Rule of thumb

• When designing your network, make sure that production and Dev/QA are not in the same region; if possible, Dev and Prod should be on different accounts
• There should be no communication between Dev/QA and production servers
• Don't waste IP addresses, for example, many organizations may have 172.18.0.0/16; this may be an issue especially when you want to create a tunnel with different organizations having similar range