What it means
Virtual networks are programmable and closely tied to identity and APIs. Security depends on routing, segmentation, service endpoints, exposure, egress, inspection, logging, and administrative control.
Why it matters
A diagram can become outdated quickly, so intended paths must be compared with actual configuration and observed traffic.
Practical focus
- Document trust zones and required communication
- Use private service paths where appropriate
- Control both ingress and egress
- Monitor flow, route, firewall, and gateway changes
Common mistakes
- Recreating a flat on-premises network in the cloud
- Assuming a resource is private because it lacks a public address
- Ignoring provider service and control-plane paths
Certification relevance
This subject appears in or supports the following certification bodies of knowledge: