Exercise 1: Translating an AWS Scenario to Azure and GCP — Possible Solution
====================================================================

Original AWS scenario: "an S3 bucket policy blocking access, and an
EC2 instance in a VPC that can't reach it."

Using this chapter's terminology map:

  AWS concept        | Azure equivalent          | GCP equivalent
  -------------------|----------------------------|--------------------
  S3 (object storage)| Blob Storage               | Cloud Storage
  EC2 (VM)           | Azure Virtual Machines     | Compute Engine
  VPC (virtual net)  | Virtual Network (VNet)     | VPC

AZURE TRANSLATION: "a Blob Storage access policy blocking access, and
an Azure Virtual Machine in a Virtual Network (VNet) that can't reach
it."

GCP TRANSLATION: "a Cloud Storage bucket policy (IAM permissions or a
bucket-level access control) blocking access, and a Compute Engine
instance in a VPC that can't reach it."

WHY THIS WORKS AS AN ANSWER
------------------------------
Each AWS-specific noun in the original scenario is swapped for its
direct row in the chapter's own terminology table, one service at a
time, while the STRUCTURE of the problem (a storage access-policy
issue, plus a compute-to-storage network reachability issue) stays
identical across all three -- exactly demonstrating the chapter's own
point that the underlying concepts transfer directly; only the vendor
naming changes.