.

eslzArm/eslz-portal.json

@@ -276,7 +276,7 @@
                             "label": "<b>*New*</b> Enforce subnets should be private",
                             "defaultValue": "Audit only (recommended)",
                             "visible": true,
-                            "toolTip": "If 'Audit' is selected then Azure Policy will audit whether virtual network subnets are private in the Platform and Landing Zones management groups. We are only enabling AUDIT at this time, as ALZ will not deploy if DENY is selected currently.<br>Ensure your subnets are secure by default by preventing default outbound access. For more information go to <a href=\"https://aka.ms/defaultoutboundaccessretirement\">https://aka.ms/defaultoutboundaccessretirement</a>.<br>Uses the policy <a href=\"https://www.azadvertizer.net/azpolicyadvertizer/7bca8353-aa3b-429b-904a-9229c4385837.html\">Subnets should be private</a>.",
+                            "toolTip": "Ensure your subnets are secure by default by preventing default outbound access. For more information go to <a href=\"https://aka.ms/defaultoutboundaccessretirement\">https://aka.ms/defaultoutboundaccessretirement</a>.<br>Uses the policy <a href=\"https://www.azadvertizer.net/azpolicyadvertizer/7bca8353-aa3b-429b-904a-9229c4385837.html\">Subnets should be private</a>.",
                             "constraints": {
                                 "allowedValues": [
                                     {