Skip to content

Commit

Permalink
Merge pull request #454 from MicrosoftDocs/main
Browse files Browse the repository at this point in the history
1/13/2025 PM Publish
  • Loading branch information
Taojunshen authored Jan 13, 2025
2 parents 866d615 + d2b4faf commit 0c1b3d4
Show file tree
Hide file tree
Showing 6 changed files with 150 additions and 20 deletions.
26 changes: 24 additions & 2 deletions articles/azure-arc/servers/agent-release-notes.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
title: What's new with Azure Connected Machine agent
description: This article has release notes for Azure Connected Machine agent. For many of the summarized issues, there are links to more details.
ms.topic: overview
ms.date: 12/04/2024
ms.date: 01/13/2025
ms.custom: references_regions
---

Expand All @@ -20,12 +20,34 @@ This page is updated monthly, so revisit it regularly. If you're looking for ite
> Only Connected Machine agent versions within the last 1 year are officially supported by the product group. Customers should update to an agent version within this window. Microsoft recommends staying up to date with the latest agent version whenever possible.
>
## Version 1.47 - October 2024
## Version 1.48 - December 2024

Download for [Windows](https://aka.ms/AzureConnectedMachineAgent) or [Linux](manage-agent.md#installing-a-specific-version-of-the-agent)

### Fixed

- Addressed a security issue related to Redirection Guard.
- Resolved a bug that caused issues during the upgrade of the RunCommand extension.
- Fixed high port usage in the Azure Arc proxy.
- Fixed an issue with the Alma Linux install script.
- Improved handling of disassociated Gateway URLs.
- Resolved an issue with disk space queries.
- Improved HIMDS behavior when IMDS data is unavailable.

### New features and enhancements

- Added support for extension telemetry.
- Updated the OpenSSL library for security enhancements.
- Improved error reporting for `azcmagent` commands.
- Increased connectivity check timeout for better reliability.
- Expanded ARM64 platform support to include RHEL 9.

## Version 1.47 - October 2024

Download for [Windows](https://download.microsoft.com/download/2/1/d/21dfb0f5-ed95-46d5-8146-ece13381056a/AzureConnectedMachineAgent.msi) or [Linux](manage-agent.md#installing-a-specific-version-of-the-agent)

### Fixed

- Guest Configuration: Fix an issue that caused agent to become unresponsive.
- Fixed a bug to trim error messages when updating AgentStatus.

Expand Down
12 changes: 7 additions & 5 deletions articles/azure-arc/servers/includes/esu-network-requirements.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
ms.service: azure-arc
ms.topic: include
ms.date: 06/04/2024
ms.date: 01/13/2025
---

If you're using Azure Arc-enabled servers only for Extended Security Updates for either or both of the following products:
Expand All @@ -15,8 +15,7 @@ You can enable the following subset of endpoints:

| Agent resource | Description | When required| Endpoint used with private link |
|---------|---------|--------|---------|
|`aka.ms`|Used to resolve the download script during installation|At installation time, only| Public |
|`download.microsoft.com`|Used to download the Windows installation package|At installation time, only| Public |
|`download.microsoft.com`|Used to download the Windows installation package|At installation time, only <sup>1</sup> | Public |
|`login.windows.net`|Microsoft Entra ID|Always| Public |
|`login.microsoftonline.com`|Microsoft Entra ID|Always| Public |
|`*login.microsoft.com`|Microsoft Entra ID|Always| Public |
Expand All @@ -27,19 +26,22 @@ You can enable the following subset of endpoints:
|`*.<region>.arcdataservices.com`| Azure Arc data processing service and service telemetry.| SQL Server ESUs | Public|
|`*.blob.core.windows.net` | Download Sql Server Extension package | SQL Server ESUs | Not required if using Private Link |

<sup>1</sup> Access to this URL also needed when performing updates automatically.

#### [Azure Government](#tab/azure-government)

| Agent resource | Description | When required| Endpoint used with private link |
|---------|---------|--------|---------|
|`aka.ms`|Used to resolve the download script during installation|At installation time, only| Public |
|`download.microsoft.com`|Used to download the Windows installation package|At installation time, only| Public |
|`download.microsoft.com`|Used to download the Windows installation package|At installation time, only <sup>1</sup> | Public |
|`login.microsoftonline.us`|Microsoft Entra ID|Always| Public |
|`management.usgovcloudapi.net`|Azure Resource Manager - to create or delete the Arc server resource|When connecting or disconnecting a server, only| Public, unless a [resource management private link](/azure/azure-resource-manager/management/create-private-link-access-portal) is also configured |
|`*.his.arc.azure.us`|Metadata and hybrid identity services|Always| Private |
|`*.guestconfiguration.azure.us`| Extension management and guest configuration services |Always| Private |
|`www.microsoft.com/pkiops/certs`| Intermediate certificate updates for ESUs (note: uses HTTP/TCP 80 and HTTPS/TCP 443) | Always for automatic updates, or temporarily if downloading certificates manually. | Public |
|`*.blob.core.usgovcloudapi.net` | Download Sql Server Extension package | SQL Server ESUs | Not required if using Private Link |

<sup>1</sup> Access to this URL also needed when performing updates automatically.

#### [Microsoft Azure operated by 21Vianet](#tab/azure-china)

> [!NOTE]
Expand Down
28 changes: 16 additions & 12 deletions articles/azure-arc/servers/includes/network-requirements.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
ms.service: azure-arc
ms.topic: include
ms.date: 06/25/2024
ms.date: 01/13/2025
---

Azure Arc-enabled server endpoints are required for all server based Arc offerings.
Expand Down Expand Up @@ -45,9 +45,8 @@ The table below lists the URLs that must be available in order to install and us
| Agent resource | Description | When required| Private link capable |
|---------|---------|--------|---------|
|`aka.ms`|Used to resolve the download script during installation|At installation time, only| Public |
|`download.microsoft.com`|Used to download the Windows installation package|At installation time, only| Public |
|`packages.microsoft.com`|Used to download the Linux installation package|At installation time, only| Public |
|`download.microsoft.com`|Used to download the Windows installation package|At installation time, only <sup>1</sup> | Public |
|`packages.microsoft.com`|Used to download the Linux installation package|At installation time, only <sup>1</sup> | Public |
|`login.microsoftonline.com`|Microsoft Entra ID|Always| Public |
|`*login.microsoft.com`|Microsoft Entra ID|Always| Public |
|`pas.windows.net`|Microsoft Entra ID|Always| Public |
Expand All @@ -60,10 +59,13 @@ The table below lists the URLs that must be available in order to install and us
|`*.waconazure.com`|For Windows Admin Center connectivity|If using Windows Admin Center|Public|
|`*.blob.core.windows.net`|Download source for Azure Arc-enabled servers extensions|Always, except when using private endpoints| Not used when private link is configured |
|`dc.services.visualstudio.com`|Agent telemetry|Optional, not used in agent versions 1.24+| Public |
| `*.<region>.arcdataservices.com` <sup>1</sup> | For Arc SQL Server. Sends data processing service, service telemetry, and performance monitoring to Azure. Allows TLS 1.3. | Always | Public |
| `*.<region>.arcdataservices.com` <sup>2</sup> | For Arc SQL Server. Sends data processing service, service telemetry, and performance monitoring to Azure. Allows TLS 1.3. | Always | Public |
|`www.microsoft.com/pkiops/certs`| Intermediate certificate updates for ESUs (note: uses HTTP/TCP 80 and HTTPS/TCP 443) | If using ESUs enabled by Azure Arc. Required always for automatic updates, or temporarily if downloading certificates manually. | Public |

<sup>1</sup> For details about what information is collected and sent, review [Data collection and reporting for SQL Server enabled by Azure Arc](/sql/sql-server/azure-arc/data-collection).
<sup>1</sup> Access to this URL also needed when performing updates automatically.

<sup>2</sup> For details about what information is collected and sent, review [Data collection and reporting for SQL Server enabled by Azure Arc](/sql/sql-server/azure-arc/data-collection).


For extension versions up to and including [February 13, 2024](../../data/release-notes.md#february-13-2024), use `san-af-<region>-prod.azurewebsites.net`. Beginning with [March 12, 2024](../../data/release-notes.md#march-12-2024) both Azure Arc data processing, and Azure Arc data telemetry use `*.<region>.arcdataservices.com`.

Expand All @@ -79,9 +81,8 @@ For extension versions up to and including [February 13, 2024](../../data/releas
| Agent resource | Description | When required| Endpoint used with private link |
|---------|---------|--------|---------|
|`aka.ms`|Used to resolve the download script during installation|At installation time, only| Public |
|`download.microsoft.com`|Used to download the Windows installation package|At installation time, only| Public |
|`packages.microsoft.com`|Used to download the Linux installation package|At installation time, only| Public |
|`download.microsoft.com`|Used to download the Windows installation package|At installation time, only <sup>1</sup> | Public |
|`packages.microsoft.com`|Used to download the Linux installation package|At installation time, only <sup>1</sup> | Public |
|`login.microsoftonline.us`|Microsoft Entra ID|Always| Public |
|`pasff.usgovcloudapi.net`|Microsoft Entra ID|Always| Public |
|`management.usgovcloudapi.net`|Azure Resource Manager - to create or delete the Arc server resource|When connecting or disconnecting a server, only| Public, unless a [resource management private link](/azure/azure-resource-manager/management/create-private-link-access-portal) is also configured |
Expand All @@ -91,13 +92,14 @@ For extension versions up to and including [February 13, 2024](../../data/releas
|`dc.applicationinsights.us`|Agent telemetry|Optional, not used in agent versions 1.24+| Public |
|`www.microsoft.com/pkiops/certs`| Intermediate certificate updates for ESUs (note: uses HTTP/TCP 80 and HTTPS/TCP 443) | If using ESUs enabled by Azure Arc. Required always for automatic updates, or temporarily if downloading certificates manually. | Public |

<sup>1</sup> Access to this URL also needed when performing updates automatically.

#### [Microsoft Azure operated by 21Vianet](#tab/azure-china)

| Agent resource | Description | When required|
|---------|---------|--------|
|`aka.ms`|Used to resolve the download script during installation|At installation time, only|
|`download.microsoft.com`|Used to download the Windows installation package|At installation time, only|
|`packages.microsoft.com`|Used to download the Linux installation package|At installation time, only|
|`download.microsoft.com`|Used to download the Windows installation package|At installation time, only <sup>1</sup> |
|`packages.microsoft.com`|Used to download the Linux installation package|At installation time, only <sup>1</sup> |
|`login.chinacloudapi.cn`|Microsoft Entra ID|Always|
|`login.partner.chinacloudapi.cn`|Microsoft Entra ID|Always|
|`pas.chinacloudapi.cn`|Microsoft Entra ID|Always|
Expand All @@ -110,6 +112,8 @@ For extension versions up to and including [February 13, 2024](../../data/releas
|`*.blob.core.chinacloudapi.cn`|Download source for Azure Arc-enabled servers extensions|Always, except when using private endpoints|
|`dc.applicationinsights.azure.cn`|Agent telemetry|Optional, not used in agent versions 1.24+|

<sup>1</sup> Access to this URL also needed when performing updates automatically.

---

### Transport Layer Security 1.2 protocol
Expand Down
2 changes: 1 addition & 1 deletion articles/azure-arc/servers/network-requirements.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: Connected Machine agent network requirements
description: Learn about the networking requirements for using the Connected Machine agent for Azure Arc-enabled servers.
ms.date: 11/20/2024
ms.date: 01/13/2025
ms.topic: conceptual
---

Expand Down
2 changes: 2 additions & 0 deletions articles/copilot/TOC.yml
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,8 @@
href: ai-shell-overview.md
- name: Enhanced scenarios
items:
- name: Find your recommendations
href: ./copilot-advisor.md
- name: Get resource information
href: get-information-resource-graph.md
- name: Execute commands
Expand Down
100 changes: 100 additions & 0 deletions articles/copilot/copilot-advisor.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,100 @@
---
title: Find your recommendations using Microsoft Copilot in Azure
description: Learn how to find your recommendations using Microsoft Copilot in Azure.
ms.date: 11/08/2024
ms.topic: conceptual
ms.service: copilot-for-azure
ms.author: v-josmartin
author: jm-247-ms

---

# Find your recommendations using Microsoft Copilot in Azure

Microsoft Copilot in Azure (preview) directs you to your Azure Advisor recommendations across the Well Architected Framework pillars. The Well Architected Framework pillars include Reliability, Cost Optimization, Operational Excellence, Performance Efficiency, and Security. To learn more about the Well Architected Framework, see [Azure Well-Architected Framework](/azure/well-architected "Azure Well-Architected Framework | Microsoft Learn").

When you ask Microsoft Copilot in Azure questions about your recommendations, refine the scope of your request about recommendations by including the following information.

* Pillar

* Impact

* Subscription

* Resource selection panel

> [!NOTE]
> To view a few of the areas for which Microsoft Copilot in Azure (preview) is especially helpful, see [Sample prompts](#sample-prompts). The list is not a complete list of potential things. The Azure Advisor team encourages you to experiment with your own prompts and see how Microsoft Copilot in Azure (preview) helps you manage your Azure resources and environment.
> [!IMPORTANT]
> Microsoft Copilot in Azure (preview) is currently in PREVIEW. To review the legal terms that apply to Azure features that are not yet released into general availability, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms "Supplemental Terms of Use for Microsoft Azure Previews | Microsoft Azure").
## Sample prompts

The following prompts are examples for Advisor recommendations. Modify the prompts to align with your real-life scenarios. Try other prompts to create new queries.

```text
Show me my reliability recommendations
```

```text
Show me my Advisor recommendations
```

```text
What are the top cost saving recommendations?
```

```text
How do I improve performance?
```

```text
Show me my security recommendations
```

## Example

1. Prompt Copilot with following text.

```text
Show me my reliability recommendations
```
In Copilot, Copilot asks you if you want to pick specific resources for which to view the associated recommendations.
* If you don't want to pick specific resources, select `No`.
Copilot returns a list of top reliability recommendations for you that includes links to each recommendation page in Advisor.
<!--
:::image alt-text="Screenshot of ..." lightbox="./media/---.png" source="./media/----preview.png" type="content":::
-->
* If you do want to pick specific resources, select `Yes`.
Copilot shows the **Select Resources** panel.
On the **Select Resources** panel.
See all of the resources to which you have access.
1. Filter resources by Subscription, Resource group, Type, Location to scope the resources you want to target.
1. Search using text for a resource.
1. Select one or more resources.
Copilot returns a list of recommendations for the resources.
<!--
:::image alt-text="Screenshot of ..." lightbox="./media/---.png" source="./media/----preview.png" type="content":::
-->
## Related articles
* [Microsoft Copilot in Azure capabilities](/azure/copilot/capabilities "Microsoft Copilot in Azure capabilities | Microsoft Copilot in Azure (preview) | Microsoft Learn")
* [Write effective prompts for Microsoft Copilot in Azure](/azure/copilot/write-effective-prompts "Write effective prompts for Microsoft Copilot in Azure | Microsoft Copilot in Azure (preview) | Microsoft Learn")
* [Introduction to Azure Advisor](/azure/advisor/advisor-overview "Introduction to Azure Advisor | Azure Advisor | Microsoft Learn")

0 comments on commit 0c1b3d4

Please sign in to comment.