Merge branch 'patch-1' of https://github.com/sandeo-msft/azure-docs into sandeo-44085

Author: iainfoulds

articles/key-vault/key-vault-overview.md

@@ -21,7 +21,7 @@ Azure Key Vault helps solve the following problems:
 - **Secrets Management** - Azure Key Vault can be used to Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets
 - **Key Management** - Azure Key Vault can also be used as a Key Management solution. Azure Key Vault makes it easy to create and control the encryption keys used to encrypt your data. 
 - **Certificate Management** - Azure Key Vault is also a service that lets you easily provision, manage, and deploy public and private Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with Azure and your internal connected resources. 
-- **Store secrets backed by Hardware Security Modules** - The secrets and keys can be protected either by software or FIPS 140-2 Level 2 validates HSMs
+- **Store secrets backed by Hardware Security Modules** - The secrets and keys can be protected either by software or FIPS 140-2 Level 2 validated HSMs
 
 ## Why use Azure Key Vault?
 
@@ -55,9 +55,9 @@ You have control over your logs and you may secure them by restricting access an
 
 ### Simplified administration of application secrets
 
-When storing valuable data, you must take several steps. Security information must be secured, it must follow a life cycle, it must be highly available. Azure Key Vault simplifies the process of meeting these requirements by:
+When storing valuable data, you must take several steps. Security information must be secured, it must follow a life cycle, and it must be highly available. Azure Key Vault simplifies the process of meeting these requirements by:
 
-- Removing the need for in-house knowledge of Hardware Security Modules
+- Removing the need for in-house knowledge of Hardware Security Modules.
 - Scaling up on short notice to meet your organization’s usage spikes.
 - Replicating the contents of your Key Vault within a region and to a secondary region. Data replication ensures high availability and takes away the need of any action from the administrator to trigger the failover.
 - Providing standard Azure administration options via the portal, Azure CLI and PowerShell.

articles/machine-learning/studio/deploy-a-machine-learning-web-service.md

@@ -116,7 +116,7 @@ For more information about accessing a Machine Learning Studio (classic) web ser
 
 ### Manage your New web service
 
-You can manage your New web services Machine Learning Studio (classic) Web Services portal. From the [main portal page](https://services.azureml-test.net/), click **Web Services**. From the web services page, you can delete or copy a service. To monitor a specific service, click the service and then click **Dashboard**. To monitor batch jobs associated with the web service, click **Batch Request Log**.
+You can manage your New web services using Machine Learning Studio (classic) Web Services portal. From the [main portal page](https://services.azureml.net/), click **Web Services**. From the web services page, you can delete or copy a service. To monitor a specific service, click the service and then click **Dashboard**. To monitor batch jobs associated with the web service, click **Batch Request Log**.
 
 ### <a id="multi-region"></a> Deploy your New web service to multiple regions
 

articles/storage/blobs/data-lake-storage-upgrade.md

@@ -75,7 +75,7 @@ This section describes which Data Lake Storage Gen1 platform capabilities that a
 | Data Operations – Logs  | Yes | Yes | *Available now* (Preview). See [known issues](data-lake-storage-known-issues.md).<br><br> Azure Monitoring integration – *Not yet available* |
 | Encryption data at rest | Transparent, Server side with service-managed keys and with customer-managed keys in Azure KeyVault | Transparent, Server side with service-managed keys and with customer keys managed keys in Azure KeyVault | Service-managed keys – *Available now*<br><br> Customer-managed keys – *Available now*  |
 | Management operations (e.g. Account Create) | [Role-based access control](https://docs.microsoft.com/azure/role-based-access-control/overview) (RBAC) provided by Azure for account management | [Role-based access control](https://docs.microsoft.com/azure/role-based-access-control/overview) (RBAC) provided by Azure for account management | *Available now*|
-| Developer SDKs | .NET, Java, Python, Node.js  | .NET, Java, Python, Node.js, C++, Ruby, PHP, Go, Android, iOS| Blob SDK - *Available now*. Azure Data Lake Storage Gen2 SDK - *Not yet available*  |
+| Developer SDKs | .NET, Java, Python, Node.js  | .NET, Java, Python, Node.js, C++, Ruby, PHP, Go, Android, iOS| Blob SDK - *Available now*. [Azure Data Lake Storage Gen2 SDK](https://azure.microsoft.com/blog/extended-filesystem-programming-capabilities-in-azure-data-lake-storage/)- *Available now - .NET, Java, Python (public preview)*  |
 | |Optimized performance for parallel analytics workloads. High Throughput and IOPS. | Optimized performance for parallel analytics workloads. High Throughput and IOPS. | *Available now* |
 | Virtual Network (VNet) support  | [Using Virtual Network integration](https://docs.microsoft.com/azure/data-lake-store/data-lake-store-network-security)  | [Using Service Endpoint for Azure Storage](https://docs.microsoft.com/azure/storage/common/storage-network-security?toc=%2fazure%2fstorage%2fblobs%2ftoc.json) | *Available now* |
 | Size limits | No limits on account sizes, file sizes or number of files | No limits on account sizes or number of files. File size limited to 5TB. | *Available now*|

articles/virtual-machines/linux/login-using-aad.md

@@ -65,6 +65,18 @@ The following Azure regions are currently supported during the preview of this f
 
 If you choose to install and use the CLI locally, this tutorial requires that you are running the Azure CLI version 2.0.31 or later. Run `az --version` to find the version. If you need to install or upgrade, see [Install Azure CLI]( /cli/azure/install-azure-cli).
 
+## Network requirements
+
+To enable Azure AD authentication for your Linux VMs in Azure, you need to ensure your VMs network configuration permits outbound access to the following endpoints over TCP port 443:
+https://login.microsoftonline.com
+https://device.login.microsoftonline.com
+https://pas.windows.net
+https://management.azure.com
+https://packages.microsoft.com
+
+> [!NOTE]
+> Currently, Azure Network Security Group (NSG) cannot be configured for VMs enables with Azure AD authentication.
+
 ## Create a Linux virtual machine
 
 Create a resource group with [az group create](/cli/azure/group#az-group-create), then create a VM with [az vm create](/cli/azure/vm#az-vm-create) using a supported distro and in a supported region. The following example deploys a VM named *myVM* that uses *Ubuntu 16.04 LTS* into a resource group named *myResourceGroup* in the *southcentralus* region. In the following examples, you can provide your own resource group and VM names as needed.