Architecture to support Cloud Profile 5 and 6 (SCED enabled with internet inbound through SSC WAF/CAP/TIP)

[CldEng-DT]

Would it be possible to provide the architecture for Cloud Profile 5 and 6 to align with the usage of Express Route/SCED ? We've onboarded SCED a while back prior to this PubSec LZ (using the Enterprise Scale LZ), but did pick a few items such as the Private DNS zones but are always hesitant since this current architecture is flagged for Cloud Profile 3 ( Cloud Only) which we are not. Would be nice to have an entire architecture for SCED connected depts so we can realign with this model,