- Add an NSG to the Container App Environment subnet - Add App Gateway instructions to shield container apps - Remove external access to container apps - Add UDR on Container App Environment subnet - Add Azure Firewall for egress protection - Add validation steps to demonstrate security improvements