I have seen the following patterns implemented: Pattern 1: * DEV VLANs + DEV Subnets * PROD VLANSs + PROD Subnets * Firewalls between DEV and PROD subnet

I have seen the following patterns implemented: Pattern 1: * DEV VLANs + DEV Subnets * PROD VLANSs + PROD Subnets * Firewalls between DEV and PROD subnets at network layer - firewall rules implemented by separate net/sec team Pattern 2: * DEV VLANs + DEV Subnets * PROD VLANSs + PROD Subnets * Firewalls implemented through Security Groups (cloud based platforms) - firewall rules delegated to product teams I would be interested to see what other patterns teams are using and how security and operations protections are achieved.