Comment by jbpadgett

I have seen the following patterns implemented:

Pattern 1: * DEV VLANs + DEV Subnets * PROD VLANSs + PROD Subnets * Firewalls between DEV and PROD subnets at network layer - firewall rules implemented by separate net/sec team

Pattern 2: * DEV VLANs + DEV Subnets * PROD VLANSs + PROD Subnets * Firewalls implemented through Security Groups (cloud based platforms) - firewall rules delegated to product teams

I would be interested to see what other patterns teams are using and how security and operations protections are achieved.