widget mgmt pt 2

Author: patriciasantaana

src/content/docs/turnstile/get-started/index.mdx

@@ -6,7 +6,7 @@ sidebar:
 ---
 
 
-import { GlossaryTooltip, Render, LinkButton } from "~/components"
+import { Render, LinkButton } from "~/components"
 
 This guide will get you started on setting up the Turnstile widget to protect your website from bots while maintaining a seamless user experience.
 
@@ -56,14 +56,9 @@ Follow the steps below to implement Turnstile.
 
 First, you must create a Turnstile widget to get your sitekey and secret key.
 
-Select your preferred method:
+Select your preferred implementation method:
 
-
-<LinkButton href="/">Cloudflare dashboard</LinkButton>
-
-<LinkButton href="/">API</LinkButton>
-
-<LinkButton href="/">Terraform</LinkButton>
+<Render file="implementation-methods" />
 
 ### 2. Embed the widget
 

src/content/docs/turnstile/get-started/widget-management/implementation-methods/api.mdx

@@ -0,0 +1,6 @@
+---
+title: API
+pcx_content_type: how-to
+sidebar:
+    order: 2
+---

src/content/docs/turnstile/get-started/widget-management/implementation-methods/dashboard.mdx

@@ -0,0 +1,6 @@
+---
+title: Cloudflare dashboard
+pcx_content_type: how-to
+sidebar:
+    order: 1
+---

src/content/docs/turnstile/get-started/widget-management/implementation-methods/index.mdx

@@ -0,0 +1,9 @@
+---
+title: Implementation methods
+pcx_content_type: get-started
+sidebar:
+  order: 1
+  label: Overview
+  group:
+    hideIndex: true
+---

src/content/docs/turnstile/get-started/terraform.mdx renamed to src/content/docs/turnstile/get-started/widget-management/implementation-methods/terraform.mdx

@@ -1,19 +1,18 @@
 ---
-pcx_content_type: how-to
 title: Terraform
+pcx_content_type: how-to
 sidebar:
-  order: 4
+    order: 3
 ---
 
-:::note[Requirements]
+import { Render } from "~/components"
 
+:::note[Requirements]
 This guide assumes that you have the [Terraform](https://developer.hashicorp.com/terraform/tutorials/certification-associate-tutorials/install-cli) command installed on your machine.
 :::
 
 [Terraform](https://developer.hashicorp.com/terraform/tutorials/certification-associate-tutorials/install-cli) is a tool for building, changing, and versioning infrastructure, and provides components and documentation for building [Cloudflare resources](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs). Listed below are examples to help you get started with Turnstile using Terraform. For a more generalized guide on configuring Cloudflare and Terraform, visit our [Getting Started with Terraform and Cloudflare](https://blog.cloudflare.com/getting-started-with-terraform-and-cloudflare-part-1/) blog post.
 
-## Create a Turnstile widget with Terraform
-
 ### Create an API token
 
 Create an [API Token](/fundamentals/api/get-started/create-token/) with the **Account > Turnstile > Edit** permission. Next, you need to export this secret in our environment variables:

src/content/docs/turnstile/get-started/widget-management/index.mdx

@@ -4,22 +4,32 @@ pcx_content_type: get-started
 sidebar:
   order: 1
   label: Overview
+---
+
+import { Render, LinkButton } from "~/components"
+
+<Render file="widget-management-overview" />
 
 ---
 
-Learn how to create, configure, and manage your Turnstile widgets using the Cloudflare dashboard, API, or Terraform.
+## Implementation methods
 
-## Overview
+<Render file="implementation-methods" />
+
+---
 
-Turnstile widgets are the foundation of your bot protection implementation. 
+## Best practices
 
-Every widget has:
+### Security
 
-  - **Sitekey**: Public identifier used in your webpage code
-  - **Secret Key**: Private key used for server-side validation
-  - **Configuration**: Mode, hostnames, appearance settings, and other options
+- **Protect secret keys**: Never expose secret keys in client-side code.
+- **Rotate keys regularly**: Use API or dashboard to rotate secret keys periodically.
+- **Restrict hostnames**: Only allow widgets on domains you control.
+**Monitor usage**: Use analytics to detect unusual patterns.
 
-:::note[Important]
-Regardless of how you create and manage your widgets, you will still need to embed them on your webpage and validate tokens on your server.
-:::
+### Operational
 
+- **Use descriptive names**: Name widgets based on their purpose, such as "Login Form" or "Contact Page".
+- **Environment separation**: Use different widgets for development, staging, and production.
+- **Documentation**: Keep track of which widgets are used at which locations.
+- **Backup configuration**: Store widget configurations in version control when using Terraform.

src/content/partials/turnstile/implementation-methods.mdx

@@ -0,0 +1,12 @@
+---
+{}
+
+---
+
+import { LinkButton } from "~/components"
+
+<LinkButton href="/turnstile/get-started/widget-management/implementation-methods/dashboard/">Cloudflare dashboard</LinkButton>
+
+<LinkButton href="/turnstile/get-started/widget-management/implementation-methods/api/">API</LinkButton>
+
+<LinkButton href="/turnstile/get-started/widget-management/implementation-methods/terraform/">Terraform</LinkButton>

src/content/partials/turnstile/widget-management-overview.mdx

@@ -0,0 +1,21 @@
+---
+{}
+
+---
+
+
+Learn how to create, configure, and manage your Turnstile widgets using the Cloudflare dashboard, API, or Terraform.
+
+## Overview
+
+Turnstile widgets are the foundation of your bot protection implementation. 
+
+Every widget has:
+
+  - **Sitekey**: Public identifier used in your webpage code
+  - **Secret Key**: Private key used for server-side validation
+  - **Configuration**: Mode, hostnames, appearance settings, and other options
+
+:::note[Important]
+Regardless of how you create and manage your widgets, you will still need to embed them on your webpage and validate tokens on your server.
+:::