anchor.diff:  
   ## <a id="network"></a> Further Setup for AWS and vSphere ##
   
  -There are a few IaaS-specific setup requirements remaining for AWS and vSphere, but none for OpenStack.
  +A few IaaS-specific setup requirements remain for AWS and vSphere (but none for OpenStack).
   
   ### <a id='aws'></a> AWS ###
  -
  -Deploying BOSH is supported on the VPC flavor of AWS, but not on the EC2 flavor.
   
   #### <a id='domain-prep'></a> Prepare a Domain ####
   
  
positive.code: 
  There is also the question of how far you can or want to go towards automating validation.
  
  If you are using OpenStack, you can run the validation procedure which appears in
  the Cloud Foundry documentation but applies to the present context as well.
  
  If you are using AWS or vSphere, you can consider adapting the parts of the OpenStack
  
negative.code: 
  ## <a id="inbound"></a> Restricting Inbound Network Traffic ##
  
  Configuring Security Groups is required to deploy BOSH on AWS and OpenStack.
  Configuring multiple networks is recommended for vSphere.
  You do this to restrict incoming network traffic to the BOSH VM or VMs.
  
  