anchor.diff:  
   ## <a id='downloads'></a> Step 1: Download Dependencies
   
  -To download the required dependencies for bosh-bootloader, do the following:
  +To download the required dependencies for bosh-bootloader:
   
   1. Download [Terraform](https://www.terraform.io/downloads.html) v0.9.1 or later. Unzip the file and move it to somewhere in your PATH:
       <pre class="terminal">
  
positive.code:     }
      ```
  
  1. Apply the policy:
      <pre class="terminal">
      $ aws iam put-user-policy --user-name "bbl-user" \
      --policy-name "bbl-policy" \
      --policy-document "$(pbpaste)"
      </pre>
  
  1. Create an access key:
      <pre class="terminal">
      $ aws iam create-access-key --user-name "bbl-user"
      </pre>
  
      This command outputs an `Access Key ID` and a `Secret Access Key`.
      Record these values and store them in a secure place. You use them in the next section.
  
  
  ## <a id="create-infra-bosh"></a> Step 3: Create Infrastructure, Bastion, BOSH Director, and Load Balancers
  
  Run the following command to create the required infrastructure and deploy a BOSH Director:
  
  <pre class="terminal">
  $ bbl plan \
      --name YOUR-ENV-NAME \
      --iaas aws \
      --aws-access-key-id YOUR-ACCESS-KEY-ID \
  
negative.code:     --lb-cert YOUR-CERT.crt \
      --lb-key YOUR-KEY.key \
      --lb-domain YOUR-ENV-NAME.YOUR-SYSTEM-DOMAIN<br/>
  bbl up
  ```
  
  Where:
  
  * `YOUR-ACCESS-KEY-ID` and `YOUR-SECRET-ACCESS-KEY` are the credentials for the `bbl-user` you created in the previous section.
  * `YOUR-AWS-REGION` is your AWS region, such as `us-west-2`.
  
  The `bbl up` command takes five to eight minutes to complete.
  
  After `bbl` deploys the BOSH Director, you must point `YOUR-SYSTEM-DOMAIN` at the BOSH Director's name servers. For example, if you are using AWS Route53 to manage `YOUR-SYSTEM-DOMAIN`:
  
  1. Run:
  
      ```
      --lb-domain YOUR-ENV-NAME.YOUR-SYSTEM-DOMAIN
      ```
  
  1. See the list of name servers for the BOSH Director by running:
  
      ```
      bbl outputs | yq .env_dns_zone_name_servers
      ```
  
  1. Log in to the AWS Route 53 dashboard and go to **Registered Domains**.
  
  