# Managed Configurations

The **Managed Configurations** service provides management and control over your Azion edge infrastructure. This service employs the expertise of a team of experienced engineers to tackle certain day-to-day tasks on your behalf, such as setting up and maintaining your configurations.

The Managed Configuration service is operated by **Solution Architects**, who are responsible for implementing configuration changes requested by you, as the Azion customer. To request the Managed Configuration service for applications running on Azion, [open a Support Ticket](https://tickets.azion.com/en/support/login). 

:::note
This add-on is available for the **Enterprise** and **Mission-Critical** Support. This service has a monthly package with fixed pricing, limited by configuration requests. Each request for this service accounts for one configuration change. See [Pricing](/en/documentation/products/pricing/) for more information on how this service incurs charges.
:::

---

## Scope

The table below outlines the products and features included, as well as the major configurations under the scope of **Managed Configurations**.

| Products and features | Configurations |
| --- | --- |
| **Applications**<br></br>Application Accelerator <br></br>Cache<br></br>Functions<br></br>Image Processor<br></br>Load Balancer<br></br>Tiered Cache | Manage modules <br></br>Manage configurations related to modules<br></br>Change applications settings<br></br>Change cache settings<br></br>Change functions<br></br>Change error responses<br></br>Change rules<br></br>Change origins |
| **Certificate Manager** | Install certificates<br></br>Renew certificates<br></br>Configure and parametrize exceptions |
| **Real-Time Purge** | Purge cache<br></br>Purge Tiered cache |
| **Worloads** | Change domain settings |
| **Firewall**<br></br>Network Shield<br></br>Web Application Firewall<br></br>Network Lists | Change firewall settings<br></br>Change WAF policy configurations<br></br>Create custom WAF rules<br></br>Create custom network lists<br></br>Define the settings for geo blocking |
| **Edge DNS** | Create zones<br></br>Manage records | 
| **Orchestrator**<br></br>Edge Services<br></br>Edge Nodes | Manage edge services <br></br>Change edge node settings |
| **Data Stream** | Create streams<br></br>Manage streams |
| **Real-Time Metrics** | Retrieve data |
| **Real-Time Events** | Provide data logs |

---

## Out-of-scope activities

- **Technical support**: all [technical support tickets](/en/documentation/products/guides/open-tickets/) must be opened through Azion's official support channels and will be assigned to the appropriate team.
- **Support to other providers**: this service doesn't provide support to any infrastructure and applications that aren't running on Azion or through Azion Marketplace integrations provided by third-party vendors.
- **Mitigate workload failures or DDoS attacks**: the [Security Response Team](/en/documentation/services/security-response-team/) provides the service to mitigate workload failures and DDoS attacks.
- **Security audits**: this service doesn't perform security audits. Azion provides compliance support for Azion's products, such as **SOC 2/3**, **PCI**, and **Global Infrastructure Custom Maps**.
- **Manage end-user devices**: this service doesn't manage end-user devices, such as laptops, desktops, or smartphones.