Fixes as requested

Author: diberry

articles/app-service/includes/tutorial-connect-msi-key-vault/cleanup.md

@@ -1,3 +1,11 @@
+---
+ms.topic: include
+ms.date: 10/26/2021
+
+ms.reviewer: madsd 
+ms.custom: devx-track-azurecli
+---
+
 1. Configure the Cognitive Services secrets as app settings `CS_ACCOUNT_NAME` and `CS_ACCOUNT_KEY`.
 
     ```azurecli-interactive

articles/app-service/includes/tutorial-connect-msi-key-vault/introduction.md

@@ -1,3 +1,11 @@
+---
+ms.topic: include
+ms.date: 10/26/2021
+
+ms.reviewer: madsd 
+ms.custom: devx-track-azurecli
+---
+
 [Azure App Service](../../overview.md) can use [managed identities](../../overview-managed-identity.md) to connect to back-end services without a connection string, which eliminates connection secrets to manage and keeps your back-end connectivity secure in a production environment. For back-end services that don't support managed identities and still requires connection secrets, you can use Key Vault to manage connection secrets. This tutorial uses Cognitive Services as an example to show you how it's done in practice. When you're finished, you have an app that makes programmatic calls to Cognitive Services, without storing any connection secrets inside App Service.
 
 * [Sample application](https://github.com/Azure-Samples/app-service-language-detector)

articles/app-service/includes/tutorial-microsoft-graph-as-app/cleanup.md

@@ -1,3 +1,12 @@
+---
+author: rwike77
+manager: CelesteDG
+ms.date: 01/21/2022
+ms.author: ryanwi
+ms.reviewer: stsoneff
+ms.topic: include
+#Customer intent: As an application developer, I want to learn how to access data in Microsoft Graph by using managed identities.
+---
 
 ## Next steps
 

articles/app-service/includes/tutorial-microsoft-graph-as-app/introduction.md

@@ -101,7 +101,7 @@ When accessing the Microsoft Graph, the managed identity needs to have proper pe
     az rest --method post --uri $uri --body $body --headers "Content-Type=application/json"
     ```
 
----
+    ---
 
 1. After executing the script, you can verify in the [Azure portal](https://portal.azure.com) that the requested API permissions are assigned to the managed identity.
 

articles/app-service/tutorial-connect-msi-key-vault-php.md

@@ -14,21 +14,24 @@ ms.custom: devx-track-azurecli
 
 [!INCLUDE [tutorial-content-above-code](./includes/tutorial-connect-msi-key-vault/introduction.md)]
 
+## Configure PHP app
+
 1. Clone the sample repository locally and deploy the sample application to App Service. Replace *\<app-name>* with a unique name.
 
+```azurecli-interactive
+# Clone and prepare sample application
+git clone https://github.com/Azure-Samples/app-service-language-detector.git
+cd app-service-language-detector/php
+zip default.zip index.php
+
+# Save app name as variable for convenience
+appName=<app-name>
 
-    ```azurecli-interactive
-    # Clone and prepare sample application
-    git clone https://github.com/Azure-Samples/app-service-language-detector.git
-    cd app-service-language-detector/php
-    zip default.zip index.php
-    
-    # Save app name as variable for convenience
-    appName=<app-name>
+az appservice plan create --resource-group $groupName --name $appName --sku FREE --location $region
+az webapp create --resource-group $groupName --plan $appName --name $appName
+az webapp deployment source config-zip --resource-group $groupName --name $appName --src ./default.zip
+```
 
-    az appservice plan create --resource-group $groupName --name $appName --sku FREE --location $region
-    az webapp create --resource-group $groupName --plan $appName --name $appName
-    az webapp deployment source config-zip --resource-group $groupName --name $appName --src ./default.zip
-    ```
+## Configure secrets as app settings
 
 [!INCLUDE [tutorial-content-below-code](./includes/tutorial-connect-msi-key-vault/cleanup.md)]

articles/app-service/tutorial-connect-msi-key-vault.md

@@ -14,6 +14,8 @@ ms.custom: devx-track-azurecli
 
 [!INCLUDE [tutorial-content-above-code](./includes/tutorial-connect-msi-key-vault/introduction.md)]
 
+## Configure .NET app
+
 1. Clone the sample repository locally and deploy the sample application to App Service. Replace *\<app-name>* with a unique name.
 
     ```azurecli-interactive
@@ -27,5 +29,6 @@ ms.custom: devx-track-azurecli
     az webapp up --sku F1 --resource-group $groupName --name $appName --plan $appName --location $region
     ```
 
+## Configure secrets as app settings
 
 [!INCLUDE [tutorial-content-below-code](./includes/tutorial-connect-msi-key-vault/cleanup.md)]