anchor.diff:  
   ASG Creator is a CLI tool to generate baseline ASGs that allow network access
   for all application containers based on a blacklist of networks and individual
  -IPs. The ASG rules files generated by ASG Creator contain
  -those IP ranges that application containers are allowed access to. 
  +IP addresses. The ASG rules files generated by ASG Creator contain those IP 
  +address ranges that application containers are allowed access to. 
   
   To use ASG Creator to create baseline ASGs, perform the following steps:
   
   1. Download the latest [release](https://github.com/cloudfoundry-incubator/asg-creator/releases/latest) of ASG Creator.
  -1. Create a configuration file called `config.yml` that contains the networks and IPs you want to blacklist. Follow the format of the example below and consult the table for descriptions of the attributes.
  +1. Create a configuration file named `config.yml` that contains the networks and IP addresses you want to blacklist. Follow the format of the example below, and consult the table for descriptions of the attributes.
   
       ```yaml
       excluded_ips:
  
positive.code: 
  ### <a id='public-networks-example'></a>Public Networks ###
  
  Applications often require public network connectivity to retrieve application dependencies or to integrate with services available on public networks. Example application dependencies include public Maven repositories, NPM, RubyGems, Docker registries and others.
  
  <p class='note'><strong>Note</strong>: Exclude IaaS metadata endpoints, such as 169.254.169.254, because the metadata endpoint can expose sensitive environment information to untrusted applications. The <code>public_networks</code> example below accounts for this recommendation.</p>
  
  Example `public_networks` ASG:
  
  
negative.code: 
  ## <a id='deleting-groups'></a>Deleting Application Security Groups ##
  
  <p class='note'><strong>Note</strong>: You can only delete unbound ASGs. To unbind ASGs, see the <a href="#unbinding-groups">Unbinding Application Security Groups</a> section of this topic.</p>
  
  To delete an ASG, run the following command:
  
  