Explanation:
App1 Canary and App2 rolling
App1 Canary would minimize app downtime for the first app, as it would only deploy new code when the canary has confirmed that it is functional - and if there are any issues, it would roll back to the previous version of the code.
App2 rolling would be the second option, as it would allow for frequent deployments of new code, while still giving the developers enough time to fix any issues that may have been introduced during new code deployments.

Explanation:

Box 1: Get-AzResource
Use the following command to examine the access control mode for all workspaces in the subscription:
PowerShell
Get-Az Resource -Resource Type Microsoft. Operational Insights/workspaces -Expand Properties | for each
{s.Name + " : " + $_.Properties.features.enableLogAccessUsingOnlyResourcePermissions Box 2: -Resource Type Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/logs/manage-access

See solution below.
Explanation:
1. In Azure portal navigate to the az400-9940427-main app.
2. Scroll down to the Settings groupin the left navigation.
3. Select Managed identity.
4. Within the System assigned tab, switch Status to On. Click Save.

References:
https://docs.microsoft.com/en-us/azure/app-service/overview-managed-identity