secrets docs

Author: rayne-wiselman

articles/defender-for-cloud/remediate-cloud-deployment-secrets.md

@@ -18,11 +18,7 @@ This article helps you to identify and remediate security risks with cloud deplo
 - An Azure account. If you don't already have an Azure account, you can [create your Azure free account today](https://azure.microsoft.com/free/).
 
 - [Defender for Cloud](get-started.md) must be available in your Azure subscription.
-
-- One or either of these Defender for Cloud plans [must be enabled](enable-enhanced-security.md#enable-defender-plans-to-get-the-enhanced-security-features) either or both of the following two plans:
-  - [Defender for Servers Plan 2](plan-defender-for-servers-select-plan.md)
-  - [Defender CSPM](concept-cloud-security-posture-management.md)
-
+ - The [Defender Cloud Security Posture Management (CSPM)](concept-cloud-security-posture-management.md) plan.
 - [Agentless machine scanning](enable-vulnerability-assessment-agentless.md#enabling-agentless-scanning-for-machines) must be enabled. Learn more about [agentless scanning](concept-agentless-data-collection.md#availability).
 
 
@@ -44,7 +40,9 @@ Attack path analysis is a graph-based algorithm that scans your [cloud security
 
 ## Remediate secrets with recommendations
 
-If a secret is found on your resource, that resource triggers an affiliated recommendation that is located under the Remediate vulnerabilities security control on the Recommendations page. Defender for Cloud provides a [number of cloud deployment secrets security recommendations](secrets-scanning-cloud-deployment.md#security-recommendations).
+If a secret is found on your resource, that resource triggers an affiliated recommendation that is located under the **Remediate vulnerabilities** security control on the Defender for Cloud **Recommendations** page.
+
+Defender for Cloud provides a [number of cloud deployment secrets security recommendations](secrets-scanning-cloud-deployment.md#security-recommendations).
 
 
 1. Sign in to the [Azure portal](https://portal.azure.com).
@@ -55,16 +53,10 @@ If a secret is found on your resource, that resource triggers an affiliated reco
 
 1. Select one of the relevant recommendations.
 
-
-
-    :::image type="content" source="media/secret-scanning/recommendation-findings.png" alt-text="Screenshot that shows either of the two results under the Remediate vulnerabilities security control." lightbox="media/secret-scanning/recommendation-findings.png":::
-
 1. Expand **Affected resources** to review the list of all resources that contain secrets.
 
 1. In the Findings section, select a secret to view detailed information about the secret.
 
-    :::image type="content" source="media/secret-scanning/select-findings.png" alt-text="Screenshot that shows the detailed information of a secret after you have selected the secret in the findings section." lightbox="media/secret-scanning/select-findings.png":::
-
 1. Expand **Remediation steps** and follow the listed steps.
 
 1. Expand **Affected resources** to review the resources affected by this secret.

articles/defender-for-cloud/secrets-scanning.md

@@ -21,15 +21,17 @@ Defender for Cloud provides secrets scanning for virtual machines, and for cloud
 
 - **Virtual machines (VMs)**: Agentless secrets scanning on multicloud VMs.
 - **Cloud deployments**: Agentless secrets scanning across multicloud infrastructure-as-code deployment resources.
-- **Azure DevOps**: Scanning to discover exposed secrets in Azure DevOps.
+- **Azure DevOps**: [Scanning to discover exposed secrets in Azure DevOps](defender-for-devops-introduction.md).
+
 
 
 
 ## Deploying secrets scanning
 
 Secrets scanning is provided as a feature in Defender for Cloud plans:
-- VM scanning: Provided with Defender for Cloud Security Posture Management (CSPM) plan, or with Defender for Servers Plan 2.
-- Cloud deployment resource scanning: Provided with Defender CSPM
+- **VM scanning**: Provided with Defender for Cloud Security Posture Management (CSPM) plan, or with Defender for Servers Plan 2.
+- **Cloud deployment resource scanning** Provided with Defender CSPM.
+- **DevOps scanning**: Provided with Defender CSPM.
 
 ## Reviewing secrets findings