anchor.diff:  
   To resolve hostnames to IP addresses, apps require DNS server connectivity,
   which typically use port 53.
  -Administrators should create or update a `dns` ASG with appropriate rules. Administrators may further restrict the DNS servers to specific IP addresses or
  +Admins should create or update a `dns` ASG with appropriate rules. Admins can further restrict the DNS servers to specific IP addresses or
   ranges of IP addresses.
   
   Example `dns` ASG:
  
positive.code: To create an ASG, perform the following steps:
  
  1. Create a rules file: a JSON-formatted single array containing objects that describe the rules.
     See the following example, which allows ICMP traffic of code `1` and type `0` to all destinations,  and TCP traffic to `10.0.11.0/24` on ports `80` and `443`. Also see [The Structure and Attributes of ASGs](#creating-groups).
  
      <pre>
      [
  
negative.code: This is because staging often requires access to different resources, such as
  dependencies.
  
  You use different commands to apply an ASG to each of the four sets. For more information, see the [Procedures](#procedures) section below.
  
  <p class="note"><strong>Note</strong>: To apply a staging ASG to apps within a space, you must use cf CLI v6.28.0 or later.
  </p>
  