anchor.diff:  
   You use different commands to apply an ASG to each of the four sets. For more information, see the [Procedures](#procedures) section of this topic.
   
  -<p class="note"><strong>Note</strong>: To apply a staging ASG to apps within a space, you must use the Cloud Controller (CC) API. The cf CLI <code>cf bind-security-group</code> command supports space-scoped running ASGs, but not space-scoped staging ASGs.</p>
  +<p class="note"><strong>Note</strong>: To apply a staging ASG to apps within a space, you must use cf CLI 6.28.0 or later.</p>
   
   ### <a id='creating-groups'></a>The Structure and Attributes of ASGs ##
   
  
positive.code: Based on these disallow/allow (exclude/include) lists that you provide as
  input, the ASG Creator formulates a JSON file of allow rules.
  
  In turn, the JSON file is the input for the `cf bind-security-group ` command
  that creates an ASG.
  
  You can download the latest release of the ASG Creator from the Cloud Foundry incubator repository on Github:  [https://github.com/cloudfoundry-incubator/asg-creator/releases/latest](https://github.com/cloudfoundry-incubator/asg-creator/releases/latest)
  
negative.code: $ cf unbind-running-security-group my-asg
  </pre>
  
  To unbind an ASG from a specific space, run `cf unbind-security-group SECURITY-GROUP ORG SPACE --lifecycle running`. Replace `SECURITY-GROUP` with the name of your security group. Replace `ORG` and `SPACE` with the org and space where you want to unbind the ASG set, and replace `running` with `staging` if you want to unbind from the staging ASG set.
  
  Example:
  <pre class="terminal">
  $ cf unbind-security-group my-asg my-org my-space --lifecycle staging
  </pre>
  
  ### <a id='deleting-groups'></a>Delete ASGs ##
  