Merge pull request #248836 from AlizaBernstein/WI-fixes-links-def-for-storage

WI-fixes-links-def-for-storage

Author: PMEds28

articles/defender-for-cloud/advanced-configurations-for-malware-scanning.md

@@ -1,7 +1,7 @@
 ---
 title: Microsoft Defender for Storage - advanced configurations for malware scanning
 description: Learn about the advanced configurations of Microsoft Defender for Storage malware scanning
-ms.date: 08/08/2023
+ms.date: 08/21/2023
 author: dcurwin
 ms.author: dacurwin
 ms.topic: conceptual
@@ -66,7 +66,7 @@ For each storage account enabled with malware scanning, you can configure to sen
 1. To configure the Event Grid custom topic destination, go to the relevant storage account, open the **Microsoft Defender for Cloud** tab, and select the settings to configure.
 
 > [!NOTE]
-> When you set an Event Grid custom topic, you should set **Override Defender for Storage subscription-level settings” to **On** to make sure it overrides the subscription-level settings.
+> When you set an Event Grid custom topic, you should set **Override Defender for Storage subscription-level settings** to **On** to make sure it overrides the subscription-level settings.
 
 :::image type="content" source="media/azure-defender-storage-configure/event-grid-settings.png" alt-text="Screenshot that shows where to enable an Event Grid destination for scan logs." lightbox="media/azure-defender-storage-configure/event-grid-settings.png":::
 

articles/defender-for-cloud/defender-for-storage-introduction.md

@@ -2,7 +2,7 @@
 title: Microsoft Defender for Storage - the benefits and features
 
 description: Learn about the benefits and features of Microsoft Defender for Storage.
-ms.date: 06/15/2023
+ms.date: 08/21/2023
 author: dcurwin
 ms.author: dacurwin
 ms.topic: overview
@@ -28,7 +28,7 @@ Defender for Storage includes:
 
 ## Getting started
 
-With a simple agentless setup at scale, you can [enable Defender for Storage](../storage/common/azure-defender-storage-configure.md) at the subscription or resource levels through the portal or programmatically. When enabled at the subscription level, all existing and newly created storage accounts under that subscription will be automatically protected. You can also exclude specific storage accounts from protected subscriptions.
+With a simple agentless setup at scale, you can [enable Defender for Storage](tutorial-enable-storage-plan.md) at the subscription or resource levels through the portal or programmatically. When enabled at the subscription level, all existing and newly created storage accounts under that subscription will be automatically protected. You can also exclude specific storage accounts from protected subscriptions.
 
 > [!NOTE]
 > If you already have the Defender for Storage (classic) enabled and want to access the new security features and pricing, you'll need to [migrate to the new pricing plan](defender-for-storage-classic-migrate.md).
@@ -124,6 +124,6 @@ In summary, Malware Scanning, which is only available on the new plan for Blob s
 
 In this article, you learned about Microsoft Defender for Storage.
 
-- [Enable Defender for Storage](enable-enhanced-security.md)
+- [Enable Defender for Storage](tutorial-enable-storage-plan.md)
 - Check out [common questions](faq-defender-for-storage.yml) about Defender for Storage.
 

articles/defender-for-cloud/defender-for-storage-malware-scan.md

@@ -1,7 +1,7 @@
 ---
 title: Malware scanning in Microsoft Defender for Storage
 description: Learn about the benefits and features of malware scanning in Microsoft Defender for Storage.
-ms.date: 08/15/2023
+ms.date: 08/21/2023
 author: dcurwin
 ms.author: dacurwin
 ms.topic: how-to
@@ -50,7 +50,7 @@ Some common use-cases and scenarios for malware scanning in Defender for Storage
 
 To enable and configure Malware Scanning, you must have Owner roles (such as Subscription Owner or Storage Account Owner) or specific roles with the necessary data actions. Learn more about the [required permissions](support-matrix-defender-for-storage.md).
 
-You can [enable and configure Malware Scanning at scale](/azure/storage/common/azure-defender-storage-configure?toc=%2Fazure%2Fdefender-for-cloud%2Ftoc.json&tabs=enable-subscription) for your subscriptions while maintaining granular control over configuring the feature for individual storage accounts. There are several ways to enable and configure Malware Scanning: [Azure built-in policy](/azure/storage/common/azure-defender-storage-configure?toc=%2Fazure%2Fdefender-for-cloud%2Ftoc.json&tabs=enable-subscription#enable-and-configure-at-scale-with-an-azure-built-in-policy) (recommended method), programmatically using Infrastructure as Code templates, including [Bicep](/azure/storage/common/azure-defender-storage-configure?toc=%2Fazure%2Fdefender-for-cloud%2Ftoc.json&tabs=enable-subscription#bicep-template) and [ARM template](/azure/storage/common/azure-defender-storage-configure?toc=%2Fazure%2Fdefender-for-cloud%2Ftoc.json&tabs=enable-subscription#arm-template), using the [Azure portal](/azure/storage/common/azure-defender-storage-configure?toc=%2Fazure%2Fdefender-for-cloud%2Ftoc.json&tabs=enable-subscription#azure-portal), or directly with [REST API](/azure/storage/common/azure-defender-storage-configure?toc=%2Fazure%2Fdefender-for-cloud%2Ftoc.json&tabs=enable-subscription#enable-and-configure-with-rest-api).
+You can [enable and configure Malware Scanning at scale](tutorial-enable-storage-plan.md) for your subscriptions while maintaining granular control over configuring the feature for individual storage accounts. There are several ways to enable and configure Malware Scanning: [Azure built-in policy](defender-for-storage-policy-enablement.md) (recommended method), programmatically using Infrastructure as Code templates, including [Bicep](defender-for-storage-infrastructure-as-code-enablement.md?tabs=enable-subscription&branch=pr-en-us-248836#bicep-template) and [ARM template](defender-for-storage-infrastructure-as-code-enablement.md?tabs=enable-subscription#azure-resource-manager-template), using the [Azure portal](defender-for-storage-azure-portal-enablement.md?tabs=enable-subscription), or directly with [REST API](defender-for-storage-rest-api-enablement.md?tabs=enable-subscription).
 
 To enable and configure Malware Scanning, you must have Owner roles (such as Subscription Owner or Storage Account Owner) or specific roles with the necessary data actions. Learn more about the [required permissions](support-matrix-defender-for-storage.md).
 

articles/defender-for-cloud/defender-for-storage-test.md

@@ -9,7 +9,7 @@ ms.topic: how-to
 
 # Testing the Defender for Storage data security features
 
-After you [enable Microsoft Defender for Storage](../storage/common/azure-defender-storage-configure.md), you can test the service and run a proof of concept to familiarize yourself with its features and validate the advanced security capabilities effectively protect your storage accounts by generating real security alerts. This guide will walk you through testing various aspects of the security coverage offered by Defender for Storage.
+After you [enable Microsoft Defender for Storage](tutorial-enable-storage-plan.md), you can test the service and run a proof of concept to familiarize yourself with its features and validate the advanced security capabilities effectively protect your storage accounts by generating real security alerts. This guide will walk you through testing various aspects of the security coverage offered by Defender for Storage.
 
 There are three main components to test:
 

articles/defender-for-cloud/support-matrix-defender-for-storage.md

@@ -4,12 +4,12 @@ description: Learn about the permissions required to enable Defender for Storage
 ms.topic: reference
 author: dcurwin
 ms.author: dacurwin
-ms.date: 08/14/2023
+ms.date: 08/21/2023
 ---
 
 # Required permissions for enabling Defender for Storage and its features
 
-This article lists the permissions required to [enable Defender for Storage](../storage/common/azure-defender-storage-configure.md) and its features.
+This article lists the permissions required to [enable Defender for Storage](tutorial-enable-storage-plan.md) and its features.
 
 Microsoft Defender for Storage is an Azure-native layer of security intelligence that detects potential threats to your storage accounts. It helps prevent the three major impacts on your data and workload: malicious file uploads, sensitive data exfiltration, and data corruption.
 

articles/defender-for-cloud/tutorial-enable-storage-plan.md

@@ -2,7 +2,7 @@
 title: Protect your storage accounts with the Microsoft Defender for Storage plan
 description: Learn how to enable the Defender for Storage on your Azure subscription for Microsoft Defender for Cloud.
 ms.topic: install-set-up-deploy
-ms.date: 08/01/2023
+ms.date: 08/21/2023
 ---
 
 # Deploy Microsoft Defender for Storage
@@ -43,9 +43,9 @@ To enable and configure Microsoft Defender for Storage and ensure maximum protec
 > [!TIP]
 > The Malware Scanning feature has advanced configurations to help security teams support different workflows and requirements.
 
-- [Override subscription-level settings to configure specific storage accounts](/azure/storage/common/azure-defender-storage-configure?toc=%2Fazure%2Fdefender-for-cloud%2Ftoc.json&tabs=enable-subscription#override-defender-for-storage-subscription-level-settings) with custom configurations that differ from the settings configured at the subscription level.
+- [Override subscription-level settings to configure specific storage accounts](advanced-configurations-for-malware-scanning.md#override-defender-for-storage-subscription-level-settings) with custom configurations that differ from the settings configured at the subscription level.
 
-There are several ways to enable and configure Defender for Storage: [Azure built-in policy](/azure/storage/common/azure-defender-storage-configure?toc=%2Fazure%2Fdefender-for-cloud%2Ftoc.json&tabs=enable-subscription#enable-and-configure-at-scale-with-an-azure-built-in-policy) (recommended method), programmatically using Infrastructure as Code templates, including [Bicep](/azure/storage/common/azure-defender-storage-configure?toc=%2Fazure%2Fdefender-for-cloud%2Ftoc.json&tabs=enable-subscription#bicep-template) and [ARM template](/azure/storage/common/azure-defender-storage-configure?toc=%2Fazure%2Fdefender-for-cloud%2Ftoc.json&tabs=enable-subscription#arm-template), using the [Azure portal](/azure/storage/common/azure-defender-storage-configure?toc=%2Fazure%2Fdefender-for-cloud%2Ftoc.json&tabs=enable-subscription#azure-portal), or directly with [REST API](/azure/storage/common/azure-defender-storage-configure?toc=%2Fazure%2Fdefender-for-cloud%2Ftoc.json&tabs=enable-subscription#enable-and-configure-with-rest-api).
+There are several ways to enable and configure Defender for Storage: [Azure built-in policy](defender-for-storage-policy-enablement.md) (recommended method), programmatically using Infrastructure as Code templates, including [Bicep](defender-for-storage-infrastructure-as-code-enablement.md?tabs=enable-subscription#bicep-template) and [ARM template](defender-for-storage-infrastructure-as-code-enablement.md?tabs=enable-subscription#azure-resource-manager-template), using the [Azure portal](defender-for-storage-azure-portal-enablement.md?tabs=enable-subscription), or directly with [REST API](defender-for-storage-rest-api-enablement.md?tabs=enable-subscription).
 
 Enabling Defender for Storage via a policy is recommended because it facilitates enablement at scale and ensures that a consistent security policy is applied across all existing and future storage accounts within the defined scope (such as entire management groups). This keeps the storage accounts protected with Defender for Storage according to the organization's defined configuration.