anchor.diff:  
   <strong><%= modified_date %></strong>
   
  -This topic describes how CF operators can isolate deployment workloads to dedicated resource pools called _isolation segments_.
  -
  -The Cloud Controller database (CCDB) represents isolation segments with a name and a GUID. When an admin creates a new isolation segment (IS), the CCDB outputs a GUID for the new IS object.
  -
  -To manage the IS, a user can send `curl` requests to the Cloud Controller API (CAPI) endpoint with the GUID of the isolation segment and an authorization token. <%= vars.api_endpoint_book %>
  +This topic describes how Cloud Foundry (CF) operators can isolate deployment workloads to dedicated resource pools called _isolation segments_.
  +
  +The Cloud Controller database (CCDB) represents isolation segments with a name and a GUID. When an admin creates a new isolation segment, the CCDB outputs a GUID for the new isolation segment object.
  +
  +To manage the isolation segment, a user can send `curl` requests to the Cloud Controller API (CAPI) endpoint with the GUID of the isolation segment and an authorization token. <%= vars.api_endpoint_book %>
   
   Basic operations on isolation segments include:
   
  
positive.code: 
  ### <a id="list_spaces"></a> List Spaces for an Isolation Segment
  
  The following example request returns a list of spaces in the IS with the given GUID. The request only returns spaces that you can access::
  <pre class="terminal">
  curl "https\://api.example.org/v3/isolation\_segments/323f211e-fea3-4161-9bd1-615392327913/relationships/spaces" \
    -X GET \
  
negative.code: * Timestamps for the object's creation and most recent update
  * Links to API endpoints for isolation segment requests
  
  In the CCDB, an isolation segment object does not identify the orgs and spaces that it includes. The org and space objects define this relationship, by including the GUIDs of the isolation segments that they belong to.
  
  
  ## <a id="create_is"></a> Create an Isolation Segment
  
  An admin creates an isolation segment by sending a `curl` command to the CAPI with a name to identify it. Isolation segment names must be unique across the entire system and not case-sensitive. Only admins can create isolation segments.
  
  The following example uses a CAPI endpoint and authorization token to create an isolation segment named `my_segment`:
  <pre class="terminal">
  