When creating a resource, the locationType parameter enforces the restriction.
Often includes dedicated hardware (bare metal) or logically isolated environments to prevent "noisy neighbor" issues and enhance cyber resilience.