Review feedback

Author: zhenlan

articles/azure-app-configuration/TOC.yml

@@ -8,6 +8,7 @@
     href: howto-best-practices.md
   - name: FAQ
     href: faq.yml
+  expanded: true
 - name: Get started
   items:
   - name: Create an App Configuration store
@@ -108,166 +109,176 @@
   - name: .NET App in Visual Studio
     href: /visualstudio/azure/vs-azure-tools-connected-services-app-configuration
   expanded: true
-- name: Tutorials
+- name: Concepts
   items:
-  - name: Enable dynamic configuration using push model
-    items:
-    - name: .NET
-      href: enable-dynamic-configuration-dotnet-core-push-refresh.md
-    - name: Java Spring
-      href: enable-dynamic-configuration-java-spring-push-refresh.md
-  - name: Use Key Vault references
+  - name: Keys and values
     items:
-    - name: Use Key Vault references
-      items:
-      - name: ASP.NET Core
-        href: use-key-vault-references-dotnet-core.md
-      - name: Spring Boot
-        href: use-key-vault-references-spring-boot.md
-    - name: Reload secrets and certificates automatically
-      items:
-      - name: .NET
-        href: reload-key-vault-secrets-dotnet.md
-  - name: Build, deploy, and CI/CD
+    - name: Overview
+      href: concept-key-value.md
+    - name: Point-in-time key-values
+      href: concept-point-time-snapshot.md
+    - name: Use labels for per-environment configuration
+      href: howto-labels-aspnet-core.md
+  - name: Snapshots
     items:
-    - name: Import using Azure Pipelines
-      href: azure-pipeline-import-task.md
-    - name: Export using Azure Pipelines
-      href: azure-pipeline-export-task.md
-    - name: Create snapshots using Azure Pipelines
-      href: azure-pipeline-snapshot-task.md
-    - name: Push using GitHub Actions
-      href: push-kv-github-action.md
-    - name: Build project using exported configuration
-      href: integrate-ci-cd-pipeline.md
-    - name: Deploy to Kubernetes using Helm
-      href: integrate-kubernetes-deployment-helm.md
-  - name: Feature management
+    - name: Overview
+      href: concept-snapshots.md
+    - name: Manage and use snapshots
+      href: howto-create-snapshots.md
+  - name: Push notifications
     items:
-    - name: Use feature flags
-      items:
-      - name: Spring Boot
-        href: use-feature-flags-spring-boot.md
-    - name: Enable conditional features with feature filters
-      items:
-      - name: Overview
-        href: howto-feature-filters.md
-      - name: ASP.NET Core
-        href: howto-feature-filters-aspnet-core.md
-      - name: JavaScript
-        href: howto-feature-filters-javascript.md
-      - name: Python
-        href: howto-feature-filters-python.md
-    - name: Enable features on a schedule
-      items:
-      - name: Overview
-        href: howto-timewindow-filter.md
-      - name: ASP.NET Core
-        href: howto-timewindow-filter-aspnet-core.md
-      - name: JavaScript
-        href: howto-timewindow-filter-javascript.md
-    - name: Roll out features to targeted audience
-      items:
-      - name: Overview
-        href: howto-targetingfilter.md
-      - name: ASP.NET Core
-        href: howto-targetingfilter-aspnet-core.md
-    - name: Use variant feature flags
+    - name: Overview
+      href: concept-app-configuration-event.md
+    - name: Use Event Grid for data change notifications
+      href: howto-app-configuration-event.md
+    - name: Dynamic configuration with push model
       items:
-      - name: Overview
-        href: howto-variant-feature-flags.md
-      - name: ASP.NET Core
-        href: howto-variant-feature-flags-aspnet-core.md
-      - name: Python
-        href: howto-variant-feature-flags-python.md
-  - name: Enable Azure monitoring
+      - name: .NET
+        href: enable-dynamic-configuration-dotnet-core-push-refresh.md
+      - name: Java Spring
+        href: enable-dynamic-configuration-java-spring-push-refresh.md
+  - name: Soft delete
     items:
-    - name: Monitor App Configuration
-      href: monitor-app-configuration.md
-    - name: Reference for monitoring data
-      href: monitor-app-configuration-reference.md
-- name: Samples
-  items:
-  - name: Azure CLI
-    href: cli-samples.md
-  - name: Azure PowerShell
-    href: powershell-samples.md
-  - name: JavaScript SDK
-    href: quickstart-javascript.md
-  - name: Python SDK
-    href: quickstart-python.md
-  - name: Samples on GitHub
-    href: https://github.com/Azure/AppConfiguration/tree/main/examples
-  - name: Terraform
-    href: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/app_configuration
-- name: Concepts
+    - name: Overview
+      href: concept-soft-delete.md
+    - name: Recover or purge deleted App Configuration stores
+      href: howto-recover-deleted-stores-in-azure-app-configuration.md
+- name: Feature management
   items:
-  - name: Keys and values
-    href: concept-key-value.md
-  - name: Snapshots
-    href: concept-snapshots.md
-  - name: Point-in-time key-values
-    href: concept-point-time-snapshot.md
-  - name: Feature management
+  - name: Overview
     href: concept-feature-management.md
   - name: Experimentation
     href: concept-experimentation.md
-  - name: Configuration files
-    href: concept-config-file.md
-  - name: Event handling
-    href: concept-app-configuration-event.md
-  - name: Soft delete
-    href: concept-soft-delete.md
-  - name: Geo-replication
-    href: concept-geo-replication.md
-  - name: Reliability
+  - name: Enable conditional features with feature filters
     items:
-    - name: Availability zone support
-      href: ../reliability/migrate-app-configuration.md
-    - name: Resiliency and disaster recovery
-      href: concept-disaster-recovery.md
-  - name: Security
+    - name: Overview
+      href: howto-feature-filters.md
+    - name: ASP.NET Core
+      href: howto-feature-filters-aspnet-core.md
+    - name: JavaScript
+      href: howto-feature-filters-javascript.md
+    - name: Python
+      href: howto-feature-filters-python.md
+  - name: Enable features on a schedule
     items:
-    - name: Authenticate using Microsoft Entra ID
-      href: concept-enable-rbac.md
-    - name: Authenticate using access keys
-      href: howto-disable-access-key-authentication.md
-    - name: Secure your store using Private Endpoints
-      href: concept-private-endpoint.md
-    - name: Disable public network access
-      href: howto-disable-public-access.md
-    - name: Encrypt data using customer-managed keys
-      href: concept-customer-managed-keys.md
-    - name: Add Managed Identities to your store
-      href: overview-managed-identity.md
-    - name: Enforce security controls by Azure Policies
-      href: ./security-controls-policy.md
-    - name: Understand the security baselines
-      href: /security/benchmark/azure/baselines/azure-app-configuration-security-baseline?toc=/azure/azure-app-configuration/TOC.json
+    - name: Overview
+      href: howto-timewindow-filter.md
+    - name: ASP.NET Core
+      href: howto-timewindow-filter-aspnet-core.md
+    - name: JavaScript
+      href: howto-timewindow-filter-javascript.md
+  - name: Roll out features to targeted audience
+    items:
+    - name: Overview
+      href: howto-targetingfilter.md
+    - name: ASP.NET Core
+      href: howto-targetingfilter-aspnet-core.md
+  - name: Use variant feature flags
+    items:
+    - name: Overview
+      href: howto-variant-feature-flags.md
+    - name: ASP.NET Core
+      href: howto-variant-feature-flags-aspnet-core.md
+    - name: Python
+      href: howto-variant-feature-flags-python.md
+- name: Key Vault references
+  items:
+  - name: Use Key Vault references
+    items:
+    - name: ASP.NET Core
+      href: use-key-vault-references-dotnet-core.md
+    - name: Spring Boot
+      href: use-key-vault-references-spring-boot.md
+  - name: Reload secrets and certificates automatically
+    items:
+    - name: .NET
+      href: reload-key-vault-secrets-dotnet.md
+- name: CI/CD integration
+  items:
+  - name: Use configuration files
+    href: concept-config-file.md
+  - name: Import using Azure Pipelines
+    href: azure-pipeline-import-task.md
+  - name: Export using Azure Pipelines
+    href: azure-pipeline-export-task.md
+  - name: Create snapshots using Azure Pipelines
+    href: azure-pipeline-snapshot-task.md
+  - name: Push using GitHub Actions
+    href: push-kv-github-action.md
+  - name: Build project using exported configuration
+    href: integrate-ci-cd-pipeline.md
+  - name: Deploy to Kubernetes using Helm
+    href: integrate-kubernetes-deployment-helm.md
+- name: Monitoring
+  items:
+  - name: Monitor App Configuration
+    href: monitor-app-configuration.md
+  - name: Reference for monitoring data
+    href: monitor-app-configuration-reference.md
 - name: How-to guides
   items:
-  - name: Use labels for per-environment configuration
-    href: howto-labels-aspnet-core.md
-  - name: Manage and use snapshots
-    href: howto-create-snapshots.md
   - name: Import or export configuration data
     href: howto-import-export-data.md
   - name: Use JSON content-type for key-values
     href: howto-leverage-json-content-type.md
-  - name: Use Event Grid for data change notifications
-    href: howto-app-configuration-event.md
-  - name: Use managed identities to access App Configuration
-    href: howto-integrate-azure-managed-service-identity.md
   - name: Update to the New Spring Boot Library
     href: howto-convert-to-the-new-spring-boot.md
   - name: Move a resource between Azure regions
     href: howto-move-resource-between-regions.md
-  - name: Recover or purge deleted App Configuration stores
-    href: howto-recover-deleted-stores-in-azure-app-configuration.md
-  - name: Enable geo-replication
-    href: howto-geo-replication.md
-  - name: Set up private access
-    href: howto-set-up-private-access.md
+- name: Security
+  items:
+  - name: Authentication
+    items:
+    - name: Microsoft Entra ID
+      href: concept-enable-rbac.md
+    - name: Access keys
+      href: howto-disable-access-key-authentication.md
+    - name: Managed identities
+      href: howto-integrate-azure-managed-service-identity.md
+  - name: Network security
+    items:
+    - name: Overview
+      href: concept-private-endpoint.md
+    - name: Set up Private Endpoints
+      href: howto-set-up-private-access.md
+    - name: Disable public network access
+      href: howto-disable-public-access.md
+  - name: Data encryption
+    items:
+    - name: Add Managed Identities to your store
+      href: overview-managed-identity.md
+    - name: Encrypt data using customer-managed keys
+      href: concept-customer-managed-keys.md
+  - name: Azure Policies
+    href: ./security-controls-policy.md
+  - name: Security baselines
+    href: /security/benchmark/azure/baselines/azure-app-configuration-security-baseline?toc=/azure/azure-app-configuration/TOC.json
+- name: Reliability
+  items:
+  - name: Availability zone support
+    href: ../reliability/migrate-app-configuration.md
+  - name: Resiliency and disaster recovery
+    href: concept-disaster-recovery.md
+  - name: Geo-replication
+    items:
+    - name: Overview
+      href: concept-geo-replication.md
+    - name: Enable geo-replication
+      href: howto-geo-replication.md
+- name: Samples
+  items:
+  - name: Azure CLI
+    href: cli-samples.md
+  - name: Azure PowerShell
+    href: powershell-samples.md
+  - name: JavaScript SDK
+    href: quickstart-javascript.md
+  - name: Python SDK
+    href: quickstart-python.md
+  - name: Samples on GitHub
+    href: https://github.com/Azure/AppConfiguration/tree/main/examples
+  - name: Terraform
+    href: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/app_configuration
 - name: Reference
   items:
   - name: REST API
@@ -367,6 +378,8 @@
         href: /dotnet/api/overview/azure/appconfiguration/featuremanagement
     - name: Java Spring
       items:
+      - name: Feature reference
+        href: use-feature-flags-spring-boot.md
       - name: API reference
         href: https://azure.github.io/azure-sdk-for-java/springboot.html
     - name: Python