Microsegmentation

Putting a boundary around each single server or workload, such as letting the shop database accept only the web servers' security group on port 5432.

Where the book teaches it