changed more images

Author: ElazarK

articles/defender-for-cloud/concept-gcp-connector.md

@@ -4,7 +4,7 @@ description: Learn how the GCP connector works on Microsoft Defender for Cloud.
 titleSuffix: Microsoft Defender for Cloud
 ms.topic: conceptual
 ms.service: defender-for-cloud
-ms.date: 02/09/2023
+ms.date: 04/23/2023
 ---
 
 # Microsoft Defender for Cloud's GCP connector

articles/defender-for-cloud/media/concept-gcp-connector/select-plans-gcp-project.png

@@ -2,7 +2,7 @@
 title: Connect your AWS account to Microsoft Defender for Cloud
 description: Defend your AWS resources with Microsoft Defender for Cloud
 ms.topic: quickstart
-ms.date: 01/10/2023
+ms.date: 04/23/2023
 author: bmansheim
 ms.author: benmansheim
 zone_pivot_groups: connect-aws-accounts
@@ -142,7 +142,7 @@ The native cloud connector requires:
     > [!NOTE]
     > Each plan has its own requirements for permissions, and might incur charges.
 
-    :::image type="content" source="media/quickstart-onboard-aws/add-aws-account-plans-selection.png" alt-text="The select plans tab is where you choose which Defender for Cloud capabilities to enable for this AWS account.":::
+    :::image type="content" source="media/quickstart-onboard-aws/add-aws-account-plans-selection.png" alt-text="The select plans tab is where you choose which Defender for Cloud capabilities to enable for this AWS account." lightbox="media/quickstart-onboard-aws/add-aws-account-plans-selection.png":::
 
     > [!IMPORTANT]
     > To present the current status of your recommendations, the CSPM plan queries the AWS resource APIs several times a day. These read-only API calls incur no charges, but they *are* registered in CloudTrail if you've enabled a trail for read events. As explained in [the AWS documentation](https://aws.amazon.com/cloudtrail/pricing/), there are no additional charges for keeping one trail. If you're exporting the data out of AWS (for example, to an external SIEM), this increased volume of calls might also increase ingestion costs. In such cases, We recommend filtering out the read-only calls from the Defender for Cloud user or role ARN: `arn:aws:iam::[accountId]:role/CspmMonitorAws` (this is the default role name, confirm the role name configured on your account).

articles/defender-for-cloud/media/enable-data-collection/defender-plans.png

@@ -2,7 +2,7 @@
 title: Connect your GCP project to Microsoft Defender for Cloud
 description: Monitoring your GCP resources from Microsoft Defender for Cloud
 ms.topic: quickstart
-ms.date: 01/25/2023
+ms.date: 04/23/2023
 zone_pivot_groups: connect-gcp-accounts
 ms.custom: mode-other, ignite-2022
 ---
@@ -101,7 +101,7 @@ After creating a connector, a scan will start on your GCP environment. New recom
 
 By default, all plans are `On`. You can disable plans that you don't need.
 
-:::image type="content" source="media/quickstart-onboard-gcp/toggle-plans-to-on.png" alt-text="Screenshot showing that all plans are toggle to on." lightbox="media/quickstart-onboard-gcp/toggle-plans-to-on.png":::
+:::image type="content" source="media/quickstart-onboard-gcp/toggle-plans-to-on.png" alt-text="Screenshot showing that all plans are toggle to on." lightbox="media/quickstart-onboard-gcp/toggle-plans-to-on.png" lightbox="media/quickstart-onboard-gcp/toggle-plans-to-on.png":::
 
 ### Configure the servers plan