How do you use network segmentation to reduce blast radius?

Segmentation limits lateral movement. Techniques: - Separate networks by environment and sensitivity - Restrict east-west traffic - Use private endpoints - Apply least-privilege firewall rules Combine segmentation with strong identity controls and monitoring. Network controls alone are not sufficient without auth and auditing.