anchor.diff:  Within a deployment that permits SSH access to applications, developers can enable or disable SSH access to individual applications. Space administrators can blanket allow or disallow SSH access to all apps running within a space.
   
   ### <a id="configure-ssh-access-apps"></a>Configuring SSH Access at the Application Level
  -`cf enable-ssh` enables SSH access to all instances of an app:
  +[cf enable-ssh](http://cli.cloudfoundry.org/en-US/cf/enable-ssh.html) enables SSH access to all instances of an app:
   <pre class="terminal">
   $ cf enable-ssh MY-AWESOME-APP
   </pre>
   
  -`cf disable-ssh` disables SSH access to all instances of an app:
  +[cf disable-ssh](http://cli.cloudfoundry.org/en-US/cf/disable-ssh.html) disables SSH access to all instances of an app:
   <pre class="terminal">
   $ cf disable-ssh MY-AWESOME-APP
   </pre>
   
   ### <a id="configure-ssh-access-spaces"></a>Configuring SSH Access at the Space Level
   
  -`cf allow-space-ssh` allows SSH access into all apps in a space:
  +[cf allow-space-ssh](http://cli.cloudfoundry.org/en-US/cf/allow-space-ssh.html) allows SSH access into all apps in a space:
   <pre class="terminal">
   $ cf allow-space-ssh SPACE-NAME
   </pre>
   
  -`cf disallow-space-ssh` disallows SSH access into all apps in a space:
  +[cf disallow-space-ssh](http://cli.cloudfoundry.org/en-US/cf/disallow-space-ssh.html) disallows SSH access into all apps in a space:
   <pre class="terminal">
   $ cf disallow-space-ssh SPACE-NAME
   </pre>
   
   ## <a id="check-ssh-permissions"></a>Checking SSH Permissions
   
  -`cf ssh-enabled` checks whether an app is accessible with SSH:
  +[cf ssh-enabled](http://cli.cloudfoundry.org/en-US/cf/ssh-enabled.html) checks whether an app is accessible with SSH:
   <pre class="terminal">$ cf ssh-enabled MY-AWESOME-APP
   ssh support is disabled for 'MY-AWESOME-APP'
   </pre>
   
  -`cf space-ssh-allowed` checks whether all apps running within a space are accessible with SSH:
  +[cf space-ssh-allowed](http://cli.cloudfoundry.org/en-US/cf/space-ssh-allowed.html) checks whether all apps running within a space are accessible with SSH:
   <pre class="terminal">
   $ cf space-ssh-allowed SPACE-NAME
   ssh support is enabled in space 'SPACE-NAME'
  
positive.code: 
  In addition to `cf ssh`, you can use other SSH clients such as `ssh`, `scp`, or `sftp` to access your application, as long as you have SSH permissions.
  
  To securely connect to an application instance, you log in with a specially-formed username that passes information to the SSH proxy running on the host VM. For the password, you use a one-time SSH authorization code generated by `cf ssh-code`.  Here is the full procedure:
  
  1. Run `cf app MY-AWESOME-APP --guid` and record the GUID of your target app.
  <pre class="terminal">
  
negative.code: </pre>
  
  ### <a id="ssh-common-flags"></a>Common cf SSH Flags
  You can tailor [cf ssh](http://cli.cloudfoundry.org/en-US/cf/ssh.html) commands with the following flags, most of which mimic flags for the Unix/Linux `ssh` command. See `cf ssh --help` for more details.
  
  * The `-i` flag targets a specific instance of an application. To log into the VM container hosting the third instance (index=2) of MY-AWESOME-APP, run:
  <pre class='terminal'>
  