docs: architectural flow & key features for IoT & Web streaming (aklivity#291)

Author: ankitk-me

src/.vuepress/public/iot_ingestion_control.png

@@ -18,6 +18,14 @@ You will need to choose a wildcard DNS pattern to use for public internet access
 
 The [Zilla Plus for Amazon MSK](https://aws.amazon.com/marketplace/pp/prodview-jshnzslazfm44) IoT Ingest and Control Broker lets authorized Kafka clients connect, publish messages and subscribe to topics in your Confluent Cloud cluster via the internet.
 
+![MSK IoT Ingest and Control Overview](/iot_ingestion_control.png)
+
+## Key Features
+
+- Enable **IoT clients** to securely connect, publish messages, and subscribe to Kafka topics using **MQTT protocol**.
+- **No configuration** changes required to your MSK cluster to function as MQTT broker.
+- <ZillaPlus/> supports **Auto-Scaling** and are deployed behind a **Network Load Balancer** for optimal performance.
+
 ### Deploy with CDK
 
 Follow the [IOT Ingest and Control deploy with CDK](https://github.com/aklivity/zilla-plus-aws-templates/tree/main/amazon-msk/cdk/iot-ingest-and-control) guide to generate or deploy a custom AWS CDK stack. This stack sets up an MQTT broker using a globally trusted TLS server certificate with a wildcard DNS pattern `*.example.aklivity.io`.

src/.vuepress/public/web_streaming.png

@@ -14,6 +14,14 @@ By automating the configuration of a network load balancer and auto-scaling grou
 
 You will need to choose a wildcard DNS pattern to use for public internet access to the Web Streaming proxies. These wildcard DNS names must resolve to the public IP address(es) where the <ZillaPlus/> proxy is deployed. The <ZillaPlus/> proxy must also be configured with a TLS server certificate representing the same wildcard DNS pattern.
 
+![MSK Web Streaming Overview](/web_streaming.png)
+
+## Key Features
+
+- Enable web clients to publish, update, and stream Kafka messages via **customizable REST and SSE APIs**.
+- **No configuration** changes required to your MSK cluster to enable seamless web access.
+- <ZillaPlus/> supports **Auto-Scaling** and are deployed behind a **Network Load Balancer** for optimal performance.
+
 ## Deploy with CDK
 
 Follow the [Web Streaming with CDK](https://github.com/aklivity/zilla-plus-aws-templates/tree/main/amazon-msk/cdk/web-streaming) guide to generate or deploy a custom AWS CDK stack. This stack exposes a custom `REST` path and uses `SASL/SCRAM` authentication.

src/solutions/concepts/kafka-proxies/iot-ingest-control.md

@@ -11,15 +11,13 @@ With [Zilla Plus for Amazon MSK](https://aws.amazon.com/marketplace/pp/prodview-
 
 The IoT Ingest and Control MQTT Broker that lets clients publish messages and subscribe to topics proxied to Kafka topics in your Amazon MSK cluster.
 
-> [Amazon MSK IoT Ingest and Control Guide](./iot-ingest-control.md)
+> [Amazon MSK IoT Ingest and Control Guide](../../concepts/kafka-proxies/iot-ingest-control.md)
 
 ## Secure Public Access
 
 The Secure Public Access Proxy lets authorized Kafka clients connect, publish messages and subscribe to topics in your Amazon MSK cluster via the internet.
 
-> [Amazon MSK Secure Public Access Proxy with SASL/SCRAM Guide](./secure-public-access/production.md)
-> [Amazon MSK Secure Public Access Proxy with Mutual TLS (mTLS) Guide](./secure-public-access/production-mutual-tls.md)
-> [Amazon MSK Secure Public Access Proxy with Unauthorized access Guide](./secure-public-access/development.md)
+> [Amazon MSK Secure Public Access Proxy](../../concepts/kafka-proxies/secure-public-access.md)
 
 ## Secure Private Access
 
@@ -31,4 +29,4 @@ The Secure Private Access proxy enables authorized Kafka clients deployed across
 
 The Web Streaming proxy lets Web clients publish, update, and stream messages to a Kafka topic in your Amazon MSK cluster.
 
-> [Amazon MSK Web Streaming Guide](./web-streaming.md)
+> [Amazon MSK Web Streaming Guide](../../concepts/kafka-proxies/web-streaming.md)