diff --git a/docs/class4/module1/lab2/lab2.rst b/docs/class4/module1/lab2/lab2.rst
index 5697ec5..dc3c634 100644
--- a/docs/class4/module1/lab2/lab2.rst
+++ b/docs/class4/module1/lab2/lab2.rst
@@ -94,11 +94,11 @@ In this lab, we will create an ``API Protection rule`` to enforce and allow only
 .. note:: As a reminder, the endpoint ``/colors`` is not defined in the OAS file, and the base path is ``/api/``
 
 #. Edit your "sentence-re-lb" application LB
-#. Go to ``API Protection`` - ``API Protection Rules``
+#. Go to ``API Protection`` - ``API Protection Rules`` and click ``configure``
 
-   .. image:: ../pictures/api-protection-rule1.png
+   .. image:: ../pictures/api-protection-rules.png
       :align: center
-      :scale: 70%
+      :scale: 50%
 
 #. Click on ``Configure in Server URLs and API Groups`` and create the following two rules. Don't forget to click on ``Apply``
   
diff --git a/docs/class4/module1/pictures/api-protection-rule1.png b/docs/class4/module1/pictures/api-protection-rule1.png
deleted file mode 100644
index 4bd9006..0000000
Binary files a/docs/class4/module1/pictures/api-protection-rule1.png and /dev/null differ
diff --git a/docs/class4/module1/pictures/api-protection-rules.png b/docs/class4/module1/pictures/api-protection-rules.png
new file mode 100644
index 0000000..585d138
Binary files /dev/null and b/docs/class4/module1/pictures/api-protection-rules.png differ
diff --git a/docs/class4/module1/pictures/deny-unknown.png b/docs/class4/module1/pictures/deny-unknown.png
index 8f6382e..7550fd2 100644
Binary files a/docs/class4/module1/pictures/deny-unknown.png and b/docs/class4/module1/pictures/deny-unknown.png differ
diff --git a/docs/class4/module3/lab1/lab1.rst b/docs/class4/module3/lab1/lab1.rst
index 7f23e3e..7fefbe7 100644
--- a/docs/class4/module3/lab1/lab1.rst
+++ b/docs/class4/module3/lab1/lab1.rst
@@ -135,7 +135,7 @@ Test your configuration with Postman
 
   * It **doesn't** pass because JWT validation is enabled on /locations
 
-* Send the request below (with JWT) to /api/animals.
+* Send the request below (with JWT) to /api/locations.
 
   .. code-block:: bash
 
@@ -143,7 +143,7 @@ Test your configuration with Postman
 
   * It **passes** because JWT is valid (signature is valid)
 
-* Send the same request, but with a wrong JWT signature. As a reminder, the JWT signature is the last section of the JWT. We intentionally remove some characters from the signature section of the JWT.
+* Send the same request, but this time with a wrong JWT signature. As a reminder, the JWT signature is the last section of the JWT. We intentionally remove some characters from the signature section of the JWT.
 
   .. code-block:: bash