Adding new content for data encryption

Author: kummanish

articles/mysql/howto-data-encryption-portal.md

@@ -10,9 +10,9 @@ ms.date: 01/10/2020
 
 # Data Encryption for Azure Database for MySQL server using Azure portal
 
-In this article, you will learn how to set up and manage to use the Azure portal to setup Data Encryption for your Azure Database for MySQL.
+In this article, you will learn how to set up and manage to use the Azure portal to set up Data Encryption for your Azure Database for MySQL.
 
-## Prerequisites for Cli
+## Prerequisites for CLI
 
 * You must have an Azure subscription and be an administrator on that subscription.
 * Create an Azure Key Vault and Key to use for customer-managed key.
@@ -39,7 +39,7 @@ In this article, you will learn how to set up and manage to use the Azure portal
 
    ![Access policy overview](media/concepts-data-access-and-security-data-encryption/show-access-policy-overview.png)
 
-2. Select the **Key Permissions** select **Get**, **Wrap**, **Unwrap** and the **Principal** which is the name of the MySQL server. If your server principal can't be found in the list of existing principals, you will need to register it by attempting to setup Data Encryption for the first time which will fail.
+2. Select the **Key Permissions** select **Get**, **Wrap**, **Unwrap** and the **Principal**, which is the name of the MySQL server. If your server principal can't be found in the list of existing principals, you will need to register it by attempting to set up Data Encryption for the first time, which will fail.
 
    ![Access policy overview](media/concepts-data-access-and-security-data-encryption/access-policy-warp-unwrap.png)
 
@@ -59,7 +59,7 @@ In this article, you will learn how to set up and manage to use the Azure portal
 
 4. To ensure all files (including **temp files**) are full encrypted, a server **restart** is **required**.
 
-## Restoring or creating replica of the server which has Data Encryption enabled
+## Restoring or creating replica of the server, which has Data Encryption enabled
 
 Once an Azure Database for MySQL is encrypted with customer's managed key stored in the Key Vault, any newly created copy of the server either though local or geo-restore operation or a replica (local/cross-region) operation. So for an encrypted MySQL server, you can follow the steps below to create an encrypted restored server.
 
@@ -78,7 +78,7 @@ Once an Azure Database for MySQL is encrypted with customer's managed key stored
 3. To fix Inaccessible state, you need to revalidate the key on the restored server. Click on the **Data Encryption** blade and then the **Revalidate key** button.
 
    > [!NOTE]
-   > The first attempt to revalidate will fail since the new server's service principal needs to be given access to the key vault. To generate the service principal click on **Revalidate key** which will give error but generates the service principal. Thereafter, refer to steps [in section 2](https://docs.microsoft.com/azure/mysql/howto-data-encryption-portal#setting-the-right-permissions-for-key-operations) above.
+   > The first attempt to revalidate will fail since the new server's service principal needs to be given access to the key vault. To generate the service principal click on **Revalidate key**, which will give error but generates the service principal. Thereafter, refer to steps [in section 2](https://docs.microsoft.com/azure/mysql/howto-data-encryption-portal#setting-the-right-permissions-for-key-operations) above.
 
    ![revalidate server](media/concepts-data-access-and-security-data-encryption/show-revalidate-data-encryption.png)
 

articles/postgresql/howto-data-encryption-portal.md

@@ -12,7 +12,7 @@ ms.date: 01/10/2020
 
 In this article, you will learn how to set up and manage to use the Azure portal to set up Data Encryption for your Azure Database for PostgreSQL Single server.
 
-## Prerequisites for Cli
+## Prerequisites for CLI
 
 * You must have an Azure subscription and be an administrator on that subscription.
 * Create an Azure Key Vault and Key to use for customer-managed key.
@@ -40,7 +40,7 @@ In this article, you will learn how to set up and manage to use the Azure portal
 
    ![Access policy overview](media/concepts-data-access-and-security-data-encryption/show-access-policy-overview.png)
 
-2. Under the **Key Permissions** select **Get**, **Wrap**, **Unwrap** and the **Principal** which is the name of the PostgreSQL server. If your server principal can't be found in the list of existing principals, you will need to register it by attempting to setup Data Encryption for the first time which will fail.  
+2. Under the **Key Permissions** select **Get**, **Wrap**, **Unwrap** and the **Principal**, which is the name of the PostgreSQL server. If your server principal can't be found in the list of existing principals, you will need to register it by attempting to set up Data Encryption for the first time, which will fail.  
 
    ![Access policy overview](media/concepts-data-access-and-security-data-encryption/access-policy-warp-unwrap.png)
 
@@ -60,7 +60,7 @@ In this article, you will learn how to set up and manage to use the Azure portal
 
 4. To ensure all files (including **temp files**) are full encrypted, a server **restart** is **required**.
 
-## Restoring or creating replica of the server which has data encryption enabled
+## Restoring or creating replica of the server, which has data encryption enabled
 
 Once an Azure Database for PostgreSQL Single server is encrypted with customer's managed key stored in the Key Vault, any newly created copy of the server either though local or geo-restore operation or a replica (local/cross-region) operation. So for an encrypted PostgreSQL server, you can follow the steps below to create an encrypted restored server.
 
@@ -80,7 +80,7 @@ Once an Azure Database for PostgreSQL Single server is encrypted with customer's
 3. To fix Inaccessible state, you need to revalidate the key on the restored server. Click on the **Data Encryption** blade and then the **Revalidate key** button.
 
    > [!NOTE]
-   > The first attempt to revalidate will fail since the new server's service principal needs to be given access to the key vault. To generate the service principal click on **Revalidate key** which will give error but generates the service principal. Thereafter, refer to steps [in section 2](https://docs.microsoft.com/azure/postgresql/howto-data-encryption-portal#setting-the-right-permissions-for-key-operations) above.
+   > The first attempt to revalidate will fail since the new server's service principal needs to be given access to the key vault. To generate the service principal click on **Revalidate key**, which will give error but generates the service principal. Thereafter, refer to steps [in section 2](https://docs.microsoft.com/azure/postgresql/howto-data-encryption-portal#setting-the-right-permissions-for-key-operations) above.
 
    ![revalidate server](media/concepts-data-access-and-security-data-encryption/show-revalidate-data-encryption.png)