The Azure App Service landing zone accelerator is an open-source collection of architectural guidance and reference implementation to accelerate deployment of Azure App Service at scale.
LZA to support Internal and External facing apps both exposed using WAF either on AFD or App GW
Internal Facing Apps exposed via App GW
External Facing App exposed via AFD (with WAF) - Currently implemented scenario
External Facing App exposed via App GW (WAF) -> AFD - To support cases where Apps are both internal and external, and where AFD private endpoint backend is not available in specific regions
LZA to support Internal and External facing apps both exposed using WAF either on AFD or App GW