Merge branch 'main' of https://github.com/MicrosoftDocs/azure-docs-pr into mdb-mask-secrets

Author: RoseHJM

articles/active-directory-b2c/partner-onfido.md

@@ -113,7 +113,7 @@ REST API settings:
 #### Upload your files
 
 1. Store the UI folder files in your blob container.
-2. [Use Azure Storage Explorer to manage Azure managed disks](/azure/virtual-machines/disks-use-storage-explorer-managed-disks) and access permissions.
+2. [Use Azure Storage Explorer to manage Azure Managed Disks](/azure/virtual-machines/disks-use-storage-explorer-managed-disks) and access permissions.
 
 ### Configure Azure AD B2C
 

articles/app-service/configure-language-php.md

@@ -348,31 +348,33 @@ As an alternative to using a `.user.ini` file, you can use [`ini_set()`](https:/
 
 ::: zone pivot="platform-linux"
 
+This section applies to directives with a change mode of `PHP_INI_USER`, `PHP_INI_PERDIR`, or `PHP_INI_ALL`. For directives that require change mode `PHP_INI_SYSTEM`, see [Customize PHP_INI_SYSTEM directives](#customize-php_ini_system-directives).
+
 To customize `PHP_INI_USER`, `PHP_INI_PERDIR`, and `PHP_INI_ALL` directives for Linux web apps, such as `upload_max_filesize` and `expose_php`, use a custom *.ini* file. You can create it in an [SSH session](configure-linux-open-ssh-session.md). First, set up the directory:
 
 1. Go to your Kudu site. To get the random hash and region values, in your app **Overview**, copy **Default domain**.
 1. On the top menu, select **Debug console**, then **Bash** or **SSH**.
-1. In Bash or SSH, go to your `/home/site/wwwroot` directory.
+1. In Bash or SSH, go to your `/home/site` directory.
 1. Create a directory called `ini` (for example, `mkdir ini`).
 1. Change the current working directory to the `ini` folder that you created.
 
 Next, create an *.ini* file where you add your settings. This example uses `extensions.ini`. There are no file editors such as Vi, Vim, or Nano, so use `Echo` to add the settings to the file. Change the `upload_max_filesize` value from `2M` to `50M`. Use the following command to add the setting and create an `extensions.ini` file if one doesn't already exist:
 
 ```bash
-/home/site/wwwroot/ini>echo "upload_max_filesize=50M" >> extensions.ini
-/home/site/wwwroot/ini>cat extensions.ini
+/home/site/ini>echo "upload_max_filesize=50M" >> extensions.ini
+/home/site/ini>cat extensions.ini
 
 upload_max_filesize=50M
 
-/home/site/wwwroot/ini>
+/home/site/ini>
 ```
 
 In the Azure portal, add an application setting to scan the `ini` directory that you just created to apply the change for `upload_max_filesize`:
 
 1. Go to the [Azure portal](https://portal.azure.com) and select your App Service Linux PHP application.
 1. Go to **Settings** > **Environment variables**.
 1. Select **+ Add**.
-1. For **Name** enter *PHP_INI_SCAN_DIR* and for **Value**, enter `:/home/site/wwwroot/ini`.
+1. For **Name** enter *PHP_INI_SCAN_DIR* and for **Value**, enter `:/home/site/ini`.
 1. Select **Apply**, then **Apply** again. Confirm your changes.
 
 > Make sure to include the colon (:) when appending custom paths to PHP_INI_SCAN_DIR. Omitting it will result in NGINX returning a 404 error.
@@ -403,7 +405,7 @@ For example, to change the value of [`expose_php`](https://php.net/manual/ini.co
 ```bash
 cd /home/site
 mkdir ini
-echo "expose_php = Off" >> ini/setting.ini
+echo "expose_php = Off" >> ini/settings.ini
 ```
 
 For the changes to take effect, restart the app.
@@ -412,7 +414,9 @@ For the changes to take effect, restart the app.
 
 ::: zone pivot="platform-linux"
 
-To customize `PHP_INI_SYSTEM` directives, you can't use the *.htaccess* approach. App Service provides a separate mechanism that uses the `PHP_INI_SCAN_DIR` app setting.
+This section applies to directives with a change mode of `PHP_INI_SYSTEM`. If your changes don't take effect after following the previous section, verify the directive's [change mode](https://www.php.net/manual/ini.list.php) before proceeding.
+
+To customize `PHP_INI_SYSTEM` directives, use the `PHP_INI_SCAN_DIR` app setting.
 
 First, run the following command to add an app setting called `PHP_INI_SCAN_DIR`:
 
@@ -434,7 +438,7 @@ For example, to change the value of [`expose_php`](https://php.net/manual/ini.co
 ```bash
 cd /home/site
 mkdir ini
-echo "expose_php = Off" >> ini/setting.ini
+echo "expose_php = Off" >> ini/settings.ini
 ```
 
 For the changes to take effect, restart the app.

articles/app-service/overview-authentication-authorization.md

@@ -2,7 +2,7 @@
 title: Authentication and Authorization
 description: Learn about the built-in authentication and authorization support in Azure App Service and Azure Functions, and how it can help secure your app.
 ms.assetid: b7151b57-09e5-4c77-a10c-375a262f17e5
-ms.topic: conceptual
+ms.topic: concept-article
 ms.date: 03/28/2025
 ms.update-cycle: 1095-days
 ms.reviewer: mahender

articles/application-gateway/quick-create-cli.md

@@ -6,7 +6,7 @@ services: application-gateway
 author: mbender-ms
 ms.service: azure-application-gateway
 ms.topic: quickstart
-ms.date: 05/30/2024
+ms.date: 02/25/2026
 ms.author: mbender
 ms.custom:
   - mvc
@@ -76,6 +76,19 @@ az network public-ip create \
   --sku Standard
 ```
 
+## Create a network security group
+
+Create a network security group with [az network nsg create](/cli/azure/network/nsg#az-network-nsg-create). The default rules in the network security group block all inbound access from the internet.
+
+```azurecli-interactive
+az network nsg create \
+  --resource-group myResourceGroupAG \
+  --name myNSG
+```
+
+> [!NOTE]
+> The default rules of the network security group block all inbound access from the internet, including SSH. To connect to the virtual machine, use Azure Bastion. For more information, see [Quickstart: Deploy Azure Bastion with default settings](../bastion/quickstart-host-portal.md).
+
 ## Create the backend servers
 
 A backend can have NICs, virtual machine scale sets, public IP addresses, internal IP addresses, fully qualified domain names (FQDN), and multitenant backends like Azure App Service. In this example, you create two virtual machines to use as backend servers for the application gateway. You also install NGINX on the virtual machines to test the application gateway.
@@ -137,12 +150,14 @@ for i in `seq 1 2`; do
     --resource-group myResourceGroupAG \
     --name myNic$i \
     --vnet-name myVNet \
-    --subnet myBackendSubnet
+    --subnet myBackendSubnet \
+    --network-security-group myNSG
   az vm create \
     --resource-group myResourceGroupAG \
     --name myVM$i \
     --nics myNic$i \
     --image Ubuntu2204 \
+    --public-ip-address "" \
     --admin-username azureuser \
     --generate-ssh-keys \
     --custom-data cloud-init.txt

articles/application-gateway/quick-create-portal.md

@@ -5,7 +5,7 @@ description: In this quickstart, you learn how to use the Azure portal to create
 services: application-gateway
 author: mbender-ms
 ms.author: mbender
-ms.date: 09/04/2024
+ms.date: 02/25/2026
 ms.topic: quickstart
 ms.service: azure-application-gateway
 ms.custom:
@@ -182,11 +182,14 @@ To create a backend subnet:
     - **Public inbound ports**: None.
 4. Accept the other defaults and then select **Next: Disks**.  
 5. Accept the **Disks** tab defaults and then select **Next: Networking**.
-6. On the **Networking** tab, verify that **myVNet** is selected for the **Virtual network** and the **Subnet** is set to **myBackendSubnet**. Accept the other defaults and then select **Next: Management**.<br>Application Gateway can communicate with instances outside of the virtual network that it's in, but you need to ensure there's IP connectivity.
+6. On the **Networking** tab, verify that **myVNet** is selected for the **Virtual network** and the **Subnet** is set to **myBackendSubnet**. For **Public IP**, select **None**. Accept the other defaults and then select **Next: Management**.<br>Application Gateway can communicate with instances outside of the virtual network that it's in, but you need to ensure there's IP connectivity.
 7. Select **Next: Monitoring** and set **Boot diagnostics** to **Disable**. Accept the other defaults and then select **Review + create**.
 8. On the **Review + create** tab, review the settings, correct any validation errors, and then select **Create**.
 9. Wait for the virtual machine creation to complete before continuing.
 
+> [!NOTE]
+> The default rules of the network security group block all inbound access from the internet, including RDP. To connect to the virtual machine, use Azure Bastion. For more information, see [Quickstart: Deploy Azure Bastion with default settings](../bastion/quickstart-host-portal.md).
+
 ### Install IIS for testing
 
 In this example, you install IIS on the virtual machines to verify Azure created the application gateway successfully.

articles/azure-cache-for-redis/cache-best-practices-scale.md

@@ -3,7 +3,7 @@ title: Best practices for scaling
 description: Learn how to scale your Azure Cache for Redis.
 
 
-ms.topic: conceptual
+ms.topic: best-practice
 ms.custom:
   - ignite-2024
 ms.date: 04/12/2024

articles/azure-cache-for-redis/cache-how-to-scale.md

@@ -1,7 +1,7 @@
 ---
 title: Scale an Azure Cache for Redis instance
 description: Learn how to scale your Azure Cache for Redis instances using the Azure portal, and tools such as Azure PowerShell, and Azure CLI
-ms.topic: conceptual
+ms.topic: how-to
 ms.date: 07/01/2024
 appliesto:
   - ✅ Azure Cache for Redis

articles/azure-cache-for-redis/cache-troubleshoot-server.md

@@ -1,7 +1,7 @@
 ---
 title: Troubleshoot server issues
 description: See links to troubleshooting issues caused by conditions on an Azure Cache for Redis server or the virtual machines that host it.
-ms.topic: conceptual
+ms.topic: concept-article
 ms.date: 04/10/2025
 appliesto:
   - ✅ Azure Cache for Redis

articles/azure-cache-for-redis/redis-cache-bicep-provision.md

@@ -2,7 +2,7 @@
 title: Deploy Azure Cache for Redis using Bicep
 description: Learn how to use Bicep to deploy an Azure Cache for Redis resource.
 ms.date: 05/18/2025
-ms.topic: conceptual
+ms.topic: how-to
 ms.custom:
   - subject-armqs
   - devx-track-bicep

articles/azure-functions/durable/durable-functions-create-portal.md

@@ -1,7 +1,7 @@
 ---
 title: Create Durable Functions using the Azure portal  
 description: Learn how to install the Durable Functions extension for Azure Functions for portal development.
-ms.topic: conceptual
+ms.topic: how-to
 ms.date: 04/10/2020
 ms.reviewer: azfuncdf
 ms.devlang: csharp