TOC and H2 updates

Author: spelluru

articles/event-hubs/TOC.yml

@@ -190,7 +190,7 @@
       href: event-hubs-service-endpoints.md
     - name: Configure private endpoints (preview)
       href: private-link-service.md
-    - name: Configure customer-managed keys for encrypting data at rest
+    - name: Configure customer-managed keys
       href: configure-customer-managed-key.md
   - name: Troubleshoot
     items:

articles/event-hubs/event-hubs-service-endpoints.md

@@ -68,7 +68,7 @@ This section shows you how to use Azure portal to add a virtual network service
     ![Save network](./media/event-hubs-tutorial-vnet-and-firewalls/save-vnet.png)
 
 
-### Use Resource Manager template
+## Use Resource Manager template
 
 The following Resource Manager template enables adding a virtual network rule to an existing Event Hubs namespace.
 

articles/event-hubs/private-link-service.md

@@ -23,7 +23,7 @@ For more information, see [What is Azure Private Link (Preview)?](../private-lin
 > This feature is currently in **preview**. 
 
 
-## Add a private endpoint connection using Azure portal
+## Add a private endpoint using Azure portal
 
 ### Prerequisites
 
@@ -80,7 +80,7 @@ If you already have an Event Hubs namespace, you can create a private link conne
 
     ![Private endpoint created](./media/private-link-service/private-endpoint-created.png)
 
-## Add a private endpoint connection using Azure PowerShell
+## Add a private endpoint using PowerShell
 The following example shows how to use Azure PowerShell to create a private endpoint connection. It doesn't create a dedicated cluster for you. Follow steps in [this article](event-hubs-dedicated-cluster-create-portal.md) to create a dedicated Event Hubs cluster. 
 
 ```azurepowershell-interactive
@@ -142,7 +142,7 @@ $privateEndpoint = New-AzPrivateEndpoint -ResourceGroupName $rgName  `
 
 ```
 
-## Manage private endpoint connection
+## Manage private endpoints using Azure portal
 
 When you create a private endpoint, the connection must be approved. If the resource for which you're creating a private endpoint is in your directory, you can approve the connection request provided you have sufficient permissions. If you're connecting to an Azure resource in another directory, you must wait for the owner of that resource to approve your connection request.