Microsegmentation

Microsegmentation applies policy between individual workloads rather than between broad zones.

This service may talk to that database and nothing else. It is a considerably stronger constraint than zone-based segmentation, and it requires an accurate map of what actually communicates, which is the part organisations do not have. The discovery is the project; the enforcement is comparatively straightforward.