fixed blocking issues raised

Author: MGoedtel

articles/aks/csi-secrets-store-identity-access.md

@@ -22,7 +22,7 @@ An Azure AD workload identity (preview) is an identity used by an application ru
 
 ### Prerequisites
 
-- You have installed the latest version of the `aks-preview` extension, version 0.5.102 or later. To learn more, see [How to install extensions][how-to-install-extensions].
+- Installed the latest version of the `aks-preview` extension, version 0.5.102 or later. To learn more, see [How to install extensions][how-to-install-extensions].
 
 Azure AD workload identity (preview) is supported on both Windows and Linux clusters.
 
@@ -62,7 +62,7 @@ Azure AD workload identity (preview) is supported on both Windows and Linux clus
     > If the URL is empty, verify you have installed the latest version of the `aks-preview` extension, version 0.5.102 or later. Also verify you've [enabled the
     > OIDC issuer][enable-oidc-issuer] (preview).
 
-5. Establish a federated identity credential between the Azure AD application and the service account issuer and subject subject. Get the object ID of the Azure AD application. Update the values for `serviceAccountName` and `serviceAccountNamespace` with the Kubernetes service account name and its namespace.
+5. Establish a federated identity credential between the Azure AD application and the service account issuer and subject. Get the object ID of the Azure AD application. Update the values for `serviceAccountName` and `serviceAccountNamespace` with the Kubernetes service account name and its namespace.
 
     ```bash
     export APPLICATION_OBJECT_ID="$(az ad app show --id ${APPLICATION_CLIENT_ID} --query id -otsv)"

articles/aks/operator-best-practices-identity.md

@@ -171,7 +171,7 @@ When pods request a security token from Azure Active Directory to access to an A
 
 In the following example, a developer creates a pod that uses a managed identity to request access to Azure SQL Database:
 
-![Pod identities allow a pod to automatically request access to other resources](media/operator-best-practices-identity/pod-identities.png)
+![Pod identities allow a pod to automatically request access to other resources.](media/operator-best-practices-identity/pod-identities.png)
 
 1. Cluster operator creates a service account to map identities when pods request access to resources.
 1. The NMI server is deployed to relay any pod requests, along with the Azure Resource Provider, for access tokens to Azure AD.

articles/aks/workload-identity-deploy-cluster.md

@@ -116,7 +116,7 @@ metadata:
 EOF
 ```
 
-The following output resemble successful creation of the identity:
+The following output resembles successful creation of the identity:
 
 ```output
 Serviceaccount/workload-identity-sa created

articles/aks/workload-identity-overview.md

@@ -111,7 +111,7 @@ The following table summarizes our migration or deployment recommendations for w
 
 |Scenario |Description |
 |---------|------------|
-| New or existing cluster deployment [runs a supported version](#dependencies) of Azure Identity client library | No migration steps are required.<br> Sample deployment resources:<ul><li> [Deploy and configure workload identity on a new cluster][deploy-configure-workload-identity-new-cluster]</ul></li> <ul><li>[Tutorial: Use a workload identity with an application on AKS][tutorial-use-workload-identity] |
+| New or existing cluster deployment [runs a supported version](#dependencies) of Azure Identity client library | No migration steps are required.<br> Sample deployment resources:<br> - [Deploy and configure workload identity on a new cluster][deploy-configure-workload-identity-new-cluster]<br> - [Tutorial: Use a workload identity with an application on AKS][tutorial-use-workload-identity] |
 | New or existing cluster deployment [runs an unsupported version](#dependencies) of Azure Identity client library| Update container image to use a supported version of the Azure Identity SDK, or use the [migration sidecar][workload-identity-migration-sidecar]. |
 
 ## Next steps