fixing Moran's changes

Author: rayne-wiselman

articles/defender-for-cloud/concept-data-security-posture-prepare.md

@@ -18,7 +18,7 @@ Sensitive data discovery is available in the Defender CSPM and Defender for Stor
 
 - When you enable one of the plans, the sensitive data discovery extension is turned on as part of the plan.
 - If you have existing plans running, the extension is available, but turned off by default.
-- Existing plan status shows as “Partial” rather than “Full” until the feature is turned on manually.
+- Existing plan status shows as “Partial” rather than “Full” if one or more extensions aren't turned on.
 - The feature is turned on at the subscription level.
 
 
@@ -36,7 +36,7 @@ What Azure regions are supported? | You can discover Azure storage accounts in:<
 What AWS regions are supported? | Asia Pacific (Mumbai); Asia Pacific (Singapore); Asia Pacific (Sydney); Asia Pacific (Tokyo); Canada (Central); Europe (Frankfurt); Europe (Ireland); Europe (London); Europe (Paris); South America (São Paulo); US East (Ohio); US East (N. Virginia); US West (N. California): US West (Oregon).<br/><br/> Discovery is done locally in the region.
 Do I need to install an agent? | No, discovery is agentless.
 What's the cost? | The feature is included with the Defender CSPM and Defender for Storage plans, and doesn’t include other costs except for the respective plan costs.
-What permissions do I need to edit data sensitivity settings? | You need one of these permissions: Global Administrator,  Compliance Administrator, Compliance Data Administrator, Security Administrator, Security Operator.
+What permissions do I need to view/edit data sensitivity settings? | You need one of these permissions: Global Administrator,  Compliance Administrator, Compliance Data Administrator, Security Administrator, Security Operator.
 
 
 ## Configuring data sensitivity settings
@@ -57,7 +57,7 @@ Defender for Cloud starts discovering data immediately after enabling a plan, or
 - A new Azure storage account that's added to an already discovered subscription is discovered within 24 hours or less.
 - A new AWS S3 bucket that's added to an already discovered AWS account is discovered within 48 hours or less.
 
-### Discovering AWS storage
+### Discovering AWS S3 buckets
 
 In order to protect AWS resources in Defender for Cloud, you set up an AWS connector, using a CloudFormation template to onboard the AWS account.