Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr into us508796-04

Author: TimShererWithAquent

.openpublishing.redirection.json

@@ -31,7 +31,7 @@ With this integration, organizations can extend their Azure AD B2C capabilities
 
 To get started, you'll need:
 
-- An Azure subscription. If you don't have one, get a [free account](https://azure.microsoft.com/free).
+- An Azure subscription. If you don't have one, get a [free account](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn).
 
 - An [Azure AD B2C tenant](tutorial-create-tenant.md) that is linked to your Azure subscription.
 

articles/active-directory-b2c/partner-deduce.md

@@ -37,7 +37,7 @@ To get started, you need:
 * A Relying Party account with eID-Me
   * Go to bluink.ca to [learn more](https://bluink.ca/eid-me/solutions/id-verification#contact-form) and request a demo
 * An Azure subscription
-  * If you don't have one, get an [Azure free account](https://azure.microsoft.com/free)
+  * If you don't have one, get an [Azure free account](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn)
 * An Azure AD B2C tenant linked to the Azure subscription
   * See, [Tutorial: Create an Azure AD B2C tenant](tutorial-create-tenant.md)
 * A trial or production version of the eID-Me Digital ID App

articles/active-directory-b2c/partner-eid-me.md

@@ -248,7 +248,7 @@
     href: genai-gateway-capabilities.md
   - name: Manage LLM APIs
     items:
-    - name: Import Azure AI Foundry API
+    - name: Import Microsoft Foundry API
       href: azure-ai-foundry-api.md
     - name: Import Azure OpenAI API
       href: azure-openai-api-from-specification.md
@@ -714,6 +714,8 @@
       href: breaking-changes/identity-provider-adal-retirement-sep-2025.md
     - name: CAPTCHA endpoint update (September 2025)
       href: breaking-changes/captcha-endpoint-change-sep-2025.md
+    - name: Trusted service connectivity retirement (March 2026)
+      href: breaking-changes/trusted-service-connectivity-retirement-march-2026.md
     - name: Built-in analytics dashboard retirement (March 2027)
       href: breaking-changes/analytics-dashboard-retirement-march-2027.md
   - name: Regional availability

articles/api-management/TOC.yml

@@ -27,31 +27,31 @@ Each API Management [pricing tier](api-management-key-concepts.md#api-management
 
 | Feature                                                                                      | Consumption | Developer | Basic | Basic v2 |Standard | Standard v2 | Premium | Premium v2 |
 | -------------------------------------------------------------------------------------------- | ----------- | --------- | --------- | --------- | ----- | -------- | ------- | ------- | 
-| Microsoft Entra integration<sup>1</sup>                                                             | No          | Yes       | No    | Yes      | Yes      | Yes      | Yes     | Yes |
-| Virtual network injection support                                                               | No          | Yes       | No    | No       | No       | No       | Yes    | Yes |
-| Private endpoint support for inbound connections                                                               | No          | Yes       | Yes    | No       | Yes      | Yes     | Yes  | Yes   |
-| Outbound virtual network integration support                                                             | No          | No       | No    | No       | No       | Yes       | No    | Yes |
-| Multi-region deployment                                                                      | No          | No        | No    | No       | No       | No       | Yes     | No |
-| Availability zones                                                                           | No          | No        | No    | No       | No       | No       | Yes     | Yes  |
-| Multiple custom domain names for gateway                                                                 | No          | Yes        | No    | No      | No       | No        | Yes     | No |
-| Developer portal<sup>2</sup>                                                                 | No          | Yes       | Yes   | Yes      | Yes      | Yes      | Yes     | Yes |
-| Built-in cache | No      | Yes                                            | Yes          | Yes       | Yes   | Yes      | Yes     | Yes |
-| [External cache](./api-management-howto-cache-external.md)                                                    | Yes         | Yes       | Yes   | Yes      | Yes      | Yes      |Yes     | Yes
-| Autoscaling                                                    | No         | No       | Yes   | No      | Yes      | No      |Yes     | No |
-| API analytics                                     | No          | Yes       | Yes   | Yes      | Yes      | Yes      | Yes     | Yes |
-| [Self-hosted gateway](self-hosted-gateway-overview.md)<sup>3</sup>                           | No          | Yes       | No    | No       | No       | No       | Yes     | No |
-| [Workspaces](workspaces-overview.md)                                                         | No          | No       | No    | No     | No     | No       | Yes     |  Yes |
-| [TLS settings](api-management-howto-manage-protocols-ciphers.md)                             | Yes         | Yes       | Yes   | Yes      | Yes      | Yes      | Yes     | Yes |
-| [Client certificate authentication](api-management-howto-mutual-certificates-for-clients.md) | Yes         | Yes       | Yes   | Yes      | Yes     | Yes      |Yes     | Yes |
-| [Policies](api-management-howto-policies.md)<sup>4</sup> | Yes         | Yes       | Yes   | Yes      | Yes      | Yes      | Yes     | Yes |
-| [Credential manager](credentials-overview.md)  | Yes         | Yes       | Yes   | Yes      | Yes      | Yes      | Yes     |  Yes |
-| [Backup and restore](api-management-howto-disaster-recovery-backup-restore.md)               | No          | Yes       | Yes   | No          | Yes      | No          | Yes     | No |
-| Azure Monitor metrics                                                               | Yes          | Yes       | Yes   | Yes      | Yes      | Yes      | Yes     | Yes |
-| Azure Monitor and Log Analytics request logs                                                              | No          | Yes       | Yes   | Yes      | Yes      | Yes      |Yes     | Yes |
-| Application Insights request logs                                                               | Yes          | Yes       | Yes   | Yes      | Yes      | Yes      |Yes     | Yes |
-| Static IP                                                                                    | No          | Yes       | Yes   | No          |Yes      | No          | Yes     | No |
-| Export API to Power Platform                                                         | Yes          | Yes       | Yes    | Yes       | Yes       | Yes       | Yes     | Yes |
-| Export API to Postman                                                         | Yes          | Yes       | Yes    | Yes       | Yes       | Yes       | Yes     | Yes |
+| Microsoft Entra integration<sup>1</sup>                                                             | ❌          | ✔️       | ❌    | ✔️      | ✔️      | ✔️      | ✔️     | ✔️ |
+| Virtual network injection support                                                               | ❌          | ✔️       | ❌    | ❌       | ❌       | ❌       | ✔️    | ✔️ |
+| Private endpoint support for inbound connections                                                               | ❌          | ✔️       | ✔️    | ❌       | ✔️      | ✔️     | ✔️  | ✔️   |
+| Outbound virtual network integration support                                                             | ❌          | ❌       | ❌    | ❌       | ❌       | ✔️       | ❌    | ✔️ |
+| Multi-region deployment                                                                      | ❌          | ❌        | ❌    | ❌       | ❌       | ❌       | ✔️     | ❌ |
+| Availability zones                                                                           | ❌          | ❌        | ❌    | ❌       | ❌       | ❌       | ✔️     | ✔️  |
+| Multiple custom domain names for gateway                                                                 | ❌          | ✔️        | ❌    | ❌      | ❌       | ❌        | ✔️     | ❌ |
+| Developer portal<sup>2</sup>                                                                 | ❌          | ✔️       | ✔️   | ✔️      | ✔️      | ✔️      | ✔️     | ✔️ |
+| Built-in cache | ❌      | ✔️                                            | ✔️          | ✔️       | ✔️   | ✔️      | ✔️     | ✔️ |
+| [External cache](./api-management-howto-cache-external.md)                                                    | ✔️         | ✔️       | ✔️   | ✔️      | ✔️      | ✔️      |✔️     | ✔️
+| Autoscaling                                                    | ❌         | ❌       | ✔️   | ✔️      | ✔️      | ✔️      |✔️     | ✔️ |
+| API analytics                                     | ❌          | ✔️       | ✔️   | ✔️      | ✔️      | ✔️      | ✔️     | ✔️ |
+| [Self-hosted gateway](self-hosted-gateway-overview.md)<sup>3</sup>                           | ❌          | ✔️       | ❌    | ❌       | ❌       | ❌       | ✔️     | ❌ |
+| [Workspaces](workspaces-overview.md)                                                         | ❌          | ❌       | ❌    | ❌     | ❌     | ❌       | ✔️     |  ✔️ |
+| [TLS settings](api-management-howto-manage-protocols-ciphers.md)                             | ✔️         | ✔️       | ✔️   | ✔️      | ✔️      | ✔️      | ✔️     | ✔️ |
+| [Client certificate authentication](api-management-howto-mutual-certificates-for-clients.md) | ✔️         | ✔️       | ✔️   | ✔️      | ✔️     | ✔️      |✔️     | ✔️ |
+| [Policies](api-management-howto-policies.md)<sup>4</sup> | ✔️         | ✔️       | ✔️   | ✔️      | ✔️      | ✔️      | ✔️     | ✔️ |
+| [Credential manager](credentials-overview.md)  | ✔️         | ✔️       | ✔️   | ✔️      | ✔️      | ✔️      | ✔️     |  ✔️ |
+| [Backup and restore](api-management-howto-disaster-recovery-backup-restore.md)               | ❌          | ✔️       | ✔️   | ❌          | ✔️      | ❌          | ✔️     | ❌ |
+| Azure Monitor metrics                                                               | ✔️          | ✔️       | ✔️   | ✔️      | ✔️      | ✔️      | ✔️     | ✔️ |
+| Azure Monitor and Log Analytics request logs                                                              | ❌          | ✔️       | ✔️   | ✔️      | ✔️      | ✔️      |✔️     | ✔️ |
+| Application Insights request logs                                                               | ✔️          | ✔️       | ✔️   | ✔️      | ✔️      | ✔️      |✔️     | ✔️ |
+| Static IP                                                                                    | ❌          | ✔️       | ✔️   | ❌          |✔️      | ❌          | ✔️     | ❌ |
+| Export API to Power Platform                                                         | ✔️          | ✔️       | ✔️    | ✔️       | ✔️       | ✔️       | ✔️     | ✔️ |
+| Export API to Postman                                                         | ✔️          | ✔️       | ✔️    | ✔️       | ✔️       | ✔️       | ✔️     | ✔️ |
 
 
 

articles/api-management/api-management-features.md

@@ -8,7 +8,7 @@ ms.service: azure-api-management
 ms.custom:
   - build-2024
 ms.topic: concept-article
-ms.date: 09/30/2025
+ms.date: 11/21/2025
 ms.author: danlep
 ---
 
@@ -112,10 +112,10 @@ The following tables compare features available in the following API Management
 | [Pass-through WebSocket](websocket-api.md) |  ✔️ |  ✔️ | ❌ | ✔️ | ✔️ |
 | [Pass-through gRPC](grpc-api.md)  |  ❌ | ❌ | ❌ | ✔️ | ❌ |
 | [OData](import-api-from-odata.md)  |  ✔️ |  ✔️ | ✔️ | ✔️ | ✔️ |
-| [Azure OpenAI in AI Foundry models and LLMs](azure-ai-foundry-api.md) | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
+| [Azure OpenAI in Microsoft Foundry models and LLMs](azure-ai-foundry-api.md) | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
 | [Pass-through MCP server](expose-existing-mcp-server.md) | ✔️  | ✔️ | ❌ | ✔️ | ❌ |
 | [Export REST API as MCP server](export-rest-mcp-server.md)  | ✔️ | ✔️ | ❌ | ✔️ | ❌ |
-| A2A agent  | ❌ | ✔️ | ❌ | ❌ | ❌ |
+| [A2A agent](agent-to-agent-api.md)  | ❌ | ✔️ | ❌ | ❌ | ❌ |
 | [Circuit breaker in backend](backends.md#circuit-breaker)  |  ✔️ | ✔️ | ❌ | ✔️ | ✔️ |
 | [Load-balanced backend pool](backends.md#load-balanced-pool)  |  ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
 
@@ -185,6 +185,7 @@ For estimated maximum gateway throughput in the API Management service tiers, se
 
 * **v2 tiers**
     * Scale gateway capacity by adding and removing scale [units](upgrade-and-scale.md), or upgrade the service tier.
+    * Optionally configure [Azure Monitor autoscale](api-management-howto-autoscale.md).
 
 * **Consumption tier**
     * API Management instances in the Consumption tier scale automatically based on the traffic.

articles/api-management/api-management-gateways-overview.md

@@ -7,7 +7,7 @@ author: dlepow
 
 ms.service: azure-api-management
 ms.topic: how-to
-ms.date: 06/16/2025
+ms.date: 12/05/2025
 ms.author: danlep 
 ms.custom: devx-track-azurepowershell
 ---
@@ -399,7 +399,18 @@ Restore is a long-running operation that may take several minutes to complete. I
 ## Storage networking constraints
 
 
-If the storage account is **[firewall][azure-storage-ip-firewall] enabled**, it's recommended to use the API Management instance's system-assigned managed identity for access to the account. Ensure that the storage account [grants access to trusted Azure services](../storage/common/storage-network-security.md?tabs=azure-portal#grant-access-to-trusted-azure-services).
+If the storage account is **[firewall][azure-storage-ip-firewall] enabled**, it's recommended to use the API Management instance's system-assigned managed identity for access to the account. Ensure that you have networking line of sight from API Management. Configure one of the following network access options on the resource:
+
+- Allow public access from all networks.
+
+- Set a network security rule to allow API Management traffic based on the IP address or virtual network connectivity.
+
+- Secure traffic from API Management with Private Link connectivity.
+
+- Use a [network security perimeter](/azure/private-link/network-security-perimeter-concepts#onboarded-private-link-resources) to secure the resource and allow traffic from API Management. 
+
+> [!IMPORTANT]
+> Starting March 2026, trusted service connectivity to Azure services from API Management by enabling the **Allow Trusted Microsoft Services to bypass this firewall** firewall setting will no longer be supported. To continue accessing these services from API Management after this change, ensure that you choose a supported network access option as described above. [Learn more](breaking-changes/trusted-service-connectivity-retirement-march-2026.md)
 
 ## What is not backed up
 -   **Usage data** used for creating analytics reports **isn't included** in the backup. Use [Azure API Management REST API][azure api management rest api] to periodically retrieve analytics reports for safekeeping.

articles/api-management/api-management-howto-disaster-recovery-backup-restore.md

@@ -31,7 +31,7 @@ Learn more about:
 
 ## Prerequisites
 - An Azure API Management instance.
-- A managed LLM chat completions API integrated with Azure API Management. For example, [Import an Azure AI Foundry API](azure-ai-foundry-api.md).
+- A managed LLM chat completions API integrated with Azure API Management. For example, [Import a Microsoft Foundry API](azure-ai-foundry-api.md).
 - Access to an Azure Log Analytics workspace.
 - Appropriate permissions to configure diagnostic settings and access logs in API Management.
 
@@ -106,17 +106,17 @@ ApiManagementGatewayLlmLog
 
 :::image type="content" source="media/api-management-howto-llm-logs/llm-log-query-small.png" alt-text="Screenshot of query results for LLM logs in the portal." lightbox="media/api-management-howto-llm-logs/llm-log-query.png":::
 
-## Upload data to Azure AI Foundry for model evaluation
+## Upload data to Microsoft Foundry for model evaluation
 
-You can export LLM logging data as a dataset for [model evaluation](/azure/ai-foundry/concepts/observability) in Azure AI Foundry. With model evaluation, you can assess the performance of your generative AI models and applications against a test model or dataset using built-in or custom evaluation metrics. 
+You can export LLM logging data as a dataset for [model evaluation](/azure/ai-foundry/concepts/observability) in Microsoft Foundry. With model evaluation, you can assess the performance of your generative AI models and applications against a test model or dataset using built-in or custom evaluation metrics. 
 
 To use LLM logs as a dataset for model evaluation:
 
 1. Join LLM request and response messages into a single record for each interaction, as shown in the [previous section](#review-azure-monitor-logs-for-requests-and-responses). Include the fields you want to use for model evaluation.
-1. Export the dataset to CSV format, which is compatible with Azure AI Foundry.
-1. In the Azure AI Foundry portal, create a new evaluation to upload and evaluate the dataset.
+1. Export the dataset to CSV format, which is compatible with Microsoft Foundry.
+1. In the Microsoft Foundry portal, create a new evaluation to upload and evaluate the dataset.
 
-For details to create and run a model evaluation in Azure AI Foundry, see [Evaluate generative AI models and applications by using Azure AI Foundry](/azure/ai-foundry/how-to/evaluate-generative-ai-app).
+For details to create and run a model evaluation in Microsoft Foundry, see [Evaluate generative AI models and applications by using Microsoft Foundry](/azure/ai-foundry/how-to/evaluate-generative-ai-app).
 
 ## Related content