diff --git a/docs/content/services/networking/front-door/code/afd-5/afd-5.kql b/docs/content/services/networking/front-door/code/afd-5/afd-5.kql
index 614a7f9ca..7e3813b75 100644
--- a/docs/content/services/networking/front-door/code/afd-5/afd-5.kql
+++ b/docs/content/services/networking/front-door/code/afd-5/afd-5.kql
@@ -1 +1,8 @@
-// under-development
+// Azure Resource Graph Query
+// Use end-to-end TLS
+cdnresources
+| where type == "microsoft.cdn/profiles/afdendpoints/routes"
+| extend forwardingProtocol=tostring(properties.forwardingProtocol),supportedProtocols=properties.supportedProtocols
+| project id,name,forwardingProtocol,supportedProtocols,tags
+| where forwardingProtocol !~ "httpsonly" or supportedProtocols has "http"
+| project recommendationId= "afd-5", name,id,tags,param1=strcat("forwardingProtocol:",forwardingProtocol),param2=strcat("supportedProtocols:",supportedProtocols)
diff --git a/docs/content/services/networking/front-door/code/afd-6/afd-6.kql b/docs/content/services/networking/front-door/code/afd-6/afd-6.kql
index 614a7f9ca..b3eace390 100644
--- a/docs/content/services/networking/front-door/code/afd-6/afd-6.kql
+++ b/docs/content/services/networking/front-door/code/afd-6/afd-6.kql
@@ -1 +1,8 @@
-// under-development
+// Azure Resource Graph Query
+// Use HTTP to HTTPS redirection
+cdnresources
+| where type == "microsoft.cdn/profiles/afdendpoints/routes"
+| extend httpsRedirect=tostring(properties.httpsRedirect)
+| project id,name,httpsRedirect,tags
+| where httpsRedirect !~ "enabled"
+| project recommendationId= "afd-6", name,id,tags,param1=strcat("httpsRedirect:",httpsRedirect)