MicrosoftDocs/architecture-center/docs/web-apps

Merge pull request #16889 from MicrosoftDocs/repo_sync_working_branch Confirm merge from repo_sync_working_branch to main to sync with https://github.com/microsoftdocs/architecture-center (branch main)

Align App Service baseline article with the hardened implementation (#4801) * Align App Service baseline article with the hardened implementation Update the baseline zone-redundant App Service article to match the network security changes in the reference implementation. - NSG table: the Application Gateway control plane rule now names the GatewayManager service tag and TCP ports 65200-65535. Azure Monitor outbound rules are described as HTTPS only, and the Application Gateway rule uses the AppGw.Out.Allow.AzureMonitor name. - Add a Key Vault recommendation to disable public network access (publicNetworkAccess set to Disabled), and explain that a deny default action doesn't disable the endpoint. - Add a data-in-transit recommendation to require HTTPS only on App Service (httpsOnly set to true). * Update the App Service baseline article for phase 2 hardening Align the article with the reference implementation: correct the statement about service firewalls (Key Vault keeps the trusted services exception for Application Gateway), prefer resource instance rules on Storage, update the NSG table for the private endpoints and App Service subnets, and add segmentation guidance for private endpoint network policies and outbound rules. * Update docs/web-apps/app-service/architectures/baseline-zone-redundant-content.md Co-authored-by: Chad Kittel <chad.kittel@gmail.com> * Update docs/web-apps/app-service/architectures/baseline-zone-redundant-content.md Co-authored-by: Chad Kittel <chad.kittel@gmail.com> * Update docs/web-apps/app-service/architectures/baseline-zone-redundant-content.md Co-authored-by: Chad Kittel <chad.kittel@gmail.com> * Remove the redundant mention of this on line 96 --------- Co-authored-by: Federico Arambarri <v-fearam@microsoft.com> Co-authored-by: Chad Kittel <chad.kittel@gmail.com>

Fix Application Insights metrics link Updated the Application Insights link to the correct reference for supported logs. Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Replace Classic API link with Azure Monitor OpenTelemetry guidance Co-authored-by: ckittel <671075+ckittel@users.noreply.github.com>

Use lightboxes where it helps Align lightbox usage with image width across 8 articles: remove lightbox from images at or below 688px width, and add lightbox to images wider than 688px. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Reassign articles after org changes (#16843) * switch to clayton * Switch priyanka

Link Azure Managed Redis components to the WAF service guide (#16838) * Initial plan * Update Azure Managed Redis component links Co-authored-by: ckittel <671075+ckittel@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: ckittel <671075+ckittel@users.noreply.github.com>

PnP edit: Gateway Offloading pattern (#16762) * first draft * Apply suggestion from @jluocsa Co-authored-by: John CSA <103165870+jluocsa@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> Co-authored-by: Chad Kittel <chad.kittel@gmail.com> * Apply suggestion from @learn-build-service-prod-10[bot] Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> Co-authored-by: Chad Kittel <chad.kittel@gmail.com> * Remove Nginx configuration and update links Removed Nginx TLS offloading configuration example and updated related resources link. * Update gateway-offloading-content.md * Address review feedback: replace mermaid with SVG, TLS to backend, intro wording * Address Gateway Offloading review feedback and update TLS diagrams * Enhance WAF policy with ZZ country code handling Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Use TLS re-encryption diagram in Gateway Offloading pattern * Adjust images * Apply batched suggestions from code review Co-authored-by: Chad Kittel <chad.kittel@gmail.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Apply batched suggestions from code review Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Update author * SSL reference * Update gateway offloading content for clarity Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * convert to md only * fix links * edits * edits * edits * edits * edits * edits --------- Co-authored-by: Anastasia Harris <61602255+anaharris-ms@users.noreply.github.com> Co-authored-by: John CSA <103165870+jluocsa@users.noreply.github.com> Co-authored-by: Chad Kittel <chad.kittel@gmail.com> Co-authored-by: learn-build-service-prod-10[bot] <274431553+learn-build-service-prod-10[bot]@users.noreply.github.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Add a few more

Merge branch 'main' into zone-clarifications

Label assignment restrictions as preview Co-authored-by: ckittel <671075+ckittel@users.noreply.github.com>

Apply batched suggestions from code review Co-authored-by: Chad Kittel <chad.kittel@gmail.com>

Address managed identity review feedback Co-authored-by: ckittel <671075+ckittel@users.noreply.github.com>

Add managed identity assignment safeguards Co-authored-by: ckittel <671075+ckittel@users.noreply.github.com>

Merge origin/main and keep deleted conflict file Co-authored-by: ckittel <671075+ckittel@users.noreply.github.com>

Centralize category get-started content in includes (#16412)

Refresh high-availability App Service Environment guidance (#16178) * Refresh App Service Environment availability guidance * Clarify Application Gateway unknown health status * Add architecture cost estimate * Scope App Service plan instance requirement * Apply suggestions from code review Co-authored-by: Chad Kittel <chad.kittel@gmail.com> --------- Co-authored-by: DeeplyDiligent <deepbh@users.noreply.github.com> Co-authored-by: Chad Kittel <chad.kittel@gmail.com>

Apply suggestion from @ckittel

Update author so article doesn't look orphaned

Delete sub tocs (#16176) * Flatten main TOC: inline AI-ML, Networking, Web Apps, SaaS sub-TOCs into docs/toc.yml - Replace single-line href references for AI + Machine Learning, Networking, Web applications, and Architecture for SaaS and multitenancy with full inline navigation trees in docs/toc.yml. - Adjust all relative hrefs to be docs/-relative (no sub-TOC context needed). - Rename sections to new model: Solution ideas / Architectures / Guides. - Sub-TOC files remain on disk but are no longer referenced from main navigation. * Remove sub-TOC files superseded by flattened main TOC Deletes the four workload sub-TOC files that are no longer referenced from main navigation after docs/toc.yml was flattened in the preceding PR: - docs/ai-ml/toc.yml - docs/networking/toc.yml - docs/web-apps/toc.yml - docs/guide/saas-multitenant-solution-architecture/toc.yml docs/_bread/toc.yml contains no references to these files and requires no changes. No redirects needed; these files are navigation metadata only and have no published URLs. * Commit 1: Remove Technology choices section from Application architecture fundamentals Delete the entire Technology choices section as all items have been distributed to their respective Azure categories: - Compute articles → Compute/Guides - Container articles → Containers/Guides - Storage articles → Storage/Guides - Data store and data movement articles → Databases and Integration Guides - Analytics articles → Analytics/Guides - AI service articles → AI + ML/Guides - Networking articles → Networking/Guides - Messaging articles → Integration/Guides - Hybrid articles → Hybrid + multicloud/Guides The 'Overview' article is deleted as it no longer serves a purpose once the section is removed. * Commit 2: Reposition Azure categories to position 3 in TOC Move the entire 'Azure categories' section from its original position (after Design patterns) to position 3, right after 'What's new'. New top-level order: 1. Browse all Architectures 2. What's new 3. Azure categories (MOVED) 4. Landing zones 5. Application architecture fundamentals 6. Design patterns 7. [other sections] 8. Microsoft Azure Well-Architected Framework 9. Cloud Adoption Framework for Azure This elevates the Azure workload categories in the navigation hierarchy, making them more prominent for users seeking technology-specific guidance. * Commit 3: Move Design patterns into Application architecture fundamentals Nest the 'Design patterns' section as a subordinate category under 'Application architecture fundamentals' rather than as a top-level TOC item. This consolidates application-focused content and creates a clearer hierarchy: Before: - Application architecture fundamentals - Design patterns After: - Application architecture fundamentals - ... [existing subsections] - Design patterns - Overview - Pattern implementations - [46 individual patterns] All 123 lines of Design patterns content are relocated with proper indentation, and the section is removed from the top-level navigation. * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Update docs/toc.yml Co-authored-by: Chad Kittel <chad.kittel@gmail.com> * re-ordered to move Azure categories down * Apply suggestions from code review Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * fixed azure categories ordering * Fix Azure categories ordering regressions * Remove duplicate AI+ML parent link in TOC * Apply suggestions from code review Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * minor fixes * minor fixes 2 * add Select a service sections for technology choices * add missing Select a service technology choices * fixing regressions * minor fixes 3 * normalize category redirects and update stale MongoDB links * Apply suggestions from code review Co-authored-by: Clayton Siemens <84867658+claytonsiemens77@users.noreply.github.com> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * add analytics service-choice links for data stores and stream processing * Apply suggestions from code review Co-authored-by: Clayton Siemens <84867658+claytonsiemens77@users.noreply.github.com> * redirect fixes * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * redirect-fix * reorder sap subsections in compute toc * normalize integration and kubernetes hosting toc order * fixing container guides * fixing container guides --------- Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: Chad Kittel <chad.kittel@gmail.com>