Cloud Network Security

You'd reach for this when you need to restrict who can hit your deployment, whether that's office IPs or private VPC endpoints. Assumes you've already run cloud-setup to get EC_API_KEY in place, which is smart design since you don't want API keys floating around in chat. The terminology note is helpful: the UI says "network security" but the API still uses "traffic filters" everywhere, so expect that mismatch. Organization owner permissions required for creating or deleting filters, though anyone can list them. Handles the full lifecycle including creation, updates, deletion, and looking up PrivateLink metadata per region.