Merge pull request #312669 from AbdullahBell/ddos-quickstart-freshness

Update DDoS protection documentation dates and add tabs

Author: prmerger-automator[bot]

articles/api-management/protect-with-ddos-protection.md

@@ -59,7 +59,7 @@ Depending on the DDoS Protection plan you use, enable DDoS protection on the vir
 
 ### Enable DDoS protection on the API Management public IP address
 
-If your plan uses the IP DDoS Protection SKU, see [Enable DDoS IP Protection for a public IP address](../ddos-protection/manage-ddos-protection-powershell-ip.md#disable-ddos-ip-protection-for-an-existing-public-ip-address).
+If your plan uses the IP DDoS Protection SKU, see [Enable DDoS IP Protection for a public IP address](../ddos-protection/manage-ddos-protection-powershell-ip.md#disable-ddos-ip-protection-for-a-public-ip-address).
 
 ## Related content
 

articles/ddos-protection/ddos-protection-partner-onboarding.md

@@ -62,7 +62,7 @@ The following steps are required for partners to configure integration with Azur
    > [!NOTE]
    > Only 1 DDoS Protection Plan needs to be created for a given tenant. 
 2. Deploy a service with public endpoint in your (partner) subscriptions, such as load balancer, firewalls, and web application firewall. 
-3. Enable Azure DDoS Protection on the virtual network of the service that has public endpoints using DDoS Protection Plan created in the first step. For step-by-step instructions, see [Enable DDoS Protection plan](manage-ddos-protection.md#enable-for-an-existing-virtual-network)
+3. Enable Azure DDoS Protection on the virtual network of the service that has public endpoints using DDoS Protection Plan created in the first step. For step-by-step instructions, see [Enable DDoS Protection plan](manage-ddos-protection.md#enable-ddos-protection-for-a-virtual-network)
    > [!IMPORTANT] 
    > After Azure DDoS Protection is enabled on a virtual network, all public IPs within that virtual network are automatically protected. The origin of these public IPs can be either within Azure (client subscription) or outside of Azure. 
 4. Optionally, integrate Azure DDoS Protection telemetry and attack analytics in your application-specific customer-facing dashboard. For more information about using telemetry, see [View and configure DDoS protection telemetry](telemetry.md). 

articles/ddos-protection/ddos-switch-ddos-protection-tier.md

@@ -5,7 +5,7 @@ author: abell
 ms.author: abell
 ms.service: azure-ddos-protection
 ms.topic: how-to 
-ms.date: 03/17/2025
+ms.date: 03/05/2026
 # Customer intent: "As a cloud administrator, I want to switch between DDoS Protection tiers in the Azure portal, so that I can adapt my DDoS protections based on my network architecture and requirements."
 ---
 

articles/ddos-protection/manage-ddos-ip-protection-cli.md

@@ -5,7 +5,7 @@ author: AbdullahBell
 ms.author: abell
 ms.service: azure-ddos-protection
 ms.topic: quickstart
-ms.date: 03/17/2025
+ms.date: 01/26/2026
 ms.custom: template-quickstart, devx-track-azurecli
 # Customer intent: As a cloud administrator, I want to enable DDoS IP Protection on a public IP address using the CLI, so that I can enhance the security of my applications against distributed denial-of-service attacks.
 ---
@@ -41,9 +41,11 @@ To create a resource group, use [az group create](/cli/azure/group#az-group-crea
 
 ## Enable DDoS IP Protection on a public IP address
 
-### New public IP address
+You can enable DDoS IP Protection when creating a new public IP address or for an existing public IP address. Select the tab for your scenario.
 
-You can enable DDoS IP Protection when creating a public IP address. In this example, we'll name our public IP address _myStandardPublicIP_: 
+# [New public IP address](#tab/new-ip)
+
+In this example, we'll name our public IP address _myStandardPublicIP_: 
 
 ```azurecli-interactive
     az network public-ip create \
@@ -55,7 +57,7 @@ You can enable DDoS IP Protection when creating a public IP address. In this exa
         --ddos-protection-mode Enabled
 ```
 
-### Existing public IP address
+# [Existing public IP address](#tab/existing-ip)
 
 You can enable DDoS IP Protection on an existing public IP address.
 
@@ -66,7 +68,9 @@ You can enable DDoS IP Protection on an existing public IP address.
         --ddos-protection-mode Enabled
 ```
 
-### Disable DDoS IP Protection:
+---
+
+## Disable DDoS IP Protection for a public IP address
 
 You can disable DDoS IP Protection on an existing public IP address.
 

articles/ddos-protection/manage-ddos-ip-protection-portal.md

@@ -5,7 +5,7 @@ author: AbdullahBell
 ms.author: abell
 ms.service: azure-ddos-protection
 ms.topic: quickstart
-ms.date: 03/17/2025
+ms.date: 01/26/2026
 ms.custom: template-quickstart
 # Customer intent: "As a network administrator, I want to configure DDoS IP protection for my public IP address, so that I can safeguard my application from distributed denial-of-service attacks."
 ---
@@ -20,14 +20,16 @@ In this quickstart, you enable DDoS IP protection and link it to a public IP add
 ## Prerequisites
 
 - Create a [free account](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn) before you begin.
-- Sign in to the [Azure portal](https://portal.azure.com). 
+- Sign in to the [Azure portal](https://portal.azure.com).
 
 ## Enable DDoS IP Protection on a public IP address
 
+You can enable DDoS IP Protection when creating a new public IP address or for an existing public IP address. Select the tab for your scenario.
+
 > [!IMPORTANT]
 > Ensure that your account is assigned to the [network contributor](../role-based-access-control/built-in-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json#network-contributor) role or to a [custom role](../role-based-access-control/custom-roles.md?toc=%2fazure%2fvirtual-network%2ftoc.json) that is assigned the appropriate actions listed in the how-to guide on [Permissions](manage-permissions.md).
 
-### Create a public IP address
+# [New public IP address](#tab/new-ip)
 
 1. Select **Create a resource** in the upper left corner of the Azure portal.
 1. Select **Networking**, and then select **Public IP address**.
@@ -49,10 +51,11 @@ In this quickstart, you enable DDoS IP protection and link it to a public IP add
     | Idle Timeout (minutes)  | Keep a TCP or HTTP connection open without relying on clients to send keep-alive messages. In this example, we leave the default of **4**.        |
     | DNS name label          | Enter a DNS name label. In this example, we left the value blank.    |
 
-
+1. Select **Next: DDoS Protection** to open the DDoS Protection page.
+1. Select **IP** on the **Azure DDoS IP Protection** radio button.
 1. Select **Review + create** to review your settings and create the public IP address.
 
-### Enable for an existing Public IP address
+# [Existing public IP address](#tab/existing-ip)
 
 1. In the search box at the top of the portal, enter **public IP Address**. Select **public IP Address**.
 1. Select your Public IP address. In this example, select **myStandardPublicIP**.
@@ -62,14 +65,17 @@ In this quickstart, you enable DDoS IP protection and link it to a public IP add
 
 1. In the **Configure DDoS protection** pane, under **Protection type**, select  **IP**, then select **Save**.
 
-### Disable for a Public IP address:
+---
+
+## Disable DDoS IP Protection for a public IP address
 
 1. Enter the name of the public IP address you want to disable DDoS IP Protection for in the **Search resources, services, and docs box** at the top of the portal. When the name of public IP address appears in the search results, select it.
 1. Under **Properties** in the overview pane, select **DDoS Protection**.
 1. Under **Protection type** select **Disable**, then select **Save**.
 
 > [!NOTE]
 > When changing DDoS IP protection from **Enabled** to **Disabled**, telemetry for the public IP resource will no longer be active.
+
 ## Validate and test
 
 First, check the details of your public IP address:

articles/ddos-protection/manage-ddos-ip-protection-template.md

@@ -7,7 +7,7 @@ ms.service: azure-ddos-protection
 ms.topic: quickstart
 ms.custom: mode-arm, devx-track-arm-template
 ms.author: abell
-ms.date: 03/17/2025
+ms.date: 03/05/2026
 # Customer intent: As a network administrator, I want to deploy a DDoS IP Protection using an ARM template, so that I can safeguard my public IP addresses against distributed denial-of-service attacks.
 ---
 

articles/ddos-protection/manage-ddos-protection-bicep.md

@@ -7,7 +7,7 @@ ms.service: azure-ddos-protection
 ms.topic: quickstart
 ms.custom: subject-armqs, mode-arm, devx-track-bicep
 ms.author: abell
-ms.date: 03/17/2025
+ms.date: 03/05/2026
 # Customer intent: As a cloud infrastructure engineer, I want to create and configure an Azure DDoS protection plan using Bicep, so that I can effectively safeguard my virtual networks against DDoS attacks across multiple subscriptions.
 ---
 

articles/ddos-protection/manage-ddos-protection-cli.md

@@ -6,7 +6,7 @@ author: AbdullahBell
 ms.service: azure-ddos-protection
 ms.topic: quickstart
 ms.custom: devx-track-azurecli
-ms.date: 03/17/2025
+ms.date: 01/26/2026
 ms.author: abell
 # Customer intent: As a network administrator, I want to create and configure a DDoS protection plan using Azure CLI, so that I can enhance the security of my virtual networks against DDoS attacks.
 ---
@@ -51,9 +51,11 @@ az network ddos-protection create \
 
 ## Enable DDoS protection for a virtual network
 
-### Enable DDoS protection for a new virtual network
+You can enable DDoS protection when creating a new virtual network or for an existing virtual network. Select the tab for your scenario.
 
-You can enable DDoS protection when creating a virtual network. In this example, we'll name our virtual network _MyVnet_: 
+# [New virtual network](#tab/new-vnet)
+
+In this example, we'll name our virtual network _MyVnet_: 
 
 ```azurecli-interactive
 az network vnet create \
@@ -66,7 +68,7 @@ az network vnet create \
 
 [!INCLUDE [DDoS-Protection-virtual-network-relocate-note.md](../../includes/DDoS-Protection-virtual-network-relocate-note.md)]
 
-### Enable DDoS protection for an existing virtual network
+# [Existing virtual network](#tab/existing-vnet)
 
 When [creating a DDoS protection plan](#create-a-ddos-protection-plan), you can associate one or more virtual networks to the plan. To add more than one virtual network, list the names or IDs, space-separated. In this example, we'll add _MyVnet_:
 
@@ -91,7 +93,9 @@ az network vnet update \
     --ddos-protection true
 ```
 
-### Disable DDoS protection for a virtual network
+---
+
+## Disable DDoS protection for a virtual network
 
 Update a given virtual network to disable DDoS protection:
 

articles/ddos-protection/manage-ddos-protection-powershell-ip.md

@@ -5,7 +5,7 @@ author: AbdullahBell
 ms.author: abell
 ms.service: azure-ddos-protection
 ms.topic: quickstart
-ms.date: 03/17/2025
+ms.date: 01/26/2026
 ms.custom: template-quickstart, devx-track-azurepowershell
 # Customer intent: As a cloud engineer, I want to enable DDoS IP protection for a public IP address using PowerShell, so that I can strengthen my infrastructure against potential DDoS attacks.
 ---
@@ -30,7 +30,11 @@ In this QuickStart, you'll enable DDoS IP protection and link it to a public IP
 
 ## Enable DDoS IP Protection for a public IP address
 
-You can enable DDoS IP Protection when creating a public IP address. In this example, we'll name our public IP address _myStandardPublicIP_:
+You can enable DDoS IP Protection when creating a new public IP address or for an existing public IP address. Select the tab for your scenario.
+
+# [New public IP address](#tab/new-ip)
+
+In this example, we'll name our public IP address _myStandardPublicIP_:
 
 ```azurepowershell-interactive
 #Creates the resource group
@@ -39,12 +43,13 @@ New-AzResourceGroup -Name MyResourceGroup -Location eastus
 #Creates the IP address and enables DDoS IP Protection
 New-AzPublicIpAddress -Name myStandardPublicIP -ResourceGroupName MyResourceGroup -Sku Standard -Location "East US" -AllocationMethod Static -DdosProtectionMode Enabled   
 ```
+
 > [!NOTE]
 > DDoS IP Protection is enabled only on Public IP Standard SKU.
 
-### Enable DDoS IP Protection for an existing public IP address
+# [Existing public IP address](#tab/existing-ip)
 
-You can associate an existing public IP address:
+You can enable DDoS IP Protection for an existing public IP address:
 
 ```azurepowershell-interactive
 #Gets the public IP address
@@ -57,6 +62,7 @@ $publicIp.DdosSettings.ProtectionMode = 'Enabled'
 Set-AzPublicIpAddress -PublicIpAddress $publicIp
 ```
 
+---
 
 ## Validate and test
 
@@ -73,7 +79,8 @@ $protectionMode = $publicIp.DdosSettings.ProtectionMode
 $protectionMode
 
 ```
-## Disable DDoS IP Protection for an existing public IP address
+
+## Disable DDoS IP Protection for a public IP address
 
 ```azurepowershell-interactive
 $publicIp = Get-AzPublicIpAddress -Name myStandardPublicIP -ResourceGroupName MyResourceGroup 
@@ -82,6 +89,7 @@ $publicIp.DdosSettings.ProtectionMode = 'Disabled'
 
 Set-AzPublicIpAddress -PublicIpAddress $publicIp 
 ```
+
 > [!NOTE]
 > When changing DDoS IP protection from **Enabled** to **Disabled**, telemetry for the public IP resource will no longer be active.
 
@@ -92,6 +100,7 @@ You can keep your resources for the next tutorial. If no longer needed, delete t
 ```azurepowershell-interactive
 Remove-AzResourceGroup -Name MyResourceGroup
 ```
+
 ## Next steps
 
 In this quickstart, you created:

articles/ddos-protection/manage-ddos-protection-powershell.md

@@ -5,7 +5,7 @@ services: ddos-protection
 author: AbdullahBell
 ms.service: azure-ddos-protection
 ms.topic: quickstart
-ms.date: 03/17/2025
+ms.date: 01/26/2026
 ms.author: abell
 ms.custom: devx-track-azurepowershell, mode-api
 # Customer intent: "As a cloud administrator, I want to create and configure a DDoS protection plan using PowerShell, so that I can secure my virtual networks against distributed denial-of-service attacks effectively."
@@ -47,9 +47,11 @@ New-AzDdosProtectionPlan -ResourceGroupName MyResourceGroup -Name MyDdosProtecti
 
 ## Enable DDoS for a virtual network
 
-### Enable DDoS for a new virtual network
+You can enable DDoS protection when creating a new virtual network or for an existing virtual network. Select the tab for your scenario.
 
-You can enable DDoS protection when creating a virtual network. In this example, we'll name our virtual network _MyVnet_:
+# [New virtual network](#tab/new-vnet)
+
+In this example, we'll name our virtual network _MyVnet_:
 
 ```azurepowershell-interactive
 #Gets the DDoS protection plan ID
@@ -59,7 +61,7 @@ $ddosProtectionPlanID = Get-AzDdosProtectionPlan -ResourceGroupName MyResourceGr
 New-AzVirtualNetwork -Name MyVnet -ResourceGroupName MyResourceGroup -Location "East US" -AddressPrefix 10.0.0.0/16 -DdosProtectionPlan $ddosProtectionPlanID.Id -EnableDdosProtection  
 ```
 
-### Enable DDoS for an existing virtual network
+# [Existing virtual network](#tab/existing-vnet)
 
 You can associate an existing virtual network when creating a DDoS protection plan:
 
@@ -76,7 +78,10 @@ $vnet.DdosProtectionPlan.Id = $ddosProtectionPlanID.Id
 $vnet.EnableDdosProtection = $true
 $vnet | Set-AzVirtualNetwork
 ```
-### Disable DDoS for a virtual network
+
+---
+
+## Disable DDoS for a virtual network
 
 To disable DDoS protection for a virtual network: