As a developer, I need an infrastructure with network encryption so that I know my application network traffic is protected.

[rickrain]

Acceptance Criteria:

• Application gateway is configured with end-to-end SSL. Details here.
  • Application gateway is configured for protocol TLSV1_2.
  • Application gateway is configured to disable TLSV1_0 and TLSV1_1.
• SSL Certificate is stored in Key Vault.
• App Service (Web App) is configured for SSL.
  • Protocol: HTTPS only, minimumTLSV1_2, no incoming client certificates
  • SSL Binding: SNI-SSL
• Traffic Manager profile is configured to monitor endpoints over HTTPS / port 443 only.