|&--=+%~^space
+* Characters not allowed:  `#;."',/:`!*?$(){}[]<>|&--=+%~^space`
 * Max length: 64
-* Reserved names: hadoop, users, oozie, hive, mapred, ambari-qa, zookeeper, tez, hdfs, sqoop, yarn, hcat, ams, hbase, administrator, admin, user, user1, test, user2, test1, user3, admin1, 1, 123, a, actuser, adm, admin2, aspnet, backup, console, david, guest, john, owner, root, server, sql, support, support_388945a0, sys, test2, test3, user4, user5, spark
+* Reserved names: hadoop, users, oozie, hive, mapred, ambari-qa, zookeeper, tez, hdfs, sqoop, yarn, hcat, ams, hbase, administrator, admin, user, user1, test, user2, test1, user3, admin1, 1, 123, a, `actuser`, adm, admin2, aspnet, backup, console, David, guest, John, owner, root, server, sql, support, support_388945a0, sys, test2, test3, user4, user5, spark
 
 ## Storage
 
@@ -158,7 +158,7 @@ Ambari is used to monitor HDInsight clusters, make configuration changes, and st
 
 ## Security + networking
 
-:::image type="content" source="./media/hdinsight-hadoop-provision-linux-clusters/azure-portal-cluster-security-networking.png" alt-text="hdinsight create options choose enterprise security package.":::
+:::image type="content" source="./media/hdinsight-hadoop-provision-linux-clusters/azure-portal-cluster-security-networking.png" alt-text="HDInsight create options choose enterprise security package.":::
 
 ### Enterprise security package
 
@@ -247,7 +247,7 @@ For more information, see [Sizes for virtual machines](../virtual-machines/sizes
 > The added disks are only configured for node manager local directories and **not for datanode directories**
 
 
-HDInsight cluster comes with pre-defined disk space based on SKU. Running some  large applications, can lead to insufficient disk space, (with disk full error -  ```LinkId=221672#ERROR_NOT_ENOUGH_DISK_SPACE```) and job failures. 
+HDInsight cluster comes with pre-defined disk space based on SKU. If you run some large applications, can lead to insufficient disk space, with disk full error -  `LinkId=221672#ERROR_NOT_ENOUGH_DISK_SPACE` and job failures. 
 
 More discs can be added to the cluster using the new feature **NodeManager**’s local directory. At the time of Hive and Spark cluster creation, the number of discs can be selected and added to the worker nodes. The selected disk, which will be of size 1TB each, would be part of **NodeManager**'s local directories.
 
diff --git a/articles/hdinsight/hdinsight-overview-versioning.md b/articles/hdinsight/hdinsight-overview-versioning.md
@@ -3,7 +3,7 @@ title: Versioning introduction - Azure HDInsight
 description: Learn how versioning works in Azure HDInsight.
 ms.service: hdinsight
 ms.topic: conceptual
-ms.date: 04/03/2023
+ms.date: 04/11/2024
 ---
 
 # How versioning works in HDInsight
diff --git a/articles/hdinsight/hdinsight-private-link.md b/articles/hdinsight/hdinsight-private-link.md
@@ -5,7 +5,7 @@ ms.service: hdinsight
 ms.topic: conceptual
 ms.author: piyushgupta
 author: piyush-gupta1999
-ms.date: 03/30/2023
+ms.date: 04/11/2024
 ---
 
 # Enable Private Link on an HDInsight cluster
@@ -42,7 +42,7 @@ To start, deploy the following resources if you haven't created them already. Yo
 ## <a name="DisableNetworkPolicy"></a>Step 2: Configure HDInsight subnet
 
 - **Disable privateLinkServiceNetworkPolicies on subnet.** In order to choose a source IP address for your Private Link service, an explicit disable setting ```privateLinkServiceNetworkPolicies``` is required on the subnet. Follow the instructions here to [disable network policies for Private Link services](../private-link/disable-private-link-service-network-policy.md).
-- **Enable Service Endpoints on subnet.** For successful deployment of a Private Link HDInsight cluster, we recommend that you add the *Microsoft.SQL*, *Microsoft.Storage*, and *Microsoft.KeyVault* service endpoint(s) to your subnet prior to cluster deployment.  [Service endpoints](../virtual-network/virtual-network-service-endpoints-overview.md) route traffic directly from your virtual network to the service on the Microsoft Azure backbone network. Keeping traffic on the Azure backbone network allows you to continue auditing and monitoring outbound Internet traffic from your virtual networks, through forced-tunneling, without impacting service traffic. 
+- **Enable Service Endpoints on subnet.** For successful deployment of a Private Link HDInsight cluster, we recommend that you add the `Microsoft.SQL`, `Microsoft.Storage`, and `Microsoft.KeyVault` service endpoint(s) to your subnet prior to cluster deployment.  [Service endpoints](../virtual-network/virtual-network-service-endpoints-overview.md) route traffic directly from your virtual network to the service on the Microsoft Azure backbone network. Keeping traffic on the Azure backbone network allows you to continue auditing and monitoring outbound Internet traffic from your virtual networks, through forced-tunneling, without impacting service traffic. 
 
 
 ## <a name="NATorFirewall"></a>Step 3: Deploy NAT gateway *or* firewall
diff --git a/articles/hdinsight/kafka/apache-esp-kafka-ssl-encryption-authentication.md b/articles/hdinsight/kafka/apache-esp-kafka-ssl-encryption-authentication.md
@@ -4,7 +4,7 @@ description: Set up TLS encryption for communication between Kafka clients and K
 ms.service: hdinsight
 ms.topic: how-to
 ms.custom: hdinsightactive
-ms.date: 04/08/2024
+ms.date: 04/11/2024
 ---
 
 # Set up TLS encryption and authentication for ESP Apache Kafka cluster in Azure HDInsight
diff --git a/articles/hdinsight/kafka/connect-kafka-cluster-with-vm-in-different-vnet.md b/articles/hdinsight/kafka/connect-kafka-cluster-with-vm-in-different-vnet.md
@@ -4,7 +4,7 @@ description: Learn how to connect Apache Kafka cluster with VM in different VNet
 ms.service: hdinsight
 ms.topic: how-to
 ms.custom: hdinsightactive
-ms.date: 03/31/2023
+ms.date: 04/11/2024
 ---
 
 # How to connect Kafka cluster with VM in different VNet
diff --git a/articles/hdinsight/kafka/rest-proxy.md b/articles/hdinsight/kafka/rest-proxy.md
@@ -4,7 +4,7 @@ description: Learn how to do Apache Kafka operations using a Kafka REST proxy on
 ms.service: hdinsight
 ms.topic: how-to
 ms.custom:
-ms.date: 03/23/2023
+ms.date: 04/09/2024
 ---
 
 # Interact with Apache Kafka clusters in Azure HDInsight using a REST proxy
diff --git a/articles/hdinsight/log-analytics-migration.md b/articles/hdinsight/log-analytics-migration.md
@@ -5,7 +5,7 @@ ms.service: hdinsight
 ms.topic: how-to
 ms.author: sairamyeturi
 author: yeturis
-ms.date: 03/21/2023
+ms.date: 04/11/2024
 ---
 
 # Log Analytics migration guide for Azure HDInsight clusters
diff --git a/articles/hdinsight/spark/apache-troubleshoot-spark.md b/articles/hdinsight/spark/apache-troubleshoot-spark.md
@@ -3,7 +3,7 @@ title: Troubleshoot Apache Spark in Azure HDInsight
 description: Get answers to common questions about working with Apache Spark and Azure HDInsight.
 ms.service: hdinsight
 ms.topic: troubleshooting
-ms.date: 03/20/2023
+ms.date: 04/11/2024
 ---
 
 # Troubleshoot Apache Spark by using Azure HDInsight
