acrolinx

Author: madsd

articles/app-service/overview-access-restrictions.md

@@ -18,7 +18,7 @@ When traffic reaches App Service, it first evaluates if the traffic originates f
 
 If you send traffic through the default endpoint (often a public endpoint), the traffic is first evaluated at the app access level. Here you can either enable or disable access. If you enable app access, the traffic is evaluated at the site access level. For any app, you have both the main site and the advanced tools site (also known as scm or kudu site).
 
-You have the option of configuring a set of access restriction rules for each site. Access restriction rules are evaluated in priority order. If some rules have the same priority they are evaluated in the order they are listed when returned from the Azure Resource Manager API and in Azure portal before sorting. You can also specify the behavior if no rules are matched. The following sections go into details.
+You have the option of configuring a set of access restriction rules for each site. Access restriction rules are evaluated in priority order. If some rules have the same priority, they're evaluated in the order they're listed when returned from the Azure Resource Manager API and in Azure portal before sorting. You can also specify the behavior if no rules are matched. The following sections go into details.
 
 :::image type="content" source="media/overview-access-restrictions/access-restriction-diagram.png" alt-text="Diagram of access restrictions high-level flow.":::
 
@@ -71,7 +71,8 @@ For testing or in specific scenarios, you may want to allow traffic from any ser
 
 [Azure service tags](../virtual-network/service-tags-overview.md) are well defined sets of IP addresses for Azure services. Service tags group the IP ranges used in various Azure services and is often also further scoped to specific regions. This type of rule allows you to filter *inbound* traffic from specific Azure services. 
 
-For a full list of tags and more information, visit the service tag link above.
+For a full list of tags and more information, visit the service tag link.
+
 To learn how to enable this feature, see [Configuring access restrictions](./app-service-ip-restrictions.md).
 
 ### Multi-source rules