Merge pull request #212029 from mbender-ms/avnm-update-secure-hub-spoke

Azure Virtual Network Manager - Updates from GitHubPR 211848

Author: Court72

articles/virtual-network-manager/media/tutorial-create-secured-hub-and-spoke/group-members-dynamic-thumb.png

@@ -5,7 +5,7 @@ author: mbender-ms
 ms.author: mbender
 ms.service: virtual-network-manager
 ms.topic: tutorial
-ms.date: 11/02/2021
+ms.date: 09/21/2022
 ms.custom: ignite-fall-2021
 ---
 
@@ -113,7 +113,7 @@ Deploy a virtual network gateway into the hub virtual network. This virtual netw
 
 1. On the *Basics* tab, enter the following information:
 
-    :::image type="content" source="./media/tutorial-create-secured-hub-and-spoke/network-group-basics.png" alt-text="Screenshot of the create a network group basics tab.":::
+    :::image type="content" source="./media/tutorial-create-secured-hub-and-spoke/network-group-basics.png" alt-text="Screenshot of the Basics tab on Create a network group page.":::
 
     | Setting | Value |
     | ------- | ----- |
@@ -128,7 +128,7 @@ Deploy a virtual network gateway into the hub virtual network. This virtual netw
 
 1. On the **Overview** page, select **Create Azure Policy** under *Create policy to dynamically add members*.
 
-    :::image type="content" source="./media/tutorial-create-secured-hub-and-spoke/define-dynamic-membership.png" alt-text="Screenshot of the define dynamic membership button.":::
+    :::image type="content" source="./media/tutorial-create-secured-hub-and-spoke/define-dynamic-membership.png" alt-text="Screenshot of the defined dynamic membership button.":::
 
 1. On the **Create Azure Policy** page, select or enter the following information:
 
@@ -141,11 +141,11 @@ Deploy a virtual network gateway into the hub virtual network. This virtual netw
     | Criteria |  |
     | Parameter | Select **Name** from the drop-down.|
     | Operator | Select **Contains** from the drop-down.| 
-    | Condition | Enter **VNet-** to dynamically add the three previously created virtual networks into this network group. |
+    | Condition | Enter **-EastUS** to dynamically add the two East US virtual networks into this network group. |
 
 1. Select **Save** to deploy the group membership.
 1. Under **Settings**, select **Group Members** to view the membership of the group based on the conditions defined in Azure Policy.
-:::image type="content" source="media/tutorial-create-secured-hub-and-spoke/group-members-dynamic-thumb.png" alt-text="Screenshot of dynamic group membership under Group Membership blade." lightbox="media/tutorial-create-secured-hub-and-spoke/group-members-dynamic.png":::
+:::image type="content" source="media/tutorial-create-secured-hub-and-spoke/group-members-dynamic-thumb.png" alt-text="Screenshot of dynamic group membership under Group Membership." lightbox="media/tutorial-create-secured-hub-and-spoke/group-members-dynamic.png":::
 ## Create a hub and spoke connectivity configuration
 
 1. Select **Configuration** under *Settings*, then select **+ Add a configuration**. Select **Connectivity** from the drop-down menu.
@@ -162,15 +162,15 @@ Deploy a virtual network gateway into the hub virtual network. This virtual netw
     | Description | Provide a description about what this connectivity configuration will do. |
 
 
-1. Select **Next: Topology >**. Select **Hub and Spoke** under the **Topology** setting. This will reveal additional settings.
+1. Select **Next: Topology >**. Select **Hub and Spoke** under the **Topology** setting. This will reveal other settings.
 
     :::image type="content" source="./media/tutorial-create-secured-hub-and-spoke/hub-configuration.png" alt-text="Screenshot of selecting a hub for the connectivity configuration.":::
 
-1.  Select **Select a hub** under **Hub** setting. Then, select **VNet-A-WestUS** to serve as your network hub and click **Select**.
+1.  Select **Select a hub** under **Hub** setting. Then, select **VNet-A-WestUS** to serve as your network hub and select **Select**.
 
     :::image type="content" source="media/tutorial-create-secured-hub-and-spoke/select-hub.png" alt-text="Screenshot of Select a hub configuration.":::
 
-1.  Under **Spoke network groups**, select **+ add**. Then, select **myNetworkGroupB** for the network group and click **Select**.
+1.  Under **Spoke network groups**, select **+ add**. Then, select **myNetworkGroupB** for the network group and select **Select**.
 
     :::image type="content" source="media/tutorial-create-secured-hub-and-spoke/select-network-group.png" alt-text="Screenshot of Add network groups page.":::
 
@@ -182,7 +182,7 @@ Deploy a virtual network gateway into the hub virtual network. This virtual netw
     | ------- | ----- |
     | Direct Connectivity | Select the checkbox for **Enable connectivity within network group**. This setting will allow spoke virtual networks in the network group in the same region to communicate with each other directly. |
     | Hub as gateway | Select the checkbox for **Use hub as a gateway**. |    
-    | Global Mesh | Leave this option **unchecked**. Since both spokes are in the same region this setting is not required. |
+    | Global Mesh | Leave **Enable mesh connectivity across regions** option **unchecked**. This setting isn't required as both spokes are in the same region  |
 
 1. Select **Next: Review + create >** and then create the connectivity configuration.
 
@@ -205,7 +205,7 @@ Make sure the virtual network gateway has been successfully deployed before depl
 
 ## Create security configuration
 
-1. Select **Configuration** under *Settings* again, then select **+ Create**, and select **SecurityAdmin** from the menu to begin creating a SecurityAdmin configuration..
+1. Select **Configuration** under *Settings* again, then select **+ Create**, and select **SecurityAdmin** from the menu to begin creating a SecurityAdmin configuration.
 
 1. Enter the name **mySecurityConfig** for the configuration, then select **Next: Rule collections**.
 
@@ -243,7 +243,7 @@ Make sure the virtual network gateway has been successfully deployed before depl
 
     :::image type="content" source="./media/tutorial-create-secured-hub-and-spoke/deploy-security.png" alt-text="Screenshot of deploying a security configuration.":::
 
-1. Select **Next** and then **Deploy**.You should now see the deployment show up in the list for the selected region. The deployment of the configuration can take about 15-20 minutes to complete.
+1. Select **Next** and then **Deploy**. You should now see the deployment show up in the list for the selected region. The deployment of the configuration can take about 15-20 minutes to complete.
 
 ## Verify deployment of configurations