Merge pull request #231747 from rwike77/workload-identities

app health recommendations

Author: Stacyrch140

articles/active-directory/workload-identities/TOC.yml

@@ -21,6 +21,8 @@
         href: ../conditional-access/workload-identity.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
       - name: Conditional access evaluation for workload identities
         href: ../conditional-access/concept-continuous-access-evaluation-workload.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
+      - name: App health recommendations
+        href: ../reports-monitoring/howto-use-recommendations.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
 - name: How-to guides
   items:
   - name: Connect workloads without managing secrets
@@ -37,6 +39,14 @@
     href: ../privileged-identity-management/pim-create-azure-ad-roles-and-resource-roles-review.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
   - name: Manage custom security attributes for an app
     href: ../manage-apps/custom-security-attributes-apps.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
+  - name: Check app health status and mitigate risk
+    items:
+      - name: Remove unused applications
+        href: ../reports-monitoring/recommendation-remove-unused-apps.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
+      - name: Remove unused credentials from apps
+        href: ../reports-monitoring/recommendation-remove-unused-credential-from-apps.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
+      - name: Renew expiring application credentials
+        href: ../reports-monitoring/recommendation-renew-expiring-application-credential.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
   - name: Reference
     items:
     - name: Federated identity credentials considerations and limitations

articles/active-directory/workload-identities/breadcrumb/toc.yml

@@ -22,4 +22,7 @@
     topicHref: /azure/active-directory/index
   - name: Active Directory
     tocHref: /azure/active-directory/manage-apps/
+    topicHref: /azure/active-directory/index
+  - name: Active Directory
+    tocHref: /azure/active-directory/reports-monitoring/
     topicHref: /azure/active-directory/index

articles/active-directory/workload-identities/index.yml

@@ -8,7 +8,7 @@ metadata:
   description: "Learn how to manage and help secure identities for digital workloads, such as apps and services."
   manager: celested
   ms.author: ryanwi
-  ms.date: 03/02/2023
+  ms.date: 03/22/2023
   ms.service: active-directory
   ms.subservice: workload-identities
   ms.topic: landing-page
@@ -27,13 +27,17 @@ landingContent:
           - text: Frequently asked questions about license plans
             url: workload-identities-faqs.md
   # Card
-  - title: Secure risky workload identities
+  - title: Check app health status and mitigate risk
     linkLists:
-      - linkListType: overview
+      - linkListType: how-to-guide
         links:
-          - text: Secure workload identities
-            url: ../identity-protection/concept-workload-identity-risk.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
-  # Card
+        - text: Remove unused applications
+          url: ../reports-monitoring/recommendation-remove-unused-apps.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
+        - text: Remove unused credentials from apps
+          url: ../reports-monitoring/recommendation-remove-unused-credential-from-apps.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
+        - text: Renew expiring application credentials
+          url: ../reports-monitoring/recommendation-renew-expiring-application-credential.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
+# Card
   - title: Connect workloads without managing secrets
     linkLists:
       - linkListType: overview
@@ -51,6 +55,13 @@ landingContent:
           - text: Configure a managed identity to trust an external identity provider
             url: workload-identity-federation-create-trust-user-assigned-managed-identity.md
   # Card
+  - title: Secure risky workload identities
+    linkLists:
+      - linkListType: overview
+        links:
+          - text: Secure workload identities
+            url: ../identity-protection/concept-workload-identity-risk.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
+    # Card
   - title: Apply Conditional Access policies to service principals
     linkLists:
       - linkListType: how-to-guide