move security baseline to 1st

Author: greg-lindsay

articles/application-gateway/toc.yml

@@ -77,6 +77,8 @@
     href: application-gateway-faq.yml
 - name: Security
   items:
+  - name: Security baseline
+    href: /security/benchmark/azure/baselines/application-gateway-security-baseline?toc=/azure/application-gateway/toc.json
   - name: Private Deployment
     href: application-gateway-private-deployment.md
   - name: Private Link
@@ -93,8 +95,6 @@
     href: key-vault-certs.md
   - name: SSL certificate management
     href: ssl-certificate-management.md
-  - name: Security baseline
-    href: /security/benchmark/azure/baselines/application-gateway-security-baseline?toc=/azure/application-gateway/toc.json
   - name: TLS 1.0 and 1.1 retirement
     href: application-gateway-tls-version-retirement.md
   - name: Network security blog

articles/dns/TOC.yml

@@ -95,6 +95,8 @@
       href: private-resolver-reliability.md
 - name: Security
   items:
+  - name: Security baseline
+    href: /security/benchmark/azure/baselines/azure-dns-security-baseline?toc=/azure/dns/TOC.json
   - name: DNS security policy
     href: dns-security-policy.md
   - name: DNSSEC overview
@@ -103,8 +105,6 @@
     href: dns-protect-zones-recordsets.md
   - name: Protect private DNS zones and records
     href: dns-protect-private-zones-recordsets.md
-  - name: Security baseline
-    href: /security/benchmark/azure/baselines/azure-dns-security-baseline?toc=/azure/dns/TOC.json
   - name: Network security blog
     href: https://techcommunity.microsoft.com/category/azure-network-security/blog/azurenetworksecurityblog
 - name: Deploy