Merge branch 'main' into winona-rest-refactor

Author: w-azure

articles/active-directory/app-proxy/application-proxy-security.md

@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.subservice: app-proxy
 ms.workload: identity
 ms.topic: conceptual
-ms.date: 04/21/2021
+ms.date: 09/02/2022
 ms.author: kenwith
 ms.reviewer: ashishj
 ---
@@ -23,7 +23,7 @@ The following diagram shows how Azure AD enables secure remote access to your on
 
 ## Security benefits
 
-Azure AD Application Proxy offers the following security benefits:
+Azure AD Application Proxy offers many security benefits including authenticated access, conditional access, traffic termination, all outbound access, cloud scale analytics and machine learning, and remote access as a service. It is important to note that even with all of the added security provided by Application Proxy, the systems being accessed must continually be updated with the latest patches.
 
 ### Authenticated access 
 

articles/active-directory/fundamentals/2-secure-access-current-state.md

@@ -8,7 +8,7 @@ ms.service: active-directory
 ms.workload: identity
 ms.subservice: fundamentals
 ms.topic: conceptual
-ms.date: 12/18/2020
+ms.date: 09/02/2022
 ms.author: gasinh
 ms.reviewer: ajburnle
 ms.custom: "it-pro, seodec18"

articles/active-directory/governance/create-lifecycle-workflow.md

@@ -306,5 +306,6 @@ For further details on task definitions and their parameters, see [Lifecycle Wor
 
 ## Next steps
 
+- [Create workflow (lifecycle workflow)](/graph/api/identitygovernance-lifecycleworkflowscontainer-post-workflows?view=graph-rest-beta)
 - [Manage a workflow's properties](manage-workflow-properties.md)
 - [Manage Workflow Versions](manage-workflow-tasks.md)

articles/active-directory/governance/delete-lifecycle-workflow.md

@@ -86,5 +86,7 @@ GET https://graph.microsoft.com/beta/identityGovernance/lifecycleWorkflows/delet
 > Permanently deleted workflows are not able to be restored.
 
 ## Next steps
+
+- [Delete workflow (lifecycle workflow)](/graph/api/identitygovernance-workflow-delete?view=graph-rest-beta)
 - [What are Lifecycle Workflows?](what-are-lifecycle-workflows.md)
 - [Manage Lifecycle Workflow Versions](manage-workflow-tasks.md)

articles/active-directory/governance/on-demand-workflow.md

@@ -73,5 +73,6 @@ Content-type: application/json
 
 ## Next steps
 
+- [workflow: activate (run a workflow on-demand)](/graph/api/identitygovernance-workflow-activate?view=graph-rest-beta)
 - [Customize the schedule of workflows](customize-workflow-schedule.md)
 - [Delete a Lifecycle workflow](delete-lifecycle-workflow.md)

articles/azure-government/compliance/azure-services-in-fedramp-auditscope.md

@@ -5,7 +5,7 @@ ms.topic: article
 ms.service: azure-government
 ms.custom: references_regions
 recommendations: false
-ms.date: 08/19/2022
+ms.date: 09/02/2022
 ---
 
 # Azure, Dynamics 365, Microsoft 365, and Power Platform services compliance scope
@@ -177,7 +177,6 @@ This article provides a detailed list of Azure, Dynamics 365, Microsoft 365, and
 | [Media Services](/azure/media-services/) | ✅ | ✅ |
 | [Microsoft 365 Defender](/microsoft-365/security/defender/) (formerly Microsoft Threat Protection) | ✅ | ✅ |
 | [Microsoft Azure Attestation](../../attestation/index.yml)| ✅ | ✅ |
-| [Microsoft Azure Marketplace portal](https://azuremarketplace.microsoft.com/marketplace/)| ✅ | ✅ |
 | [Microsoft Azure portal](https://azure.microsoft.com/features/azure-portal/)| ✅ | ✅ |
 | [Microsoft Defender for Cloud](../../defender-for-cloud/index.yml) (formerly Azure Security Center) | ✅ | ✅ |
 | [Microsoft Defender for Cloud Apps](/defender-cloud-apps/) (formerly Microsoft Cloud App Security) | ✅ | ✅ |
@@ -187,8 +186,8 @@ This article provides a detailed list of Azure, Dynamics 365, Microsoft 365, and
 | [Microsoft Graph](/graph/) | ✅ | ✅ |
 | [Microsoft Intune](/mem/intune/) | ✅ | ✅ |
 | [Microsoft Sentinel](../../sentinel/index.yml)  | ✅ | ✅ |
-| **Service** | **FedRAMP High** | **DoD IL2** |
 | [Microsoft Stream](/stream/) | ✅ | ✅ |
+| **Service** | **FedRAMP High** | **DoD IL2** |
 | [Microsoft Threat Experts](/microsoft-365/security/defender-endpoint/microsoft-threat-experts) | ✅ | ✅ |
 | [Migrate](../../migrate/index.yml) | ✅ | ✅ |
 | [Network Watcher](../../network-watcher/index.yml) (incl. [Traffic Analytics](../../network-watcher/traffic-analytics.md)) | ✅ | ✅ |
@@ -203,8 +202,8 @@ This article provides a detailed list of Azure, Dynamics 365, Microsoft 365, and
 | [Power BI Embedded](/power-bi/developer/embedded/) | ✅ | ✅ |
 | [Power Data Integrator for Dataverse](/power-platform/admin/data-integrator) (formerly Dynamics 365 Integrator App) | ✅ | ✅ |
 | [Power Virtual Agents](/power-virtual-agents/) | ✅ | ✅ |
-| **Service** | **FedRAMP High** | **DoD IL2** |
 | [Private Link](../../private-link/index.yml) | ✅ | ✅ |
+| **Service** | **FedRAMP High** | **DoD IL2** |
 | [Public IP](../../virtual-network/ip-services/public-ip-addresses.md) | ✅ | ✅ |
 | [Resource Graph](../../governance/resource-graph/index.yml) | ✅ | ✅ |
 | [Resource Mover](../../resource-mover/index.yml) | ✅ | ✅ |
@@ -219,8 +218,8 @@ This article provides a detailed list of Azure, Dynamics 365, Microsoft 365, and
 | [SQL Server Registry](/sql/sql-server/end-of-support/sql-server-extended-security-updates) | ✅ | ✅ |
 | [SQL Server Stretch Database](../../sql-server-stretch-database/index.yml) | ✅ | ✅ |
 | [Storage: Archive](../../storage/blobs/access-tiers-overview.md) | ✅ | ✅ |
-| **Service** | **FedRAMP High** | **DoD IL2** |
 | [Storage: Blobs](../../storage/blobs/index.yml) (incl. [Azure Data Lake Storage Gen2](../../storage/blobs/data-lake-storage-introduction.md)) | ✅ | ✅ |
+| **Service** | **FedRAMP High** | **DoD IL2** |
 | [Storage: Disks (incl. managed disks)](../../virtual-machines/managed-disks-overview.md) | ✅ | ✅ |
 | [Storage: Files](../../storage/files/index.yml) | ✅ | ✅ |
 | [Storage: Queues](../../storage/queues/index.yml) | ✅ | ✅ |
@@ -235,8 +234,8 @@ This article provides a detailed list of Azure, Dynamics 365, Microsoft 365, and
 | [Virtual Network](../../virtual-network/index.yml) | ✅ | ✅ |
 | [Virtual Network NAT](../../virtual-network/nat-gateway/index.yml) | ✅ | ✅ |
 | [Virtual WAN](../../virtual-wan/index.yml) | ✅ | ✅ |
-| **Service** | **FedRAMP High** | **DoD IL2** |
 | [VPN Gateway](../../vpn-gateway/index.yml) | ✅ | ✅ |
+| **Service** | **FedRAMP High** | **DoD IL2** |
 | [Web Application Firewall](../../web-application-firewall/index.yml) | ✅ | ✅ |
 | [Web Apps (App Service)](../../app-service/index.yml) | ✅ | ✅ |
 | [Windows 10 IoT Core Services](/windows-hardware/manufacture/iot/iotcoreservicesoverview) | ✅ | ✅ |

articles/azure-resource-manager/bicep/toc.yml

@@ -47,20 +47,16 @@
     href: /events/learntv/learnlive-iac-and-bicep/
 - name: Samples - Azure Services
   items:
-  - name: Advisor
-    items:
-    - name: Alerts
-      href: ../../advisor/advisor-alerts-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
   - name: AI + Machine Learning
     items:
     - name: Cognitive Search
       href: ../../search/search-get-started-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Cognitive Services
       href: ../../cognitive-services/create-account-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
-    - name: Azure Machine Learning secure workspace
-      href: ../../machine-learning/tutorial-create-secure-workspace-template.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Data Science Virtual Machine
       href: ../../machine-learning/data-science-virtual-machine/dsvm-tutorial-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
+    - name: Machine Learning secure workspace
+      href: ../../machine-learning/tutorial-create-secure-workspace-template.md?toc=/azure/azure-resource-manager/bicep/toc.json
   - name: Analytics
     items:
     - name: Analysis Services
@@ -81,7 +77,7 @@
       href: ../../hdinsight/spark/apache-spark-jupyter-spark-use-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Stream Analytics
       href: ../../stream-analytics/quick-create-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
-    - name: Azure Synapse Analytics - Dedicated SQL pool
+    - name: Synapse Analytics - Dedicated SQL pool
       href: ../../synapse-analytics/sql-data-warehouse/quickstart-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
   - name: Compute
     items:
@@ -97,8 +93,12 @@
       href: ../../virtual-machines/windows/quick-create-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
   - name: Containers
     items:
+    - name: AKS
+      href: ../../aks/learn/quick-kubernetes-deploy-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Container Instances
       href: ../../container-instances/container-instances-quickstart-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
+    - name: Container Registry
+      href: ../../container-registry/container-registry-get-started-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Service Fabric
       href: ../../service-fabric/quickstart-cluster-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
   - name: Databases
@@ -113,6 +113,8 @@
       href: ../../mysql/quickstart-create-mysql-server-database-using-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Database for PostgreSQL
       href: ../../postgresql/quickstart-create-postgresql-server-database-using-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
+    - name: Database for PostgreSQL - Flexible Server
+      href: ../../postgresql/flexible-server/quickstart-create-server-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Database Migration Service
       href: ../../dms/create-dms-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: SQL Database
@@ -127,28 +129,48 @@
       href: ../../azure-app-configuration/quickstart-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: DevTest Labs
       href: ../../devtest-labs/create-lab-windows-vm-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
+    - name: Pipelines
+      href: /azure/devops/pipelines/apps/cd/azure/deploy-arm-template?toc=/azure/azure-resource-manager/bicep/toc.json
   - name: Integration
     items:
     - name: API for FHIR
       href: ../../healthcare-apis/fhir/fhir-service-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
+    - name: Event Grid
+      href: ../../event-grid/blob-event-quickstart-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Logic Apps
       href: ../../logic-apps/quickstart-create-deploy-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
+    - name: Service Bus
+      href: ../../service-bus-messaging/service-bus-resource-manager-namespace-queue-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
   - name: Internet of Things
     items:
+    - name: IoT Edge
+      href: ../../iot-edge/how-to-install-iot-edge-ubuntuvm-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: IoT Hub
       href: ../../iot-hub/quickstart-bicep-route-messages.md?toc=/azure/azure-resource-manager/bicep/toc.json
+    - name: IoT Hub Device Provisioning Service
+      href: ../../iot-dps/quick-setup-auto-provision-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
   - name: Management and Governance
     items:
+    - name: Advisor
+      href: ../../advisor/advisor-alerts-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
+    - name: Backup
+      href: ../../backup/quick-backup-vm-bicep-template.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Cost Management + Billing
       href: ../../cost-management-billing/costs/quick-create-budget-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Microsoft Purview account
       href: ../../purview/quickstart-bicep-create-azure-purview.md?toc=/azure/azure-resource-manager/bicep/toc.json
+    - name: Monitor
+      href: ../../azure-monitor/essentials/resource-manager-diagnostic-settings.md?toc=/azure/azure-resource-manager/bicep/toc.json
+    - name: Policy
+      href: ../../governance/policy/assign-policy-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Resource Graph
       href: ../../governance/resource-graph/shared-query-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Role-based access control - custom roles
       href: ../../role-based-access-control/custom-roles-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Role-based access control - role assignment
       href: ../../role-based-access-control/quickstart-role-assignments-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
+    - name: Service Health
+      href: ../../service-health/alerts-activity-log-service-notifications-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Site Recovery
       href: ../../site-recovery/quickstart-create-vault-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
   - name: Media Services
@@ -169,6 +191,10 @@
       href: ../../expressroute/quickstart-create-expressroute-vnet-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Firewall - Availability Zones
       href: ../../firewall/deploy-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
+    - name: Firewall - IP Groups
+      href: ../../firewall/quick-create-ipgroup-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
+    - name: Firewall - multiple addresses
+      href: ../../firewall/quick-create-multiple-ip-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Firewall Manager - policy
       href: ../../firewall-manager/quick-firewall-policy-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Firewall Manager - virtual hub
@@ -179,6 +205,8 @@
       href: ../../frontdoor/create-front-door-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Load Balancer - internal
       href: ../../load-balancer/quickstart-load-balancer-standard-internal-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
+    - name: Load Balancer - public
+      href: ../../load-balancer/quickstart-load-balancer-standard-public-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: NAT gateway
       href: ../../virtual-network/nat-gateway/quickstart-create-nat-gateway-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Private Endpoint
@@ -197,12 +225,16 @@
       href: ../../attestation/quickstart-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Defender for Cloud
       href: ../../defender-for-cloud/quickstart-automation-alert.md?toc=/azure/azure-resource-manager/bicep/toc.json
+    - name: Key Vault - key
+      href: ../../key-vault/keys/quick-create-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
     - name: Key Vault - secret
       href: ../../key-vault/secrets/quick-create-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
   - name: Storage
     items:
     - name: Data Share
       href: ../../data-share/share-your-data-bicep.md?toc=/azure/azure-resource-manager/bicep/toc.json
+    - name: Storage account
+      href: ../../storage/common/storage-account-create.md?toc=/azure/azure-resource-manager/bicep/toc.json&tabs=bicep
   - name: Web
     items:
     - name: API Management

articles/azure-resource-manager/templates/toc.yml

@@ -83,6 +83,10 @@
     href: /learn/paths/deploy-manage-resource-manager-templates/
 - name: Samples - Azure services
   items:
+  - name: Advisor
+    items:
+    - name: Alerts
+      href: ../../advisor/advisor-alerts-arm.md?toc=/azure/azure-resource-manager/templates/toc.json
   - name: AI+Machine Learning
     items:
     - name: Cognitive Search
@@ -97,10 +101,10 @@
     items:
     - name: Analysis Services
       href: ../../analysis-services/analysis-services-create-template.md?toc=/azure/azure-resource-manager/templates/toc.json
-    - name: Databricks
-      href: /azure/databricks/scenarios/quickstart-create-databricks-workspace-resource-manager-template?toc=/azure/azure-resource-manager/templates/toc.json
     - name: Data Factory
       href: ../../data-factory/quickstart-create-data-factory-resource-manager-template.md?toc=/azure/azure-resource-manager/templates/toc.json
+    - name: Databricks
+      href: /azure/databricks/scenarios/quickstart-create-databricks-workspace-resource-manager-template?toc=/azure/azure-resource-manager/templates/toc.json
     - name: Event Hubs
       href: ../../event-hubs/event-hubs-resource-manager-namespace-event-hub.md?toc=/azure/azure-resource-manager/templates/toc.json
     - name: HDInsight - Hadoop
@@ -117,10 +121,6 @@
       href: ../../stream-analytics/quick-create-azure-resource-manager.md?toc=/azure/azure-resource-manager/templates/toc.json
     - name: Dedicated SQL pool (formerly SQL DW)
       href: ../../synapse-analytics/sql-data-warehouse/quickstart-arm-template.md?toc=/azure/azure-resource-manager/templates/toc.json
-  - name: Blockchain
-    items:
-    - name: Blockchain
-      href: https://azure.microsoft.com/solutions/blockchain/?toc=/azure/azure-resource-manager/templates/toc.json
   - name: Compute
     items:
     - name: Batch
@@ -241,10 +241,14 @@
       href: ../../firewall/quick-create-ipgroup-template.md?toc=/azure/azure-resource-manager/templates/toc.json
     - name: Firewall - multiple addresses
       href: ../../firewall/quick-create-multiple-ip-template.md?toc=/azure/azure-resource-manager/templates/toc.json
-    - name: Firewall Manager
+    - name: Firewall Manager - policy
+      href: ../../firewall-manager/quick-firewall-policy.md?toc=/azure/azure-resource-manager/template/toc.json
+    - name: Firewall Manager - virtual hub
       href: ../../firewall-manager/quick-secure-virtual-hub.md?toc=/azure/azure-resource-manager/templates/toc.json
     - name: Front Door
       href: ../../frontdoor/quickstart-create-front-door-template.md?toc=/azure/azure-resource-manager/templates/toc.json
+    - name: Front Door - Standard/Premium
+      href: ../../frontdoor/create-front-door-template.md?toc=/azure/azure-resource-manager/templates/toc.json
     - name: Load Balancer - internal
       href: ../../load-balancer/quickstart-load-balancer-standard-internal-template.md?toc=/azure/azure-resource-manager/templates/toc.json
     - name: Load Balancer - public
@@ -263,12 +267,12 @@
     items:
     - name: Attestation
       href: ../../attestation/quickstart-template.md?toc=/azure/azure-resource-manager/templates/toc.json
+    - name: Defender for Cloud
+      href: ../../defender-for-cloud/quickstart-automation-alert.md?toc=/azure/azure-resource-manager/templates/toc.json
     - name: Key Vault - key
       href: ../../key-vault/keys/quick-create-template.md?toc=/azure/azure-resource-manager/templates/toc.json
     - name: Key Vault - secret
       href: ../../key-vault/secrets/quick-create-template.md?toc=/azure/azure-resource-manager/templates/toc.json
-    - name: Defender for Cloud
-      href: ../../defender-for-cloud/quickstart-automation-alert.md?toc=/azure/azure-resource-manager/templates/toc.json
   - name: Storage
     items:
     - name: Data Share
@@ -283,6 +287,8 @@
       href: ../../app-service/quickstart-arm-template.md?toc=/azure/azure-resource-manager/templates/toc.json
     - name: Notification Hubs
       href: ../../notification-hubs/create-notification-hub-template.md?toc=/azure/azure-resource-manager/templates/toc.json
+    - name: Redis Web App
+      href: ../../azure-cache-for-redis/cache-web-app-arm-with-redis-cache-provision.md?toc=/azure/azure-resource-manager/templates/toc.json
     - name: SignalR Service
       href: ../../azure-signalr/signalr-quickstart-azure-signalr-service-arm-template.md?toc=/azure/azure-resource-manager/templates/toc.json
 - name: Concepts