DOCSP-46046 network security first round edits (#73)

* network security first round edits

Author: kyuan-mongodb

source/automation.txt

@@ -37,11 +37,12 @@ Features
 
 You can automate the management, provisioning, and configuration of
 |service| building blocks like database users and roles, |service|
-{+clusters+}, projects and organizations. Additionally, you can automate 
+{+clusters+}, projects and organizations. Additionally, you can automate
+temporary access list entries that expire after a user-defined period, and
 setting up and managing of additional {+clusters+} resources, including
 enabling auto-scaling compute and storage, creating and updating
 multi-cloud {+clusters+}, monitoring {+cluster+} performance and health,
-automating backups and restores, defining backup policies, and many more.   
+automating backups and restores, defining backup policies, and many more.
 
 You can align your choice of tools with your preferred workflow to
 ensure seamless integration of |service-fullname| into your existing

source/includes/images/private-link.png

@@ -457,6 +457,9 @@ The following examples demonstrate how to enable monitoring using |service|
                  export MONGODB_ATLAS_PRIVATE_KEY="<insert your private key here>"
 
             - `Install Terraform <https://developer.hashicorp.com/terraform/tutorials/aws-get-started/install-cli>`__ 
+            
+            We also suggest `creating a workspace for your enviornment
+            <https://developer.hashicorp.com/terraform/cloud-docs/recommended-practices/part1#one-workspace-per-environment-per-terraform-configuration>`__.  
 
             Configure Alerts 
             ~~~~~~~~~~~~~~~~

source/includes/images/vpc-vnet-peering.png

@@ -126,6 +126,11 @@ peer to. {+service+} limits the number of MongoDB instances per |vpc|
 based on the |cidr| block. For example, a project with a |cidr| block of
 ``/24`` is limited to the equivalent of 273-node replica sets.
 
+.. image:: /includes/images/vpc-vnet-peering.png
+   :alt: "An image representing how MongoDB Atlas VPC/VNet peering works."
+   :width: 750px
+   :align: center
+
 Private Endpoints
 `````````````````
 
@@ -142,6 +147,11 @@ private endpoints are available:
 - :gcp:`Private Service Connect </vpc/docs/private-service-connect>`, for
   connections from {+gcp+}
 
+.. image:: /includes/images/private-link.png
+   :alt: "An image representing how MongoDB Atlas private endpoints work."
+   :width: 750px
+   :align: center
+
 Recommendations for Private Endpoints
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
@@ -224,15 +234,17 @@ These examples also apply other recommended configurations, including:
 
       .. note::
 
-	 Before you can configure connections with the {+atlas-cli+},
-	 you must:
+         Before you can configure connections with the {+atlas-cli+},
+         you must:
 
-	 - :atlas:`Create your paying organization 
-	   </billing/#configure-a-paying-organization>` and :atlas:`create an API key </configure-api-access/>` for the
-	   paying organization.
-	 - :atlascli:`Install the {+atlas-cli+} </install-atlas-cli/>` 
-	 - :atlascli:`Connect from the {+atlas-cli+} 
-	   </connect-atlas-cli/>` using the steps for :guilabel:`Programmatic Use`.
+         - :atlas:`Create your paying organization 
+           </billing/#configure-a-paying-organization>` and
+           :atlas:`create an API key </configure-api-access/>` for the
+           paying organization.
+         - :atlascli:`Install the {+atlas-cli+} </install-atlas-cli/>` 
+         - :atlascli:`Connect from the {+atlas-cli+}
+           </connect-atlas-cli/>` using the steps for
+           :guilabel:`Programmatic Use`.
 
       Create an {+ip-access-list+} Entry
       ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
@@ -249,6 +261,11 @@ These examples also apply other recommended configurations, including:
       For more configuration options and information about this
       example, see :ref:`atlas-accessLists-create`.
 
+      For information on how to create an {+ip-access-list+} entry
+      with |aws|, |gcp| and |azure|, see
+      :atlas:`Set Up a Private Endpoint for a Dedicated Cluster
+      </security-cluster-private-endpoint/#follow-these-steps>`
+
       Create a VPC Peering Connection
       ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
@@ -307,6 +324,9 @@ These examples also apply other recommended configurations, including:
 
          - `Install Terraform 
            <https://developer.hashicorp.com/terraform/tutorials/aws-get-started/install-cli>`__
+         
+         We also suggest `creating a workspace for your enviornment
+         <https://developer.hashicorp.com/terraform/cloud-docs/recommended-practices/part1#one-workspace-per-environment-per-terraform-configuration>`__.  
 
       Create an {+ip-access-list+} Entry
       ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~