Updates

Author: madeline-underwood

content/learning-paths/servers-and-cloud-computing/cca-device-attach/1-introduction.md

@@ -6,7 +6,7 @@ weight: 2
 layout: learningpathall
 ---
 
-## What is Arm’s Confidential Computing Architecture (CCA) and Realm Management Extension (RME)?
+## What is Arm’s Confidential Computing Architecture (CCA) and the Realm Management Extension (RME)?
 
 Arm Confidential Computing Architecture (CCA) is a security framework introduced in the Armv9-A architecture. It defines a set of hardware-enforced isolation features that enable the creation of secure execution environments, which are designed to protect sensitive data while it’s being processed. CCA is the foundation of Confidential Computing on Arm platforms, ensuring that even privileged software like operating systems and hypervisors can’t access protected data.
 
@@ -16,7 +16,7 @@ Together, CCA and RME deliver the infrastructure needed to build Confidential Co
 
 ## What is a Realm?
 
-A **Realm** is a protected execution environment enabled by RME.  It operates independently from both the **Normal World** - where operating systems and user applications run - and the **Secure World**, which hosts trusted firmware and trusted execution environments (TEEs). 
+A Realm is a protected execution environment enabled by RME.  It operates independently from both the Normal World where operating systems and user applications run, and the Secure World, which hosts trusted firmware and trusted execution environments (TEEs). 
 
 Realms allow lower-privileged software, such as an application or a virtual machine, to protect its content and execution from attacks by higher-privileged software, such as an OS or a hypervisor. Realms provide an environment for confidential computing, without requiring the Realm owner to trust the software components that manage the resources that the Realm uses.
 

content/learning-paths/servers-and-cloud-computing/cca-device-attach/2-virtio.md

@@ -6,32 +6,33 @@ weight: 3
 layout: learningpathall
 ---
 
+## Overview
+
 This section introduces VirtIO and Bounce Buffers in the context of CCA Realms, and explains how they enable secure data exchange between a Realm and the untrusted external world.
 
 A Realm must eventually use physical devices to interact with the external world. The easiest way to achieve this is by using VirtIO, which provides a fast, high-level emulation layer. This is considered the first level of device attach, where access is mediated by the hypervisor using paravirtualized interfaces.
 
 More advanced device attach features can be enabled by hardware security features like PCIe-TDISP (**T**EE **D**evice **I**nterface **S**ecurity **P**rotocol) and PCIe-IDE (**I**ntegrity
 and **D**ata **E**ncryption), where the host OS assigns a physical device to a Realm. The Realm can then make security measurements on the physical device and include those in its attestation base.
 
-## VirtIO
-
-Learn how VirtIO provides an efficient, paravirtualized I/O interface between Realms and host devices.
-
 ### What is VirtIO?
 
-VirtIO is an abstraction layer for virtual devices in virtualized environments. It provides standardized and efficient interfaces between guest virtual machines (VMs) and host devices, making it easier to develop paravirtualized drivers.
+VirtIO provides an efficient, paravirtualized I/O interface between Realms and host devices. It is an abstraction layer for virtual devices in virtualized environments. It provides standardized and efficient interfaces between guest virtual machines (VMs) and host devices, making it easier to develop paravirtualized drivers.
 
 Paravirtualized means that the guest OS is aware it’s running in a virtualized environment and can use optimized drivers (VirtIO) to communicate with virtual hardware. Emulating physical hardware devices (like NICs or disks) for VMs is slow and inefficient. VirtIO allows VMs to bypass full device emulation and use streamlined drivers.
 
-VirtIO is most commonly used with KVM/QEMU virtualization. Example drivers include:
+VirtIO is most commonly used with KVM/QEMU virtualization. 
+
+Example drivers include:
+
 - `virtio-net`: Paravirtualized networking
 - `virtio-blk`: Block device (disk) access
 - `virtio-fs`: File sharing (host ↔ guest)
 - `virtio-balloon`: Dynamic memory management
 - `virtio-rng`: Random number source
 - `virtio-console`: Simple console interface
 
-### How VirtIO works in VMs
+### How does VirtIO work in VMs?
 
 Here is an overview of how VirtIO works in Virtual Machines:
 

content/learning-paths/servers-and-cloud-computing/cca-device-attach/_index.md

@@ -10,10 +10,10 @@ learning_objectives:
     - Explain what device attach means and how it applies to different types of devices
 
 prerequisites:
-    - An AArch64 or x86_64 computer running Linux or macOS. you can use a cloud instance from one of these [Arm cloud service providers](/learning-paths/servers-and-cloud-computing/csp/).
-    - Completion of [Get Started with CCA Attestation and Veraison](/learning-paths/servers-and-cloud-computing/cca-veraison) Learning Path.
-    - Completion of the [Run an application in a Realm using the Arm Confidential Computing Architecture (CCA)](/learning-paths/servers-and-cloud-computing/cca-container/) Learning Path.                              
-    - Completion of the [Run an end-to-end Attestation Flow](/learning-paths/servers-and-cloud-computing/cca-essentials/) Learning Path.
+    - An AArch64 or x86_64 computer running Linux or macOS. You can also use a cloud instance from one of these [Arm cloud service providers](/learning-paths/servers-and-cloud-computing/csp/).
+    - Completion of [Get Started with CCA Attestation and Veraison](/learning-paths/servers-and-cloud-computing/cca-veraison) Learning Path
+    - Completion of the [Run an application in a Realm using the Arm Confidential Computing Architecture (CCA)](/learning-paths/servers-and-cloud-computing/cca-container/) Learning Path                             
+    - Completion of the [Run an end-to-end Attestation Flow](/learning-paths/servers-and-cloud-computing/cca-essentials/) Learning Path
 
 author: Arnaud de Grandmaison