Update kubernetes-workload-protections.md

#sign-off following a short offline review with Rayne Wiselman

Author: mayaherskovic

articles/defender-for-cloud/kubernetes-workload-protections.md

@@ -26,9 +26,9 @@ Microsoft Defender for Cloud includes a bundle of recommendations that are avail
 
 ## Enable Kubernetes data plane hardening
 
-When you enable Microsoft Defender for Containers, "Azure Policy for Kubernetes" setting is enabled by default for Azure Kubernetes Service and Azure Arc enabled Kubernetes clusters in the relevant subscription. You can configure your that setting, when you enable Microsoft Defender for Containers or later through the Containers plan settings page or with Azure Policy.
+When you enable Microsoft Defender for Containers, the "Azure Policy for Kubernetes" setting is enabled by default for the Azure Kubernetes Service, and for Azure Arc-enabled Kubernetes clusters in the relevant subscription. If you disable the setting, you can re-enable it later. Either in the Defender for Containers plan settings, or with  Azure Policy.
 
-When you enable this setting, the Azure Policy for Kubernetes pods are installed the cluster, which allocate a small amount of CPU and memory for the pods to use. That allocation may run up to maximum capacity, but does not affect the rest of the CPU and memory on the resource.
+When you enable this setting, the Azure Policy for Kubernetes pods are installed on the cluster. This allocates a small amount of CPU and memory for the pods to use. This allocation might reach maximum capacity, but it doesn't affect the rest of the CPU and memory on the resource.
 
 To enable Azure Kubernetes Service clusters and Azure Arc enabled Kubernetes clusters (Preview):