Update naas docs to call out expectations on network attachments

We have cases where users will have network
attachments with a list of projects allowed on it.
We are making changes to the service to handle
this better and float the error to the user.

This change calls out what the user sees and
should do in a situation where  flow they have
project allowlists on the network attachment.

Author: puneetsarna

content/nginxaas-google/getting-started/create-deployment/deploy-console.md

@@ -18,12 +18,12 @@ Before you can deploy NGINXaaS, follow the steps in the [Prerequisites]({{< ref
 
 ### Create a network attachment
 
-NGINXaaS requires a [network attachment](https://cloud.google.com/vpc/docs/about-network-attachments) to connect your consumer Virtual Private Cloud (VPC) network and your NGINXaaS deployment's VPC network.
+NGINXaaS requires a [network attachment](https://cloud.google.com/vpc/docs/about-network-attachments) to connect your NGINXaaS deployment to your VPC network.
 
 1. Access the [Google Cloud Console](https://console.cloud.google.com/).
 1. Create a consumer VPC network and subnetwork. See [Google's documentation on creating a VPC and subnet](https://cloud.google.com/vpc/docs/create-modify-vpc-networks#console_1) for a step-by-step guide.
-   - The region you choose in this step must match the region where your NGINXaaS deployment will be created.
-1. Create a network attachment in your new subnet that automatically accepts connections. See [Google's documentation on creating a network attachment](https://cloud.google.com/vpc/docs/create-manage-network-attachments#console_1) for a step-by-step guide.
+   - The region you choose in this step **must match** the region where your NGINXaaS deployment will be created.
+1. Create a network attachment in your new subnet. See [Google's documentation on creating a network attachment](https://cloud.google.com/vpc/docs/create-manage-network-attachments#console_1) for a step-by-step guide.
 1. Make a note of the network attachment ID. You will need it in the next steps to create your NGINXaaS deployment.
 
    {{< call-out "caution" >}}NGINXaaS for Google Cloud currently supports the following regions:
@@ -68,6 +68,8 @@ Next, create a new NGINXaaS deployment using the NGINXaaS Console:
 
 Your new deployment will appear in the list of deployments. The status of the deployment will be "Pending" while the deployment is being created. Once the deployment is complete, the status will change to "Ready".
 
+{{< call-out "important" >}}**If your network attachment has a list of allowed Google project IDs**, you will have to allow the **NGINXaaS deployment project** in the network attachment for the deployment to provision successfully. The NGINXaaS deployment project ID can be found under the `Cloud Info` section for your deployment. Failing to do so will leave the deployment in a `pending` state, with details provided on the necessary actions required to proceed.{{< /call-out >}}
+
 ## Configure your deployment
 
 In the NGINXaaS Console,

content/nginxaas-google/glossary.md

@@ -18,9 +18,9 @@ This document provides definitions for terms and acronyms commonly used in F5 NG
 | GC (Geographical Controller)| Geographical Controller (GC) is a control plane that serves users in a given geographical boundary while taking into account concerns relating to data residency and localization. Example: A US geographical controller serves US customers. We currently have presence in two Geographies: **US** and **EU**. |
 | NGINXaas Account            | Represents a Google Cloud procurement with an active Marketplace NGINXaaS subscription, linked to a billing account. To create an account, see the signup documentation in [prerequisites]({{< ref "/nginxaas-google/getting-started/prerequisites.md" >}}). |
 | NGINXaaS User | NGINXaaS Users are granted access to all resources in the NGINXaaS Account. User authentication is performed securely via Google Cloud, requiring a matching identity. Individuals can be added as users to multiple NGINXaaS Accounts, and can switch between them using the steps documented below. |
-| Network attachment          | A Google Cloud resource that enables a VM instance to connect to a VPC network. [More information](https://cloud.google.com/vpc/docs/about-network-attachments).   |
 | VPC network                 | A Virtual Private Cloud (VPC) network is a virtual version of a physical network, implemented within Google Cloud. It provides networking functionality for your Google Cloud resources. [More information](https://cloud.google.com/vpc/docs/vpc). |
+| Network attachment          | A Google Cloud resource that connects your NGINXaaS deployment to your VPC network. [More information](https://cloud.google.com/vpc/docs/about-network-attachments).   |
 
 
 
-{{</table>}}
+{{</table>}}