Clean up KV FW instructions

Author: Andrew

articles/operator-nexus/howto-cluster-managed-identity-user-provided-resources.md

@@ -85,7 +85,7 @@ The following steps should be followed for using UAMIs with Nexus Clusters and a
    1. Select **Member**: AFOI-NC-MGMT-PME-PROD application.
    1. Review and assign.
 1. To limit access to the Key Vault to a select set of IP or virtual networks, see [Configure Azure Key Vault firewalls and virtual networks](/azure/key-vault/general/network-security?WT.mc_id=Portal-Microsoft_Azure_KeyVault).
-   1. The IPs for all users executing run-\* commands need to be added to the Storage Account's `Virtual Networks` and/or `Firewall` lists.
+   1. The IPs for all users requiring access to the Key Vault need to be added to the Key Vault's `Virtual Networks` and/or `Firewall` lists.
    1. Ensure the `Allow trusted Microsoft services to bypass this firewall.` under `Exceptions` is selected.
 
 ### Create or update the Nexus Cluster to use User Assigned Managed Identities and user provided resources
@@ -311,7 +311,7 @@ System-assigned identity example:
 1. Assign the `Operator Nexus Key Vault Writer Service Role (Preview)` role to the SAMI for the Key Vault. See [Assign role](/azure/key-vault/general/rbac-guide?tabs=azure-cli#assign-role).
    1. The role definition ID for the Operator Nexus Key Vault Writer Service Role is `44f0a1a8-6fea-4b35-980a-8ff50c487c97`. This format is required if using the Azure command line to do the role assignment.
 1. To limit access to the Key Vault to a select set of IP or virtual networks, see [Configure Azure Key Vault firewalls and virtual networks](/azure/key-vault/general/network-security?WT.mc_id=Portal-Microsoft_Azure_KeyVault).
-   1. The IPs for all users executing run-\* commands need to be added to the Storage Account's `Virtual Networks` and/or `Firewall` lists.
+   1. The IPs for all users requiring access to the Key Vault need to be added to the Key Vault's `Virtual Networks` and/or `Firewall` lists.
    1. Ensure the `Allow trusted Microsoft services to bypass this firewall.` under `Exceptions` is selected.
 
 ### Update the Cluster with the user provided resources information