improve docs

docs/documentation/platform/pam/getting-started/accounts.mdx

@@ -4,31 +4,46 @@ sidebarTitle: "Accounts"
 description: "Learn how to create and manage accounts in PAM to control access to resources like databases and servers."
 ---
 
-An account represents a specific set of credentials (e.g., a username and password) used to access a [resource](/documentation/platform/pam/getting-started/resources).
+An **Account** represents a specific identity or set of credentials (username/password) used to authenticate against a [Resource](/documentation/platform/pam/getting-started/resources).
+
+## Relationship to Resources
+
+Accounts are children of Resources. A single Resource can have multiple Accounts associated with it, each with different permission levels.
+
+For example:
+- **Resource**: `Production Database` (PostgreSQL)
+    - **Account 1**: `postgres` (Superuser)
+    - **Account 2**: `app_user` (Read/Write)
+    - **Account 3**: `analytics` (Read-only)
+
+When a user requests access in PAM, they request access to a specific **Account** on a **Resource**.
 
 ## Creating an Account
 
 <Info>
-    Before you can create an account, you must first [Create a Resource](/documentation/platform/pam/getting-started/resources#creating-a-resource).
+    **Prerequisite**: You must have at least one [Resource](/documentation/platform/pam/getting-started/resources) created before adding accounts.
 </Info>
 
 To add an account, navigate to the **Accounts** tab in your PAM project and click **Add Account**.
 
 ![Add Account Button](/images/pam/getting-started/accounts/add-account-button.png)
 
-Next, select the resource where you want to add the account.
+Next, select the **Resource** that this account belongs to.
 
 ![Select Resource](/images/pam/getting-started/accounts/select-resource.png)
 
-After selecting a resource, provide the necessary credentials. The required fields vary depending on the resource type. For example, an SSH resource needs the username and password for a Unix user.
+After selecting a resource, provide the credentials (username, password, etc.) for this account. The required fields vary depending on the resource type. For example, for a Linux server, you would enter the username and the corresponding password or SSH key.
 
 ![Create Account](/images/pam/getting-started/accounts/create-account.png)
 
-Clicking **Create Account** triggers a validation check to verify the credentials. If the validation fails, an error message is displayed to help you troubleshoot.
+Clicking **Create Account** will trigger a validation check. Infisical will attempt to connect to the resource using the provided credentials to verify they are valid.
 
 ## Automated Credential Rotation
 
-Accounts for certain resources, such as PostgreSQL, support automated credential rotation.
+Accounts for certain resources, such as PostgreSQL, support automated credential rotation. This feature automatically changes the password for the account at a set interval.
+
+**Requirements:**
+1. The parent Resource must have a [Rotation Account](/documentation/platform/pam/getting-started/resources#automated-credential-rotation) configured (a master account with permission to change other users' passwords).
+2. You must enable rotation in the Account settings.
 
-You can enable rotation when creating or editing an account and set a desired interval (e.g., every 30 days). This option is only available if a [rotation account is configured](/documentation/platform/pam/getting-started/resources#automated-credential-rotation) on the resource.
 ![Rotate Credentials Account](/images/pam/getting-started/resources/rotate-credentials-account.png)

docs/documentation/platform/pam/getting-started/resources.mdx

@@ -10,11 +10,15 @@ A resource represents a target system, such as a database, server, or applicatio
 - Linux Server
 - Web Application
 
-## Creating a Resource
+## Prerequisites
 
-<Warning>
-    Certain resources require you to have a Gateway deployed on the same network as your target resource. [Gateway Deployment Guide](/documentation/platform/gateways/gateway-deployment)
-</Warning>
+Before you can create a resource, you must have an **Infisical Gateway** deployed and running on the same network as the target resource.
+
+The Gateway acts as a secure bridge, allowing Infisical to reach your private infrastructure without exposing it to the public internet. When creating a resource, you will be asked to specify which Gateway should be used to connect to it.
+
+[Read the Gateway Deployment Guide](/documentation/platform/gateways/gateway-deployment)
+
+## Creating a Resource
 
 To add a resource, navigate to the **Resources** tab in your PAM project and click **Add Resource**.
 
@@ -24,11 +28,15 @@ Next, select the type of resource you want to add.
 
 ![Select Resource Type](/images/pam/getting-started/resources/select-resource-type.png)
 
-After selecting a resource type, provide the necessary connection details. The required fields vary depending on the resource type. In this PostgreSQL example, you need to provide details such as host, port, gateway, and database name.
+After selecting a resource type, provide the necessary connection details. The required fields vary depending on the resource type.
+
+**Important**: You must select the **Gateway** that has network access to this resource.
+
+In this PostgreSQL example, you provide details such as host, port, gateway, and database name.
 
 ![Create Resource](/images/pam/getting-started/resources/create-resource.png)
 
-Clicking **Create Resource** will run a validation to check if your resource is reachable by the platform or Gateway. If the connection fails, an error message will be displayed to help you troubleshoot.
+Clicking **Create Resource** will trigger a connection test from the selected Gateway to your target resource. If the connection fails, an error message will be displayed to help you troubleshoot (usually indicating a network firewall issue between the Gateway and the Resource).
 
 ## Automated Credential Rotation