Introduction In multi-tenant private clouds, governing communication between distinct Virtual Private Clouds (VPCs) assigned to the same project has historically been a security operations constraint. By default, networks within a project tenancy share a common routing domain via the Distributed Transit Gateway (DTGW). To prevent a development VPC from communicating with a production VPC, administrators…