add images

Author: JoshAtHC

content/hcp-docs/content/docs/vault-radar/remediate-secrets/copy-secrets.mdx

@@ -15,15 +15,23 @@ Before you begin, you need the following:
 
 - The [HCP Vault Radar agent v0.27.0 or greater is running](/hcp/docs/vault-radar/agent/deploy) and configured
 - A HashiCorp Vault Enterprise or HCP Vault Dedicated cluster [configured for the Vault Radar Agent](/hcp/docs/vault-radar/agent/correlate-vault)
-- A Data Source onboarded using the HCP Vault Radar
-   - Agent configured data sources - no additional steps needed
-   - HCP configured data sources
-      1. Edit the data source configuration in the HCP UI.
-      1. Check the box at the bottom of the data source details that says "Enable secret copying via Vault Radar Agent".
-      1. Provide the URI to an environment variable that contains a credential used to access the data source.
-         - Note: This variable will need to be set on ALL of the agent workers!
-      1. Hit Save, the HCP Vault Radar data source is now configured to copy secrets to Vault.
+- A Data Source onboarded to HCP Vault Radar
 
+## Configure HCP Vault Radar Data Sources
+
+There are some additional steps necessary to enable secret copying for HCP configured data sources.
+1. Edit the data source configuration in the HCP UI.
+![See Remediation Recommendations](/img/docs/vault-radar/remediation/copy-secrets/edit-data-source-details.png)
+
+1. Check the box at the bottom of the data source details that says "Enable secret copying via Vault Radar Agent".
+![See Remediation Recommendations](/img/docs/vault-radar/remediation/copy-secrets/enable-secret-copying-via-vault-radar-agent.png)
+
+1. Provide the URI to an environment variable that contains a credential used to access the data source.
+   - Note: This variable will need to be set on ALL of the agent workers!
+   ![See Remediation Recommendations](/img/docs/vault-radar/remediation/copy-secrets/enter-environment-variable-name.png)
+
+1. Hit Save, the HCP Vault Radar data source is now configured to copy secrets to Vault.
+
 ## Resource Based Access Control (RBAC)
 
 The copy secrets feature does support RBAC. A user can be assigned a **Resource Contributor** role to a specific Resource(s). When visiting the Vault Radar portal the user will only be allowed to copy secrets for the Resource(s) they have access to.