Patch 511 (#532)

* Update resources-allowed-locations.md

* updated all images

* Update resources-allowed-locations.md

* Update resources-allowed-locations.md

* Apply suggestions from code review

* Apply suggestions from code review

Co-authored-by: alphadev4 <[email protected]>

en/azure/azurepolicy/resources-allowed-locations.md

@@ -15,17 +15,14 @@
 | **Recommended Action** | Ensure that all services contain policy definitions that defined allowed locations. |
 
 ## Detailed Remediation Steps
-
 1. Log into the Microsoft Azure Management Console.
-2. Select the "Search resources, services, and docs" option at the top and search for Policy. </br> <img src="/resources/azure/azurepolicy/resources-allowed-locations/step2.png"/>
-3. On the "Policy" page, scroll down the left navigation panel and choose "Assignments" under "Authoring."</br> <img src="/resources/azure/azurepolicy/resources-allowed-locations/step3.png"/>
+2. Find the search bar at the top and search for Policy. </br> <img src="/resources/azure/azurepolicy/resources-allowed-locations/step2.png"/>
+3. On the "Policy" page, scroll down the left navigation panel and choose "Assignments" under "Authoring".</br> <img src="/resources/azure/azurepolicy/resources-allowed-locations/step3.png"/>
 4. On the "Policy - Assignments" page, check the "Policies" listed and if there are no "Policies" for "Resources Allowed Locations" then the selected "Assignment" don't have any "Resources Allowed Locations" policy.</br> <img src="/resources/azure/azurepolicy/resources-allowed-locations/step4.png"/>
-5. Repeat steps number 2 - 4 to check different "Policy - Assignments."</br>
-6. Navigate to "Policy", scroll down the left navigation panel and choose "Assignemts" and on the "Policy - Assignments" page click on the "Assign Policy" at the top to assign "Resource Allowed Location" policy.</br> <img src="/resources/azure/azurepolicy/resources-allowed-locations/step6.png"/>
-7. On the "Assign Policy" page, select the "Scope" accordingly and click on the "..." dots icon to select the "Policy definition" under the "Basics" option.</br> <img src="/resources/azure/azurepolicy/resources-allowed-locations/step7.png"/>
-8. On the "Available Definitions" page, click on the "Search" box at the tab and search for "Allowed locations for resource groups" and click on the "Select" button at the bottom.</br> <img src="/resources/azure/azurepolicy/resources-allowed-locations/step8.png"/>
-9. Provide the "Description" accordingly and click on the "Next" button at the bottom.</br> <img src="/resources/azure/azurepolicy/resources-allowed-locations/step9.png"/>
-10. On the "Parameters" tab, select the "Allowed location" from the dropdown menu accordingly and click on the "Next" button.</br> <img src="/resources/azure/azurepolicy/resources-allowed-locations/step10.png"/>
-11. On the "Remediation" page, click on the checkbox next to the "Create a Managed Identity" and select the "Managed Identity Location" accordingly.</br> <img src="/resources/azure/azurepolicy/resources-allowed-locations/step11.png"/>
-12. Click on the "Review + Create" button to create the specific "Resources Allowed Locations" policy.</br> <img src="/resources/azure/azurepolicy/resources-allowed-locations/step12.png"/>
-13. Repeat steps number 6 - 12 to ensure that all services contain policy definitions that defined allowed locations.</br>
+5. If there is no policy for "Resources Allowed Locations" then click on "Assign policy" at the top to create a new policy.</br> <img src="/resources/azure/azurepolicy/resources-allowed-locations/step5.png"/>
+6. On the "Assign Policy" page, under "Basics" tab, select "Scope" accordingly and click on the "..." dots icon next to "Policy definition".</br> <img src="/resources/azure/azurepolicy/resources-allowed-locations/step6.png"/>
+7. On the "Available Definitions" page, click on the "Search" box and search for "Resources Allowed Locations". Click the Policy Definition found and then click "Select" button at the bottom.</br> <img src="/resources/azure/azurepolicy/resources-allowed-locations/step7.png"/>
+8. Once back on the "Assign Policy" page, provide a "Description" and click on the "Next" button at the bottom. Now select "Allowed locations" on "Parameters" tab and click "Next" at the bottom.</br> <img src="/resources/azure/azurepolicy/resources-allowed-locations/step8.png"/>
+9. On the "Remediation" tab, click on the checkbox next to "Create a Managed Identity" and select desired "Managed Identity Location". Click "Review + create" button at the bottom.</br> <img src="/resources/azure/azurepolicy/resources-allowed-locations/step9.png"/>
+10. On the "Review + Create" tab, click "Create" button at the bottom to create the specific "Resources Allowed Locations" policy.</br> <img src="/resources/azure/azurepolicy/resources-allowed-locations/step10.png"/>
+11. Repeat steps number 6 - 10 to enable the built-in "Azure Policy definition: Audit Resources Allowed Locations" for all directories.</br>