Merge pull request #96422 from memildin/asc-melvyn-daily

Two tiny tweaks

Author: PRMerger8

articles/security-center/azure-container-registry-integration.md

@@ -19,7 +19,7 @@ ms.author: memildin
 
 Azure Container Registry (ACR) is a managed, private Docker registry service that stores and manages your container images for Azure deployments in a central registry. It's based on the open-source Docker Registry 2.0.
 
-For deeper visibility into your registry and images' vulnerabilities, users of Azure Security Center's standard tier can enable the optional Container Registries bundle (for an additional cost). For more information, see [pricing](security-center-pricing.md). With the bundle enabled, Security Center automatically scans images in your ACR service whenever an image is pushed to the registry. When the scan completes (typically after approximately 10 minutes), findings are available in Security Center in recommendations like this:
+For deeper visibility into your registry and images' vulnerabilities, users of Azure Security Center's standard tier can enable the optional Container Registries bundle. For more information, see [pricing](security-center-pricing.md). With the bundle enabled, Security Center automatically scans images in your ACR service whenever an image is pushed to the registry. When the scan completes (typically after approximately 10 minutes), findings are available in Security Center in recommendations like this:
 
 [![Sample Azure Security Center recommendation about vulnerabilities discovered in an Azure Container Registry (ACR) hosted image](media/azure-container-registry-integration/container-security-acr-page.png)](media/azure-container-registry-integration/container-security-acr-page.png#lightbox)
 

articles/security-center/custom-security-policies.md

@@ -19,6 +19,8 @@ To help secure your systems and environment, Azure Security Center generates sec
 
 With this preview feature, you can add your own *custom* initiatives. You'll then receive recommendations if your environment doesn't follow the policies you create.
 
+As discussed [here](https://docs.microsoft.com/azure/governance/policy/concepts/definition-structure#definition-location) in the Azure Policy documentation, when you specify a location for your custom initiative, it must be a management group or a subscription. 
+
 ## To add a custom initiative to your subscription 
 
 1. From Security Center's sidebar, open the **Security policy** page.