anchor.diff:  
   There is also the question of how far you can or want to go towards automating validation.
   
  -If you are using OpenStack, you can run the validation procedure which appears in
  +If you are using OpenStack, you can run the [validation procedure](../deploying/openstack/validate_openstack.html) which appears in
   the Cloud Foundry documentation but applies to the present context as well.
   
   If you are using AWS or vSphere, you can consider adapting the parts of the OpenStack
  
positive.code: 
  ## <a id="inbound"></a> Restricting Inbound Network Traffic ##
  
  When setting up your IaaS for BOSH, configuring Security Groups is required for AWS or OpenStack.
  Configuring multiple networks is recommended for vSphere.
  You do this to restrict incoming network traffic to the BOSH VM or VMs.
  
  
negative.code: 
  Before you deploy BOSH (including MicroBOSH), make sure that your IaaS is properly set up as described below.
  
  **Note**: Deploying BOSH is supported on the VPC flavor of AWS, but not on the EC2 flavor.
  
  ## <a id="hardware"></a> Choosing Suitable Hardware ##
  
  Choose hardware that adequately supports the _describe characteristics of BOSH_.
  
  ### <a id='aws'></a> AWS ###
  
  