lightbox coding

Author: v-dirichards

articles/external-attack-surface-management/policy-engine.md

@@ -18,7 +18,7 @@ The policy engine enables Defender External Attack Surface Management (Defender
 ## Accessing and understanding policies
 To quickly access policy information, navigate to the dedicated Policies page in your Defender EASM resource. This page can be found under the **Manage** section of the left-hand navigation pane.  
 
-![Screenshot of Policies page with left-hand navigation option highlighted.](media/policies-1.png)
+[![Screenshot of Policies page with left-hand navigation option highlighted.](media/policies-1.png)](media/policies-1.png#lightbox)
 
 This page displays a list of all active policies in your Defender EASM resource. This list view provides immediate access to key information about each policy, including:  
  - **Policy:** the designated name for the policy.
@@ -29,14 +29,14 @@ This page displays a list of all active policies in your Defender EASM resource.
  - **Created on:** the date that the policy was first created.
  - **Affected assets:** a count of all assets that were updated in accordance with the policy. Clicking the numerical count routes you to the inventory list view, filtered to display only the assets that match the underlying quer(ies) that power the policy.
 
-  ![Screenshot of visible metadata in columns on Policies page.](media/policies-2.png)
+  [![Screenshot of visible metadata in columns on Policies page.](media/policies-2.png)](media/policies-2.png#lightbox)
 
 ## Create a policy
 
 1. Navigate to the Policies page by selecting **Policies** from the **Manage** section of the left-hand navigation pane within your Defender EASM resource.
 2. Select **+ Add Policy**. This action opens a right-hand pane to configure the policy.
 
-  ![Screenshot of Policies page with Add Policies button highlighted and policy configuration panel open.](media/policies-3.png)
+   [![Screenshot of Policies page with Add Policies button highlighted and policy configuration panel open.](media/policies-3.png)](media/policies-3.png#lightbox)
 
 3. Complete the listed fields to create your policy. First provide a name and description that explain the business context for the policy. You can't edit the name of the policy once it is created. While all other fields can be adjusted later, you will need to create a new policy if you wish to change the name.
 4. Then select the query that triggers the policy; any assets that match the query parameters are automatically updated with the designated action. For instance, you may want to label all expiring entities (e.g. domains, SSL certificates) with a "needs renewal" label. You can create a saved query that searches for metadata that expires within 30 days or is already expired. You can then designate that the system applies a "needs renewal" label to all applicable assets.  You can either select to power the policy with a previously saved filter, or you can create a new query. All saved queries are visible within the dropdown, or select Create new saved query to configure new filter parameters. If you would like to view the assets that match your query before setting up a policy, it is recommended that you first create a saved query from the Inventory page.