Image Updates

Author: Orin-Thomas

learn-pr/advocates/prevent-azure-machine-learning-data-exfiltration/includes/1-prevent-data-exfiltration-azure-ai-workloads.md

@@ -4,4 +4,4 @@ Exfiltration poses significant risks to organizations, including potential breac
 
 A strategy to prevent data exfiltration involves applying security controls to all resources in an AI workload. In this module we focus specifically on the security controls and configuration you can apply to Azure AI services and Azure Machine Learning to address attempts at exfiltration.
 
-[![Diagram of a high security tenant transferring data to a low security tenant that then has access to output data to untrusted data sources.](../media/exfiltration-inbound-outbound.svg)](../media/exfiltration-inbound-outbound.svg#lightbox)
+[![Diagram of a high security tenant transferring data to a low security tenant that then has access to output data to untrusted data sources.](../media/exfiltration-inbound-outbound.svg)](../media/exfiltration-inbound-outbound.png#lightbox)

learn-pr/advocates/prevent-azure-machine-learning-data-exfiltration/includes/2-exfiltration-prevention-azure-ai-services.md

@@ -29,7 +29,7 @@ You can use Cloud Shell to configure exfiltration protection for Azure AI servic
        az cognitiveservices account show -g "myResourceGroup" -n "Account Name" | grep Network Access
     ```
 
-   [![Screenshot that displays output of command checking status of cognitive services.](../media/show-exfiltration-configuration.svg)](../media/show-exfiltration-configuration-big.svg#lightbox)
+   [![Screenshot that displays output of command checking status of cognitive services.](../media/show-exfiltration-configuration.svg)](../media/show-exfiltration-configuration-big.png#lightbox)
 
 1. The result of this command informs you if public network access is enabled for the service and if any outbound restrictions are set.
 1. Check to see if there's a Fully Qualified Domain Name list of allowed addresses.
@@ -61,4 +61,4 @@ You can use Cloud Shell to configure exfiltration protection for Azure AI servic
 
 1. The output shows Microsoft.com in the allowed FQDN list.
 
-   [![Screenshot showing the contents of the output text file in the editor.](../media/editor-list.svg)](../media/editor-list-big.svg#lightbox)
+   [![Screenshot showing the contents of the output text file in the editor.](../media/editor-list.svg)](../media/editor-list-big.png#lightbox)

learn-pr/advocates/prevent-azure-machine-learning-data-exfiltration/includes/3-azure-machine-learning-data-exfiltration-prevention.md

@@ -27,7 +27,7 @@ Service endpoint policies let you filter virtual network traffic to specific Azu
 1. Select **Add** to add the resource information.
 1. Select **+Add an alias** and then select _/services/Azure/MachineLearning_ as the Server Alias value.  Select **Add** to add the alias.
 
-    [![A screenshot showing the configuration of a service endpoint policy in the Azure portal.](../media/service-endpoint-policy.svg)](../media/service-endpoint-policy-big.svg#lightbox)
+    [![A screenshot showing the configuration of a service endpoint policy in the Azure portal.](../media/service-endpoint-policy.svg)](../media/service-endpoint-policy-big.png#lightbox)
 
 1. Select **Review + Create, then Create**
 
@@ -66,4 +66,4 @@ Use the following steps to enable a storage endpoint for the subnet that contain
 1. In the form that appears, expand the **Services** dropdown and then enable **Microsoft.Storage**. Select **Save** to save these changes.
 1. Apply the service endpoint policy to your workspace subnet.
 
-[![A screenshot showing the edit subnet option in the Azure Portal.](../media/edit-subnet.svg)](../media/edit-subnet-big.svg#lightbox)
+[![A screenshot showing the edit subnet option in the Azure Portal.](../media/edit-subnet.svg)](../media/edit-subnet-big.png#lightbox)