diff --git a/kit/azure/billing/documentation.tf b/kit/azure/billing/documentation.tf
index 37254a4d..e1e0200b 100644
--- a/kit/azure/billing/documentation.tf
+++ b/kit/azure/billing/documentation.tf
@@ -1,22 +1,26 @@
 output "documentation_md" {
   value = <<EOF
 
+# Billing
+
 It is recommended to use payment methods such as credit cards and invoices to ensure that you can access your Azure resources at any time.
 The kit provides a first-of-its-kind cost alert for the entire Cloud Foundation.
 
+## Who is informed about costs?
+
 The following people will be notified when the established cost limit is exceeded:
  ${join("\n", formatlist("- %s", var.contact_mails))}
 
+## How I can get access?
+
 The kit creates two Groups as preparation for the Privileged Access Mananganmet.
 
-| group                           | role                      |
----------------------------------------------------------------
+|group|role|
+|-|-|
 | cloudfoundation-billing-admins | Cost Management Contributor, Management Group Reader |
 | cloudfoundation-billing-readers | Cost Management Reader, Management Group Reader |
 
 [Privileged Access Mananganmet](https://cloudfoundation.org/maturity-model/iam/privileged-access-management.html#what-is-privileged-access-management-pam)
 
-TODO: describe the deployed resources and its configuration in a human-friendly way.
-
 EOF
 }
diff --git a/kit/azure/logging/documentation.tf b/kit/azure/logging/documentation.tf
index b61ffb31..799ab51d 100644
--- a/kit/azure/logging/documentation.tf
+++ b/kit/azure/logging/documentation.tf
@@ -1,5 +1,6 @@
 output "documentation_md" {
   value = <<EOF
+
 # Logging
 
 All actions performed on Azure resources in any subscription are logged in a central [log analytics workspace](https://learn.microsoft.com/en-us/azure/azure-monitor/logs/log-analytics-workspace-overview).
@@ -10,10 +11,12 @@ This is enforced via an Azure Policy called `${module.policy_law.policy_assignme
 
 The log analytics workspace collects Activity Logs, which are [platform logs](https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/platform-logs-overview).
 
+## How can I get access?
+
 The kit creates two Groups as preparation for the Privileged Access Mananganmet.
 
-| group                           | role                      |
----------------------------------------------------------------
+|group|role|
+|-|-|
 | cloudfoundation-security-admins | Log Analytics Contributor |
 | cloudfoundation-secuirty-readers | Log Analytics Reader |
 
diff --git a/kit/azure/pam/documentation.tf b/kit/azure/pam/documentation.tf
index 46b77fcd..17d3bcab 100644
--- a/kit/azure/pam/documentation.tf
+++ b/kit/azure/pam/documentation.tf
@@ -5,8 +5,8 @@ output "documentation_md" {
 
 The following groups are used for managing privileged access to the cloud foundation.
 
-| Group                                        | Member                                                                 | Function                                                                 | Object ID |
-|----------------------------------------------|------------------------------------------------------------------------|--------------------------------------------------------------------------|-----------|
+|Group|Member|Function|Object ID|
+|-|-|-|-|
 | `${var.platform_engineer.group.display_name}` | ${join("\n", formatlist("- %s", var.platform_engineer.group.member))} | group is used to grant privileged access to members of the cloud foundation team. | `${var.platform_engineer.group.object_id}` |
 | `${var.security_admin.group.display_name}` | ${join("\n", formatlist("- %s", var.security_admin_members[*].email))}  | Responsible for administrate ensuring compliance and security across cloud resources. | `${var.security_admin.group.object_id}` |
 | `${var.security_auditor.group.display_name}` | ${join("\n", formatlist("- %s", var.security_auditor_members[*].email))}  | Responsible for ensuring compliance and security across cloud resources. | `${var.security_auditor.group.object_id}` |