Merge pull request #208431 from hhunter-ms/1980157

[Change Analysis] Updates to overview

Author: JamesJBarnett

articles/azure-monitor/change/change-analysis.md

@@ -5,7 +5,7 @@ ms.topic: conceptual
 ms.author: hannahhunter
 author: hhunter-ms
 ms.contributor: cawa
-ms.date: 07/29/2022 
+ms.date: 08/23/2022 
 ms.subservice: change-analysis
 ms.custom: devx-track-azurepowershell
 
@@ -65,34 +65,38 @@ Azure Monitor Change Analysis service supports resource property level changes i
 ## Data sources
 
 Azure Monitor's Change Analysis queries for:
-- Azure Resource Manager resource properties.
-- Configuration changes.
-- Web app in-guest changes. 
+- [Azure Resource Manager resource properties.](#azure-resource-manager-resource-properties-changes)
+- [Resource configuration changes.](#resource-configuration-changes)
+- [App Service Function and Web App in-guest changes.](#changes-in-azure-app-services-function-and-web-apps-in-guest-changes) 
 
-Change Analysis also tracks resource dependency changes to diagnose and monitor an application end-to-end.
+Change Analysis also tracks [resource dependency changes](#dependency-changes) to diagnose and monitor an application end-to-end.
 
 ### Azure Resource Manager resource properties changes
 
-Using [Azure Resource Graph](../../governance/resource-graph/overview.md), Change Analysis provides a historical record of how the Azure resources that host your application have changed over time. The following tracked settings can be detected:
+Using [Azure Resource Graph](../../governance/resource-graph/overview.md), Change Analysis provides a historical record of how the Azure resources that host your application have changed over time. The following basic configuration settings are set using Azure Resource Manager and tracked by Azure Resource Graph:
 - Managed identities
 - Platform OS upgrade
 - Hostnames
 
-### Azure Resource Manager configuration changes
+### Resource configuration changes
 
-Unlike Azure Resource Graph, Change Analysis securely queries and computes IP Configuration rules, TLS settings, and extension versions to provide more change details in the app.
+In addition to the settings set via Azure Resource Manager, you can set configuration settings using the CLI, Bicep, etc., such as:
+- IP Configuration rules
+- TLS settings
+- Extension versions
 
-### Changes in web app deployment and configuration (in-guest changes)
+These setting changes are not captured by Azure Resource Graph. Change Analysis fills this gap by capturing snapshots of changes in those main configuration properties, like changes to the connection string, etc. Snapshots are taken of configuration changes and change details every up to 6 hours. [See known limitations.](#limitations)
 
-Every 30 minutes, Change Analysis captures the deployment and configuration state of an application. For example, it can detect changes in the application environment variables. The tool computes the differences and presents the changes. 
+### Changes in Azure App Services Function and Web Apps (in-guest changes)
 
-Unlike Azure Resource Manager changes, code deployment change information might not be available immediately in the Change Analysis tool. To view the latest changes in Change Analysis, select **Refresh**.
+Every 30 minutes, Change Analysis captures the configuration state of a web application. For example, it can detect changes in the application environment variables, configuration files, and WebJobs. The tool computes the differences and presents the changes. 
 
 :::image type="content" source="./media/change-analysis/scan-changes.png" alt-text="Screenshot of the Scan changes now button":::   
 
-If you don't see changes within 30 minutes, refer to [our troubleshooting guide](./change-analysis-troubleshoot.md#cannot-see-in-guest-changes-for-newly-enabled-web-app). 
+If you don't see file changes within 30 minutes or configuration changes within 6 hours, refer to [our troubleshooting guide](./change-analysis-troubleshoot.md#cannot-see-in-guest-changes-for-newly-enabled-web-app). [See known limitations.](#limitations)
 
 Currently, all text-based files under site root **wwwroot** with the following extensions are supported:
+
 - *.json
 - *.xml
 - *.ini
@@ -123,18 +127,12 @@ Currently the following dependencies are supported in **Web App Diagnose and sol
 - Azure Storage
 - Azure SQL
 
-#### Related resources
-
-Change Analysis detects related resources. Common examples are:
-
-- Network Security Group
-- Virtual Network
-- Azure Monitor Gateway
-- Load Balancer related to a Virtual Machine.
-
-Network resources are usually provisioned in the same resource group as the resources using it. Filter the changes by resource group to show all changes for the virtual machine and its related networking resources.
+## Limitations
 
-:::image type="content" source="./media/change-analysis/network-changes.png" alt-text="Screenshot of Networking changes":::   
+- **OS environment**: For Azure App Services Function and Web App in-guest changes, Change Analysis currently only works with Windows environments, not Linux.
+- **Web app deployment changes**: Code deployment change information might not be available immediately in the Change Analysis tool. To view the latest changes in Change Analysis, select **Refresh**.
+- **App Services file changes**: File changes take up to 30 minutes to display.
+- **App Services configuration changes**: Due to the snapshot approach to configuration changes, timestamps of configuration changes could take up to 6 hours to display from when the change actually happened.
 
 ## Next steps
 

articles/azure-monitor/data-sources.md

@@ -86,7 +86,7 @@ The [Azure Activity log](essentials/platform-logs-overview.md) includes service
 | Destination | Description | Reference |
 | ----------- | ----------- | --------- |
 | Azure Resource Manager control plane changes | Change Analysis provides a historical record of how the Azure resources that host your application have changed over time, using Azure Resource Graph | [Resources | Get Changes](../governance/resource-graph/how-to/get-resource-changes.md) |
-| Resource configurations and settings changes | Change Analysis securely queries and computes IP Configuration rules, TLS settings, and extension versions to provide more change details in the app. | [Azure Resource Manager configuration changes](./change/change-analysis.md#azure-resource-manager-configuration-changes) |
+| Resource configurations and settings changes | Change Analysis securely queries and computes IP Configuration rules, TLS settings, and extension versions to provide more change details in the app. | [Azure Resource Manager configuration changes](./change/change-analysis.md#azure-resource-manager-resource-properties-changes) |
 | Web app in-guest changes | Every 30 minutes, Change Analysis captures the deployment and configuration state of an application. | [Diagnose and solve problems tool for Web App](./change/change-analysis-visualizations.md#diagnose-and-solve-problems-tool-for-web-app) |
 
 ## Azure resources