Merge pull request #283833 from craigshoemaker/aca/v1-updates

[Container Apps] Update: FAQ & Firewall integration -> Add UDR details for Consumption only environments

Author: prmerger-automator[bot]

articles/container-apps/faq.yml

@@ -38,7 +38,10 @@ sections:
           Can I set up GitHub Actions to automatically build and deploy my code to Azure Container Apps?
         answer:
           Yes. Using Azure CLI, run `az containerapp github-action -h` to see the options. Using Azure portal, go to the "Continuous deployment" window under your container app.
-
+      - question: |
+          Do Consumption only environments support custom user-defined routes?
+        answer:
+          For Consumption only environments, express routes are unsupported, and limited UDR when configured as follows is supported. The UDR configuration must have a route configured for `Azure.<REGION_NAME>` Service tag with Next Hop = "Internet". In addition, the rules in the [NSG documentation](./firewall-integration.md?tabs=consumption-only) must be configured for the Consumption only environment to be operational. These limitations do not apply for workload profiles, and for full featured UDR and Express Route support, use workload profile environments.
   - name: Data management
     questions:
       - question: |

articles/container-apps/firewall-integration.md

@@ -17,7 +17,9 @@ You can lock down a network via NSGs with more restrictive rules than the defaul
 
 In the workload profiles environment, user-defined routes (UDRs) and [securing outbound traffic with a firewall](./networking.md#configuring-udr-with-azure-firewall) are supported. When using an external workload profiles environment, inbound traffic to Azure Container Apps is routed through the public IP that exists in the [managed resource group](./networking.md#workload-profiles-environment-2) rather than through your subnet. This means that locking down inbound traffic via NSG or Firewall on an external workload profiles environment isn't supported. For more information, see [Networking in Azure Container Apps environments](./networking.md#user-defined-routes-udr).
 
-In the Consumption only environment, custom user-defined routes (UDRs) and ExpressRoutes aren't supported.
+In the Consumption only environment, custom user-defined routes (UDRs).
+
+In the Consumption only environment, express routes are not supported, and custom user-defined routes (UDRs) have limited support. For more details on what level of UDR support is available on Consumption only environment, see the [FAQ](faq.yml).
 
 ## NSG allow rules