Merge pull request #253359 from duongau/securityhub

Azure Networking Security Hub page - add more articles to cards

Author: v-dirichards

articles/networking/security/index.yml

@@ -59,10 +59,6 @@ additionalContent:
               url: ../../firewall/overview.md
             - text: Protect my inbound web application connections
               url: ../../web-application-firewall/overview.md
-            - text: Implement the Zero Trust model
-              url: https://techcommunity.microsoft.com/t5/azure-network-security-blog/zero-trust-with-azure-network-security/ba-p/3668280
-            - text: Apply Zero Trust principles to an Azure Virtual WAN deployment
-              url: /security/zero-trust/azure-virtual-wan
             - text: Manage my network firewall
               url: ../../firewall-manager/overview.md
             - text: Learn more about Azure Firewall
@@ -75,24 +71,39 @@ additionalContent:
               url: /training/modules/intro-to-azure-firewall-manager/
             - text: Introduction to Azure Web Application Firewall
               url: /training/modules/introduction-azure-web-application-firewall/
+            - text: Design and implement network security
+              url: /training/modules/design-implement-network-security-monitoring/
+            - text: Design solutions for network security
+              url: /training/modules/design-solutions-network-security/
+            - text: Design and implement network monitoring
+              url: /training/modules/design-implement-network-monitoring/
         - title: Architecture
           links:
+            - text: Implement the Zero Trust model
+              url: https://techcommunity.microsoft.com/t5/azure-network-security-blog/zero-trust-with-azure-network-security/ba-p/3668280
+            - text: Apply Zero Trust principles to an Azure Virtual WAN deployment
+              url: /security/zero-trust/azure-virtual-wan
             - text: Securely managed web applications
               url: /azure/architecture/example-scenario/apps/fully-managed-secure-apps
             - text: Firewall and Application Gateway for virtual networks
               url: /azure/architecture/example-scenario/gateway/firewall-application-gateway
-
-    - title: Secure your virtual networks  # < 60 chars (optional)
+            - text: Improved-security access to multitenant web apps from an on-premises network
+              url: /azure/architecture/web-apps/guides/networking/access-multitenant-web-app-from-on-premises
+            - text: Implement a secure hybrid network
+              url: /azure/architecture/reference-architectures/dmz/secure-vnet-dmz?tabs=portal
+            - text: Mission-critical baseline architecture with network control
+              url: /azure/architecture/reference-architectures/containers/aks-mission-critical/mission-critical-network-architecture
+            - text: Build the first layer of defense with Azure Security services
+              url: /azure/architecture/solution-ideas/articles/azure-security-build-first-layer-defense
+            - text: Secure and govern workloads with network-level segmentation
+              url: /azure/architecture/reference-architectures/hybrid-networking/network-level-segmentation
+    - title: Secure your virtual networks
       items:
         # Card
         - title: I want to...
           links:
             - text: Secure networks with Zero Trust
               url: /security/zero-trust/deploy/networks
-            - text: Apply Zero Trust principles to a spoke virtual network in Azure
-              url: /security/zero-trust/azure-infrastructure-iaas
-            - text: Apply Zero Trust principles to a hub virtual network in Azure
-              url: /security/zero-trust/azure-infrastructure-networking
             - text: Filter network traffic between Azure resources
               url: ../../virtual-network/network-security-groups-overview.md
             - text: Secure access to Azure services
@@ -101,6 +112,10 @@ additionalContent:
               url: https://techcommunity.microsoft.com/t5/azure-network-security-blog/deploy-azure-firewall-to-inspect-traffic-to-a-private-endpoint/ba-p/3714575
             - text: Learn more about Azure Virtual Network
               url: ../../virtual-network/index.yml
+            - text: Create a site-to-site VPN connection
+              url: ../../vpn-gateway/tutorial-site-to-site-portal.md
+            - text: Deploy security admin rules with Virtual Network manager
+              url: ../../virtual-network-manager/how-to-block-network-traffic-portal.md
         - title: Training
           links:
             - text: Configure network security groups
@@ -109,21 +124,29 @@ additionalContent:
               url: /training/modules/secure-and-isolate-with-nsg-and-service-endpoints/
             - text: Troubleshoot platform-as-a-service issues in Microsoft Azure
               url:  /training/modules/troubleshoot-platform-service-issues/
+            - text: Connect my on-premises network to Azure with VPN gateways
+              url: /training/modules/connect-on-premises-network-with-vpn-gateway/
+            - text: Monitor and troubleshoot your end-to-end Azure network infrastructure
+              url: /training/modules/troubleshoot-azure-network-infrastructure/
         - title: Architecture
           links:
+            - text: Apply Zero Trust principles to a spoke virtual network in Azure
+              url: /security/zero-trust/azure-infrastructure-iaas
+            - text: Apply Zero Trust principles to a hub virtual network in Azure
+              url: /security/zero-trust/azure-infrastructure-networking
             - text: Hub-spoke network topology in Azure
               url: /azure/architecture/reference-architectures/hybrid-networking/hub-spoke
             - text: Choose between virtual network peering and VPN gateways
               url: /azure/architecture/reference-architectures/hybrid-networking/vnet-peering
+            - text: Extend an on-premises network using ExpressRoute
+              url: /azure/architecture/reference-architectures/hybrid-networking/expressroute
+            - text: Azure Network Virtual Application Firewall architecture
+              url: /azure/architecture/example-scenario/firewalls/
     - title: Protect your apps and services
       items:
         # Card
         - title: I want to...
           links:
-            - text: Apply Zero Trust principles to a spoke virtual network with Azure PaaS Services
-              url: /security/zero-trust/azure-infrastructure-paas
-            - text: Zero-trust network for web applications with Azure Firewall and Application Gateway
-              url: /azure/architecture/example-scenario/gateway/application-gateway-before-azure-firewall
             - text: Protect my service from DDoS attacks
               url: ../../ddos-protection/ddos-protection-overview.md
             - text: Protect against PaperCut vulnerability
@@ -144,13 +167,23 @@ additionalContent:
               url: /training/modules/introduction-azure-private-link/
             - text: Design and implement private access to Azure Services
               url: /training/modules/design-implement-private-access-to-azure-services/
+            - text: Encrypt network traffic end to end with Application gateways
+              url: /training/modules/end-to-end-encryption-with-app-gateway/
         - title: Architecture
           links:
+            - text: Apply Zero Trust principles to a spoke virtual network with Azure PaaS Services
+              url: /security/zero-trust/azure-infrastructure-paas
+            - text: Zero-trust network for web applications with Azure Firewall and Application Gateway
+              url: /azure/architecture/example-scenario/gateway/application-gateway-before-azure-firewall
             - text: Azure Private Link in a hub-and-spoke network
               url: /azure/architecture/guide/networking/private-link-hub-spoke-network
             - text: Guide to Private Link and DNS in Azure Virtual WAN
               url: /azure/architecture/guide/networking/private-link-virtual-wan-dns-guide
-    - title: Secure your virtual machines # < 60 chars (optional)
+            - text: Secure network access to Kubernetes
+              url: /azure/architecture/aws-professional/eks-to-aks/private-clusters
+            - text: Use Azure Firewall to help protect an Azure Kubernetes Service (AKS) cluster
+              url: /azure/architecture/guide/aks/aks-firewall
+    - title: Secure your virtual machines
       items:
         # Card
         - title: I want to...
@@ -159,8 +192,12 @@ additionalContent:
               url: ../../bastion/bastion-overview.md
             - text: Learn more about Azure Bastion
               url: ../../bastion/index.yml
+            - text: Enable just-in-time access on VMs
+              url: ../../defender-for-cloud/just-in-time-access-usage.md
         - title: Training
           links:
+            - text: Configure the network for your virtual machines
+              url: /training/modules/configure-network-for-azure-virtual-machines/
             - text: Introduction to Azure Bastion
               url: /training/modules/intro-to-azure-bastion/
             - text: Connect to a VM using Azure Bastion