Merge pull request #222687 from cebundy/wps-howto-monitor-azure-policy

[Web PubSub]: freshness review for Web PubSub how-to monitor Azure Policy

Author: American-Dipper

articles/azure-web-pubsub/howto-monitor-azure-policy.md

@@ -11,23 +11,27 @@ ms.author: jixin
 
 # Audit compliance of Azure Web PubSub Service resources using Azure Policy
 
-[Azure Policy](../governance/policy/overview.md) is a service in Azure that you use to create, assign, and manage policies. These policies enforce different rules and effects over your resources, so those resources stay compliant with your corporate standards and service level agreements.
+[Azure Policy](../governance/policy/overview.md) is a free service in Azure to create, assign, and manage policies that enforce rules and effects to ensure your resources stay compliant with your corporate standards and service level agreements. Use these policies to audit Web PubSub resources for compliance.
 
-This article introduces built-in policies for Azure Web PubSub Service. Use these policies to audit new and existing Web PubSub resources for compliance.
-
-There are no charges for using Azure Policy.
+This article describes the built-in policies for Azure Web PubSub Service. 
 
 ## Built-in policy definitions
 
-The following built-in policy definitions are specific to Azure Web PubSub Service:
+
+The following table contains an index of Azure Policy built-in policy definitions for Azure Web PubSub. For Azure Policy built-ins for other services, see [Azure Policy built-in definitions](../governance/policy/samples/built-in-policies.md).
+
+The name of each built-in policy definition links to the policy definition in the Azure portal. Use the link in the Version column to view the source on the [Azure Policy GitHub repo](https://github.com/Azure/azure-policy).
 
 [!INCLUDE [azure-policy-reference-policies-web-pubsub](../../includes/policy/reference/bycat/policies-web-pubsub.md)]
 
 ## Assign policy definitions
 
-* Assign policy definitions using the [Azure portal](../governance/policy/assign-policy-portal.md), [Azure CLI](../governance/policy/assign-policy-azurecli.md), a [Resource Manager template](../governance/policy/assign-policy-template.md), or the Azure Policy SDKs.
-* Scope a policy assignment to a resource group, a subscription, or an [Azure management group](../governance/management-groups/overview.md). Web PubSub policy assignments apply to existing and new Web PubSub resources within the scope.
-* Enable or disable [policy enforcement](../governance/policy/concepts/assignment-structure.md#enforcement-mode) at any time.
+When assigning a policy definition:
+
+* You can assign policy definitions using the [Azure portal](../governance/policy/assign-policy-portal.md), [Azure CLI](../governance/policy/assign-policy-azurecli.md), a [Resource Manager template](../governance/policy/assign-policy-template.md), or the Azure Policy SDKs.
+* Policy assignments can be scoped to a resource group, a subscription, or an [Azure management group](../governance/management-groups/overview.md). 
+* You can enable or disable [policy enforcement](../governance/policy/concepts/assignment-structure.md#enforcement-mode) at any time.  
+* Web PubSub policy assignments apply to existing and new Web PubSub resources within the scope.
 
 > [!NOTE]
 > After you assign or update a policy, it takes some time for the assignment to be applied to resources in the defined scope. See information about [policy evaluation triggers](../governance/policy/how-to/get-compliance-data.md#evaluation-triggers).
@@ -40,36 +44,38 @@ When a resource is non-compliant, there are many possible reasons. To determine
 
 ### Policy compliance in the portal:
 
-1. Select **All services**, and search for **Policy**.
+1. Open the Azure portal and search for **Policy**.
+1. Select **Policy**.
 1. Select **Compliance**.
-1. Use the filters to limit compliance states or to search for policies
-   
+1. Use the filters to display by **Scope**, **Type** or **Compliance state**.  Use search list by name or 
+ ID.
     [ ![Policy compliance in portal](./media/howto-monitor-azure-policy/azure-policy-compliance.png) ](./media/howto-monitor-azure-policy/azure-policy-compliance.png#lightbox)
-2. Select a policy to review aggregate compliance details and events. If desired, then select a specific Web PubSub for resource compliance.
+1. Select a policy to review aggregate compliance details and events. 
+1. Select a specific Web PubSub for resource compliance.
 
 ### Policy compliance in the Azure CLI
 
-You can also use the Azure CLI to get compliance data. For example, use the [az policy assignment list](/cli/azure/policy/assignment#az-policy-assignment-list) command in the CLI to get the policy IDs of the Azure Web PubSub Service policies that are applied:
+You can use the Azure CLI to get compliance data. Use the [az policy assignment list](/cli/azure/policy/assignment#az-policy-assignment-list) command to get the policy IDs of the Azure Web PubSub Service policies that are applied:
 
 ```azurecli
 az policy assignment list --query "[?contains(displayName,'Web PubSub')].{name:displayName, ID:id}" --output table
 ```
 
-Sample output:
+Example output:
 
 ```
 Name                                                                                   ID
 -------------------------------------------------------------------------------------  --------------------------------------------------------------------------------------------------------------------------------
 [Preview]: Azure Web PubSub Service should use private links  /subscriptions/<subscriptionId>/resourceGroups/<resourceGroup>/providers/Microsoft.Authorization/policyAssignments/<assignmentId>
 ```
 
-Then run [az policy state list](/cli/azure/policy/state#az-policy-state-list) to return the JSON-formatted compliance state for all resources under a specific resource group:
+Run the [az policy state list](/cli/azure/policy/state#az-policy-state-list) command to return the JSON-formatted compliance state for all resources under a specific resource group:
 
 ```azurecli
 az policy state list --g <resourceGroup>
 ```
 
-Or run [az policy state list](/cli/azure/policy/state#az-policy-state-list) to return the JSON-formatted compliance state of a specific Web PubSub resource:
+Run the [az policy state list](/cli/azure/policy/state#az-policy-state-list) command to return the JSON-formatted compliance state of a specific Web PubSub resource:
 
 ```azurecli
 az policy state list \

articles/azure-web-pubsub/policy-definitions.md

@@ -0,0 +1,30 @@
+---
+title: Built-in policy definitions for Azure Web PubSub
+description: Lists Azure Policy built-in policy definitions for Azure Web PubSub. These built-in policy definitions provide common approaches to managing your Azure resources.
+author: cebundy
+ms.author: v-bcatherine
+ms.date: 01/03/2022
+ms.topic: reference
+ms.service: azure-web-pubsub
+ms.custom: subject-policy-reference
+---
+# Azure Policy built-in definitions for Azure Web PubSub
+
+This page is an index of [Azure Policy](../governance/policy/overview.md) built-in policy
+definitions for Azure Web PubSub. For Azure Policy built-ins for other services, see
+[Azure Policy built-in definitions](../governance/policy/samples/built-in-policies.md).
+
+The name of each built-in policy definition links to the policy definition in the Azure portal. Use
+the link in the **Version** column to view the source on the
+[Azure Policy GitHub repo](https://github.com/Azure/azure-policy).
+
+## Policy definitions
+
+
+[!INCLUDE [azure-policy-reference-policies-web-pubsub](../../includes/policy/reference/bycat/policies-web-pubsub.md)]
+
+## Next steps
+
+- See the built-ins on the [Azure Policy GitHub repo](https://github.com/Azure/azure-policy).
+- Review the [Azure Policy definition structure](../governance/policy/concepts/definition-structure.md).
+- Review [Understanding policy effects](../governance/policy/concepts/effects.md).

articles/azure-web-pubsub/toc.yml

@@ -1,6 +1,5 @@
 - name: Azure Web PubSub service documentation
   href: index.yml
-
 - name: Overview
   expanded: true
   items:
@@ -116,7 +115,6 @@
       items:
         - name: Autoscale
           href: howto-scale-autoscale.md
-
 - name: Concepts
   expanded: true
   items:
@@ -138,7 +136,6 @@
       href: concept-azure-ad-authorization.md
     - name: Metrics
       href: concept-metrics.md
-
 - name: Reference
   items:
     - name: WebSocket subprotocols
@@ -158,6 +155,8 @@
       href: reference-cloud-events-amqp.md
     - name: Functions trigger and bindings
       href: reference-functions-bindings.md
+    - name: Azure policy definitions
+      href: policy-definitions.md
     - name: Data plane REST API and SDKs
       items:
         - name: REST API