Merge pull request #18056 from anosov1960/arc-enabled-sql-server

Added December release notes and made associated changes in the docs

Author: v-andreaco

docs/sql-server/azure-arc/configure-advanced-data-security.md

@@ -44,17 +44,17 @@ The next step is needed only if you have not yet configured the MMA agent on the
 
 1. For more details, see [Extension management with Azure Arc](/azure/azure-arc/servers/manage-vm-extensions)
 
-## Enable advanced data security
+## Enable Azure Defender
 
-Next, you need to enable advanced data security for SQL Server instance.
+Next, you need to enable Azure Defender for SQL Server instance.
 
 1. Go to Security Center and open the **Pricing & settings** page from the sidebar.
 
 1. Select the workspace that you have configured for the MMA extension in the previous step
 
-1. Select **Standard**. Make sure the option for **SQL servers on Machine (Preview)** is enabled.
+1. Select **Azure Defender On**. Make sure the option for **SQL servers on machines** is turned on.
 
-   ![Upgrade workspace](media/configure-advanced-data-security/upgrade-log-analytics-workspace.png)
+   ![Upgrade workspace](media/configure-advanced-data-security/enable-azure-defender.png)
 
  > [!NOTE]
    > The first scan to generate the vulnerability assessment will happen within 24 hours after enabling advanced data security. After that, auto scans will be performed every week on Sunday.

docs/sql-server/azure-arc/connect.md

@@ -16,13 +16,14 @@ You can connect your SQL Server instance on premises to Azure Arc by following t
 ## Prerequisites
 
 * Your machine has at least one instance of SQL Server installed
-* For Windows machines, you have installed Azure PowerShell. Follow the instructions to [install Azure PowerShell](/powershell/azure/install-az-ps).
-* For Linux machines, you have downloaded Azure CLI and connected your Azure account. Follow the instructions to [install Azure CLI](/cli/azure/install-azure-cli-apt).
-* The **Microsoft.AzureData** resource provider has been registered. For more information on resource providers, see Azure resource providers and types.
-    * On PowerShell, run `Register-AzResourceProvider -ProviderNamespace Microsoft.AzureData`
-    * On Linux, run `az provider register --namespace 'Microsoft.AzureData`
-
-
+* The **Microsoft.AzureArcData** resource provider has been registered using one of the methods below:  
+    * Using Azure portal:
+        - Select **Subscriptions** 
+        - Choose your subscription
+        - Under **Settings**, select **Resource providers**
+        - Search for `Microsoft.AzureArcData` and select **Register**
+    * Using PowerShell, run `Register-AzResourceProvider -ProviderNamespace Microsoft.AzureArcData`
+    * Using CLI, run `az provider register --namespace 'Microsoft.AzureArcData`
 
 ## Generate a registration script for SQL Server
 
@@ -31,7 +32,7 @@ In this step you generate a script that discovers all SQL Server instances insta
 1. Search for __SQL Server - Azure Arc__ resource type and add a new one through the creation blade.
 
 ![Start creation](media/join/start-creation-of-sql-server-azure-arc-resource.png)
-    
+
 2. Review the pre-requisites and go to the **Server details** tab.  
 
 3. Select the the subscription, resource group, Azure region and the host operating system. If required, also specify the proxy that your network uses to connect to Internet.
@@ -86,11 +87,11 @@ Go [Azure portal](https://ms.portal.azure.com/#home) and open the newly register
 
 ![Validate connected SQL server ](media/join/validate-sql-server-azure-arc.png)
 
-## Un-register the SQL Server - Azure Arc resources
+## Disconnect your SQL Server instance
 
-To remove an existing __SQL Server - Azure Arc__ resource, go to the resource group that contains it and remove it from the list of resources in the group.
+To disconnect your SQL Server instance from Azure Arc, go to Azure portal, open the __SQL Server - Azure Arc__ resource for that instance, and click the **Unregister** button.
 
-![Unregister SQL Server](media/join/delete-sql-server-azure-arc.png)
+![Unregister SQL Server](media/join/unregister-sql-server-azure-arc.png)
 
 ## Next steps
 

docs/sql-server/azure-arc/media/configure-advanced-data-security/enable-azure-defender.png

@@ -5,7 +5,7 @@ description: Manage instances of SQL Server with Azure Arc enabled SQL Server
 author: anosov1960
 ms.author: sashan 
 ms.reviewer: mikeray
-ms.date: 10/07/2020
+ms.date: 12/08/2020
 ms.topic: conceptual
 ms.prod: sql
 ms.custom: references_regions
@@ -38,8 +38,9 @@ Azure Arc enabled SQL Server supports SQL Server 2012 or higher running on one o
 
 ### Required permissions
 
-To connect the SQL Server instances and the hosting to Azure Arc, you must have an account with privileges to perform the following actions:
-   * Microsoft.AzureData/*
+To connect the SQL Server instances and the hosting machine to Azure Arc, you must have an account with privileges to perform the following actions:
+   * Microsoft.AzureArcData/sqlServerInstances/read
+   * Microsoft.AzureArcData/sqlServerInstances/write
    * Microsoft.HybridCompute/machines/read
    * Microsoft.HybridCompute/machines/write
    * Microsoft.GuestConfiguration/guestConfigurationAssignments/read
@@ -54,6 +55,10 @@ Before configuring your SQL server instances and machines with Azure Arc, review
 
 Review [networking configuration, transport layer security and resource providers](/azure/azure-arc/servers/agent-overview#prerequisites) required for Connected machine agent.
 
+The resource provider `Microsoft.AzureArcData` is required to connect the SQL Server instances to Azure Arc. See the resource provider registration instructions in the [Prerequisites](connect.md#prerequisites) section.
+
+If you already have SQL Server instances connected to Azure Arc, follow these steps to migrate the existing **SQL Server - Azure Arc** resources to the new namespace.
+
 ### Supported Azure regions
 
 The public preview is available in the following regions:

docs/sql-server/azure-arc/media/configure-advanced-data-security/upgrade-log-analytics-workspace.png

@@ -4,7 +4,7 @@ description: Latest release notes
 author: anosov1960
 ms.author: sashan
 ms.reviewer: mikeray
-ms.date: 10/29/2020
+ms.date: 12/08/2020
 ms.topic: conceptual
 ms.prod: sql
 ---
@@ -14,19 +14,40 @@ ms.prod: sql
 > [!NOTE]
 > As a preview feature, the technology presented in this article is subject to [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
 
-## September 2020
+## December 2020
 
-Azure Arc enabled SQL Server is released for public preview. Azure Arc enabled SQL Server extends Azure services to SQL Server instances hosted outside of Azure in the customer’s datacenter, on the edge or in a multi-cloud environment.
+### Breaking change
 
-For details, see [Azure Arc enabled SQL Server Overview](overview.md)
+This release introduces an updated [resource provider](/azure/azure-resource-manager/management/azure-services-resource-providers.md) called `Microsoft.AzureArcData`. Before you can continue using Azure Arc enabled SQL Server, you need to register this resource provider. See the resource provider registration instructions in the [Prerequisites](connect.md#prerequisites) section.
 
-### Known issues
+If you have existing existing SQL Server - Azure Arc resources, use these steps to migrate them to Microsoft.AzureArcData namespace.
 
-The following issues apply to the September release:
+1. Launch the [Cloud Shell](https://shell.azure.com/). For details, [read more about PowerShell in Cloud Shell](https://aka.ms/pscloudshell/docs).
 
-* The **Register Azure Arc enabled SQL Server** blade does not support configuring custom tags. To add custom tags, open the **SQL Server - Azure Arc** resource after registration and change Tags in the **Overview** page.
+2. Upload the script to the shell using the following command:
 
-* Connecting SQL Server instances to Azure Arc requires an account with a broad set of permissions. For details, see [Required permissions](overview.md#required-permissions).
+    ```console
+    curl https://raw.githubusercontent.com/microsoft/sql-server-samples/master/samples/manage/azure-arc-enabled-sql-server/migrate-to-azure-arc-data.ps1 -o migrate-to-azure-arc-data.ps1
+    ```
+3. Run the script.  
+
+    ```console
+   ./migrate-to-azure-arc-data.ps1
+    ```
+
+> [!NOTE]
+> - To paste the commands into the shell, use `Ctrl-Shift-V` on Windows or `Cmd-v` on MacOS.
+> - The script will be uploaded directly to the home folder associated with your Cloud Shell session.
+> - The script will prompt for the resource group name and print a message when migration is completed.
+
+### Other changes
+
+* The *TCPPorts* property in the **SQL Server - Azure Arc** resource type has been renamed to *TCPStaticPorts*
+* The permissions required aren’t as broad as they used to be. See the [Required permission](overview.md#required-permissions) section for details.
+
+### Known issues
+
+* The *CreateTime* property won’t be added to any newly created resources in the AzureArcData namespace, including the **SQL Server - Azure Arc** resources.
 
 ## October 2020
 
@@ -42,6 +63,20 @@ The following issues apply to the October release:
 
 * Connecting SQL Server instances to Azure Arc requires an account with a broad set of permissions. For details, see [Required permissions](overview.md#required-permissions).
 
+## September 2020
+
+Azure Arc enabled SQL Server is released for public preview. Azure Arc enabled SQL Server extends Azure services to SQL Server instances hosted outside of Azure in the customer’s datacenter, on the edge or in a multi-cloud environment.
+
+For details, see [Azure Arc enabled SQL Server Overview](overview.md)
+
+### Known issues
+
+The following issues apply to the September release:
+
+* The **Register Azure Arc enabled SQL Server** blade does not support configuring custom tags. To add custom tags, open the **SQL Server - Azure Arc** resource after registration and change Tags in the **Overview** page.
+
+* Connecting SQL Server instances to Azure Arc requires an account with a broad set of permissions. For details, see [Required permissions](overview.md#required-permissions).
+
 ## Next steps
 
 **Just want to try things out?**  Get started quickly with [Azure Arc enabled SQL Server Jumpstart](https://aka.ms/AzureArcSqlServerJumpstart).