Reference designs

Cloud and security reference designs

Independent educational examples of architecture choices, trade-offs, and validation.

Cloud Architecture
Azure Landing Zone Reference Design
An educational design for a governed Azure foundation, connecting subscription organization, identity, networking, policy, and infrastructure as code.
Independent reference design Explore reference design
Identity Architecture
Identity and Privileged Access Reference Design
An educational design for time-limited privileged access, Conditional Access, access reviews, and independently tested emergency access.
Independent reference design Explore reference design
Azure Security Architecture
Azure Workload Security Reference Design
An educational design connecting workload identity, network boundaries, data protection, monitoring, and recovery validation.
Independent reference design Explore reference design