+ inf base for Azure Traffic Manager "nested" or "external" endpoints

0_Azure/8_AzureApps/demos/changes-AppServiceManagedCertificates/README.md

@@ -7,13 +7,22 @@ Costa Rica
 [![GitHub](https://img.shields.io/badge/--181717?logo=github&logoColor=ffffff)](https://github.com/)
 [brown9804](https://github.com/brown9804)
 
-Last updated: 2025-07-17
+Last updated: 2025-09-05
 
 ----------
 
 > [!IMPORTANT]
 > Please review this article first: [Important Changes to App Service Managed Certificates: Is Your Certificate Affected?](https://techcommunity.microsoft.com/blog/appsonazureblog/important-changes-to-app-service-managed-certificates-is-your-certificate-affect/4435193)
 
+<details>
+<summary><b>List of References</b> (Click to expand)</summary>
+
+- [App Service Managed Certificate (ASMC) changes – July 28, 2025](https://learn.microsoft.com/en-us/azure/app-service/app-service-managed-certificate-changes-july-2025)
+- [Important Changes to App Service Managed Certificates: Is Your Certificate Affected?](https://techcommunity.microsoft.com/blog/appsonazureblog/important-changes-to-app-service-managed-certificates-is-your-certificate-affect/4435193)
+
+</details>
+
+
 > [!NOTE]
 > For the scenarios outlined in the article, please find an alternative set of queries to help you determine whether your environment might be impacted. These queries include visual guidance for reference.
 > If you have any questions or need further clarification, please reach out to your Microsoft account team or contact Microsoft directly: [Microsoft Sales and Support](https://support.microsoft.com/contactus?ContactUsExperienceEntryPointAssetId=S.HP.SMC-HOME) for additional support and guidance, or
@@ -52,6 +61,19 @@ Last updated: 2025-07-17
 
 https://github.com/user-attachments/assets/13cac993-764f-4fb7-972e-3c54d2f3cb8f
 
+## Your site uses Azure Traffic Manager "nested" or "external" endpoints
+
+> **You’re affected if your App Service uses Azure Traffic Manager with any of these endpoint types:**  
+> - `Nested endpoints`  
+> - `External endpoints`
+
+> [!TIP]
+>  Only **Azure Endpoints** in Traffic Manager are supported for App Service Managed Certificate creation and renewal.  
+> **Action:**  
+> - Transition to using  [Azure Endpoints for your Traffic Manager profile](https://learn.microsoft.com/en-us/azure/traffic-manager/traffic-manager-endpoint-types#azure-endpoints)  
+> - If you cannot switch, you must obtain and bind your own [SSL certificate for the custom domain](https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate?tabs=apex%2Crbac%2Cazure-cli)  
+
+
 <!-- START BADGE -->
 <div align="center">
   <img src="https://img.shields.io/badge/Total%20views-393-limegreen" alt="Total views">