LIB-SEC-014 — Describe your network segmentation.

Production VPCs are fully isolated from development and corporate networks. Private subnets host data tier; only a small set of bastion hosts reach the private tier and require MFA + just-in-time access grants. Egress is restricted via VPC endpoints and explicit allow-lists.

Category

Security

Status

Approved

Freshness

Aging

Freshness policy

12 months

Last reviewed

Jan 16, 2026

Author

Rachel Murphy

Reuse count

4

Times drafted from

1