Merge pull request #272483 from MicrosoftDocs/main

4/17/2024 AM Publish

Author: Taojunshen

articles/ai-services/speech-service/includes/language-support/pronunciation-assessment.md

@@ -12,12 +12,14 @@ ms.author: eur
 |Arabic (Saudi Arabia)|`ar-SA` |
 |Chinese (Cantonese, Traditional)|`zh-HK`<sup>1</sup>|
 |Chinese (Mandarin, Simplified)|`zh-CN`|
-|Dutch (Netherlands)|`nl-NL`<sup>1</sup>|
+|Chinese (Taiwanese Mandarin, Traditional)|`zh-TW`<sup>1</sup>|
+|Dutch (Netherlands)|`nl-NL`|
 |English (Australia)|`en-AU`|
 |English (Canada)|`en-CA` |
 |English (India)|`en-IN` |
 |English (United Kingdom)|`en-GB`|
 |English (United States)|`en-US`|  
+|Finnish (Finland)|`fi-FI`<sup>1</sup>|  
 |French (Canada)|`fr-CA`| 
 |French (France)|`fr-FR`|  
 |German (Germany)|`de-DE`|
@@ -27,6 +29,7 @@ ms.author: eur
 |Korean (Korea)|`ko-KR`|
 |Malay (Malaysia)|`ms-MY`|
 |Norwegian Bokmål (Norway)|`nb-NO`|
+|Polish (Poland)|`pl-PL`<sup>1</sup>|
 |Portuguese (Brazil)|`pt-BR`|
 |Portuguese (Portugal)|`pt-PT`<sup>1</sup>|
 |Russian (Russia)|`ru-RU`|

articles/ai-services/speech-service/language-support.md

@@ -118,7 +118,7 @@ With the cross-lingual feature, you can transfer your custom neural voice model
 
 # [Pronunciation assessment](#tab/pronunciation-assessment)
 
-The table in this section summarizes the 27 locales supported for pronunciation assessment, and each language is available on all [Speech to text regions](regions.md#speech-service). Latest update extends support from English to 26 more languages and quality enhancements to existing features, including accuracy, fluency and miscue assessment. You should specify the language that you're learning or practicing improving pronunciation. The default language is set as `en-US`. If you know your target learning language, [set the locale](how-to-pronunciation-assessment.md#get-pronunciation-assessment-results) accordingly. For example, if you're learning British English, you should specify the language as `en-GB`. If you're teaching a broader language, such as Spanish, and are uncertain about which locale to select, you can run various accent models (`es-ES`, `es-MX`) to determine the one that achieves the highest score to suit your specific scenario. 
+The table in this section summarizes the 30 locales supported for pronunciation assessment, and each language is available on all [Speech to text regions](regions.md#speech-service). Latest update extends support from English to 29 more languages and quality enhancements to existing features, including accuracy, fluency and miscue assessment. You should specify the language that you're learning or practicing improving pronunciation. The default language is set as `en-US`. If you know your target learning language, [set the locale](how-to-pronunciation-assessment.md#get-pronunciation-assessment-results) accordingly. For example, if you're learning British English, you should specify the language as `en-GB`. If you're teaching a broader language, such as Spanish, and are uncertain about which locale to select, you can run various accent models (`es-ES`, `es-MX`) to determine the one that achieves the highest score to suit your specific scenario. 
 
 [!INCLUDE [Language support include](includes/language-support/pronunciation-assessment.md)]
 

articles/ai-studio/how-to/prompt-flow-tools/prompt-flow-tools-overview.md

@@ -29,7 +29,7 @@ The following table provides an index of tools in prompt flow.
 | [Index Lookup](./index-lookup-tool.md) | Search a vector-based query for relevant results using one or more text queries. | [promptflow-vectordb](https://pypi.org/project/promptflow-vectordb/) |
 | [Vector Index Lookup](./vector-index-lookup-tool.md)<sup>1</sup> | Search text or a vector-based query from a vector index. | [promptflow-vectordb](https://pypi.org/project/promptflow-vectordb/) |
 | [Faiss Index Lookup](./faiss-index-lookup-tool.md)<sup>1</sup> | Search a vector-based query from the Faiss index file. | [promptflow-vectordb](https://pypi.org/project/promptflow-vectordb/) |
-| [Vector DB Lookup](./vector-db-lookup-tool.md)<sup>1</sup> For | Search a vector-based query from an existing vector database. | [promptflow-vectordb](https://pypi.org/project/promptflow-vectordb/) |
+| [Vector DB Lookup](./vector-db-lookup-tool.md)<sup>1</sup> | Search a vector-based query from an existing vector database. | [promptflow-vectordb](https://pypi.org/project/promptflow-vectordb/) |
 
 <sup>1</sup> The Index Lookup tool replaces the three deprecated legacy index tools: Vector Index Lookup, Vector DB Lookup, and Faiss Index Lookup. If you have a flow that contains one of those tools, follow the [migration steps](./index-lookup-tool.md#migrate-from-legacy-tools-to-the-index-lookup-tool) to upgrade your flow.
 

articles/ai-studio/reference/region-support.md

@@ -47,6 +47,12 @@ Azure AI Studio is currently available in preview in the following Azure regions
 
 Azure AI Studio preview is currently not available in Azure Government regions or air-gap regions.
 
+## Azure OpenAI
+
+[!INCLUDE [OpenAI Quotas](../../ai-services/openai/includes/model-matrix/quota.md)]
+
+For more information, see [Azure OpenAI quotas and limits](/azure/ai-services/openai/quotas-limits).
+
 ## Speech capabilities
 
 [!INCLUDE [Limited AI services](../includes/limited-ai-services.md)]

articles/ai-studio/tutorials/deploy-copilot-sdk.md

@@ -548,7 +548,7 @@ You can see that the `chat_completion` function does the following:
 
 Now, you improve the prompt used in the chat function and later evaluate how well the quality of the copilot responses improved.
 
-You use the following evaluation dataset, which contains a bunch of example questions and answers. The evaluation dataset is located at `src/copilot_aisdk/system-message.jinja2` in the copilot sample repository.
+You use the following evaluation dataset, which contains a bunch of example questions and answers. The evaluation dataset is located at `src/tests/evaluation_dataset.jsonl` in the copilot sample repository.
 
 ```jsonl
 {"question": "Which tent is the most waterproof?", "truth": "The Alpine Explorer Tent has the highest rainfly waterproof rating at 3000m"}

articles/app-service/overview-managed-identity.md

@@ -437,9 +437,9 @@ The **IDENTITY_ENDPOINT** is a local URL from which your app can request tokens.
 > | resource          | Query  | The Microsoft Entra resource URI of the resource for which a token should be obtained. This could be one of the [Azure services that support Microsoft Entra authentication](../active-directory/managed-identities-azure-resources/services-support-managed-identities.md#azure-services-that-support-azure-ad-authentication) or any other resource URI.    |
 > | api-version       | Query  | The version of the token API to be used. Use `2019-08-01`.                                                                                                                                                                                                                                                                 |
 > | X-IDENTITY-HEADER | Header | The value of the IDENTITY_HEADER environment variable. This header is used to help mitigate server-side request forgery (SSRF) attacks.                                                                                                                                                                                                    |
-> | client_id         | Query  | (Optional) The client ID of the user-assigned identity to be used. Cannot be used on a request that includes `principal_id`, `msi_res_id`, or `object_id`. If all ID parameters  (`client_id`, `principal_id`, `object_id`, and `msi_res_id`) are omitted, the system-assigned identity is used.                                             |
-> | principal_id      | Query  | (Optional) The principal ID of the user-assigned identity to be used. `object_id` is an alias that may be used instead. Cannot be used on a request that includes client_id, msi_res_id, or object_id. If all ID parameters (`client_id`, `principal_id`, `object_id`, and `msi_res_id`)  are omitted, the system-assigned identity is used. |
-> | msi_res_id         | Query  | (Optional) The Azure resource ID of the user-assigned identity to be used. Cannot be used on a request that includes `principal_id`, `client_id`, or `object_id`. If all ID parameters (`client_id`, `principal_id`, `object_id`, and `msi_res_id`) are omitted, the system-assigned identity is used.                                      |
+> | client_id         | Query  | (Optional) The client ID of the user-assigned identity to be used. Cannot be used on a request that includes `principal_id`, `mi_res_id`, or `object_id`. If all ID parameters  (`client_id`, `principal_id`, `object_id`, and `mi_res_id`) are omitted, the system-assigned identity is used.                                             |
+> | principal_id      | Query  | (Optional) The principal ID of the user-assigned identity to be used. `object_id` is an alias that may be used instead. Cannot be used on a request that includes client_id, mi_res_id, or object_id. If all ID parameters (`client_id`, `principal_id`, `object_id`, and `mi_res_id`)  are omitted, the system-assigned identity is used. |
+> | mi_res_id         | Query  | (Optional) The Azure resource ID of the user-assigned identity to be used. Cannot be used on a request that includes `principal_id`, `client_id`, or `object_id`. If all ID parameters (`client_id`, `principal_id`, `object_id`, and `mi_res_id`) are omitted, the system-assigned identity is used.                                      |
 
 > [!IMPORTANT]
 > If you are attempting to obtain tokens for user-assigned identities, you must include one of the optional properties. Otherwise the token service will attempt to obtain a token for a system-assigned identity, which may or may not exist.

articles/app-service/tutorial-auth-aad.md

@@ -249,7 +249,27 @@ Your apps are now configured. The frontend is now ready to access the backend wi
 
 For information on how to configure the access token for other providers, see [Refresh identity provider tokens](configure-authentication-oauth-tokens.md#refresh-auth-tokens).
 
-## 6. Frontend calls the authenticated backend
+## 6. Configure backend App Service to accept a token only from the frontend App Service
+
+You should also configure the backend App Service to only accept a token from the frontend App Service. Not doing this may result in a "403: Forbidden error" when you pass the token from the frontend to the backend.
+
+You can set this via the same Azure CLI process you used in the previous step.
+
+1. Get the `appId` of the frontend App Service (you can get this on the "Authentication" blade of the frontend App Service).
+
+1. Run the following Azure CLI, substituting the `<back-end-app-name>` and `<front-end-app-id>`.
+
+```azurecli-interactive
+authSettings=$(az webapp auth show -g myAuthResourceGroup -n <back-end-app-name>)
+authSettings=$(echo "$authSettings" | jq '.properties' | jq '.identityProviders.azureActiveDirectory.validation.defaultAuthorizationPolicy.allowedApplications += ["<front-end-app-id>"]')
+az webapp auth set --resource-group myAuthResourceGroup --name <back-end-app-name> --body "$authSettings"
+
+authSettings=$(az webapp auth show -g myAuthResourceGroup  -n <back-end-app-name>)
+authSettings=$(echo "$authSettings" | jq '.properties' | jq '.identityProviders.azureActiveDirectory.validation.jwtClaimChecks += { "allowedClientApplications": ["<front-end-app-id>"]}')
+az webapp auth set --resource-group myAuthResourceGroup --name <back-end-app-name> --body "$authSettings"
+```
+
+## 7. Frontend calls the authenticated backend
 
 The frontend app needs to pass the user's authentication with the correct `user_impersonation` scope to the backend. The following steps review the code provided in the sample for this functionality. 
 

articles/azure-app-configuration/howto-geo-replication.md

@@ -179,6 +179,8 @@ You can specify one or more endpoints of a geo-replication-enabled App Configura
 
 The automatically discovered replicas will be selected and used randomly. If you have a preference for specific replicas, you can explicitly specify their endpoints. This feature is enabled by default, but you can refer to the following sample code to disable it.
 
+### [.NET](#tab/Dotnet)
+
 Edit the call to the `AddAzureAppConfiguration` method, which is often found in the `program.cs` file of your application.
 
 ```csharp
@@ -197,6 +199,27 @@ configurationBuilder.AddAzureAppConfiguration(options =>
 > - `Microsoft.Azure.AppConfiguration.AspNetCore`
 > - `Microsoft.Azure.AppConfiguration.Functions.Worker`
 
+### [Kubernetes](#tab/kubernetes)
+
+Update the `AzureAppConfigurationProvider` resource of your Azure App Configuration Kubernetes Provider. Add a `replicaDiscoveryEnabled` property and set it to `false`.
+
+``` yaml
+apiVersion: azconfig.io/v1
+kind: AzureAppConfigurationProvider
+metadata:
+  name: appconfigurationprovider-sample
+spec:
+  endpoint: <your-app-configuration-store-endpoint>
+  replicaDiscoveryEnabled: false
+  target:
+    configMapName: configmap-created-by-appconfig-provider
+```
+
+> [!NOTE]
+> The automatic replica discovery and failover support is available if you use version **1.3.0** or later of [Azure App Configuration Kubernetes Provider](./quickstart-azure-kubernetes-service.md).
+
+---
+
 ## Next steps
 
 > [!div class="nextstepaction"]