Challenge: three-tier micro-segmentation with ASGs

تحدي: Micro-segmentation لتلات طبقات بالـ ASGs

All four VMs of the Tailwind app share one flat subnet apps ( 10.70.1.0/24 ) protected by nsg-apps . IP addresses change often, so the rules must be written with application security groups , not IPs.

The 3 tasks you will do

• Requirement 1 — Group the VMs by roleالمتطلب 1 — قسّم الـ VMs حسب الدور
• Requirement 2 — Tier-to-tier rules onlyالمتطلب 2 — قواعد بين الطبقات بس
• Requirement 3 — Show the evidenceالمتطلب 3 — هات الدليل

The lesson it belongs to

• Application security groups and effective security rules