Addressing Acrolinx suggestions

Author: sumit-kalra

articles/virtual-machines/image-builder-best-practices.md

@@ -17,11 +17,11 @@ ms.custom: references_regions
 This article describes best practices to be followed while using Azure VM Image Builder (AIB).
 
 - To prevent image templates from being accidentally deleted, use resource locks at the image template resource level. For more information, see [Protect your Azure resources with a lock](../azure-resource-manager/management/lock-resources.md).
-- Make sure your image tempaltes are setup for disaster recovery by following [reliability recommendation for AIB](../reliability/reliability-image-builder.md?toc=/azure/virtual-machines/toc.json&bc=/azure/virtual-machines/breadcrumb/toc.json).
+- Make sure your image templates are set up for disaster recovery by following [reliability recommendation for AIB](../reliability/reliability-image-builder.md?toc=/azure/virtual-machines/toc.json&bc=/azure/virtual-machines/breadcrumb/toc.json).
 - Set up AIB [triggers](image-builder-triggers-how-to.md) to automatically rebuild your images and keep them updated.
 - Enable [VM Boot Optimization](vm-boot-optimization.md) in AIB to improve the create time for your VMs.
-- Follow the [principle of least privilege](https://learn.microsoft.com/en-us/entra/identity-platform/secure-least-privileged-access) for your AIB resources:
-  - **Image Template**: A prinicpal that has access to your image template will be able to run, delete, or tamper with it. This, in turn, will allow the principal to change the images created by that image template.
-  - **Staging Resource Group**: AIB uses a staging resource group in your subscription to customize your VM image. You must consider this resource group as sensitive and restrict access to this resource group only to required principals. Since the process of customizing your image takes place in this resource group, a principal with access to the resource group will be able to compromise the image building process - for example, by injecting malware into the image. AIB also delegates priveleges associated with the Template identity and Build VM identity to resources in this resource group. Hence, a principal with access to the resource group will be able to get access to these identities. Further, AIB maintains a copy of your customizer artifacts in this resource group. Hence, a principal with access to the resource group will be able to inspect these copies.
-  - **Template Identity**: A principal with access to your template identity will be able to access all resources that the identity has permissions for including your customizer artifacts (for example, shell and PowerShell scripts), your distribution targets (for example, an Azure Compute Gallery image version), and your Virtual Network. Hence, you must provided only the minimum required priveleges to this identity.
-  - **Build VM Identity**: A principal with access to your build VM identity will be able to access all resources that the identity has permissions for including any artifacts and Virtual Network that you may be using from within the Build VM using this identity. Hence, you must provided only the minimum required priveleges to this identity.
+- Follow the [principle of least privilege](/entra/identity-platform/secure-least-privileged-access) for your AIB resources.
+  - **Image Template**: A principal that has access to your image template is able to run, delete, or tamper with it. Having this access, in turn, allows the principal to change the images created by that image template.
+  - **Staging Resource Group**: AIB uses a staging resource group in your subscription to customize your VM image. You must consider this resource group as sensitive and restrict access to this resource group only to required principals. Since the process of customizing your image takes place in this resource group, a principal with access to the resource group is able to compromise the image building process - for example, by injecting malware into the image. AIB also delegates privileges associated with the Template identity and Build VM identity to resources in this resource group. Hence, a principal with access to the resource group is able to get access to these identities. Further, AIB maintains a copy of your customizer artifacts in this resource group. Hence, a principal with access to the resource group is able to inspect these copies.
+  - **Template Identity**: A principal with access to your template identity is able to access all resources that the identity has permissions for. This includes your customizer artifacts (for example, shell and PowerShell scripts), your distribution targets (for example, an Azure Compute Gallery image version), and your Virtual Network. Hence, you must provide only the minimum required privileges to this identity.
+  - **Build VM Identity**: A principal with access to your build VM identity is able to access all resources that the identity has permissions for. This includes any artifacts and Virtual Network that you might be using from within the Build VM using this identity. Hence, you must provide only the minimum required privileges to this identity.