Merge pull request #289157 from mbender-ms/avnm-how-to-updates

network manager - updated docs + includes added

Author: v-dirichards

articles/virtual-network-manager/how-to-create-hub-and-spoke.md

@@ -5,7 +5,7 @@ author: mbender-ms
 ms.author: mbender
 ms.service: azure-virtual-network-manager
 ms.topic: how-to
-ms.date: 06/20/2024
+ms.date: 10/23/2024
 ms.custom: template-concept, engagement-fy23
 ---
 
@@ -44,20 +44,17 @@ To manually add the desired virtual networks for your Mesh configuration to your
     :::image type="content" source="./media/create-virtual-network-manager-portal/add-virtual-networks.png" alt-text="Screenshot of add virtual networks to network group page.":::
 
 1. To review the network group membership manually added, select **Group Members** on the *Network Group* page under **Settings**.
-    :::image type="content" source="media/create-virtual-network-manager-portal/group-members-list.png" alt-text="Screenshot of group membership under Group Membership." lightbox="media/create-virtual-network-manager-portal/group-members-list.png":::
+
+    :::image type="content" source="./media/how-to-create-hub-and-spoke/group-members-list.png" alt-text="Screenshot that shows a list of group members.":::
 
 ## Create a hub and spoke connectivity configuration
 
 This section guides you through how to create a hub-and-spoke configuration with the network group you created in the previous section.
 
 1. Select **Connectivity configuration** from the drop-down menu to begin creating a connectivity configuration.
 
-    :::image type="content" source="./media/create-virtual-network-manager-portal/connectivity-configuration-dropdown.png" alt-text="Screenshot of configuration drop-down menu.":::
-
 1. On the **Basics** page, enter the following information, and select **Next: Topology >**.
 
-    :::image type="content" source="./media/create-virtual-network-manager-portal/connectivity-configuration.png" alt-text="Screenshot of add a connectivity configuration page.":::
-
     | Setting | Value |
     | ------- | ----- |
     | Name | Enter a *name* for this configuration. |
@@ -67,7 +64,7 @@ This section guides you through how to create a hub-and-spoke configuration with
 
     :::image type="content" source="media/how-to-create-hub-and-spoke/topology.png" alt-text="Screenshot of Add Topology screen for hub and spoke topology.":::
 
-1. Select **Delete existing peerings** checkbox if you want to remove all previously created VNet peering between virtual networks in the network group defined in this configuration,  and then select **Select a hub**.
+1. Select **Delete existing peerings** checkbox if you want to remove all previously created virtual network peering between virtual networks in the network group defined in this configuration,  and then select **Select a hub**.
 1. On the **Select a hub** page, Select a virtual network that acts as the hub virtual network and select **Select**.
 
     :::image type="content" source="media/how-to-create-hub-and-spoke/select-hub.png" alt-text="Screenshot of Select a hub list.":::
@@ -81,8 +78,8 @@ This section guides you through how to create a hub-and-spoke configuration with
     :::image type="content" source="./media/how-to-create-hub-and-spoke/spokes-settings.png" alt-text="Screenshot of spoke network groups settings.":::
 
 
-    * *Direct connectivity*: Select **Enable peering within network group** if you want to establish VNet peering between virtual networks in the network group of the same region.
-    * *Global Mesh*: Select **Enable mesh connectivity across regions** if you want to establish VNet peering for all virtual networks in the network group across regions.
+    * *Direct connectivity*: Select **Enable peering within network group** if you want to establish virtual network peering between virtual networks in the network group of the same region.
+    * *Global Mesh*: Select **Enable mesh connectivity across regions** if you want to establish virtual network peering for all virtual networks in the network group across regions.
     * *Gateway*: Select **Use hub as a gateway** if you have a virtual network gateway in the hub virtual network that you want this network group to use to pass traffic to on-premises.
 
     Select the settings you want to enable for each network group.
@@ -105,12 +102,9 @@ To have this configuration take effect in your environment, you need to deploy t
     | Target regions | Select all the regions that apply to virtual networks you select for the configuration. |
 
 1. Select **Next** and then select **Deploy** to complete the deployment.
-
-    :::image type="content" source="./media/create-virtual-network-manager-portal/deployment-confirmation.png" alt-text="Screenshot of deployment confirmation message.":::
-
 1. The deployment displays in the list for the selected region. The deployment of the configuration can take a few minutes to complete.
 
-    :::image type="content" source="./media/create-virtual-network-manager-portal/deployment-in-progress.png" alt-text="Screenshot of configuration deployment in progress status.":::
+    :::image type="content" source="./media/how-to-create-hub-and-spoke/deployment-succeeded.png" alt-text="Screenshot of configuration deployment in progress status.":::
 
 > [!NOTE]
 > If you're currently using peering and want to manage topology and connectivity with Azure Virtual Network Manager, you can migrate without any downtime to your network. Virtual network manager instances are fully compatible with pre-existing hub and spoke topology deployment using peering. This means that you won't need to delete any existing peered connections between the spokes and the hub as the network manager will automatically detect and manage them.
@@ -124,4 +118,4 @@ To have this configuration take effect in your environment, you need to deploy t
 ## Next steps
 
 - Learn about [Security admin rules](concept-security-admins.md)
-- Learn how to block network traffic with a [SecurityAdmin configuration](how-to-block-network-traffic-portal.md).
+- Learn how to block network traffic with a [SecurityAdmin configuration](how-to-block-network-traffic-portal.md).

articles/virtual-network-manager/how-to-create-mesh-network.md

@@ -5,7 +5,7 @@ author: mbender-ms
 ms.author: mbender
 ms.service: azure-virtual-network-manager
 ms.topic: how-to
-ms.date: 05/07/2024
+ms.date: 10/23/2024
 ms.custom: engagement-fy23
 ---
 
@@ -43,7 +43,8 @@ To manually add the desired virtual networks for your Mesh configuration to your
     :::image type="content" source="./media/create-virtual-network-manager-portal/add-virtual-networks.png" alt-text="Screenshot of add virtual networks to network group page.":::
 
 1. To review the network group membership manually added, select **Group Members** on the *Network Group* page under **Settings**.
-    :::image type="content" source="media/create-virtual-network-manager-portal/group-members-list.png" alt-text="Screenshot of group membership under Group Membership." lightbox="media/create-virtual-network-manager-portal/group-members-list.png":::
+
+    :::image type="content" source="./media/how-to-create-hub-and-spoke/group-members-list.png" alt-text="Screenshot that shows a list of group members.":::
 
 ## Create a mesh connectivity configuration
 
@@ -53,12 +54,8 @@ This section guides you through how to create a mesh configuration with the netw
 
 1. Select **Connectivity configuration** from the drop-down menu to begin creating a connectivity configuration.
 
-    :::image type="content" source="./media/create-virtual-network-manager-portal/connectivity-configuration-dropdown.png" alt-text="Screenshot of configuration drop-down menu.":::
-
 1. On the **Basics** page, enter the following information, and select **Next: Topology >**.
 
-    :::image type="content" source="./media/create-virtual-network-manager-portal/connectivity-configuration.png" alt-text="Screenshot of add a connectivity configuration page.":::
-
     | Setting | Value |
     | ------- | ----- |
     | Name | Enter a *name* for this configuration. |

articles/virtual-network-manager/media/how-to-create-hub-and-spoke/deployment-succeeded.png

@@ -0,0 +1,36 @@
+---
+ title: include file
+ description: include file
+ services: virtual-network-manager
+ author: mbender
+ ms.service: virtual-network-manager
+ ms.topic: include
+ ms.date: 10/22/2024
+ ms.author: mbender-ms
+ms.custom: include file
+---
+
+By using [Azure Policy](/azure/virtual-network-manager/concept-azure-policy-integration), you define a condition to dynamically add two virtual networks to your network group when the name of the virtual network includes *prod*:
+
+1. From the list of network groups, select **network-group**. Under **Create policy to dynamically add members**, select **Create Azure policy**.
+1. In the **Create Azure policy** window, select or enter the following information, and then select **Preview resources**.
+
+    :::image type="content" source="./media/virtual-network-manager-define-azure-policy/network-group-conditional.png" alt-text="Screenshot of the pane for creating an Azure policy, including criteria for definitions.":::
+
+    | Setting | Value |
+    | ------- | ----- |
+    | **Policy name** | Enter **azure-policy**. |
+    | **Scope** | Choose **Select scopes** and then select your current subscription. |
+    | **Parameter** | Select **Name** from the dropdown list.|
+    | **Operator** | Select **Contains** from the dropdown list.|
+    | **Condition** | Enter **-spoke**. |
+
+2. The **Preview resources** pane shows the virtual networks for addition to the network group based on the defined conditions in Azure Policy. When you're ready, select **Close**.
+
+    :::image type="content" source="media/virtual-network-manager-define-azure-policy/preview-virtual-networks.png" alt-text="Screenshot of Preview resources window with virtual networks in network group.":::
+
+3. Select **Save** to deploy the group membership. It can take up to one minute for the policy to take effect and be added to your network group.
+
+4. In the **Network Group** pane under **Settings**, select **Group members** to view the membership of the group based on the conditions that you defined in Azure Policy. Confirm that **Source** is listed as **azure-policy - subscriptions/<your_subscription_id>**.
+
+    :::image type="content" source="media/virtual-network-manager-define-azure-policy/group-members-list.png" alt-text="Screenshot of listed group members with a configured source." lightbox="media/virtual-network-manager-define-azure-policy/group-members-list.png":::