Merge pull request #310452 from MicrosoftDocs/main

Auto Publish – main to live - 2026-01-13 23:00 UTC

Author: learn-build-service-prod[bot]

articles/active-directory-b2c/service-limits.md

@@ -8,7 +8,7 @@ manager: CelesteDG
 ms.service: azure-active-directory
 
 ms.topic: reference
-ms.date: 08/19/2025
+ms.date: 01/08/2026
 ms.subservice: b2c
 zone_pivot_groups: b2c-policy-type
 
@@ -186,7 +186,7 @@ The following table lists the administrative configuration limits in the Azure A
 
 ## Region specific service limits 
 
-As a protection for our customers, Microsoft places some restrictions on telephony verification for certain region codes. The following table lists the region codes and their corresponding limits.
+As a protection for our customers, Microsoft places some restrictions on telephony verification for certain region codes. The following table lists the region codes and their corresponding limits. These limits apply to both SMS and Voice verification.
 
 | Region Code | Region Name                                    | Limit per tenant per 60 minutes | Limit per tenant per 24 hours            |                         
 |:----------- |:---------------------------------------------- |:------------------------------- | :----------------------------------------|

articles/api-center/includes/api-center-portal-compare-apim-dev-portal.md

@@ -6,7 +6,7 @@ author: dlepow
 
 ms.service: azure-api-center
 ms.topic: include
-ms.date: 03/05/2025
+ms.date: 01/13/2026
 ms.author: danlep
 ms.custom: Include file
 ---
@@ -15,10 +15,10 @@ ms.custom: Include file
 
 The [Azure API Management](../../api-management/api-management-key-concepts.md) and [Azure API Center](../overview.md) services both provide portals for developers to discover and consume APIs:
 
-* The *API Management developer portal* allows users to find managed APIs, learn how to use them, request access, and test them.
-* The *API Center portal* (preview) is a multi-gateway portal where  users can discover and filter the organization's complete API inventory.
+* The *API Management developer portal* allows users to find managed APIs (including groups of APIs managed as products), learn how to use them, request access, and test them.
+* The *API Center portal* (preview) is a multigateway portal where users can discover and filter the organization's complete API inventory.
 
-While the two portals share some features, they also have distinct differences. The following table compares current capabilities to help determine which portal to use. Some organizations may prefer one portal, while others may need both.
+While the two portals share some features, they also have distinct differences. The following table compares current capabilities to help determine which portal to use. Some organizations might prefer one portal, while others might need both.
 
 | Feature | API Management developer portal | API Center portal (preview) |
 | --- | --- | --- |
@@ -30,7 +30,7 @@ While the two portals share some features, they also have distinct differences.
 | Add custom widgets | ✔️ | ❌ |
 | Customize with WordPress | ✔️ | ❌ |
 | Test APIs in test console | ✔️ | ✔️ |
-| Subscribe to APIs | ✔️ | ❌ |
+| Subscribe to APIs and products | ✔️ | ❌ |
 | View API usage analytics | ✔️ | ❌ |
 
 <sup>1</sup> The API Center portal can contain all APIs in your organization, including those managed in Azure API Management and other platforms, as well as unmanaged APIs and APIs under development.

articles/api-management/api-management-faq.yml

@@ -5,7 +5,7 @@ metadata:
   author: dlepow
   ms.service: azure-api-management
   ms.topic: faq
-  ms.date: 09/30/2025
+  ms.date: 01/13/2026
   ms.author: danlep 
   ms.custom: engagement-fy23,fasttrack-edit,build-2025
 
@@ -51,7 +51,10 @@ sections:
       - question: |
           Can I move an API Management instance from one subscription to another?
         answer: |
-          Yes. To learn how, see [Move resources to a new resource group or subscription](../azure-resource-manager/management/move-resource-group-and-subscription.md).
+          Yes. To learn how, see [Move resources to a new resource group or subscription](../azure-resource-manager/management/move-resource-group-and-subscription.md). Certain features or resources can't be moved and should be disabled or removed before the move, including:
+
+          * System-assigned or user-assigned managed identities.
+          * Virtual network subnet configurations.
 
       - question: |
           Can I manage my API Management instance programmatically?

articles/api-management/api-management-howto-use-managed-service-identity.md

@@ -27,7 +27,8 @@ You can grant two types of identities to an API Management instance:
 - A *user-assigned identity* is a standalone Azure resource that can be assigned to your service. The service can have multiple user-assigned identities.
 
 > [!NOTE]
-> Managed identities are specific to the Microsoft Entra tenant in which your Azure subscription is hosted. They don't get updated if a subscription is moved to a different directory. If a subscription is moved, you need to re-create and reconfigure the identities.  
+> - Managed identities are specific to the Microsoft Entra tenant in which your Azure subscription is hosted. They don't get updated if a subscription is moved to a different directory. If a subscription is moved, you need to recreate and reconfigure the identities.  
+> - API Management managed identities are also specific to the Azure subscription in which the service is hosted. If you move the service to a different subscription in the same tenant, you need to recreate and reconfigure the identities.
 
 [!INCLUDE [api-management-workspace-availability](../../includes/api-management-workspace-availability.md)]
 

articles/api-management/virtual-network-reference.md

@@ -63,7 +63,7 @@ NSG rules allowing outbound connectivity to Storage, SQL, and Azure Event Hubs s
 
 ## TLS functionality  
 
-To enable TLS/SSL certificate chain building and validation, the API Management service needs outbound network connectivity on ports `80` and `443` to `ocsp.msocsp.com`, `oneocsp.msocsp.com`, `mscrl.microsoft.com`, `crl.microsoft.com`, `cacerts.digicert.com`, `crl3.digicert.com` and `csp.digicert.com`. 
+To enable TLS/SSL certificate chain building and validation, the API Management service needs outbound network connectivity on ports `80` and `443` to `mscrl.microsoft.com`, `crl.microsoft.com`, `oneocsp.microsoft.com`, `cacerts.digicert.com`, `crl3.digicert.com` and `csp.digicert.com`. 
 
 
 ## DNS access

articles/app-service/environment/networking.md

@@ -78,6 +78,10 @@ You can bring your own inbound address to your App Service Environment. If you c
 - For App Service Environment with external VIP, the Azure Public IP address resource must be in the same subscription as the App Service Environment. 
 - The inbound address can't be changed after the App Service Environment is created.
 
+### ILB App Service Environment inbound traffic limitation
+
+For App Service Environments with an internal VIP, inbound traffic to the front ends can be dropped if the source IP address falls within the infrastructure address range used for the App Service Environment's front ends. **Don't use source IP addresses in the `172.31.192.0/25` address space when connecting to an ILB App Service Environment**.
+
 ## Ports and network restrictions
 
 For your app to receive traffic, ensure that inbound network security group (NSG) rules allow the App Service Environment subnet to receive traffic from the required ports. In addition to any ports you'd like to receive traffic on, you should ensure that Azure Load Balancer is able to connect to the subnet on port 80. This port is used for health checks of the internal virtual machine. You can still control port 80 traffic from the virtual network to your subnet.

articles/azure-app-configuration/network-access-errors.md

@@ -26,7 +26,7 @@ Content-Type: application/problem+json; charset=utf-8
 ```json
 {
   "type": "https://azconfig.io/errors/ip-address-rejected",
-  "title": "Access to this resource is governed by a network access policy. The client IP address fails to meet the criteria for access.",
+  "title": "Access to this resource is governed by a network access policy. The client IP address fails to meet the criteria for access. See https://aka.ms/appconfig/network-access-errors for more information.",
   "status": 403
 }
 ```

articles/azure-functions/durable/durable-task-scheduler/durable-task-scheduler-dedicated-sku.md

@@ -57,7 +57,7 @@ Durable Task Scheduler offers two SKU options: Dedicated and Consumption (previe
 
 The Dedicated SKU provides  performance and pricing through preallocated Capacity Units (CUs). You can purchase up to three CUs. 
 
-Currently, you're limited to 15 task hubs when using the Dedicated SKU. For more quota, [contact support](https://github.com/Azure/azure-functions-durable-extension/issues).
+Currently, you're limited to 25 task hubs when using the Dedicated SKU. For more quota, [contact support](https://github.com/Azure/azure-functions-durable-extension/issues).
 
 #### Key features
 

articles/azure-functions/durable/durable-task-scheduler/durable-task-scheduler.md

@@ -107,7 +107,7 @@ Creating multiple task hubs isolates different workloads that can be managed ind
 - Create task hubs for different teams within your organization. 
 - Share the same scheduler instance across multiple apps. 
 
-Scheduler sharing is a great way to optimize cost when multiple teams have scenarios requiring orchestrations. Although you can create unlimited task hubs in one scheduler instance, they share the same resources; if one task hub is heavily loaded, it might affect the performance of the other task hubs.
+Scheduler sharing is a great way to optimize cost when multiple teams have scenarios requiring orchestrations. Although you can create multiple task hubs in one scheduler instance, they share the same resources; if one task hub is heavily loaded, it might affect the performance of the other task hubs.
 
 ### Emulator for local development
 
@@ -160,7 +160,7 @@ Stale orchestration data should be purged periodically to ensure efficient stora
 
     You're limited in how many task hubs you can use depending on your billing SKU. 
 
-     - [When using the Dedicated SKU,](./durable-task-scheduler-dedicated-sku.md#dedicated-sku) task hubs are limited to 15. 
+     - [When using the Dedicated SKU,](./durable-task-scheduler-dedicated-sku.md#dedicated-sku) task hubs are limited to 25. 
      - [When using the Consumption SKU,](./durable-task-scheduler-dedicated-sku.md#consumption-sku-preview) task hubs are limited to 5. 
 
     For more quota, [contact support](https://github.com/Azure/azure-functions-durable-extension/issues).

articles/azure-maps/map-accessibility.md

@@ -94,7 +94,7 @@ The map has keyboard shortcuts built in that make it easier to use the map. Thes
 |----------|-----------------------------------|
 | `Tab` | Navigate across the controls and popups in the map. |
 | `ESC` | Move focus from any element in the map to the top-level map element. |
-| `Ctrl` + `Shift` + `D` | Toggle screen reader detail level.  |
+| `Ctrl` + `Alt` + `D` | Toggle screen reader detail level.  |
 | Left arrow key | Pan the map left 100 pixels |
 | Right arrow key | Pan the map right 100 pixels |
 | Down arrow key | Pan the map down 100 pixels |