text:
The Azure Function C# CodeSample ist not for V2

For V2 use this:
public static class EventGridFunc
{
    [FunctionName("EventGridFunc")]
    public static async Task<IActionResult> Run([HttpTrigger(AuthorizationLevel.Function, "get", "post", Route = null)]HttpRequest req, ILogger log)
    {

log.LogInformation($"C# HTTP trigger function begun");
string response = string.Empty;

string requestContent = await new StreamReader(req.Body).ReadToEndAsync();
log.LogInformation($"Received events: {requestContent}");

EventGridSubscriber eventGridSubscriber = new EventGridSubscriber();

EventGridEvent[] eventGridEvents = eventGridSubscriber.DeserializeEventGridEvents(requestContent);

foreach (EventGridEvent eventGridEvent in eventGridEvents)
{
    if (eventGridEvent.Data is SubscriptionValidationEventData)
    {
        var eventData = (SubscriptionValidationEventData)eventGridEvent.Data;
        log.LogInformation($"Got SubscriptionValidation event data, validation code: {eventData.ValidationCode}, topic: {eventGridEvent.Topic}");
        // Do any additional validation (as required) and then return back the below response

        var responseData = new SubscriptionValidationResponse()
        {
            ValidationResponse = eventData.ValidationCode
        };

            return (ActionResult)new OkObjectResult(responseData);
    }
}

return (ActionResult)new OkObjectResult(response);
    }

}

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 9ea53478-b3df-71dd-5ec8-27746a650775
Version Independent ID: 185f045e-d659-6217-3c14-68418c4fe5fe
Content: Azure Event Grid security and authentication
Content Source: articles/event-grid/security-authentication.md
Service: event-grid
GitHub Login: @banisadr
Microsoft Alias: babanisa

@pnda489 Thank you for reporting this issue! We will investigate and make any necessary changes.

@pnda489 Thank you for sharing this solution. I didn't see Functions specific sample on this doc. Could you let us know which documentation this solution may be applicable for?

Hi @pnda489 Thank you sharing your solution with us! Surely, this solution is going to benefit others visiting this issue in the future. Since we haven't heard back from you, we will now proceed to close this thread for now. If there are further questions regarding this matter, please reopen it and we will gladly continue the discussion.


text:
Alias link does not work

Alias link does not work

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 6af7f625-3f5f-da9a-d131-2eda3be37871
Version Independent ID: 39072cda-5a3f-e41b-e287-29fe7cf51b6b
Content: Azure Monitor Log Analytics language reference
Content Source: articles/log-analytics/query-language/data-explorer-difference.md
Service: log-analytics
GitHub Login: @bwren
Microsoft Alias: bwren

@slavizh Thanks for the feedback! I have assigned the issue to the content author to investigate further and update the document as appropriate.
@bwren The link is broken. Please update the doc with https://docs.microsoft.com/en-us/azure/kusto/query/aliasstatement

Thanks for this.  We had a typo in the link.  Just fixed it, should be published later today.

#please-close

source: gharchive/issue

authors: AshokPeddakotla-MSFT bwren slavizh

repo: MicrosoftDocs/azure-docs

license_type: permissive

license_source: github-api


text:
How is the user country determined regarding subscription ownership transfer requirements?

The FAQ states that:

"No, transferring a subscription to a user account in another country is not supported. The recipient's user account must be in the same country."

Please explain where can this country be chosen or specified.
For example, working in Azure AD which according to Portal is located in Estonia. I created an user account in Azure AD for the to-be subscription owner, but he cannot accept subscription transfers because he is reported as NOT being in the same country ("The specified account must be located in the same country as the tranferring account Admin: EE"). Where should he set the right location country? In https://account.azure.com/Profile does not provide him explicit country choice and he is being given  "The address we have on file is US" for some unknown reason.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 65b8cd29-3c9b-6afc-d4fb-256463776002
Version Independent ID: d905e8f9-49c6-19de-1c43-796efc04003f
Content: Transfer Azure subscription ownership to another account
Content Source: articles/billing/billing-subscription-transfer.md
Service: billing
GitHub Login: @genlin
Microsoft Alias: cwatson

@ImrePyhvel Thanks for your feedback! We will investigate and update as appropriate.

authors: ImrePyhvel SaurabhSharma-MSFT


text:
How to update b2clogin.com as redirect uri for my b2c application

is there any video guidance to show where all we need to update the settings to point to b2clogin.com instead of login.microsoft.com/tfp. I am using react JS to build my application and have given instance: 'https://login.microsoftonline.com/tfp/'. changing this to use b2clogin.com gives me error.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 89933f39-e8c4-32fd-736a-9f258cbcdaba
Version Independent ID: 9560563b-23d1-c0f7-a6c0-d7526f97d93e
Content: Set redirect URLs to b2clogin.com - Azure Active Directory B2C
Content Source: articles/active-directory-b2c/b2clogin.md
Service: active-directory
Sub-service: b2c
GitHub Login: @davidmu1
Microsoft Alias: davidmu

Error am getting: "AADSTS50049: Unknown or invalid instance.

@VigneshwaranKS Thanks for your question. We are checking on this and will respond to you soon.

Hi VigneshwaranKS,
I'm closing this out since it looks like you were able to resolve this on Stackoverflow. https://stackoverflow.com/questions/55922170/how-to-set-redirect-urls-to-b2clogin-com-for-azure-active-directory-b2c-in-react
Resolution:

Used the latest library of b2c from https://github.com/leszekczajka/msal-b2c-react and in the initalize method gave the tenant guid id instead of tenant name and added ValidateAuthority as false like below:

authentication.initialize({ instance: 'https://mytenant.b2clogin.com/', tenant: 'xxxxxxxxx_tenantGUID__xxxxxxxxxxxx', signInPolicy: 'B2C_1_signupsigninv2', resetPolicy: 'B2C_1_pwdresetv2',  applicationId: 'xxxxxxxxxxxxxx', cacheLocation: 'sessionStorage', scopes: ['https://mytenant.onmicrosoft.com/newsite/user_impersonation'],
validateAuthority: false, });


text:
--ppg should clarify the need to specify the fully qualified ppg name

--ppg should clarify the need to specify the fully qualified ppg name

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 7fcc8492-4e08-56e3-75c4-3b24a8ee3b53
Version Independent ID: 1418a67f-031d-c1f6-735b-f75b1f3a3ec6
Content: Use proximity placement groups preview for Linux VMs
Content Source: articles/virtual-machines/linux/proximity-placement-groups.md
Service: virtual-machines-linux
GitHub Login: @cynthn
Microsoft Alias: cynthn

i.e. /subscriptions/...

Thanks for the feedback! We are currently investigating and will update you shortly.

@dwj300 not sure I fully understand what you are looking to have added to this doc. Can you elaborate or share an example?

@dwj300 since you are an FTE please send an email to the listed author of this doc @cynthn with any improvements you want added to the backlog. That way we can properly prioritize and it is easier to work offline.

Describe powercli supports Moving existing VMs or AVSETs to a existing PPG or not.
**I know powershell do support moving existing VMs.

authors: MicahMcKittrick-MSFT dwj300 ramadarla


text:
TelemetryConfiguration cannot be loaded from DI in certain circumstances

Per azure/azure-functions-host#4952, the TelemetryConfiguration type cannot be loaded via dependency injection in all circumstances due to a bug in the functions host itself (this is not the same as assembly version mismatch).  My specific scenario is that I'm using a function.deps.json with my Functions project, which causes the bug to appear.
Please update the documentation in the "Log custom telemetry in C# functions" section to have a note about this.  Otherwise, you just get an error that the TelemetryConfiguration type could not be found, which is suuuuuper confusing.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 13672b67-22ea-3dda-8b6b-3332c24e6030
Version Independent ID: fdc60aeb-9971-1d9f-a6ba-b3ad818cf0d5
Content: Monitor Azure Functions
Content Source: articles/azure-functions/functions-monitoring.md
Service: azure-functions
GitHub Login: @ggailey777
Microsoft Alias: glenga

Hi @AtOMiCNebula - Thank you for your feedback! We have assigned this issue to the author to review further and take the right course of action.

It seems like this issue has been fixed and will role out in the next release. If the issue is still occurring, please reopen. #please-close

authors: AtOMiCNebula ggailey777 mike-urnun-msft


text:
Error code 'DeploymentFailedCleanUp' is not listed

I just got a deployment failure message, it states that this page should contain more information, but I could not find it.
The RAW error from Azure is the following:
{
  "code": "DeploymentFailedCleanUp",
  "message": "The deployment operation failed, because it was unable to cleanup. Please see https://aka.ms/arm-debug for usage details."
}

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: a114cf0c-a1a0-f73d-f8d2-0f16d62b1e86
Version Independent ID: 203548b7-824f-eb7a-ca5b-e4cfec2c6d51
Content: Troubleshoot common Azure deployment errors
Content Source: articles/azure-resource-manager/resource-manager-common-deployment-errors.md
Service: azure-resource-manager
GitHub Login: @tfitzmac
Microsoft Alias: tomfitz

Thanks for your comment. The feedback has been shared with the content owner for further review. Thanks for your patience.

@anderson-rancan - sorry for this gap in the documentation. Can you tell me whether you were using Complete mode for a template deployment? I am trying to track down the scenario for this error.

hey @tfitzmac , yes it was Complete mode. This is the call from our Powershell script:
New-AzureRmResourceGroupDeployment -Name $deploymentName -ResourceGroupName $ResourceGroupName -TemplateFile $TemplateFile -TemplateParameterObject $TemplateParameters -Mode $Mode -Force  -Verbose  -ErrorVariable ErrorMessages
After I changed it to Incremental the error was gone, but now I'm investigating the impact. I guess someone made a manual change on this Resource Group and after that Complete started to fail, but I am still not sure about the root cause (if something was changed, and what was changed)...
Thanks!

authors: anderson-rancan femsulu tfitzmac


text:
Is "If a back-end API doesn't require a scope (not recommended), you can use clientId as the scope in the calls to acquire tokens." still correct?

Just saw a test case telling that the sentence is outdated (816128)
Should we remove this sentence

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 4c6d2219-cb28-5527-1079-6e3195cad282
Version Independent ID: 70c2aad0-6883-51a9-fed7-01be62302483
Content: Azure AD v2.0 JavaScript single-page application (SPA) guided setup - Microsoft identity platform
Content Source: articles/active-directory/develop/tutorial-v2-javascript-spa.md
Service: active-directory
Sub-service: develop
GitHub Login: @navyasric
Microsoft Alias: nacanuma

@negoe @SaeedAkhter-MSFT

@jmprieur Thanks for your feedback! We will investigate and update as appropriate.

@jmprieur My understanding is that this is a backend API with the same client ID as the SPA app. Is the recommendation to always register backend API as a separate client ID and add scopes?
@hamiltonha do you have any updated guidance on this?

#reassign:jmprieur per 4/24 doc sync

It seems the screenshots for the sample needs to be updated to reflect the current UI :/ @mmacy.

@jmprieur @navyasric @hamiltonha We've been recently informed that the best practice is to always have a separate registration API and SPA (except some cases) and we've been revising our samples accordingly (cc @kalyankrishna1 ). So I think we should remove this sentence now.

thanks @derisen. yes, let's do that.

authors: SaurabhSharma-MSFT derisen jmprieur mmacy navyasric


text:
Inserting empty audio track following code based configuration

Hi,
I'm migrating from v2 and previously I was using a json file to configure my Presets. For my Codecs I have the following setting when the video has no audio
{
    "Profile": "AACLC",
    "Channels": 2,
    "SamplingRate": 48000,
    "Bitrate": 128,
    "Type": "AACAudio",
    "Condition": "InsertSilenceIfNoAudio"
}

How can I achieve the InsertSilenceIfNoAudio functionality?  I didn't found any property for AacAudio class

Thanks,
Ale
Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 29e152fb-14e0-3491-4acc-1e6bda2efeaf
Version Independent ID: 92a86339-1c1f-db8f-99da-260e7af01eec
Content: Encode custom transform using Media Services v3 .NET - Azure
Content Source: articles/media-services/latest/customize-encoder-presets-how-to.md
Service: media-services
GitHub Login: @Juliako
Microsoft Alias: juliako

Thanks for the feedback @alejandrocolman! We are currently investigating and will update you shortly.

@alejandrocolman I’m checking with the team. Can you tell me preset you’re using with your blank audio asset?

Hi @ryanborMSFT . I  don't have this issue anymore.
I'm not sure which change I made to my Preset but now it's working.
new StandardEncoderPreset(
                    codecs: new Codec[]
                    {
                         new AacAudio(
                            channels: 2,
                            samplingRate: 48000,
                            bitrate: 128000,
                            profile: AacAudioProfile.AacLc
                        ),
                       new H264Video (
                            // Set the GOP interval to 6 seconds for both H264Layers
                            // bitrates are in bits per second
                            keyFrameInterval:TimeSpan.FromSeconds(6),
                            layers:  new H264Layer[]
                            {
                                new H264Layer (
                                    bitrate: 5000000,
                                    width: "1920",
                                    height: "1080",
                                    maxBitrate: 5000000,
                                    bFrames: 3,
                                    frameRate: "0/1",
                                    adaptiveBFrame: true,
                                    profile: H264VideoProfile.Auto,
                                    level: "auto",
                                    bufferWindow: TimeSpan.FromSeconds(12),
                                    referenceFrames: 3,
                                    label: "1920x1080"
                                ),
                                new H264Layer (
                                    bitrate: 2500000,
                                    width: "1280",
                                    height: "720",
                                    maxBitrate: 2500000,
                                    bFrames: 3,
                                    frameRate: "0/1",
                                    adaptiveBFrame: true,
                                    profile: H264VideoProfile.Auto,
                                    level: "auto",
                                    bufferWindow: TimeSpan.FromSeconds(12),
                                    referenceFrames: 3,
                                    label: "1280x720"
                                ),
                                new H264Layer (
                                    bitrate: 1570000,
                                    width: "960",
                                    height: "540",
                                    maxBitrate: 1570000,
                                    bFrames: 3,
                                    frameRate: "0/1",
                                    adaptiveBFrame: true,
                                    profile: H264VideoProfile.Auto,
                                    level: "auto",
                                    bufferWindow: TimeSpan.FromSeconds(12),
                                    referenceFrames: 3,
                                    label: "960x540"
                                ),
                                new H264Layer (
                                    bitrate: 820000,
                                    width: "640",
                                    height: "360",
                                    maxBitrate: 820000,
                                    bFrames: 3,
                                    frameRate: "0/1",
                                    adaptiveBFrame:true,
                                    profile: H264VideoProfile.Auto,
                                    level: "auto",
                                    bufferWindow: TimeSpan.FromSeconds(12),
                                    referenceFrames: 3,
                                    label: "640x360"
                                ),
                                new H264Layer (
                                    bitrate: 510000,
                                    width: "480",
                                    height: "270",
                                    maxBitrate: 510000,
                                    bFrames: 3,
                                    frameRate: "0/1",
                                    adaptiveBFrame: true,
                                    profile: H264VideoProfile.Auto,
                                    level: "auto",
                                    bufferWindow: TimeSpan.FromSeconds(12),
                                    referenceFrames: 3,
                                    label: "480x270"
                                )
                            }
                        ),
                        // Also generate a set of PNG thumbnails
                        new PngImage(
                            start: "25%",
                            step: "25%",
                            range: "80%",
                            layers: new PngLayer[]{
                                new PngLayer(
                                    width: "50%",
                                    height: "50%"
                                )
                            }
                        )
                    },
                    // Specify the format for the output files - one for video+audio, and another for the thumbnails
                    formats: new Format[]
                    {
                        // Mux the H.264 video and AAC audio into MP4 files, using basename, label, bitrate and extension macros
                        // Note that since you have multiple H264Layers defined above, you have to use a macro that produces unique names per H264Layer
                        // Either {Label} or {Bitrate} should suffice
                        new Mp4Format(
                            filenamePattern:"{Basename}_{Label}_{Bitrate}{Extension}"
                        ),
                        new PngFormat(
                            filenamePattern:"Thumbnail_{Basename}_{Index}{Extension}"
                        )
                    }
                );

Thanks for your help!

authors: RyanHill-MSFT alejandrocolman


text:
Clarify the lifecycle of the public IP address

The page states that "The static public IP address remains if the ingress controller is deleted.". However I've noticed that if I delete the AKS resource itself, this also deletes the public IP address and the entire nodepool resource group. Is there any way around this in order to decouple the public IP from the lifecycle of the AKS cluster? Is it possible to create the static public IP in a different resource group, for instance?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 12009c1f-282d-2632-fac0-64b09c432833
Version Independent ID: 6052d3d4-d295-9340-b16d-4c200e34cd73
Content: Create an HTTP ingress controller with a static IP address in Azure Kubernetes Service (AKS)
Content Source: articles/aks/ingress-static-ip.md
Service: container-service
GitHub Login: @mlearned
Microsoft Alias: mlearned

@joelw
Thanks for the question! We are investigating and will update you shortly.

i think you cab create the public ip in a separate resource group.
In that case you need to give the access for service principal of AKS  to that public ip.
Try this if you can. Else i will try in my env and let you know.
While deleting the aks cluster, The whole MC_* resource group is deleted. So all the resources in them are deleted.

Also, there is another way to always keep the DNS label without being removed. It would be great it you could update the information in here!
It was already detected by some people in GitHub and the solution is the following:
To preserve the DNS label of a public IP in use by a cluster service do the following:

Use the kubectl edit svc command to edit the manifest of the svc: Kubectl edit svc  -n
This command opens the manifest in Notepad, add the following annotation "service.beta.kubernetes.io/azure-dns-label-name: "
Close the Notepad, and it saves the modification automatically
When you do an upgrade/update the DNS label will not be removed

In order to do with Helm, as per below documentation, it could be:
Use Helm to deploy an NGINX ingress controller
helm install nginx-ingress stable/nginx-ingress
--namespace ingress-basic
--set controller.replicaCount=2
--set controller.nodeSelector."beta.kubernetes.io/os"=linux
--set defaultBackend.nodeSelector."beta.kubernetes.io/os"=linux
--set controller.service.loadBalancerIP="40.121.63.72"
--set controller.service.annotations."service.beta.kubernetes.io/azure-dns-label-name"="dnsName"

@joelw Thanks for the feedback.
I will assign this issue to the content author to investigate further and update the document as appropriate.

i think you can create the public ip in a separate resource group.
In that case you need to give the access for service principal of AKS to that public ip.
Try this if you can. Else i will try in my env and let you know.
While deleting the aks cluster, The whole MC_* resource group is deleted. So all the resources in them are deleted.

@jakaruna-MSFT: Have you already tried that in your environment? I just came across the same error when trying to create a new ingress controller based on an existing public IP address in a resource group other than the ones with the AKS nodes.

Thank you @joelw for the feedback.
I have updated the article to address your feedback and the changes should be available soon.

authors: hbromberger inesmonteiro14 jakaruna-MSFT joelw zr-msft


text:
SAAS Fulfillment webhook ID is not a GUID

As defined in the documentation for implimenting a webhook on a SaaS service located here:  https://docs.microsoft.com/en-us/azure/marketplace/partner-center-portal/pc-saas-fulfillment-api-v2#implementing-a-webhook-on-the-saas-service  the "id" field being returned is not a GUID.  It follows the format org:{guid}, {guid}.  See example response json below.
This issue seems to be referenced in this issue as well:  https://github.com/MicrosoftDocs/azure-docs/issues/40907
When the user initiates the change from the ISV service, the webhook acts as intended, with the "id" field properly populated by a GUID.  However, when the user initiates the change from the Marketplace, we see the format mentioned above.  JSON Below:
 {     "id":"org:594e91a9-c6d8-4c2e-be51-722253734a9a,3bdea509-507a-59bd-10ff-e7deb9cd216d",    "activityId":"aa821975-f8c4-4e99-8e12-f06a95486bd3",    "subscriptionId":"subid",    "publisherId":"publisher",    "offerId":"offerid",    "planId":"preview",    "quantity":"4",    "timeStamp":"2020-02-07T20:27:10.7294526Z",    "action":"ChangeQuantity",    "status":"Succeeded" }

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: fe8750da-cb47-7396-8d1b-0abff019a0be
Version Independent ID: b19143ed-64c0-1554-5ac9-610513382609
Content: SaaS Fulfillment API v2
Content Source: articles/marketplace/partner-center-portal/pc-saas-fulfillment-api-v2.md
Service: marketplace
Sub-service: partnercenter-marketplace-publisher
GitHub Login: @qianw211
Microsoft Alias: evansma

@nickolasfisher
Thanks for the feedback! I have assigned the issue to the content author to investigate further and update the document as appropriate.

@YutongTie-MSFT do we have an ETA on this?

@YutongTie-MSFT @qianw211 STill waiting on resolution for this issue

@nickolasfisher @YutongTie-MSFT This is a bug on engineering side.  This field should have guid format in all cases.  Thanks for your feedback!

@YutongTie-MSFT @qianw211 How do we get this to engineering?

@nickolasfisher  Hi, this GitHub issue has been reported to the engineering team, and the above is their reply.  Thanks!

#please-close this was fixed.

authors: YutongTie-MSFT nickolasfisher qianw211


text:
What do you mean with "Redis .NET Core clients use the latest TLS version by default."

Do you mean that all using https://www.nuget.org/packages/Microsoft.Extensions.Caching.StackExchangeRedis uses the latest TLS version, or is it enough to use StackExchange.Redis itself (that the extension nuget uses as a dependency)? Both for client and server. Fx if I have a .NET Core 2.1 or 2.2 web api running in Azure, and not using any sslProtocols in the StachExchange.Redis connectionstring, am I then safe? Or should i set my sslProtocols to tls12?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 3d5e31f8-a816-2b22-96c0-f763fa67f9e6
Version Independent ID: d1ff1bc0-c88e-f51f-c6d8-fb9f9b212b94
Content: Remove TLS 1.0 and 1.1 from use with Azure Cache for Redis
Content Source: articles/azure-cache-for-redis/cache-remove-tls-10-11.md
Service: cache
GitHub Login: @yegu-ms
Microsoft Alias: yegu

@mslot We are checking this and will get back to you.

@yegu-ms Please check the question from user and help resolve the same.

Doc has been updated to address this question.
#please-close

authors: NavtejSaini-MSFT mslot yegu-ms


text:
How can one customize the timeout period?

The session connection times out after ~10-15 mins. Is the timeout period customizable? How can one customize it?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 227e2c2f-2305-38fc-16db-1f9a760e4caf
Version Independent ID: fc6d1fd0-3918-1822-751d-92f17b78952b
Content: Execute commands in running container instance - Azure Container Instances
Content Source: articles/container-instances/container-instances-exec.md
Service: container-instances
GitHub Login: @dlepow
Microsoft Alias: danlep

@Ayanmullick
UserVoice

@Ayanmullick  Api dont have a parameter to configure the timeout.
The api to execute the command, returns a web socket.
CLI connects to the web socket.  I dont think we can configure the timeout for that.

@jakaruna-MSFT , Could you share the link for the documentation for this specific API?

@Ayanmullick Sorry for the delay.
This is the api used by the CLI for executing a command.
https://docs.microsoft.com/en-in/rest/api/container-instances/container/executecommand

Thank you for sharing the link.

authors: Ayanmullick jakaruna-MSFT


text:
Feed URL

I was not having any luck with the Android Client (on a Chromebook) using https://rdweb.wvd.microsoft.com as the Feed URL. I was able to connect after I stumbled upon a post suggesting to try using https://rdweb.wvd.microsoft.com/api/feeddiscovery/webfeeddiscovery.aspx as the feed. Should this doc be updated?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 671614a5-60a1-e453-1f3b-1c53fc6b670f
Version Independent ID: 6c47f487-ad60-c165-b7ef-3c27e583cc72
Content: Connect to Windows Virtual Desktop from Android - Azure
Content Source: articles/virtual-desktop/connect-android.md
Service: virtual-desktop
GitHub Login: @Heidilohr
Microsoft Alias: helohr

Thanks for the feedback! I have assigned the issue to the content author to investigate further and update the document as appropriate.

With the article being updated for the Spring 2020 update, this issue should be moved to https://docs.microsoft.com/en-us/azure/virtual-desktop/virtual-desktop-fall-2019/connect-android-2019 since it only applies to the Fall 2019 update.

authors: Karishma-Tiwari-MSFT andypituch


text:
Calico network policy link outdated

The Calico network policy link should not refer to v.xx archive (v3.9 on this page) link to the latest :
https://docs.projectcalico.org/security/calico-network-policy

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 719f4010-810f-b3c7-d807-222b39b20e20
Version Independent ID: 82ac8cfa-b0a2-c77a-408a-ab9aa2b6bce4
Content: Configure kubenet networking in Azure Kubernetes Service (AKS) - Azure Kubernetes Service
Content Source: articles/aks/configure-kubenet.md
Service: container-service
GitHub Login: @mlearned
Microsoft Alias: mlearned

@ezYakaEagle442 Thanks for the Feedback.
I checked the link you mentioned in the feedback  Calico network policy is redirecting to the same as latest link you shared in the feedback "https://docs.projectcalico.org/security/calico-network-policy".
Can you please elaborate little more on the issue, I hope I am missing something here.

@ezYakaEagle442 Same issue 53719.
As we can see from the url redirection is automatically going to the latest version pages, I have informed the doc author on this feedback.
I will now proceed to close this issue, your feedback will remain on this page and if you have any further questions on this, please mention my name in the comment so that we can reopen the issue for further discussion.
@mlearned for your visibility.


text:
Typo in Session consistency level description: needs authorial resolution

The Session consistency level description contains a typo. However, I'm not sure how to resolve it, as I don't know which direction the description is trying to go in.

Session consistency is the widely used consistency level for both single region as well as globally distributed applications.

I think this should read either

"Session consistency is a widely used consistency level..."
"Session consistency is the most widely used consistency level..."

The author of this documentation needs to decide which, however.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 2b3fb7da-5483-160d-1781-d4abff9d798d
Version Independent ID: d5e51b7e-7f34-c7df-ce4f-ee4bf5c8059a
Content: Consistency levels in Azure Cosmos DB
Content Source: articles/cosmos-db/consistency-levels.md
Service: cosmos-db
GitHub Login: @markjbrown
Microsoft Alias: mjbrown

@chwarr Thank you for taking the time to make us aware of such a minor detail. It is greatly appreciated. This has been corrected and will be published in the next 24hrs.

We will now proceed to close this thread. If there are further questions regarding this matter, please comment and we will gladly continue the discussion.

authors: Mike-Ubezzi-MSFT chwarr


text:
Broken Link

link for  "Azure Service Penetration Testing Notification form" is broken
points to: https://portal.msrc.microsoft.com/engage/pentest
redirects to: https://portal.msrc.microsoft.com/en-us/

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 19cb71ec-6372-f406-8542-8058f59c7ec1
Version Independent ID: a3c05dfb-8f20-b364-526b-143f87582a18
Content: Pen Testing | Microsoft Docs
Content Source: articles/security/azure-security-pen-testing.md
Service: security
GitHub Login: @YuriDio
Microsoft Alias: yurid

@bryanhfoster
Thanks for the feedback! I have assigned the issue to the content author to investigate further and update the document as appropriate.

@bryanhfoster Thank you for your feedback. This was already fixed and it takes you to the form https://portal.msrc.microsoft.com/en-us/engage/pentest

#please-close

@bryanhfoster We will now proceed to close this thread. If there are further questions regarding this matter, please reopen it and we will gladly continue the discussion.

authors: barclayn bryanhfoster jason-j-MSFT vasivara-MSFT


text:
is this a typo?

docker run --rm -it -p 5000:5000 --memory 2g --cpus 1
...
Allocates 2 CPU cores and one gigabyte (GB) of memory.
should it be
docker run --rm -it -p 5000:5000 --memory 1g --cpus 2 \
?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: ac742a64-1e66-4c89-6de5-67c7e818f9cc
Version Independent ID: 29714c95-3e4c-f153-0a6f-598a736b4564
Content: Install Speech containers - Speech service - Azure Cognitive Services
Content Source: articles/cognitive-services/Speech-Service/speech-container-howto.md
Service: cognitive-services
Sub-service: speech-service
GitHub Login: @aahill
Microsoft Alias: aahi

@hs79hs we'll review your feedback and get back to you shortly. Thanks.

@hs79hs thanks for your feedback, the document will be updated shortly.


text:
Enable the AGIC add-on Issue <error: endpoints "default-http-backend" not found>

[Enter feedback here]
I follow the instruction without error, but it not work. There not any automation update from AKS to Application gateway.
I tried to describe the ingress that the error status <error: endpoints "default-http-backend" not found>
kubectl describe ingress aspnetapp
Name:             aspnetapp
Namespace:        default
Address:
Default backend:  default-http-backend:80 (<error: endpoints "default-http-backend" not found>)
Rules:
  Host        Path  Backends
  ----        ----  --------
  *
              /   aspnetapp:80 (10.240.0.21:80)
Annotations:  kubernetes.io/ingress.class: azure/application-gateway
Events:       <none>

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 94bdeded-846e-526c-8ce3-77ee36ffa852
Version Independent ID: 7d768d5c-0318-25f1-38f8-7a2ee15c1c41
Content: Tutorial: Enable Ingress Controller Add-On for existing AKS cluster with existing Azure Application Gateway
Content Source: articles/application-gateway/tutorial-ingress-controller-add-on-existing.md
Service: application-gateway
GitHub Login: @Caya
Microsoft Alias: caya

@giatule Thank you for the question. We will review and get back to you.

I am also facing the same issue. @giatule The name of the ingress object shows you must have referred
https://docs.microsoft.com/en-us/azure/application-gateway/tutorial-ingress-controller-add-on-existing

@giatule & @kishaa We are looking into this right now and will update you soon. Thank you!

@SaiKishor-MSFT I tried to enable add-on mentioned on https://docs.microsoft.com/en-us/azure/aks/http-application-routing but its not working either

@kishaa Thank you for the update. I am working with my internal team regarding this and will update you soon. Thank you!

@mscatyao is there any update which you would like to share?

I am also having this issue. Any update?

I am also having this issue. Any update?

Seems you must manually add some role assignments. Here is the code I used. Just make sure to change the variables to what your resources are.
    $ingressappid = az aks show --name $kubernetesClusterName -g $resourceGroupNameAKS --query addonProfiles.ingressApplicationGateway.identity.clientId -o tsv     $rgid = az group show --name $resourceGroupNameAKS -o tsv --query "id"      az role assignment create --role Reader --scope $rgid --assignee $ingressappid     az role assignment create --role Contributor --scope $appgwId --assignee $ingressappid
Hope it helps.

Seems you must manually add some role assignments. Here is the code I used. Just make sure to change the variables to what your resources are.
 $ingressappid = az aks show --name $kubernetesClusterName -g $resourceGroupNameAKS --query addonProfiles.ingressApplicationGateway.identity.clientId -o tsv $rgid = az group show --name $resourceGroupNameAKS -o tsv --query "id" az role assignment create --role Reader --scope $rgid --assignee $ingressappid az role assignment create --role Contributor --scope $appgwId --assignee $ingressappid
Hope it helps.

Hi - I had already done this. I did it again and rebuild the Ingress objects again but I still have the same error.

This is what i have used to deploy it, and it has work several times for me now.
    Write-Host "Creating a public IP address..." -ForegroundColor Blue     az network public-ip create --name $appgpip --resource-group $resourceGroupNameAKS --allocation-method Static --sku Standard     Write-Host "  Public IP created." -ForegroundColor Green     Write-Host "Creating application gateway..." -ForegroundColor Blue     az network application-gateway create --name $appgname --location $location --resource-group $resourceGroupNameAKS --sku WAF_v2 --public-ip-address $appgpip --vnet-name $vnetName --subnet applicationgateway --private-ip-address 10.240.16.20     $appgwId = az network application-gateway show --name $appgname --resource-group $resourceGroupNameAKS -o tsv --query "id"      az network application-gateway frontend-ip delete --gateway-name $appgname --resource-group $resourceGroupNameAKS --name appGatewayPrivateFrontendIP     Write-Host "  Application gateway created." -ForegroundColor Green     Write-Host "Enableing application Gateway ingress on $kubernetesClusterName..."     az aks enable-addons --name $kubernetesClusterName --resource-group $resourceGroupNameAKS --addons ingress-appgw --appgw-id $appgwId     Write-Host " Setting permissions..." -ForegroundColor Blue     $ingressappid = az aks show --name $kubernetesClusterName -g $resourceGroupNameAKS --query addonProfiles.ingressApplicationGateway.identity.clientId -o tsv     $rgid = az group show --name $resourceGroupNameAKS -o tsv --query "id"      az role assignment create --role Reader --scope $rgid --assignee $ingressappid     az role assignment create --role Contributor --scope $appgwId --assignee $ingressappid     Write-Host "  Permissions set." -ForegroundColor Green     Write-Host "  Application gateway addon enabled." -ForegroundColor Green
maybe it can help.

Thanks. I tried running all those commands and even tried to configure all the resources but the issue is still there.
@ASPSInfra did it work for you ?

One thing to note is that I am using one vnet with a few subnets. One for AKS and one for the app gateway.
What's your network setup like?

Its same. 1 Vnet with 10.0.0.0/8 --- address space with 10.1.0.0/16 for appgw and 10.2.0.0/16  for aks. so basically both are on same vnet with segregated subnet

What version of Az cli are you using? I am using {   "azure-cli": "2.14.0",   "azure-cli-core": "2.14.0",   "azure-cli-telemetry": "1.0.6",   "extensions": {     "aks-preview": "0.4.65"   } }

I'm using cloud shell which is using same version.

And you have registered this feature?
az feature register --name AKS-IngressApplicationGatewayAddon --namespace Microsoft.ContainerService

yeah

What do the pod logs say?
To get the pod name use
kubectl get pods -n kube-system
Then use this to see logs.
kubectl logs -f podname -n kube-system

Thanks. I tried running all those commands and even tried to configure all the resources but the issue is still there.
@ASPSInfra did it work for you ?

Hi - actually I think that the problem for me is different. My backend is on port 8080, not 80; and so I think that this "efault-http-backend" not found" error is not important to me.  My problem actually seems to be that I get HTTP 502 when I try to access the frontend. The AGIC health probes are working (I see corresponding messages with HTTP 200 in my application access logs), but Azure portal reports that the backend is unhealthy - hence the 502s.

Ingress pod in kube-system? There is was no pod as far as I remember by the way there were no default-http-backend pod.

What do the pod logs say?
To get the pod name use
kubectl get pods -n kube-system
Then use this to see logs.
kubectl logs -f podname -n kube-system

Ingress pod in kube-system? There is was no pod as far as I remember by the way there were no default-http-backend pod.

Yeah you should see a pod in there. It is used to update the app gateway.

There is no error in kube-system/ingress-appgw-deployment-6b7747f45b-twr2l pod
`Events:
Type    Reason     Age    From               Message

Normal  Scheduled  5m10s  default-scheduler  Successfully assigned kube-system/ingress-appgw-deployment-6b7747f45b-twr2l to aks-nodepool1-32297465-vmss000001
Normal  Pulling    5m9s   kubelet            Pulling image "mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.2.1"
Normal  Pulled     5m2s   kubelet            Successfully pulled image "mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.2.1"
Normal  Created    4m55s  kubelet            Created container ingress-appgw-container
Normal  Started    4m55s  kubelet            Started container ingress-appgw-container`

That looks like a describe. Can you use logs -f also and share the output.
Thanks

Looks like there is something regarding to permission
E1112 18:44:43.721524       1 client.go:170] Code="ErrorApplicationGatewayForbidden" Message="Unexpected status code '403' while performing a GET on Application Gateway. You can use 'az role assignment create --role Reader --scope /subscriptions/983557b3-22e4-4cd6-b322-90dd467505b9/resourceGroups/myResourceGroup --assignee 003dfe2a-b1d6-4def-a01c-f29e4a52edb5; az role assignment create --role Contributor --scope /subscriptions/983557b3-22e4-4cd6-b322-90dd467505b9/resourceGroups/myResourceGroup/providers/Microsoft.Network/applicationGateways/myApplicationGateway --assignee 003dfe2a-b1d6-4def-a01c-f29e4a52edb5' to assign permissions. AGIC Identity needs atleast has 'Contributor' access to Application Gateway 'myApplicationGateway' and 'Reader' access to Application Gateway's Resource Group 'myResourceGroup'." InnerError="network.ApplicationGatewaysClient#Get:Failure responding to request: StatusCode=403 -- Original Error: autorest/azure: Service returned an error. Status=403 Code="AuthorizationFailed" Message="The client '21b76835-e5e0-4862-93c9-8e8100c07995' with object id '21b76835-e5e0-4862-93c9-8e8100c07995' does not have authorization toperform action 'Microsoft.Network/applicationGateways/read' over scope '/subscriptions/983557b3-22e4-4cd6-b322-90dd467505b9/resourceGroups/myResourceGroup/providers/Microsoft.Network/applicationGateways/myApplicationGateway' or the scope is invalid. If access was recently granted, please refresh your credentials.""

Yup. Seems my two commands that assign the permissions did not work for you for some reason.
Just run the two commands that show in the error and it should work for you.
Let me know how you get on.

It seems working now.  Below is the output I'm getting now.
I1112 18:50:26.755700       1 mutate_app_gateway.go:177] BEGIN AppGateway deployment
I1112 18:50:57.233874       1 mutate_app_gateway.go:185] Applied generated Application Gateway configuration
I1112 18:50:57.233901       1 mutate_app_gateway.go:200] cache: Updated with latest applied config.
I1112 18:50:57.234584       1 mutate_app_gateway.go:204] END AppGateway deployment
I1112 18:50:57.234602       1 controller.go:151] Completed last event loop run in: 30.582875853s

That looks right. Glad it's working for you!
Hopefully going forward we won't need to do the permissions assignment.
Let me know if you need any further help.

#reassign:halkazwini

@halkazwini this issue is from 2 years ago. I believe back when this was in preview too.
I would say it's safe to close this issue.

#please-close

authors: ASPSInfra JayaChatterjee-MSFT PixelRobots SaiKishor-MSFT giatule halkazwini kishaa


text:
SendAsync vs SendCoreAsync

I don't have a SendAsync method as in the example. I have only a SendCoreAsync method, and the arguments are different.
Is that because I am using a different library? or because the article is out of date?
It would also be really helpful to state what nuget packages you need, I couldn't find that anywhere in the article.
These are the packages I have installed

Thanks
Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: e2c2755f-9604-2e0d-827b-9f8db937279c
Version Independent ID: 84ba9454-4cc9-2a93-0708-10ad7c1428ed
Content: Develop & configure Azure Functions app - Azure SignalR
Content Source: articles/azure-signalr/signalr-concept-serverless-development-config.md
Service: signalr
GitHub Login: @anthonychu
Microsoft Alias: antchu

Thanks for the feedback! We are currently investigating and will update you shortly.

Looks like this is related to the trigger. @sffamily Could you please take a look?
#reassign:@sffamily

@RyanHill-MSFT Sorry I thought I was assigned this because I was tagged. Feel free to reassign it back to yourself.

@anavarro9731 I don't see the packages you have listed. But I've verified against .NET Core 2.2 and higher that you should see both SendAsync and SendAsyncCore methods in Microsoft.Azure.WebJobs.Extensions.SignalRService nuget package version 1.2 and higher. You'll also need using Microsoft.AspNetCore.SignalR; statement. Anything below that and the SignalRTrigger object isn't supported.
  <PropertyGroup>
    <TargetFramework>netcoreapp2.2</TargetFramework>
    <AzureFunctionsVersion>v3</AzureFunctionsVersion>
  </PropertyGroup>
  <ItemGroup>
    <PackageReference Include="Microsoft.Azure.WebJobs.Extensions.SignalRService" Version="1.2.0" />
    <PackageReference Include="Microsoft.Azure.WebJobs.Extensions.Storage" Version="3.0.11" />
    <PackageReference Include="Microsoft.NET.Sdk.Functions" Version="3.0.7" />
  </ItemGroup>

If you still experience issues with the above, feel free to reopen the issue and tag me in the reply.

authors: RyanHill-MSFT anavarro9731 anthonychu


text:
Sample code seems missing

Hi All,
The code for step 4 ( save dataframe to table) of "Download and prepare the data" is missing.
If it's intentional, would be nice to add it.
Br.
N.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 60336a61-8df6-71cf-4346-c2c314ce62fe
Version Independent ID: 22972230-7046-2520-ffdd-7d3048231196
Content: Azure Synapse Studio notebooks - Azure Synapse Analytics
Content Source: articles/synapse-analytics/spark/apache-spark-to-power-bi.md
Service: synapse-analytics
Sub-service: spark
GitHub Login: @midesa
Microsoft Alias: midesa

@nmellal Thanks for bringing this to our attention.  We will investigate and update as appropriate.

@nmellal Thanks for your contribution, I've addressed this issue in PR: https://github.com/MicrosoftDocs/azure-docs-pr/pull/139229
The changes should be live EOD or tomorrow. In future, if you see any minor bug fixes in the doc, feel free to click on the edit button and submit a PR to update. we love to take community contributions.

authors: CHEEKATLAPRADEEP-MSFT nmellal


text:
Typo in add-confirmations-to-a-command. Instead of 83 degrees, 72 degrees should be there

Input: Set temperature to 80 degrees
Output: are you sure you want to set the temperature as 80 degrees?
Input: No
Output: No problem. What temperature then?
Input: 72 degrees
Output: are you sure you want to set the temperature as 72 degrees?
Input: Yes
Output: OK, setting temperature to 83 degrees

[Enter feedback here]

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 7f9ba8c8-d002-9cda-a28f-30effa9bbc7e
Version Independent ID: 2e04653f-ae0b-c52d-e899-c2a1374af6dd
Content: How-to: Develop Custom Commands applications - Speech service - Azure Cognitive Services
Content Source: articles/cognitive-services/Speech-Service/how-to-develop-custom-commands-application.md
Service: cognitive-services
Sub-service: speech-service
GitHub Login: @trevorbye
Microsoft Alias: trbye

@gbelenky Thanks for spotting this. A PR is created to fix this typo. The change should reflect in the document within 24 hours of the PR merge.

@gbelenky The changes are now merged and should be available in the documentation in the next 24 hours. We will now proceed to close this thread. If there are further questions regarding this matter, please tag @RohitMungi-MSFT in your reply.

authors: RohitMungi-MSFT gbelenky


text:
Great doc!

Kudos for a job well done.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 96a94ffa-d165-cf80-20f6-444b1e0af7b3
Version Independent ID: 156f8934-c0cf-5eae-2ede-e01f8b93ec9b
Content: Manage Azure DDoS Protection Standard using the Azure portal
Content Source: articles/virtual-network/ddos-protection-manage-portal.md
Service: virtual-network
GitHub Login: @jimdial
Microsoft Alias: jdial

@TomShinder Thank you for the feedback. I have passed this on to the content author.

authors: Mike-Ubezzi-MSFT TomShinder


text:
Error when run the SQL query on a spark created table . The document shows the table uppercase

[Enter feedback here]
This doesnt work:
SELECT * FROM mytestdb.dbo.myExternalParquetTable WHERE name = 'Alice';
Instead it should show:
SELECT * FROM mytestdb.dbo.myexternalparquettable WHERE name = 'Alice';

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 7d62b5d1-6a59-653b-56f2-da5c475440f7
Version Independent ID: aeac19d9-79ca-27c1-617d-cf53ce89339d
Content: Shared metadata tables - Azure Synapse Analytics
Content Source: articles/synapse-analytics/metadata/table.md
Service: synapse-analytics
Sub-service: metadata
GitHub Login: @MikeRys
Microsoft Alias: mrys

@jovalen thanks for the feedback!
Our SME in this area will review the feedback and will get back to you soon.

Hello @jovalen , we did some tests, and the table name is case-sensitive.  By any chance, did you create the table all lowercase?

@jovalen  Since we have not heard back from you we will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly reopen the issue and continue the discussion.

Hi team,
I made tests again and here you have the issue I faced:

Hi @jovalen, thank you for reopening this issue and providing the code you were running. We are looking into this issue further.

#reassign:julieMSFT

authors: CHEEKATLAPRADEEP-MSFT MartinJaffer-MSFT SatishBoddu-MSFT jovalen julieMSFT


text:
Connection security certificates

In the Connection Security section it mentions the following:
By default, the certificate used for RDP encryption is self-generated by the OS during the deployment. If desired, customers may deploy centrally managed certificates issued by the enterprise certification authority. For more information about configuring certificates, see Windows Server documentation.
Which OS generates the cert, the client or session host?  At the end, it says you can use a CA to create your own certs but the link goes to Remote Desktop Listener certs for Windows 2012.  I am trying to determine if I need to use internal CA for certificates and how to configure WVD to use the CA instead of the self-generated certs. Would be nice to have more clarification if this is even a recommendation for WVD.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: f5e20117-5458-fd52-7594-5854f349573d
Version Independent ID: 271a354c-7451-647f-6233-0011cc4ce181
Content: Understanding Windows Virtual Desktop network connectivity - Azure
Content Source: articles/virtual-desktop/network-connectivity.md
Service: virtual-desktop
GitHub Login: @gundarev
Microsoft Alias: denisgun

Hi, we are investigating your issue and will update you shortly.

@wilbug1git1 The OS of the session host is what generates the certificates, and you can add / change the listener certificates for RDP connections.
Adding your own certs is an additional layer of security if desired. Only users who have the custom cert installed can connect to the RDS deployment.

@wilbug1git1 We will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly continue the discussion and we will reopen the issue.


text:
No documentation on HOW to create linked services

There are no examples on step-by-step creation of linked services. Even a single example a some type would be helpful.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 70754c7c-a557-5683-bb58-b2fd0409e09f
Version Independent ID: e91ceff6-8314-c9af-973c-d434c178fc0c
Content: Linked services in Azure Data Factory - Azure Data Factory
Content Source: articles/data-factory/concepts-linked-services.md
Service: data-factory
GitHub Login: @dcstwh
Microsoft Alias: weetok

@erzaliator You may checkout this article which explains how to Create a linked service in Azure Data Factory.
Hope this helps.

Awesome! Maybe we can include an example like Create a linked service in this page as well.

@erzaliator  I've addressed this issue in PR: https://github.com/MicrosoftDocs/azure-docs-pr/pull/155513
The changes should be live EOD or tomorrow. In future, if you see any minor bug fixes in the doc, feel free to click on the edit button and submit a PR to update. we love to take community contributions.

authors: CHEEKATLAPRADEEP-MSFT erzaliator


text:
Need example of how to deploy using Azure Pipelines

Not setting repositoryUrl is fine on first deploy, but on second deploy (or after deploying the application), I get the following error:
undefined: RepositoryUrl is invalid.  Cannot change the RepositoryUrl. Please detach your static site first if you wish to attach to another repository.
This indicates that the repositoryUrl is set to something and running the ARM deployment again tries to change this.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: bb567df0-dc83-c3d4-a65e-6a792d4197b0
Version Independent ID: f5cb30b7-f99b-c50a-d322-194f9f7db831
Content: Tutorial: Publish Azure Static Web Apps using an ARM template
Content Source: articles/static-web-apps/publish-azure-resource-manager.md
Service: static-web-apps
GitHub Login: @petender
Microsoft Alias: petender

@heing
Thanks for your feedback! We will investigate and update as appropriate.

@petender, Requesting your comments on this feedback.

Thanks for the comments, petender. @heing, We will close this out, but if you feel you need more information please just let us know.

Thanks for the reply. I do not set repositoryUrl, but the AzureStaticWebApp@0 task sets it when deploying my application. After that, I cannot run ARM template deployment. Setting repositoryUrl to null in the ARM template does not help. How can I prevent the AzureStaticWebApp@0 from setting repositoryUrl when deploying using Azure Pipelines?

Hi Heing, the repositoryURL parameter gets set during the deployment, whether you run this from an ARM template or from Azure DevOps. Once this setting has been set (the unique URL.azurestaticapps.net) you see on the service, it cannot be changed. As said earlier, the SWA team is working on an update in the next release of SWA to allow more IaC scenarios taking care of this.

authors: AjayKumar-MSFT JamesTran-MSFT heing petender


text:
Should add Azure Digital Twins to event source list

Should add Azure Digital Twins to event source list
Per: https://docs.microsoft.com/en-us/azure/digital-twins/how-to-manage-routes

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 3427291a-bf0e-81c6-0e9f-72bdf440b871
Version Independent ID: 3d833d91-98c1-548b-06c5-681b0c41326b
Content: What is Azure Event Grid? - Azure Event Grid
Content Source: articles/event-grid/overview.md
Service: event-grid
GitHub Login: @spelluru
Microsoft Alias: spelluru

Hello @thelazydogsback,
Thank you for your feedback! We have assigned this issue to the author to review further and take the next course of action.

The sources in this list are Azure sources that send events to system topics. Whereas, Azure Digital Twins sends events to a custom topic. It's like any other application sending events to custom topics.
When you select a source in this list, you will see the schema and types of events that the Azure source generates and sends to system topics. I could mention that the Azure Digital Twins source is supported via custom topics, but I need to discuss with the product team before I update the article.

Added a note in the Custom Topics article. Thanks.
https://docs.microsoft.com/en-us/azure/event-grid/custom-topics#arm-template-tutorials
#please-close.


text:
Listing of reserved IP addresses per subnet is incorrect.

Under the section titled "Are there any restrictions on using IP addresses within these subnets?" it states the following.
Yes. Azure reserves 5 IP addresses within each subnet. These are x.x.x.0-x.x.x.3 and the last address of the subnet. x.x.x.1-x.x.x.3 is reserved in each subnet for Azure services.
x.x.x.0: Network address
x.x.x.1: Reserved by Azure for the default gateway
x.x.x.2, x.x.x.3: Reserved by Azure to map the Azure DNS IPs to the VNet space
x.x.x.255: Network broadcast address for subnets of size /25 and larger. This will be a different address in smaller subnets.
Unless the Azure IPv4 address range implementation is different from the RFC 4632, the above examples are only accurate for a traditional Class C or CIDR /24 IP address range.
For example, for IP address range 192.168.0.128/27, the following would be the reserved IP list.
192.168.0.128 : Network address
192.168.0.129 : Reserved by Azure for the default gateway
192.168.0.130, 192.168.0.131 : Reserved by Azure to map the Azure DNS IPs to the VNet space
192.168.0.159 : Network broadcast address.
Please advise, thanks!

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 07cec477-f584-400f-889c-9a5403f34bad
Version Independent ID: f777fdfd-2f5a-56b9-574f-ae6d2b19f130
Content: Azure Virtual Network FAQ
Content Source: articles/virtual-network/virtual-networks-faq.md
Service: virtual-network
GitHub Login: @KumudD
Microsoft Alias: kumud

@quekmc , you are right that for IP address range 192.168.0.128/27, the following would be the reserved IP list.
192.168.0.128 : Network address
192.168.0.129 : Reserved by Azure for the default gateway
192.168.0.130, 192.168.0.131 : Reserved by Azure to map the Azure DNS IPs to the VNet space
192.168.0.159 : Network broadcast address.
No matter the IP address range, the fact the first 4 IP addresses & the last IP address of that range are reserved remains unchanged:

Since, it is not possible to provide examples for each unique subnet range, x.x.x.0,1,2 & 3 can be considered the first 4 IP addresses of the subnet irrespective of the address range and the last IP address can be different depending on the range and that is mentioned as below:

The same is also mentioned in the below article:
https://docs.microsoft.com/en-us/azure/virtual-network/private-ip-addresses#allocation-method

We are closing this issue for now. If there are further questions regarding this matter, please reply and we will gladly continue the discussion.

Hi Gitarani
Thanks for the response and my apologies for the slow response.
The second document that you have attached in your response is clear and accurate in that it is the first four and last IP address of any subnet is being reserved.  However the article I'm referencing wasn't as clear.  The way that section of the document is phrased is ambiguous.

Am using the same image you have attached to explain why.  Where the last statement highlighted in Yellow is placed, it gives the impression that for CIDR range of /25 or smaller subnet the broadcast address is different; that is incorrect.  For example in the case of CIDR address range of 192.168.0.0/25 the broadcast address is 192.168.0.127 not 192.168.0.255.  Even if that statement was to be applied to the entire section in the picture, that is incorrect as per my first example of 192.168.0.128/27
We are in agreement that it is not feasible to list every conceivable CIDR range example.  May I suggest the following so that the ambiguity is removed.  This will be consistent with the document you quoted.
https://docs.microsoft.com/en-us/azure/virtual-network/private-ip-addresses#allocation-method.  Specifically this section.

Are there any restrictions on using IP addresses within these subnets?
Yes. Azure reserves the first four and last IP address for a total of 5 IP addresses within each subnet.  E.g. for the IP address range 192.168.1.0/24.
192.168.1.0 : Network address
192.168.1.1 : Reserved by Azure for the default gateway
192.168.1.2, 192.168.1.3 : Reserved by Azure to map the Azure DNS IPs to the VNet space
192.168.1.255 : Network broadcast address.
Please advise, thanks!

#reassign: @mbender-ms

Thanks for the feedback and suggestions @quekmc.
Doc will be updated after content freeze is lifted on 05/24/2020.
#please-close

authors: GitaraniSharma-MSFT mbender-ms quekmc


text:
Wrong information on documentation on identity-based connections in function triggers

https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-storage-blob-trigger?tabs=csharp#identity-based-connections
I am using <PackageReference Include="Microsoft.Azure.WebJobs.Extensions.Storage" Version="5.0.0" />.
The page currently says:

Property: Blob Service URI
Environment variable template: <CONNECTION_NAME_PREFIX>__blobServiceUri
Example value: <storage_account_name>.blob.core.windows.net

I get the error below when I use the documented value of the form <storage_account_name>.blob.core.windows.net. If I instead replace it by a value of the form https://<storage_account_name>.blob.core.windows.net/, I no longer get an error. I think the documentation is missing a https:// in front of the value and a / at the end of the value.
[2021-11-05T14:35:24.921Z] Could not parse serviceUri from the configuration.
[2021-11-05T14:35:24.924Z] System.Private.Uri: Invalid URI: The format of the URI could not be determined.
[2021-11-05T14:35:24.936Z] Microsoft.Azure.WebJobs.Host: Error indexing method 'GenerateExcelFiles'. Microsoft.Extensions.Azure: Unable to find matching constructor while trying to create an instance of BlobServiceClient.
[2021-11-05T14:35:24.946Z] Expected one of the follow sets of configuration parameters:
[2021-11-05T14:35:24.948Z] 1. connectionString
[2021-11-05T14:35:24.951Z] 2. serviceUri
[2021-11-05T14:35:24.954Z] 3. serviceUri, credential:accountName, credential:accountKey
[2021-11-05T14:35:24.956Z] 4. serviceUri, credential:signature
[2021-11-05T14:35:24.959Z] 5. serviceUri
[2021-11-05T14:35:24.961Z]
[2021-11-05T14:35:24.963Z] Found the following configuration keys: blobServiceUri.
[2021-11-05T14:35:25.063Z] Error indexing method 'GenerateExcelFiles'
[2021-11-05T14:35:25.070Z] Microsoft.Azure.WebJobs.Host: Error indexing method 'GenerateExcelFiles'. Microsoft.Extensions.Azure: Unable to find matching constructor while trying to create an instance of BlobServiceClient.
[2021-11-05T14:35:25.075Z] Expected one of the follow sets of configuration parameters:
[2021-11-05T14:35:25.084Z] 1. connectionString
[2021-11-05T14:35:25.087Z] 2. serviceUri
[2021-11-05T14:35:25.089Z] 3. serviceUri, credential:accountName, credential:accountKey
[2021-11-05T14:35:25.096Z] 4. serviceUri, credential:signature
[2021-11-05T14:35:25.100Z] 5. serviceUri
[2021-11-05T14:35:25.103Z]
[2021-11-05T14:35:25.106Z] Found the following configuration keys: blobServiceUri.
[2021-11-05T14:35:25.109Z] Function 'GenerateExcelFiles' failed indexing and will be disabled.

The page currently says:

By default, the blob trigger uses Azure Queues internally. <CONNECTION_NAME_PREFIX>__queueServiceUri can also be specified, but the default behavior without it is to use the connection defined by "AzureWebJobsStorage". The trigger would need Storage Queue Data Contributor on whichever connection is to be used for these queues.

When I try it locally, it fails with the error message below when I don't specify <CONNECTION_NAME_PREFIX>__queueServiceUri in my local.settings.json. It seems like it does not default to AzureWebJobsStorage as the documentation claims. I am using "AzureWebJobsStorage": "UseDevelopmentStorage=true", in my local.settings.json.
[2021-11-05T14:38:12.366Z] Microsoft.Azure.WebJobs.Host: Error indexing method 'GenerateExcelFiles'. Microsoft.Extensions.Azure: Unable to find matching constructor while trying to create an instance of QueueServiceClient.
[2021-11-05T14:38:12.369Z] Expected one of the follow sets of configuration parameters:
[2021-11-05T14:38:12.371Z] 1. connectionString
[2021-11-05T14:38:12.373Z] 2. serviceUri
[2021-11-05T14:38:12.375Z] 3. serviceUri, credential:accountName, credential:accountKey
[2021-11-05T14:38:12.379Z] 4. serviceUri, credential:signature
[2021-11-05T14:38:12.381Z] 5. serviceUri
[2021-11-05T14:38:12.384Z]
[2021-11-05T14:38:12.386Z] Found the following configuration keys: blobServiceUri.
[2021-11-05T14:38:12.389Z] Error indexing method 'GenerateExcelFiles'
[2021-11-05T14:38:12.392Z] Microsoft.Azure.WebJobs.Host: Error indexing method 'GenerateExcelFiles'. Microsoft.Extensions.Azure: Unable to find matching constructor while trying to create an instance of QueueServiceClient.
[2021-11-05T14:38:12.394Z] Expected one of the follow sets of configuration parameters:
[2021-11-05T14:38:12.396Z] 1. connectionString
[2021-11-05T14:38:12.398Z] 2. serviceUri
[2021-11-05T14:38:12.401Z] 3. serviceUri, credential:accountName, credential:accountKey
[2021-11-05T14:38:12.402Z] 4. serviceUri, credential:signature
[2021-11-05T14:38:12.404Z] 5. serviceUri
[2021-11-05T14:38:12.413Z]
[2021-11-05T14:38:12.415Z] Found the following configuration keys: blobServiceUri.
[2021-11-05T14:38:12.421Z] Function 'GenerateExcelFiles' failed indexing and will be disabled.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 5ecb1e79-f603-03fd-2ef9-c6cf08ffaacd
Version Independent ID: 35c99e36-f224-350b-a258-2e0cfb8ab154
Content: Azure Blob storage trigger for Azure Functions
Content Source: articles/azure-functions/functions-bindings-storage-blob-trigger.md
Service: azure-functions
GitHub Login: @craigshoemaker
Microsoft Alias: cshoe

Hi @jesperkristensen I just wanted to give you an update.
I have confirmed your first issue that the link requires the "https://" in front of the link. I'm still exploring the issue with leaving out the queue link in local dev.

#reassign:ggailey777

GitHub user SamaraSoucy-MSFT has been removed from the MicrosoftDocs organization, so they were automatically removed as an assignee.


text:
Role assignment limit increase on subscriptions

Has the role assignment limit of 2000 been updated to 4000? We have noticed an increase on our subscriptions. Can we get confirmation that 4000 will be the limit moving forward?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 4d9df941-3116-600e-49f7-a8fa3f732970
Version Independent ID: 65afc3ee-c285-a8cc-2d8b-a509446fe08b
Content: Steps to assign an Azure role - Azure RBAC
Content Source: articles/role-based-access-control/role-assignments-steps.md
Service: role-based-access-control
GitHub Login: @rolyon
Microsoft Alias: rolyon

@noahbirrer-8451
Thanks for your feedback! We will investigate and update as appropriate.

@noahbirrer-8451
Thank you for pointing this out!
Within my subscriptions, I was able to see two different values (2000 & 4000) for the Azure role assignments per Azure subscription limit.

I've reached out to our engineering team and will update as soon as possible about this potential limit increase.
Related issue - https://github.com/MicrosoftDocs/azure-docs/issues/83753
If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

@noahbirrer-8451
I received a response from our doc author and a note has been added to reflect the 2000 to 4000 role assignment change.

For more info - https://docs.microsoft.com/en-us/azure/role-based-access-control/troubleshooting#azure-role-assignments-limit
Thank you for your time and patience throughout this issue.

weird i never saw an announcement about this anywhere, this is a big deal and win for customers

authors: JamesTran-MSFT drdamour noahbirrer-8451


text:
Migration to Conditional Access causes confusion on customers

On customers that are not very familiar with the session control in Conditional Access "Customize continuous access evaluation" the policy created by the Migration can be confusing specially if they had CAE enabled for a few users or groups.
This is because of the logic of the CAP is the other way around as the CAE settings, if CAE was enabled just for a group, the CAP will be enabled and would include all the users and apps and exclude the users that were added in CAE settings.
It would be great if we could document what is expected to happen when clicking on the Migrate button as in our private documentation:
Tenants that explicitly enabled some users in their tenants with the old UX:
Old CAE settings will be greyed out. Clicking Migrate launches the New conditional access policy wizard which places All users on the Include, while excluding users and groups copied from CAE. It also sets the new Customize continuous access evaluation Session control to Disabled.
Tenants that explicitly disabled the preview.
Old CAE settings will be greyed out. Clicking Migrate launches the New conditional access policy wizard which places All users on the Include and sets the new Customize continuous access evaluation Session control to Disabled.
That could avoid confusion on the customer and avoid support tickets regarding that

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: b5cf71de-20a1-6056-01cf-f44d9ef60ed3
Version Independent ID: 67cb36dd-918d-e41d-7890-53750957d2d6
Content: Continuous access evaluation in Azure AD
Content Source: articles/active-directory/conditional-access/concept-continuous-access-evaluation.md
Service: active-directory
Sub-service: conditional-access
GitHub Login: @MicrosoftGuyJFlo
Microsoft Alias: joflore

@jaulates
Thanks for your feedback! I've assigned this issue to the author who will investigate and update as appropriate.

@JamesTran-MSFT this needs to go to the PG #reassign:@JamesTran-MSFT

@jaulates
Thank you for pointing this out! I've created a PR to update the documentation and it's currently waiting for the author to review and sign off.
I will now close out this issue. Please allow some time for the author to review and the changes to reflect.
Thank you for your time and patience!


text:
Azure CLI actually is able to create the AKS cluster with bring-your-own subnet with SYSTEM assigned identity.  And the document lacks the steps for the User assigned identity.

Azure CLI actually is able to create the AKS cluster with bring-your-own subnet with SYSTEM assigned identity.  And the document lacks the steps for the User assigned identity.
Here is one example in my side.
tom@Azure:~$ az   aks create -g 2111290060002686 -n 2111290060002686b --vnet-subnet-id   /subscriptions/458c98b9-57ff-4c12-9505-68b3ab917db6/resourceGroups/2111290060002686/providers/Microsoft.Network/virtualNetworks/2111290060002686-vnet/subnets/subnet2   --docker-bridge-address 177.17.0.1/16 --network-plugin azure   The behavior of   this command has been altered by the following extension: aks-preview   It is highly   recommended to use USER assigned identity (option --assign-identity) when you   want to bring your ownsubnet, which will have no latency for the role   assignment to take effect. When using SYSTEM assigned identity, azure-cli   will grant Network Contributor role to the system assigned identity after the   cluster is created, and the role assignment will take some time to take   effect, see https://docs.microsoft.com/en-us/azure/aks/use-managed-identity,   proceed to create cluster with system assigned identity? (y/N): y
With Azure CLI, I can see the SYSTEM assigned identity is assigned as "Network Contributor" on the subnet.
tomzhu@cn-zhuwei-089:/mnt/c/Users/zhuwei/Desktop$ az role assignment list --scope /subscriptions/458c98b9-57ff-4c12-9505-68b3ab917db6/resourceGroups/2111290060002686/providers/Microsoft.Network/virtualNetworks/2111290060002686-vnet/subnets/subnet2
[
{
"canDelegate": null,
"condition": null,
"conditionVersion": null,
"description": null,
"id": "/subscriptions/458c98b9-57ff-4c12-9505-68b3ab917db6/resourceGroups/2111290060002686/providers/Microsoft.Network/virtualNetworks/2111290060002686-vnet/subnets/subnet2/providers/Microsoft.Authorization/roleAssignments/641cb0bd-a84e-4736-9909-1229325e14e5",
"name": "641cb0bd-a84e-4736-9909-1229325e14e5",
"principalId": "0acd73ac-00ef-43f8-80ca-b41130ad3c0c",
"principalName": "76a19ca6-bbbd-4977-8620-cc11a7f4f3cc",
"principalType": "ServicePrincipal",
"resourceGroup": "2111290060002686",
"roleDefinitionId": "/subscriptions/458c98b9-57ff-4c12-9505-68b3ab917db6/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7",
"roleDefinitionName": "Network Contributor",
"scope": "/subscriptions/458c98b9-57ff-4c12-9505-68b3ab917db6/resourceGroups/2111290060002686/providers/Microsoft.Network/virtualNetworks/2111290060002686-vnet/subnets/subnet2",
"type": "Microsoft.Authorization/roleAssignments"
}
]
But in the document, this isn't mentioned. Is this still in the preview stage? or GA?
Thank you!

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 719f4010-810f-b3c7-d807-222b39b20e20
Version Independent ID: 82ac8cfa-b0a2-c77a-408a-ab9aa2b6bce4
Content: Configure kubenet networking in Azure Kubernetes Service (AKS) - Azure Kubernetes Service
Content Source: articles/aks/configure-kubenet.md
Service: container-service
GitHub Login: @zr-msft
Microsoft Alias: zarhoads

@SnoWolfT , thank you for sharing your concern.
The command you have shared makes use of Azure CNI network plugin with the AKS cluster:
az aks create -g 2111290060002686 -n 2111290060002686b --vnet-subnet-id /subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/2111290060002686/providers/Microsoft.Network/virtualNetworks/2111290060002686-vnet/subnets/subnet2 --docker-bridge-address 177.17.0.1/16 --network-plugin azure

However, the document link in the metadata refers to "Bring your own subnet and route table with kubenet"
Can you please share the specific network plugin and the corresponding document that pertains to your query?

@SnoWolfT Since we have not heard back from you we will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly reopen the issue and continue the discussion.


text:
missing Synapse setup instructions

The top half of the page is instructions for setting up a SQL dedicated pool.  The bottom half of the page is about setting firewall rules on an Azure Synapse Instance.  There are not instructions for creating an Azure Synapse Analytics instance.  The instructions reference a non-existent mySampleDataWarehouse.
This is supposed to be the page for setting up Azure Synapse Analytics as a Pre-requisite for the Azure Data Factory Tutorial here: https://docs.microsoft.com/en-us/azure/data-factory/lab-data-flow-data-share#:~:text=Create an Azure SQL Database linked service&text=You can use the search,to connect to your database.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 90467e66-9062-01e3-6d40-fce8625d005b
Version Independent ID: 8db6b4e9-fd3a-8b45-1283-7f7144772a88
Content: Quickstart: Create and query a dedicated SQL pool (formerly SQL DW) (Azure portal) - Azure Synapse Analytics
Content Source: articles/synapse-analytics/sql-data-warehouse/create-data-warehouse-portal.md
Service: synapse-analytics
Sub-service: sql-dw
GitHub Login: @pimorano
Microsoft Alias: pimorano

@durantmbie Thank you for sharing feedback. We are actively validating it. We will share updates shortly.

Thanks for this feedback @durantmbie, I agree. The link here should be modified to point to other walkthrough(s). @jonburchel  can you assist?

#reassign:jonburchel

Please include instructions on creating a Synapse Analytics instance, these instructions are practically useless without it.

#reassign:WilliamDAssafMSFT

Thanks @durantmbie for raising this issue on the wizard, and I apologize for our delay in response. This change was batched with other needed changes in this tutorial. A doc update is in flight and work internally is proceeding with a fix here.
#please-close

authors: ShaikMaheer-MSFT TomSwanborough WilliamDAssafMSFT durantmbie


text:
Page is not in the proper language

Navigating to https://docs.microsoft.com/nl-nl/azure/azure-monitor/app/usage-overview
The content is shown in language Japanese in stead of Dutch.
Url says nl-nl
Language setting in the footer of the page says "Nederlands"

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 0d2e595b-45d5-fd63-b2e2-4c5ef787ada5
Version Independent ID: 0bc5114f-0e4f-3cf2-e0b9-622c9a46aebd
Content: Upgrade Azure Monitor Application Insights smart detection to alerts (Preview) - Azure Monitor
Content Source: articles/azure-monitor/alerts/alerts-smart-detections-migration.md
Service: azure-monitor
Sub-service: alerts
GitHub Login: @rboucher
Microsoft Alias: abbyweisberg

Thanks for bringing this to our attention. We will investigate it further and update you shortly.

authors: MonikaReddy-MSFT avwolferen


text:
There is no definition named "Enable Defender for Cloud on your subscription"

There is no such definition available in Azure.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 29ac6a86-4eac-5901-2238-e08b4b33bc68
Version Independent ID: 85e085e3-06a1-f6d9-5b54-7540e05cbc98
Content: Onboard a management group to Microsoft Defender for Cloud
Content Source: articles/defender-for-cloud/onboard-management-group.md
Service: defender-for-cloud
GitHub Login: @ElazarK
Microsoft Alias: elkrieger

@artisticcheese
Thanks for your feedback! We will investigate and update as appropriate.

@artisticcheese thank you for pointing this out. As part of the rebranding effort from "Azure Security Center" to "Microsoft Defender for Cloud", it seems that some of the docs are ahead of the actual product. The dev team responsible for maintaining our policies is aware of the need to update these and has a backlog item to take care of this.
As of right now the policy is still named “Enable Azure Security Center on your subscription“.
Thank you for bringing this to our attention and the issue will be resolved as soon as possible.

#please-close


text:
Support for Managed Disks and SSE in Azure China

Managed disks are available in Azure China, so the assumption is SSE is also there. The FAQ does not indicate that environment is supported. Need to update that information if it is really available.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 263abdef-3478-8261-6c4c-5d608698ba4e
Version Independent ID: 61ef3094-fda7-d7b9-e19c-4e8f6a5b2f2d
Content: Frequently asked questions (FAQ) about Azure IaaS Windows VM disks
Content Source: articles/virtual-machines/windows/faq-for-disks.md
Service: virtual-machines-windows
Product: unspecified
GitHub Login: @roygara
Microsoft Alias: rogarana

@Roblarson Thanks for the feedback! I have assigned the issue to the content author to investigate further and update the document as appropriate.

@Roblarson thank you for reaching out! I looked into it, SSE is available in Azure China with MS managed keys, not customer managed keys. I'll add an item to our backlog to update the FAQ.

I've added the item to our backlog, accordingly I'm asking to close out the ticket.
Thanks again for bringing this to our attention!
#please-close

I am fine with closing this. Thanks for addressing it quickly
Sent from Outlook for Android
robert.larson@microsoft.com

From: rogara notifications@github.com
Sent: Thursday, May 31, 2018 1:08:19 PM
To: MicrosoftDocs/azure-docs
Cc: Robert Larson (SERVICES); Mention
Subject: Re: [MicrosoftDocs/azure-docs] Support for Managed Disks and SSE in Azure China (#9372)
I've added the item to our backlog, accordingly I'm asking to close out the ticket.
Thanks again for bringing this to our attention!
#please-close
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHubhttps://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FMicrosoftDocs%2Fazure-docs%2Fissues%2F9372%23issuecomment-393663450&data=02|01|Robert.Larson%40microsoft.com|50071f7c8dd546db4df608d5c732410c|72f988bf86f141af91ab2d7cd011db47|1|0|636633941008970970&sdata=JbfMm%2BNYJ6YHAEcQZe39QKp3swCLGyo%2FzxbDpAHH1%2BM%3D&reserved=0, or mute the threadhttps://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FANJwdFO-eixa8QnkIilnWwTBR1cIP_Ifks5t4E2zgaJpZM4USV88&data=02|01|Robert.Larson%40microsoft.com|50071f7c8dd546db4df608d5c732410c|72f988bf86f141af91ab2d7cd011db47|1|0|636633941008980975&sdata=Ret6jGPzcbuXdTL%2FqiReReXLFPEAX7mSGxf6SZ6onkQ%3D&reserved=0.

@Roblarson Hello! Just letting you know that a change has been made which reflects this, and should be live by EOD.

authors: MicahMcKittrick-MSFT Roblarson roygara


text:
Experimentation Service -> Remote compute in on premise Linux VM

Hi,
There is some difference between two documents we have, please help to correct them to make it consistent. Thanks.
Document 1
Document 2
The post in MSDN.
I pasted the post here as well.
I was just wondering if using a remote docker in an on premise Linux VM is supported as a compute target in the experimentation service using Azure ML Workbench? I have seen a couple of bits of documentation (extracts below), one which suggests it should be possible and the other suggests it would need to be a Linux VM on Azure rather than an on premise Linux VM.
Documentation Suggesting It is Supported
Link
https://docs.microsoft.com/en-gb/azure/machine-learning/desktop-workbench/experimentation-service-configuration
Remote VM should satisfy the following requirements:
Remote VM needs to be running Linux-Ubuntu and should be accessible through SSH.
Remote VM needs to have Docker running.
Documentation Suggesting It is Not Supported
Link
https://docs.microsoft.com/en-us/azure/machine-learning/desktop-workbench/overview-general-concepts
Extract
Compute Target: A compute target is the compute resource that you configure for executing your experiments. It can be your local computer (Windows or macOS), Docker container running on your local computer or in a Linux VM on Azure, or an HDInsight Spark cluster.

Document details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 796e07ab-0473-1ac8-8f23-fb1972c7bdb7
Version Independent ID: 23597f17-8053-0014-fe15-010fa9b99231
Content: Configuring Azure Machine Learning Experimentation Service
Content Source: articles/machine-learning/desktop-workbench/experimentation-service-configuration.md
Service: machine-learning
Product: unspecified
GitHub Login: @gokhanuluderya-msft
Microsoft Alias: gokhanu

@YutongTie-MSFT Thanks for bringing this to our attention. Your feedback has been shared with the content owner for further review.

On-prem Linux VMs are not officially supported although it may technically work. We will clarify in both documents.

@femsulu @gokhanuluderya-msft Thanks very much! We will now proceed to close this thread. If there are further questions regarding this matter, please reopen it and we will gladly continue the discussion.


text:
Service Name Mismatches

The Service Names in the tables on this page do not always match up with the Service Level hierarchy of names that is reported in the Azure Health Report, nor with the simplified Service Level Hierarchy used on the Products By Region page.
Some examples:

Azure App Service is a sophisticated capability with lots of various SKUs and configurations down to SL5. This page doesn't even name it with its proper name, simply calling out a single row for Web Apps (App Service). Are we to assume all App Services, inclusive of all plans and App Service Environments, and across Linux and Windows, are authorized? What about App Service - Static Web Apps?
Azure Communication Services is not represented at all.
Functions is only listed as a single row; should we assume all Function SKUs at SL4 are authorized (e.g. Linux v. Windows, Standard v. Premium)?
Logic Apps is only listed as a single row; should we assume both the Standard and Consumption plans are authorized? What about Logic Apps Integration Accounts?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 4e27d0b1-56f9-2eb7-8fee-0c47cfbafeac
Version Independent ID: 12556227-6adc-52c1-ac60-f341ae247e51
Content: Azure and other Microsoft cloud services compliance scope - Azure Government
Content Source: articles/azure-government/compliance/azure-services-in-fedramp-auditscope.md
Service: azure-government
GitHub Login: @stevevi
Microsoft Alias: stevevi

@timothymeyers
Thanks for your feedback! We will investigate and update as appropriate.

Resolved offline with assistance from @Jain-Garima.

#please-close

authors: YashikaTyagi-MSFT stevevi timothymeyers


text:
Screenshots out of date

The screenshots seem out of date. Under 'Exceptions' :
-Accept connections from within public Azure datacenters ( instead of 'Allow Access to Azure Services')
-Allow access from Azure Portal (instead of 'Allow access to Azure Portal')

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 5d6fa068-69da-7a32-6479-1145f14f2ed2
Version Independent ID: 952c3241-3f4c-b319-6457-02701b24d46d
Content: Azure Cosmos DB firewall support & IP access control
Content Source: articles/cosmos-db/firewall-support.md
Service: cosmos-db
GitHub Login: @SnehaGunda
Microsoft Alias: sngun

@kvroeden Thanks for the feedback! I have assigned the issue to the content author to evaluate and update as appropriate.

The current screen image in the documentation:

Screen capture of the current view in the portal:

There are some slight contextual differences.

@kvroeden Thanks for pointing the issue, the UI was updated after VNet service endpoint concept was introduced. I updated the doc to reflect new UI.

#please-close

@kvroeden We will now proceed to close this thread. If there are further questions regarding this matter, please reopen it and we will gladly continue the discussion.

authors: Mike-Ubezzi-MSFT SnehaGunda kvroeden vasivara-MSFT


text:
The conclusion of this article is that the access is not Secured?

[Enter feedback here]
The title of this article is : "Use TLS/SSL certificates to secure a web server" but the final step (when you try to access the NGNIX server) is a non secured https website with a message from the browser "Safari can't verify the identity of the website".
Did I miss something?
The article was so promising for me but I couldn't find a way to get a valid HTTPS access.

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: 996eb4d1-198e-a69a-b9c5-d247db46d025
Version Independent ID: 5bfe27b3-22e9-efa8-6a1c-3637aa39a049
Content: Tutorial: Secure a web server with TLS/SSL certificates - Azure Virtual Machines
Content Source: articles/virtual-machines/linux/tutorial-secure-web-server.md
Service: virtual-machines
GitHub Login: @cynthn
Microsoft Alias: cynthn

@yolepro
Thanks for your feedback! We will investigate and update as appropriate.

@yolepro  The example in the tutorial is not for production, so we show using a self-signed certificate to make it easier to show the general process. Because it is self-signed, you get the warning at the end. In production, you would use a trusted provider, upload the certificate to KeyVault, and it should work as expected. Does that make sense?
"For production use, you should import a valid certificate signed by trusted provider with az keyvault certificate import. For this tutorial, the following example shows how you can generate a self-signed certificate with az keyvault certificate create...."

@cynthn your answer is very clear. I missed the sentence you quoted!
Thank you for your quick answer.

authors: SaibabaBalapur-MSFT cynthn yolepro


text:
Update network-watcher-nsg-flow-logging-overview.md

App services deployed under App Service Plan do not support NSG Flow Logs. Please refer this documentation for additional details. - in this line, corrected typo documentaion to documentation

Learn Build status updates of commit db11efb:
:x: Validation status: errors
Please follow instructions here which may help to resolve issue.

File
Status
Preview URL
Details

:x:Error

Details

[Error: RuningBuildFailed] Some unexpected errors happened when running build, please open a ticket in https://aka.ms/SiteHelp and include the error report for our team to troubleshoot

For more details, please refer to the build report.
If you see build warnings/errors with permission issues, it might be due to single sign-on (SSO) enabled on Microsoft's GitHub organizations. Please follow instructions here to re-authorize your GitHub account to Learn Build.
Note: Broken links written as relative paths are included in the above build report. For broken links written as absolute paths or external URLs, see the broken link report.
Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them.
For any questions, please:Try searching the learn.microsoft.com contributor guidesPost your question in the Learn support channel

@Harsha-CS
Can you review the proposed changes? IMPORTANT: When the changes are ready for publication, add a #sign-off comment to signal that the PR is ready for the review team to merge.
#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team

Learn Build status updates of commit db11efb:
:x: Validation status: errors
Please follow instructions here which may help to resolve issue.

File
Status
Preview URL
Details

:x:Error

Details

Line 0, Column 0: [Error: git-clone-failed] Failure to clone the repository `https://github.com/Azure-Samples/cognitive-services-speech-sdk#master`. This could be caused by an incorrect repository URL, please verify the URL on the Docs Portal (https://ops.microsoft.com). This could also be caused by not having the proper permission the repository, please confirm that the GitHub group/team that triggered the build has access to the repository.

For more details, please refer to the build report.
If you see build warnings/errors with permission issues, it might be due to single sign-on (SSO) enabled on Microsoft's GitHub organizations. Please follow instructions here to re-authorize your GitHub account to Learn Build.
Note: Broken links written as relative paths are included in the above build report. For broken links written as absolute paths or external URLs, see the broken link report.
Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them.
For any questions, please:Try searching the learn.microsoft.com contributor guidesPost your question in the Learn support channel

#sign-off

Hi @asukumar22,
Thank you for your suggestion.
This change has been updated as part of another PR and is available at https://learn.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-overview#nsg-flow-logging-considerations.
Hence, closing this issue.
#please-close

source: gharchive/pull-request


text:
Update whats-new.md

Changing sentence to reference Identity protection rather than Information protection

Learn Build status updates of commit 52d3902:
:white_check_mark: Validation status: passed

File
Status
Preview URL
Details

articles/sentinel/whats-new.md
:white_check_mark:Succeeded

For more details, please refer to the build report.
Note: Broken links written as relative paths are included in the above build report. For broken links written as absolute paths or external URLs, see the broken link report.
For any questions, please:Try searching the learn.microsoft.com contributor guidesPost your question in the Learn support channel

@Court72 This was addressed in another already-merged PR. Thanks. This PR can be closed.

authors: mlopinto opbld31 yelevin