Azure Landing Zone Architecture
Design a governed Azure foundation covering identity, management groups, subscriptions, networking, policy and platform operations.
Open guide →FinOps Academy · Architecture Explorer
Architecture Explorer for FinOps Academy.
Review business requirements, design decisions, security, cost, operations, resilience and validation evidence for enterprise architecture patterns.
Hub-and-Spoke Networking Architecture
Build a segmented enterprise network using central connectivity, shared services and controlled spoke communication.
Open guide →Azure Virtual WAN Architecture
Design global branch, remote-user and cloud connectivity through managed virtual hubs and routing domains.
Open guide →Enterprise AKS Architecture
Design a secure, resilient and operable Azure Kubernetes Service platform for multiple application teams.
Open guide →Platform Engineering Reference Architecture
Create an internal developer platform with paved roads, self-service workflows and measurable platform outcomes.
Open guide →Zero Trust Architecture
Translate Zero Trust principles into identity, device, network, application, data and monitoring controls.
Open guide →Hybrid Cloud Architecture
Connect on-premises infrastructure and Azure through consistent identity, networking, management and security services.
Open guide →Microsoft Entra Identity Architecture
Design workforce, workload and privileged identity services with resilient authentication and governed access.
Open guide →Monitoring and Observability Architecture
Design telemetry pipelines that convert metrics, logs, traces and events into reliable operational decisions.
Open guide →Disaster Recovery Architecture
Design recovery capabilities around business impact, dependency mapping, data protection and tested orchestration.
Open guide →High Availability Architecture
Design services to tolerate component, zone and regional failures while preserving operational simplicity.
Open guide →Storage and Data Protection Architecture
Select storage, replication, encryption, backup and lifecycle patterns based on workload characteristics.
Open guide →