incorporating feedback

Author: Blackmist

articles/machine-learning/how-to-secure-workspace-vnet.md

@@ -8,7 +8,7 @@ ms.subservice: enterprise-readiness
 ms.reviewer: larryfr
 ms.author: meerakurup 
 author: meerakurup 
-ms.date: 10/19/2023
+ms.date: 07/08/2024
 ms.topic: how-to
 ms.custom: tracking-python, security, cliv2, sdkv2, engagement-fy23, build-2023
 ---
@@ -256,9 +256,9 @@ Azure Container Registry can be configured to use a private endpoint. Use the fo
 
 1. Configure the ACR for the workspace to [Allow access by trusted services](../container-registry/allow-access-trusted-services.md).
 
-1. Create an Azure Machine Learning compute cluster. This cluster is used to build Docker images when ACR is behind a virtual network. For more information, see [Create a compute cluster](how-to-create-attach-compute-cluster.md).
+1. If you are using [serverless compute](how-to-use-serverless-compute.md) (recommended) with your workspace, Azure Machine Learning will try to use the serverless compute to build the image. To configure the workspace to create the compute in your Azure Virtual Network, follow the guidance in the [Secure training environment](how-to-secure-training-vnet.md) article.
 
-1. Use one of the following methods to configure the workspace to build Docker images using the compute cluster.
+1. If you are __not__ using serverless compute, create an Azure Machine Learning compute cluster. This cluster is used to build Docker images when ACR is behind a virtual network. For more information, see [Create a compute cluster](how-to-create-attach-compute-cluster.md). Use one of the following methods to configure the workspace to build Docker images using the compute cluster.
 
     > [!IMPORTANT]
     > The following limitations apply When using a compute cluster for image builds: