Merge branch 'MicrosoftDocs:main' into main

Author: MJyot

.openpublishing.redirection.json

@@ -1,5 +1,10 @@
 {
   "redirections": [
+    {
+      "source_path": "articles/frontdoor/migrate-cdn-to-front-door.md",
+      "redirect_url": "/previous-versions/azure/frontdoor/migrate-cdn-to-front-door",
+      "redirect_document_id": false
+    },
     {
       "source_path": "articles/synapse-analytics/data-explorer/data-explorer-compare.md",
       "redirect_url": "/previous-versions/azure/synapse-analytics/data-explorer/data-explorer-compare",
@@ -6430,6 +6435,11 @@
       "redirect_url": "/azure/iot-hub-device-update/",
       "redirect_document_id": false
     },
+    {
+      "source_path": "articles/reliability/asm-retirement.md",
+      "redirect_url": "/azure/azure-resource-manager/management/asm-retirement",
+      "redirect_document_id": false
+    },
     {
       "source_path": "articles/reliability/reliability-azure-container-apps.md",
       "redirect_url": "/azure/reliability/reliability-container-apps",

articles/active-directory-b2c/partner-transmit-security.md

@@ -127,7 +127,7 @@ To integrating Transmit DRS into the B2C sign-in page, follow these steps:
 
 Azure AD B2C can obtain a risk recommendation from Transmit using a [API connector](./add-api-connector.md). Passing this request through an intermediate web API (such as using [Azure Functions](/azure/azure-functions/)) provides more flexibility in your implementation logic. 
 
-Follow these steps to create an Azure function that uses the action token from the frontend application to get a recommendation from the [Transmit DRS endpoint](https://developer.transmitsecurity.com/openapi/risk/recommendations/#operation/getRiskRecommendation).
+Follow these steps to create an Azure function that uses the action token from the frontend application to get a recommendation from the [Transmit DRS endpoint](https://developer.transmitsecurity.com/guides/risk/recommendations#operation/getRiskRecommendation).
 
 1. Create the entry point of your Azure Function, an HTTP-triggered function that processes incoming HTTP requests.
 

articles/active-directory-b2c/service-limits.md

@@ -8,7 +8,7 @@ manager: CelesteDG
 ms.service: azure-active-directory
 
 ms.topic: reference
-ms.date: 08/19/2025
+ms.date: 01/08/2026
 ms.subservice: b2c
 zone_pivot_groups: b2c-policy-type
 
@@ -186,7 +186,7 @@ The following table lists the administrative configuration limits in the Azure A
 
 ## Region specific service limits 
 
-As a protection for our customers, Microsoft places some restrictions on telephony verification for certain region codes. The following table lists the region codes and their corresponding limits.
+As a protection for our customers, Microsoft places some restrictions on telephony verification for certain region codes. The following table lists the region codes and their corresponding limits. These limits apply to both SMS and Voice verification.
 
 | Region Code | Region Name                                    | Limit per tenant per 60 minutes | Limit per tenant per 24 hours            |                         
 |:----------- |:---------------------------------------------- |:------------------------------- | :----------------------------------------|

articles/api-center/includes/api-center-portal-compare-apim-dev-portal.md

@@ -6,7 +6,7 @@ author: dlepow
 
 ms.service: azure-api-center
 ms.topic: include
-ms.date: 03/05/2025
+ms.date: 01/13/2026
 ms.author: danlep
 ms.custom: Include file
 ---
@@ -15,10 +15,10 @@ ms.custom: Include file
 
 The [Azure API Management](../../api-management/api-management-key-concepts.md) and [Azure API Center](../overview.md) services both provide portals for developers to discover and consume APIs:
 
-* The *API Management developer portal* allows users to find managed APIs, learn how to use them, request access, and test them.
-* The *API Center portal* (preview) is a multi-gateway portal where  users can discover and filter the organization's complete API inventory.
+* The *API Management developer portal* allows users to find managed APIs (including groups of APIs managed as products), learn how to use them, request access, and test them.
+* The *API Center portal* (preview) is a multigateway portal where users can discover and filter the organization's complete API inventory.
 
-While the two portals share some features, they also have distinct differences. The following table compares current capabilities to help determine which portal to use. Some organizations may prefer one portal, while others may need both.
+While the two portals share some features, they also have distinct differences. The following table compares current capabilities to help determine which portal to use. Some organizations might prefer one portal, while others might need both.
 
 | Feature | API Management developer portal | API Center portal (preview) |
 | --- | --- | --- |
@@ -30,7 +30,7 @@ While the two portals share some features, they also have distinct differences.
 | Add custom widgets | ✔️ | ❌ |
 | Customize with WordPress | ✔️ | ❌ |
 | Test APIs in test console | ✔️ | ✔️ |
-| Subscribe to APIs | ✔️ | ❌ |
+| Subscribe to APIs and products | ✔️ | ❌ |
 | View API usage analytics | ✔️ | ❌ |
 
 <sup>1</sup> The API Center portal can contain all APIs in your organization, including those managed in Azure API Management and other platforms, as well as unmanaged APIs and APIs under development.

articles/api-center/self-host-api-center-portal.md

@@ -4,7 +4,7 @@ description: How to self-host the API Center portal, a customer-managed website
 author: dlepow
 ms.service: azure-api-center
 ms.topic: how-to
-ms.date: 03/04/2025
+ms.date: 01/13/2026
 ms.author: danlep 
 ms.custom: 
 # Customer intent: As an API program manager, I want to self-host a portal for developers and other API stakeholders in my organization to discover the APIs in my organization's API center.
@@ -65,20 +65,20 @@ Follow these steps to build and test the API Center portal locally.
     ```bash
     git checkout main
     ```  
-1. To configure the service, copy or rename the `public/config.example` file to `public/config.json`.
-1. Then edit the `public/config.json` file to point to your service. Update the values in the file as follows:
-    1. Replace `<service name>` and `<location>` with the name of your API center and the location where it's deployed
+1. To configure the service, copy or rename the `config.example.json` file to `config.json`.
+1. Then edit the `config.json` file to point to your service. Update the values in the file as follows:
+    1. Replace `<service name>` and `<region>` with the name of your API center and the location where it's deployed
     1. Replace `<client ID>` and `<tenant ID>` with the **Application (client) ID** and **Directory (tenant) ID** of the app registration you created in the previous section.
     1. Update the value of `title` to a name that you want to appear in the top bar of the portal.
 
     ```json
     {
-      "dataApiHostName": "<service name>.data.<location>.azure-apicenter.ms/workspaces/default",
+      "dataApiHostName": "<service name>.data.<region>.azure-apicenter.ms",
       "title": "API portal",
       "authentication": {
           "clientId": "<client ID>",
           "tenantId": "<tenant ID>",
-          "scopes": ["https://azure-apicenter.net/user_impersonation"],
+          "scopes": ["https://azure-apicenter.net/Data.Read.All"],
           "authority": "https://login.microsoftonline.com/"
       }
     }

articles/api-management/api-management-faq.yml

@@ -5,7 +5,7 @@ metadata:
   author: dlepow
   ms.service: azure-api-management
   ms.topic: faq
-  ms.date: 09/30/2025
+  ms.date: 01/13/2026
   ms.author: danlep 
   ms.custom: engagement-fy23,fasttrack-edit,build-2025
 
@@ -51,7 +51,10 @@ sections:
       - question: |
           Can I move an API Management instance from one subscription to another?
         answer: |
-          Yes. To learn how, see [Move resources to a new resource group or subscription](../azure-resource-manager/management/move-resource-group-and-subscription.md).
+          Yes. To learn how, see [Move resources to a new resource group or subscription](../azure-resource-manager/management/move-resource-group-and-subscription.md). Certain features or resources can't be moved and should be disabled or removed before the move, including:
+
+          * System-assigned or user-assigned managed identities.
+          * Virtual network subnet configurations.
 
       - question: |
           Can I manage my API Management instance programmatically?

articles/api-management/api-management-howto-use-managed-service-identity.md

@@ -27,7 +27,8 @@ You can grant two types of identities to an API Management instance:
 - A *user-assigned identity* is a standalone Azure resource that can be assigned to your service. The service can have multiple user-assigned identities.
 
 > [!NOTE]
-> Managed identities are specific to the Microsoft Entra tenant in which your Azure subscription is hosted. They don't get updated if a subscription is moved to a different directory. If a subscription is moved, you need to re-create and reconfigure the identities.  
+> - Managed identities are specific to the Microsoft Entra tenant in which your Azure subscription is hosted. They don't get updated if a subscription is moved to a different directory. If a subscription is moved, you need to recreate and reconfigure the identities.  
+> - API Management managed identities are also specific to the Azure subscription in which the service is hosted. If you move the service to a different subscription in the same tenant, you need to recreate and reconfigure the identities.
 
 [!INCLUDE [api-management-workspace-availability](../../includes/api-management-workspace-availability.md)]
 

articles/api-management/virtual-network-reference.md

@@ -63,7 +63,7 @@ NSG rules allowing outbound connectivity to Storage, SQL, and Azure Event Hubs s
 
 ## TLS functionality  
 
-To enable TLS/SSL certificate chain building and validation, the API Management service needs outbound network connectivity on ports `80` and `443` to `ocsp.msocsp.com`, `oneocsp.msocsp.com`, `mscrl.microsoft.com`, `crl.microsoft.com`, `cacerts.digicert.com`, `crl3.digicert.com` and `csp.digicert.com`. 
+To enable TLS/SSL certificate chain building and validation, the API Management service needs outbound network connectivity on ports `80` and `443` to `mscrl.microsoft.com`, `crl.microsoft.com`, `oneocsp.microsoft.com`, `cacerts.digicert.com`, `crl3.digicert.com` and `csp.digicert.com`. 
 
 
 ## DNS access

articles/app-service/app-service-configure-premium-v4-tier.md

@@ -103,9 +103,9 @@ Premium v4 is available in the following regions:
 - Canada Central<sup>*</sup>
 - Central India
 - Central US
-- East Asia
+- East Asia<sup>*</sup>
 - East US
-- East US 2<sup>*</sup>
+- East US 2
 - France Central<sup>*</sup>
 - Germany West Central<sup>*</sup>
 - Indonesia Central<sup>*</sup>
@@ -141,7 +141,7 @@ If your app runs where Premium v4 isn't available (either the deployment or the
 
   When creating the plan, select the desired Premium v4 tier. This ensures the plan is in a deployment unit supporting Premium V4. Then, redeploy your application code to the new app. Even if you scale the new plan down to save costs, you can always scale back up to Premium v4 because the deployment unit supports it.
 
-- Use the **Development tools** > **Clone app** page to create an App Service plan with Premium v4 in your desired region, specifying the app settings and configuration to clone.
+- Use the **Development tools** > **Clone app** page to create an App Service plan with Premium v4 in your desired region, specifying the app settings and configuration to clone. Refer to the [current restrictions](app-service-web-app-cloning.md#current-restrictions) for app cloning.
 
   :::image type="content" source="media/app-service-configure-premium-tier/clone-app.png" alt-text="Screenshot showing how to clone your app.":::
 

articles/app-service/configure-managed-instance.md

@@ -3,7 +3,7 @@ title: "Configure Managed Instance on Azure App Service (Preview)"
 description: Learn how to configure and deploy a Managed Instance on Azure App Service using Azure CLI and ARM templates. This guide covers general settings, storage mounts, registry keys, and Bastion/RDP access.
 author: msangapu-msft
 ms.author: msangapu
-ms.date: 11/18/2025
+ms.date: 01/15/2026
 ms.service: azure-app-service
 ms.topic: how-to
 keywords:
@@ -220,6 +220,7 @@ To configure Bastion:
 - [My Managed Instance on App Service plan has multiple web applications can I restart a single web application?](#my-managed-instance-on-app-service-plan-has-multiple-web-applications-can-i-restart-a-single-web-application)
 - [Can I assign Managed Identity to my web application within the Managed Instance on App Service plan?](#can-i-assign-managed-identity-to-my-web-application-within-the-managed-instance-on-app-service-plan)
 - [Is there a limitation on number of adapters that I can create for Managed Instance on App Service plan?](#is-there-a-limitation-on-number-of-adapters-that-i-can-create-for-managed-instance-on-app-service-plan)
+- [Which regions have support for Managed Instance on App Service?](#which-regions-have-support-for-managed-instance-on-app-service)
 
 ### What operating system (os) is running on Managed Instance on Azure App Service?
 
@@ -303,6 +304,14 @@ Yes, you can assign a _different_ Managed identity to a web application within t
 
 No, there's no limit on the number of storage or registry adapters. You can only create a single configuration (install) script adapter for Managed Instance on App Service plan. The increasing the number of adapters could affect provisioning time for Managed Instance.
 
+### Which regions have support for Managed Instance on App Service?
+
+Currently support for Managed Instance on App Service is limited to East US, West Central US, East Asia, North Europe, and Australia East. More regions will be added to the preview over time. To get an updated list of regions, you can use the following CLI command (You must be using Azure CLI version 2.82.0 or higher).
+
+```azurecli
+az appservice list-locations --managed-instance-enabled --sku <Pv4 or PmV4 sku your require, for example P1v4>
+```
+
 ## Related content
 
 - [Overview of Managed Instance on Azure App Service](overview-managed-instance.md)