Kubernetes network policies specify the access permissions for groups of pods, much like security groups in the cloud are used to control access to VM instances.