anchor.diff:  networks:
   - name: public
     type: vip
  +  cloud_properties:
  +    resource_group_name: my-resource-group
   ```
   
   ---
  
positive.code: ---
  ## <a id="networks"></a> Networks
  
  Schema for `cloud_properties` section used by dynamic network or manual network subnet:
  
  * **virtual\_network\_name** [String, required]: Name of a virtual network. Example: `boshnet`.
  * **subnet_name** [String, required]: Name of a subnet within virtual network.
  * **security_group** [String, optional]: The [security group](https://azure.microsoft.com/en-us/documentation/articles/virtual-networks-nsg/) to apply to all VMs placed on this network. Default to the security group specified by `default_security_group` in the global CPI settings unless a security group is specified on a resource pool for a VM. The security group can be specified either in a resource pool or on a network.
  
negative.code:   - range: 10.10.0.0/24
      gateway: 10.10.0.1
      cloud_properties:
        resource_group_name: my-resource-group
        virtual_network_name: boshnet
        subnet_name: boshsub
  ```
  
  ### Vip Network
  
  Schema for `cloud_properties` section:
  
  * **resource\_group\_name** [String, optional]: Name of a resource group. If it is set, Azure CPI will search the public IP in this resource group. Otherwise, Azure CPI will search the public IP in `resource_group_name` in the global CPI settings.
  
  See [how to create public IP](azure-resources.html#public-ips) to use with vip networks.
  
  