anchor.diff:  
   Before you deploy BOSH (including MicroBOSH), make sure that your IaaS is properly set up as described below.
   
  +**Note**: Deploying BOSH is supported on the VPC flavor of AWS, but not on the EC2 flavor.
  +
   ## <a id="hardware"></a> Choosing Suitable Hardware ##
   
  -Whichever IaaS you use, your need to choose hardware that adequately supports the _describe characteristics of BOSH_.
  +Choose hardware that adequately supports the _describe characteristics of BOSH_.
   
   ### <a id='aws'></a> AWS ###
   
  
positive.code: 
  ## <a id="inbound"></a> Restricting Inbound Network Traffic ##
  
  When setting up your IaaS for BOSH, configuring Security Groups is required for AWS or OpenStack.
  Configuring multiple networks is recommended for vSphere.
  You do this to restrict incoming network traffic to the BOSH VM or VMs.
  
  
negative.code: 
  ## <a id="network"></a> Further Setup for AWS and vSphere ##
  
  A few IaaS-specific setup requirements remain for AWS and vSphere (but none for OpenStack).
  
  ### <a id='aws'></a> AWS ###
  
  #### <a id='domain-prep'></a> Prepare a Domain ####
  
  