acrolinx

Author: halkazwini

articles/network-watcher/nsg-flow-logs-policy-portal.md

@@ -14,9 +14,9 @@ ms.custom: engagement-fy23
 
 # Deploy and manage NSG flow logs using Azure Policy 
 
-Azure Policy helps to enforce organizational standards and to assess compliance at scale. Common use cases for Azure Policy include implementing governance for resource consistency, regulatory compliance, security, cost, and management. In this article, we will use two built-in policies available for NSG Flow Logs to manage your flow logs setup. The first policy  flags any NSGs without flow logs enabled. The second policy automatically deploys Flow logs for NSGs without Flow logs enabled. 
+Azure Policy helps to enforce organizational standards and to assess compliance at scale. Common use cases for Azure Policy include implementing governance for resource consistency, regulatory compliance, security, cost, and management. In this article, we'll use two built-in policies available for NSG Flow Logs to manage your flow logs setup. The first policy  flags any NSGs without flow logs enabled. The second policy automatically deploys Flow logs for NSGs without Flow logs enabled. 
 
-If you are creating an Azure Policy definition for the first time, you can read through: 
+If you're creating an Azure Policy definition for the first time, you can read through: 
 - [Azure Policy overview](../governance/policy/overview.md) 
 - [Tutorial for creating an Azure Policy assignment](../governance/policy/assign-policy-portal.md#create-a-policy-assignment).
 
@@ -32,11 +32,11 @@ Navigate to the Azure Policy page by searching for Policy in the top search bar
 
 ![Assignments Tab](./media/network-watcher-builtin-policy/2_assignments-tab.png)
 
-3. Click on **Assign Policy** button 
+3. Select **Assign Policy** button 
 
 ![Assign Policy Button](./media/network-watcher-builtin-policy/3_assign-policy-button.png)
 
-4. Click the three dots menu under "Policy Definitions" to see available policies
+4. Select the three dots menu under "Policy Definitions" to see available policies
 
 5. Use the Type filter and choose "Built-in". Then search for "Flow log"
 
@@ -54,7 +54,7 @@ There are separate instructions for each policy below.
 
 ### How the policy works
 
-The policy checks all existing ARM objects of type “Microsoft.Network/networkSecurityGroups”, that is it looks at all NSGs in a given scope, and checks for the existence of linked Flow logs via the Flow Logs property of the NSG. If the property does not exist, the NSG is flagged.
+The policy checks all existing ARM objects of type “Microsoft.Network/networkSecurityGroups”, that is it looks at all NSGs in a given scope, and checks for the existence of linked Flow logs via the Flow Logs property of the NSG. If the property doesn't exist, the NSG is flagged.
 
 If you want to see the full definition of the policy, you can visit the [Definitions tab](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyMenuBlade/Definitions) and search for "Flow logs" to find the policy
 
@@ -66,9 +66,9 @@ If you want to see the full definition of the policy, you can visit the [Definit
 - Policy Definition: Should be chosen as shown in the "Locate the policies" section.
 - AssignmentName: Choose a descriptive name 
 
-2. Click on "Review + Create" to review your assignment
+2. Select "Review + Create" to review your assignment
 
-The policy does not require any parameters. As you are assigning an audit policy, you do not need to fill in the details in the "Remediation" tab.  
+The policy doesn't require any parameters. As you're assigning an audit policy, you don't need to fill in the details in the "Remediation" tab.  
 
 ![Audit Policy Review](./media/network-watcher-builtin-policy/5_1_audit-policy-review.png)
 
@@ -83,7 +83,7 @@ You should see something similar to the following screenshot once your policy ru
 
 ### Policy Structure
 
-The policy checks all existing ARM objects of type “Microsoft.Network/networkSecurityGroups”, that is it looks at all NSGs in a given scope, and checks for the existence of linked Flow logs via the Flow Logs property of the NSG. If the property does not exist, the policy deploys a Flow log. 
+The policy checks all existing ARM objects of type “Microsoft.Network/networkSecurityGroups”, that is it looks at all NSGs in a given scope, and checks for the existence of linked Flow logs via the Flow Logs property of the NSG. If the property doesn't exist, the policy deploys a Flow log. 
 
 If you want to see the full definition of the policy, you can visit the [Definitions tab](https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyMenuBlade/Definitions) and search for "Flow logs" to find the policy. 
 
@@ -100,7 +100,7 @@ If you want to see the full definition of the policy, you can visit the [Definit
 The Network Watcher service is a regional service. These parameters allow the policy action of deploying flow logs to be executed. 
 - NSG Region: Azure regions at which the policy is targeted
 - Storage ID: Full resource ID of the storage account. Note: This storage account should be in the same region as the NSG. 
-- Network Watchers RG: Name of the resource group containing your Network Watcher resource. If you have not renamed it, you can enter `NetworkWatcherRG` which is the default.
+- Network Watchers RG: Name of the resource group containing your Network Watcher resource. If you haven't renamed it, you can enter `NetworkWatcherRG` which is the default.
 - Network Watcher name: Name of the regional network watcher service. Format: NetworkWatcher_RegionName. Example: NetworkWatcher_centralus. See the full list.
 
 ![DINE Policy parameters](./media/network-watcher-builtin-policy/5_2_1_dine-policy-details-alt.png)
@@ -110,11 +110,11 @@ The Network Watcher service is a regional service. These parameters allow the po
 - Check mark on **Create Remediation task** if you want the policy to affect existing resources 
 - **Create a Managed Identity** should be already checked
 - Select the same location as previous for your Managed Identity 
-- You will need Contributor or Owner permission to use this policy. If you have these permissions, you should not see any errors.
+- You'll need Contributor or Owner permission to use this policy. If you have these permissions, you shouldn't see any errors.
 
 ![DINE Policy remediation](./media/network-watcher-builtin-policy/5_2_2_dine-remediation.png) 
 
-4. Click on "Review + Create" to review your assignment
+4. Select "Review + Create" to review your assignment
 You should see something similar to the following screenshot.
 
 ![DINE Policy review](./media/network-watcher-builtin-policy/5_2_3_dine-review.png)